403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.03.03.txt
 ## swap threshold exceeded
## server overview
2025-11-20.03.03 load[1] mem[61/65] mysql[4/10] httpd[10]
              total        used        free      shared  buff/cache   available
Mem:           2363        1344          90          59         928         778
Swap:          1999        1406         593
 03:03:02 up  2:08,  0 users,  load average: 1.01, 0.82, 0.78
## system overview
top - 03:03:02 up  2:08,  0 users,  load average: 1.01, 0.82, 0.78
Tasks: 202 total,   4 running, 197 sleeping,   0 stopped,   1 zombie
%Cpu(s): 88.2 us, 11.8 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    93320 free,  1375416 used,   951564 buff/cache
KiB Swap:  2047996 total,   607996 free,  1440000 used.   797816 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1752 mysql     20   0 1462280 241216   2448 S 116.7 10.0   2:55.99 /usr/sbin+
100737 healtho+  20   0  460016  68068   4300 R  27.8  2.8   0:04.52 php-fpm: +
 63882 nobody    20   0  277676  20796   4932 S   5.6  0.9   0:04.00 /usr/sbin+
101142 nigeria   20   0  404052  16136  10384 S   5.6  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44256   3348   1520 S   0.0  0.1   0:10.86 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 R   0.0  0.0   0:00.87 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.25 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:09.37 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.24 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.73 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:11.06 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kauditd]
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:00.92 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:01.09 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.67 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40244   2156   1832 S   0.0  0.1   0:04.17 /usr/lib/+
   381 root      20   0   45352    268     96 S   0.0  0.0   0:00.34 /usr/lib/+
   410 root      16  -4   55532    496    368 S   0.0  0.0   0:00.65 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   476 polkitd   20   0  612240    852    488 S   0.0  0.0   0:01.13 /usr/lib/+
   477 dbus      20   0   58724   1344    624 S   0.0  0.1   0:04.34 /usr/bin/+
   486 rpc       20   0   69256    148     44 S   0.0  0.0   0:00.01 /sbin/rpc+
   495 root      20   0   24696   1164    808 S   0.0  0.0   0:01.90 /usr/lib/+
   499 root      20   0   52852    336    240 S   0.0  0.0   0:00.00 /usr/sbin+
   503 root      20   0  152780    132     88 S   0.0  0.0   0:00.00 /usr/sbin+
   505 nscd      20   0  994492   1384    676 S   0.0  0.1   0:05.79 /usr/sbin+
   506 root      20   0  224144   6368    796 S   0.0  0.3   0:00.15 queueproc+
   508 root      20   0   21540    408    296 S   0.0  0.0   0:00.17 /usr/sbin+
   515 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   547 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124480    444    308 S   0.0  0.0   0:00.21 /usr/sbin+
   558 root      20   0   24208     72     48 S   0.0  0.0   0:00.00 /usr/sbin+
   568 root      20   0  114704     36     36 S   0.0  0.0   0:00.03 /bin/bash
   572 root      20   0  108296     52     48 S   0.0  0.0   0:00.00 /sbin/age+
   609 mailnull  20   0   89116   4008    932 S   0.0  0.2   0:00.24 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:03.33 [loop0]
   683 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   684 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   920 root      20   0  153404    308    224 S   0.0  0.0   0:00.16 pure-ftpd+
   921 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   923 root      20   0   51508    504    340 S   0.0  0.0   0:00.13 /usr/sbin+
   925 systuser  20   0  113676   1848      0 S   0.0  0.1   0:00.00 /usr/loca+
   926 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.16 /usr/bin/+
   927 telegraf  20   0 5654048  39928   4320 S   0.0  1.6   0:04.41 /usr/loca+
   928 systuser  20   0  114016  14940   2676 S   0.0  0.6   0:01.89 /usr/loca+
   929 root      20   0 1349832   9352     24 S   0.0  0.4   0:30.52 /usr/bin/+
   930 root      20   0 1277312  11308     52 S   0.0  0.5   0:23.26 /usr/bin/+
   931 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   933 root      20   0  240976   3232   1588 S   0.0  0.1   0:02.07 /usr/sbin+
   935 root      20   0  439788  11408  11200 S   0.0  0.5   0:00.34 php-fpm: +
   936 named     20   0  989260  33172   1520 S   0.0  1.4   0:05.98 /usr/sbin+
   938 root      20   0  261028   6460   1692 S   0.0  0.3   0:01.21 cpsrvd (S+
   942 root      20   0  400740   2888    652 S   0.0  0.1   0:02.05 php-fpm: +
   947 root      20   0 1763312 212336    696 S   0.0  8.8   0:14.15 /usr/loca+
   964 root      20   0  111304    412    316 S   0.0  0.0   0:00.87 /usr/sbin+
   972 root      20   0  389508    676    468 S   0.0  0.0   0:00.28 php-fpm: +
   979 cpanelc+  20   0   10612   3532   2316 S   0.0  0.1   0:06.43 /usr/loca+
   982 root      20   0  396248    660    480 S   0.0  0.0   0:00.25 php-fpm: +
   984 root      20   0  388892    616    404 S   0.0  0.0   0:00.26 php-fpm: +
   985 root      20   0  445028   3236   3124 S   0.0  0.1   0:00.36 sw-engine+
   986 systuser  20   0  113272   1820      0 S   0.0  0.1   0:00.00 /usr/loca+
   987 root      20   0  572372    864    288 S   0.0  0.0   0:00.78 /usr/bin/+
  1116 dovenull  20   0   46912   2060   1428 S   0.0  0.1   0:00.10 dovecot/p+
  1117 dovenull  20   0   47592   2660   1444 S   0.0  0.1   0:00.10 dovecot/i+
  1118 dovecot   20   0   10320    460    340 S   0.0  0.0   0:00.03 dovecot/a+
  1119 root      20   0   10452    624    448 S   0.0  0.0   0:00.08 dovecot/l+
  1120 dovenull  20   0   46912   2064   1420 S   0.0  0.1   0:00.15 dovecot/p+
  1121 dovenull  20   0   47336   2448   1356 S   0.0  0.1   0:00.06 dovecot/i+
  1128 root      20   0   24564   2312    348 S   0.0  0.1   0:00.07 dovecot/c+
  1133 systuser  20   0  157708   2860    808 S   0.0  0.1   0:00.05 SonarPush+
  1137 dovecot   20   0   13568    604    380 S   0.0  0.0   0:00.02 dovecot/s+
  1172 root      20   0  248320 119680   2788 S   0.0  4.9   0:03.74 /usr/loca+
  1190 dovecot   20   0   41276   1352    728 S   0.0  0.1   0:00.23 dovecot/a+
  1258 wp-tool+  20   0  412368  32704   1912 S   0.0  1.4   0:02.60 /usr/bin/+
  1259 wp-tool+  20   0  387528  13288   1660 S   0.0  0.5   0:00.16 /usr/bin/+
  1294 root      20   0  167452   3204   1832 S   0.0  0.1   0:00.20 dnsadmin +
  1298 root      20   0  183900   6688   3460 S   0.0  0.3   0:00.74 cpdavd - +
  1300 root      20   0  209492  11684   1804 S   0.0  0.5   0:01.83 tailwatchd
  1692 root      20   0  299272    868    488 S   0.0  0.0   0:00.20 php-fpm: +
  1709 root      38  18  130416   1436    708 S   0.0  0.1   0:00.01 cpanellog+
  1943 root      20   0  266992   8052    768 S   0.0  0.3   0:00.77 /usr/sbin+
  1945 root      20   0   12832    428    292 S   0.0  0.0   0:01.07 /usr/loca+
  1946 root      20   0   12732    300    228 S   0.0  0.0   0:00.92 /usr/loca+
  1947 root      20   0   12860    356    232 S   0.0  0.0   0:00.98 /usr/loca+
  1952 root      20   0   53268     92     92 S   0.0  0.0   0:00.04 /usr/loca+
  2017 root      20   0  182200  10948   1188 S   0.0  0.5   0:07.37 lfd - sle+
  6622 root      20   0  183052   1624   1056 S   0.0  0.1   0:00.00 /usr/sbin+
  6706 root      20   0  113284    700    520 S   0.0  0.0   0:00.00 /bin/sh -+
  6722 root      20   0  108056    280    208 S   0.0  0.0   0:00.00 sleep 2h +
  6770 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  6775 oysipao+  20   0    3152    508     16 S   0.0  0.0   0:00.13 [kworker]
  7285 root      20   0  265396 128580   1716 S   0.0  5.3   0:01.26 spamd chi+
  7286 root      20   0  248320 117500    644 S   0.0  4.9   0:00.00 spamd chi+
 57206 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 59263 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 71282 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 83158 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 87260 nobody    20   0  277544  19916   4556 S   0.0  0.8   0:01.34 /usr/sbin+
 87262 nobody    20   0  277872  20256   4712 S   0.0  0.8   0:01.36 /usr/sbin+
 87973 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 88700 nobody    20   0  277768  20176   4576 S   0.0  0.8   0:01.20 /usr/sbin+
 89243 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 90007 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 90569 nobody    20   0  277760  19960   4412 S   0.0  0.8   0:01.03 /usr/sbin+
 90591 nobody    20   0  277708  20212   4668 S   0.0  0.8   0:00.70 /usr/sbin+
 91538 nobody    20   0  277904  20144   4552 S   0.0  0.8   0:00.88 /usr/sbin+
 91774 nobody    20   0  277892  20308   4596 S   0.0  0.8   0:00.81 /usr/sbin+
 93655 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 94938 nobody    20   0  277528  19644   4332 S   0.0  0.8   0:00.69 /usr/sbin+
 95308 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 95393 nobody    20   0  277524  19396   4336 S   0.0  0.8   0:00.73 /usr/sbin+
 97076 nobody    20   0  277760  19188   3936 S   0.0  0.8   0:00.35 /usr/sbin+
 97639 nobody    20   0  277760  19140   3960 S   0.0  0.8   0:00.36 /usr/sbin+
 97738 nobody    20   0  277916  19368   4148 S   0.0  0.8   0:00.27 /usr/sbin+
 97895 nobody    20   0  277900  19180   3968 S   0.0  0.8   0:00.36 /usr/sbin+
 98479 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 98566 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 98742 nobody    20   0  277760  19280   4060 S   0.0  0.8   0:00.22 /usr/sbin+
 99520 root      20   0  123364    764    532 S   0.0  0.0   0:00.00 /usr/sbin+
 99810 nobody    20   0  277760  18884   3808 S   0.0  0.8   0:00.15 /usr/sbin+
100208 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
100425 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
100613 root      20   0  111304   4440   3408 S   0.0  0.2   0:00.00 sshd: [ac+
100614 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
100798 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
100806 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
100883 nobody    20   0  277760  18432   3380 S   0.0  0.8   0:00.03 /usr/sbin+
100917 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
100926 mailnull  20   0   89496   5680   2460 S   0.0  0.2   0:00.00 /usr/sbin+
100973 wp-tool+  20   0  445028    324    196 S   0.0  0.0   0:00.00 sw-engine+
100991 nigeria   20   0  400460   5432   2408 S   0.0  0.2   0:00.00 php-fpm: +
101023 nobody    20   0  277760  18156   3156 S   0.0  0.8   0:00.01 /usr/sbin+
101057 mailnull  20   0   89496   5680   2460 S   0.0  0.2   0:00.00 /usr/sbin+
101086 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
101090 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
101091 healtho+  20   0  453356  61416   4260 S   0.0  2.5   0:00.90 php-fpm: +
101097 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
101098 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
101099 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
101100 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
101101 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
101102 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
101104 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
101106 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
101107 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
101109 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
101111 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
101112 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
101113 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
101114 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
101115 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
101116 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
101120 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
101121 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
101122 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
101123 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
101128 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
101132 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
101135 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
101140 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
101143 pactpay   20   0  480124  17684  11892 S   0.0  0.7   0:00.01 /opt/cpan+
101180 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
101184 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
101185 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
101186 cloudsms  20   0  397432  10640   7444 R   0.0  0.4   0:00.00 /opt/cpan+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:54   0:09  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:54   0:11  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        251  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        252  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        253  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:1H]
root        267  0.0  0.0      0     0 ?        S<   00:54   0:01  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        669  0.0  0.0      0     0 ?        S<   00:54   0:03  \_ [loop0]
root        683  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        684  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root      57206  0.0  0.0      0     0 ?        S    02:08   0:00  \_ [kworker/u200:2]
root      59263  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/0:1]
root      71282  0.0  0.0      0     0 ?        S    02:28   0:00  \_ [kworker/1:1]
root      83158  0.0  0.0      0     0 ?        S    02:44   0:00  \_ [kworker/u200:1]
root      87973  0.0  0.0      0     0 ?        S    02:48   0:00  \_ [kworker/0:2]
root      89243  0.0  0.0      0     0 ?        S    02:49   0:00  \_ [kworker/1:4]
root      90007  0.0  0.0      0     0 ?        S    02:50   0:00  \_ [kworker/0:5]
root      93655  0.0  0.0      0     0 ?        S    02:54   0:00  \_ [kworker/1:0]
root      95308  0.0  0.0      0     0 ?        S    02:56   0:00  \_ [kworker/0:0]
root      98479  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/u200:0]
root      98566  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/1:2]
root     100208  0.0  0.0      0     0 ?        S    03:02   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44256  3348 ?        Ss   00:54   0:10 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.0  40244  2156 ?        Ss   00:54   0:04 /usr/lib/systemd/systemd-journald
root        381  0.0  0.0  45352   268 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   496 ?        S<sl 00:54   0:00 /sbin/auditd
polkitd     476  0.0  0.0 612240   852 ?        Ssl  00:54   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        477  0.0  0.0  58724  1344 ?        Ss   00:54   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         486  0.0  0.0  69256   148 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        495  0.0  0.0  24696  1164 ?        Ss   00:54   0:01 /usr/lib/systemd/systemd-logind
root        499  0.0  0.0  52852   336 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        503  0.0  0.0 152780   132 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        505  0.0  0.0 994492  1384 ?        Ssl  00:54   0:05 /usr/sbin/nscd
root        506  0.0  0.2 224144  6368 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        508  0.0  0.0  21540   408 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        515  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        547  0.0  0.0   4388    36 ?        Ss   00:54   0:00 /usr/sbin/acpid
root        555  0.0  0.0 124480   444 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       6622  0.0  0.0 183052  1624 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6706  0.0  0.0 113284   700 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       6722  0.0  0.0 108056   280 ?        S    01:00   0:00  |       \_ sleep 2h 22m
root     101097  0.0  0.0 183048  2156 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root     101111  0.0  0.0 113284  1212 ?        Ss   03:03   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root     101128  0.0  0.0 108052   356 ?        S    03:03   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root     101132  0.0  0.0 113288  1520 ?        S    03:03   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root     101187  0.0  0.0 153840  2092 ?        R    03:03   0:00  |               \_ ps auxf
root     101098  0.0  0.0 183048  2156 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root     101112  0.0  0.0  20164   804 ?        Ss   03:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root     101099  0.0  0.0 183048  2156 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root     101115  0.0  0.0  20164   988 ?        Ss   03:03   0:00  |   \_ jailshell (cloudsms) [101184] l -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms 101184  0.0  0.0      0     0 ?        D    03:03   0:00  |       \_ [jailshell]
root     101100  0.0  0.0 183048  2156 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root     101116  0.0  0.0  20164   808 ?        Ss   03:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root     101101  0.0  0.0 183048  2152 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root     101113  0.0  0.0  20164   804 ?        Ss   03:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root     101102  0.0  0.0 183048  2152 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root     101121  0.0  0.0  20164   804 ?        Ss   03:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root     101104  0.0  0.0 183048  2148 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root     101122  0.0  0.0  20164   808 ?        Ss   03:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root     101106  0.0  0.0 183048  2148 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root     101123  0.0  0.0  20164   808 ?        Ss   03:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root     101107  0.0  0.0 183048  2148 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root     101120  0.0  0.0  20164   964 ?        Ss   03:03   0:00  |   \_ jailshell (pactpay) [101135] ll -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay  101135  0.0  0.0  20164   260 ?        S    03:03   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay  101143  1.0  0.7 480124 17684 ?        S    03:03   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root     101109  0.0  0.0 183048  2148 ?        S    03:03   0:00  \_ /usr/sbin/CROND -n
root     101114  0.0  0.0  20164   964 ?        Ss   03:03   0:00      \_ jailshell (nigeria) [101140] ll -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria  101140  0.0  0.0  20164   260 ?        S    03:03   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria  101142  5.0  0.6 404052 16136 ?        S    03:03   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0  24208    72 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        568  0.0  0.0 114704    36 ttyS0    Ss+  00:54   0:00 /bin/bash
root        572  0.0  0.0 108296    52 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
mailnull    609  0.0  0.1  89116  4008 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull 100926  0.0  0.2  89496  5680 ?        S    03:02   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull 101057  0.0  0.2  89496  5680 ?        S    03:02   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        920  0.0  0.0 153404   308 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    921  0.0  0.0  10388    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        923  0.0  0.0  51508   504 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1116  0.0  0.0  46912  2060 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1117  0.0  0.1  47592  2660 ?        S    00:54   0:00  \_ dovecot/imap-login
dovecot    1118  0.0  0.0  10320   460 ?        S    00:54   0:00  \_ dovecot/anvil
root       1119  0.0  0.0  10452   624 ?        S    00:54   0:00  \_ dovecot/log
dovenull   1120  0.0  0.0  46912  2064 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1121  0.0  0.1  47336  2448 ?        S    00:54   0:00  \_ dovecot/imap-login
root       1128  0.0  0.0  24564  2312 ?        S    00:54   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   604 ?        S    00:54   0:00  \_ dovecot/stats
dovecot    1190  0.0  0.0  41276  1352 ?        S    00:54   0:00  \_ dovecot/auth
root     100798  0.0  0.1  60820  4508 ?        S    03:02   0:00  \_ dovecot/lmtp
root     100806  0.0  0.1  41052  2728 ?        S    03:02   0:00  \_ dovecot/auth -w
systuser    925  0.0  0.0 113676  1848 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    926  0.0  0.0 342400     0 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
telegraf    927  0.0  1.6 5654048 39928 ?       SLsl 00:54   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    928  0.0  0.6 114016 14940 ?        Ssl  00:54   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        929  0.3  0.3 1349832 9352 ?        Ssl  00:54   0:30 /usr/bin/cspdaemon
root        930  0.3  0.4 1277312 11308 ?       Ssl  00:54   0:23 /usr/bin/checkstatus
systuser    931  0.0  0.0  12660    60 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        933  0.0  0.1 240976  3232 ?        Ssl  00:54   0:02 /usr/sbin/rsyslogd -n
root        935  0.0  0.4 439788 11408 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       936  0.0  1.3 989260 33172 ?        Ssl  00:54   0:05 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        938  0.0  0.2 261028  6460 ?        Ss   00:54   0:01 cpsrvd (SSL) - waiting for connections                   
root     101090  0.0  0.0      0     0 ?        Z    03:02   0:00  \_ [cpaneld - servi] <defunct>
root        942  0.0  0.1 400740  2888 ?        Ss   00:54   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+ 100737 17.4  2.8 460016 68068 ?        R    03:02   0:04  \_ php-fpm: pool health_oyostate_gov_ng
nigeria  100991  0.0  0.2 400460  5432 ?        S    03:02   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+ 101091 45.0  2.5 453356 61416 ?        S    03:02   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root        947  0.1  8.7 1763312 212336 ?      Ssl  00:54   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        964  0.0  0.0 111304   412 ?        Ss   00:54   0:00 /usr/sbin/sshd -D
root     100425  0.0  0.1 111304  4268 ?        Ss   03:02   0:00  \_ sshd: [accepted]
root     100613  0.0  0.1 111304  4440 ?        Ss   03:02   0:00  \_ sshd: [accepted]
sshd     100614  0.0  0.1 115644  2628 ?        S    03:02   0:00  |   \_ sshd: [net]
root     100917  0.0  0.1 111304  4272 ?        Ss   03:02   0:00  \_ sshd: [accepted]
root     101086  0.0  0.1 111304  4268 ?        Ss   03:02   0:00  \_ sshd: [accepted]
root        972  0.0  0.0 389508   676 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
cpanelc+    979  0.0  0.1  10612  3532 ?        Rs   00:54   0:06 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 396248   660 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        984  0.0  0.0 388892   616 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.1 445028  3236 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+ 100973  0.0  0.0 445028   324 ?        S    03:02   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    986  0.0  0.0 113272  1820 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        987  0.0  0.0 572372   864 ?        Ssl  00:54   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1133  0.0  0.1 157708  2860 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  4.9 248320 119680 ?       Ss   00:54   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7285  0.0  5.3 265396 128580 ?       S    01:00   0:01  \_ spamd child
root       7286  0.0  4.8 248320 117500 ?       S    01:00   0:00  \_ spamd child
wp-tool+   1258  0.0  1.3 412368 32704 ?        Ss   00:54   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1259  0.0  0.5 387528 13288 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1294  0.0  0.1 167452  3204 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1298  0.0  0.2 183900  6688 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1300  0.0  0.4 209492 11684 ?        Ss   00:54   0:01 tailwatchd
root       1692  0.0  0.0 299272   868 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1709  0.0  0.0 130416  1436 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1752  2.2  9.9 1462280 241216 ?      Sl   00:54   2:56 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1943  0.0  0.3 266992  8052 ?        Ss   00:54   0:00 /usr/sbin/httpd -k start
root       1945  0.0  0.0  12832   428 ?        S    00:54   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1946  0.0  0.0  12732   300 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1947  0.0  0.0  12860   356 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1952  0.0  0.0  53268    92 ?        S    00:54   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    63882  0.1  0.8 277676 20796 ?        S    02:17   0:04  \_ /usr/sbin/httpd -k start
nobody    87260  0.1  0.8 277544 19916 ?        S    02:47   0:01  \_ /usr/sbin/httpd -k start
nobody    87262  0.1  0.8 277872 20256 ?        S    02:47   0:01  \_ /usr/sbin/httpd -k start
nobody    88700  0.1  0.8 277768 20176 ?        S    02:48   0:01  \_ /usr/sbin/httpd -k start
nobody    90569  0.1  0.8 277760 19960 ?        S    02:50   0:01  \_ /usr/sbin/httpd -k start
nobody    90591  0.0  0.8 277708 20212 ?        S    02:50   0:00  \_ /usr/sbin/httpd -k start
nobody    91538  0.1  0.8 277904 20144 ?        S    02:52   0:00  \_ /usr/sbin/httpd -k start
nobody    91774  0.1  0.8 277892 20308 ?        S    02:52   0:00  \_ /usr/sbin/httpd -k start
nobody    94938  0.1  0.8 277528 19644 ?        S    02:55   0:00  \_ /usr/sbin/httpd -k start
nobody    95393  0.1  0.8 277524 19396 ?        S    02:56   0:00  \_ /usr/sbin/httpd -k start
nobody    97076  0.1  0.7 277760 19188 ?        S    02:58   0:00  \_ /usr/sbin/httpd -k start
nobody    97639  0.1  0.7 277760 19140 ?        S    02:59   0:00  \_ /usr/sbin/httpd -k start
nobody    97738  0.1  0.8 277916 19368 ?        S    02:59   0:00  \_ /usr/sbin/httpd -k start
nobody    97895  0.1  0.7 277900 19180 ?        S    02:59   0:00  \_ /usr/sbin/httpd -k start
nobody    98742  0.1  0.7 277760 19280 ?        S    03:00   0:00  \_ /usr/sbin/httpd -k start
nobody    99810  0.1  0.7 277760 18884 ?        S    03:01   0:00  \_ /usr/sbin/httpd -k start
nobody   100883  0.1  0.7 277760 18432 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
nobody   101023  0.1  0.7 277760 18156 ?        S    03:02   0:00  \_ /usr/sbin/httpd -k start
root       2017  0.0  0.4 182200 10948 ?        Ss   00:54   0:07 lfd - sleeping
oysipao+   6770  0.0  0.0   3148   416 ?        Ss   01:00   0:00 [kworker]
oysipao+   6775  0.0  0.0   3152   508 ?        S    01:00   0:00  \_ [kworker]
root      99520  0.0  0.0 123364   764 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 7725  Threads: 4  Questions: 1337999  Slow queries: 0  Opens: 4100  Flush tables: 1  Open tables: 2000  Queries per second avg: 173.203
*************************** 1. row ***************************
     Id: 20360
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 20362
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: starting
   Info: NULL
*************************** 3. row ***************************
     Id: 20367
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 20370
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.134.51 TIME_WAIT
      1 114.119.140.107 TIME_WAIT
      1 114.119.143.119 TIME_WAIT
      1 142.147.160.172 TIME_WAIT
      1 148.113.128.101 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 52.167.144.24 TIME_WAIT
      1 68.221.67.172 TIME_WAIT
      1 74.7.228.36 TIME_WAIT
      1 74.7.228.38 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 106.224.85.108 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 173.199.190.175 TIME_WAIT
     36 157.15.40.56 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 03:03:02 WAT
   Restart Time: Thursday, 20-Nov-2025 00:54:23 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 2 hours 8 minutes 38 seconds
   Server load: 1.01 0.82 0.78
   Total accesses: 48251 - Total Traffic: 1.0 GB - Total Duration: 29175697
   CPU Usage: u10.74 s4.52 cu506.23 cs377.47 - 11.6% CPU load
   6.25 requests/sec - 136.0 kB/second - 21.8 kB/request - 604.665 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

_KK_RK_W_KR..K..K_..WW.......K._................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS  Req   Dur   Conn  Child  Slot     Client      Protocol           VHost                        Request
   0-0  95393  0/169/2390 _ 3.15  0    406 1272542 0.0   3.02  44.93 157.15.40.56    http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   1-0  97076  5/62/2082  K 1.41  3    406 1315120 156.0 1.59  44.28 192.178.4.101   http/1.1 team.cloudware.ng:443      GET /?l=2995597688 HTTP/1.1
   2-0  91538  4/200/2068 K 4.33  4    295 1243623 123.9 4.10  47.56 192.178.4.102   http/1.1 team.cloudware.ng:443      GET /?l=2737615491 HTTP/1.1
   3-0  90569  0/357/2339 _ 3.96  0    311 1345571 0.0   4.18  52.75 192.178.4.100   http/1.1 team.cloudware.ng:443      GET /?l=427684234 HTTP/1.1
   4-0  94938  0/126/2018 R 2.75  35   341 1336288 0.0   2.94  40.72 102.89.83.128   http/1.1
   5-0  90591  1/147/2068 K 2.69  0    392 1476239 34.5  20.62 59.33 192.178.4.96    http/1.1 team.cloudware.ng:443      GET /?l=3456356670 HTTP/1.1
   6-0  101023 0/2/2013   _ 0.02  2    259 1150295 0.0   0.06  43.95 192.178.4.105   http/1.1 team.cloudware.ng:443      GET /?l=1441839058 HTTP/1.1
   7-0  91774  0/198/1835 W 3.33  0    0   1282482 0.0   4.70  36.99 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   8-0  100883 0/7/1930   _ 0.11  2    364 1100675 0.0   0.14  41.07 157.15.40.56    http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   9-0  63882  6/783/2018 K 15.80 0    445 1166177 188.3 17.72 41.48 192.178.4.98    http/1.1 team.cloudware.ng:443      GET /?l=2681379113 HTTP/1.1
   10-0 97895  0/64/1826  R 1.71  3    269 1044870 0.0   1.58  39.47 157.15.40.56    http/1.1
   11-0 -      0/0/1985   . 0.00  14   0   1368095 0.0   0.00  44.72 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-0 -      0/0/1887   . 0.00  69   0   1115363 0.0   0.00  44.45 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 97639  2/70/1577  K 1.48  2    350 855774  65.1  1.61  31.59 192.178.4.104   http/1.1 team.cloudware.ng:443      GET /?l=1515010263 HTTP/1.1
   14-0 -      0/0/1439   . 0.00  37   0   829475  0.0   0.00  28.70 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 -      0/0/1491   . 0.00  86   0   937332  0.0   0.00  27.57 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 97738  2/57/1059  K 1.02  2    253 606004  63.1  1.14  22.04 192.178.4.103   http/1.1 team.cloudware.ng:443      GET /?l=1741844780 HTTP/1.1
   17-0 99810  0/26/1326  _ 0.59  0    13  743226  0.0   0.66  27.44 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   18-0 -      0/0/1268   . 0.00  74   0   678068  0.0   0.00  24.99 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -      0/0/1255   . 0.00  56   0   711437  0.0   0.00  23.94 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 98742  0/48/626   W 1.28  0    0   342974  0.0   0.95  13.03 192.178.4.99    http/1.1 team.cloudware.ng:443      GET /?l=2835112980 HTTP/1.1
   21-0 88700  8/243/702  W 5.04  0    0   417238  38.9  5.22  15.57 129.212.183.198 http/1.1 health.oyostate.gov.ng:443 POST //wp-login.php HTTP/1.1
   22-0 -      0/0/1162   . 0.00  902  0   647146  0.0   0.00  25.56 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -      0/0/1153   . 0.00  778  0   707635  0.0   0.00  28.29 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -      0/0/1087   . 0.00  164  0   550154  0.0   0.00  22.24 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -      0/0/825    . 0.00  909  0   505866  0.0   0.00  15.07 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -      0/0/1144   . 0.00  46   0   737298  0.0   0.00  23.85 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -      0/0/91     . 0.00  907  0   74231   0.0   0.00  0.91  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -      0/0/738    . 0.00  854  0   420670  0.0   0.00  13.83 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 87260  1/286/692  K 6.25  1    343 504186  33.8  5.85  11.28 192.178.4.105   http/1.1 team.cloudware.ng:443      GET /?l=3849679540 HTTP/1.1
   30-0 -      0/0/522    . 0.00  691  0   329214  0.0   0.00  10.69 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 87262  0/268/408  _ 5.85  1    260 486689  0.0   8.07  10.49 192.178.4.99    http/1.1 team.cloudware.ng:443      GET /?l=1760869745 HTTP/1.1
   32-0 -      0/0/1141   . 0.00  216  0   680053  0.0   0.00  21.11 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -      0/0/845    . 0.00  858  0   471702  0.0   0.00  18.85 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -      0/0/260    . 0.00  859  0   148688  0.0   0.00  4.15  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -      0/0/157    . 0.00  4626 0   115547  0.0   0.00  4.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -      0/0/466    . 0.00  4533 0   274598  0.0   0.00  9.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -      0/0/22     . 0.00  4625 0   10578   0.0   0.00  0.40  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -      0/0/23     . 0.00  4559 0   11684   0.0   0.00  0.51  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -      0/0/25     . 0.00  4560 0   15119   0.0   0.00  0.63  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -      0/0/4      . 0.00  4849 0   1340    0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -      0/0/115    . 0.00  4343 0   65290   0.0   0.00  3.06  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -      0/0/2      . 0.00  4857 0   7       0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -      0/0/7      . 0.00  4833 0   2574    0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -      0/0/4      . 0.00  4847 0   1141    0.0   0.00  0.06  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -      0/0/2      . 0.00  4856 0   60      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -      0/0/4      . 0.00  4848 0   244     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -      0/0/147    . 0.00  4303 0   75011   0.0   0.00  3.67  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -      0/0/3      . 0.00  4850 0   77      0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 939
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 10 seconds, (range: 0...40)
   index usage: 16%, cache usage: 22%
   total entries stored since starting: 25117
   total entries replaced since starting: 0
   total entries expired since starting: 24163
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 83 miss
   total removes since starting: 17 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit