403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-23.02.36.txt
 ## swap threshold exceeded
## server overview
2025-11-23.02.36 load[0] mem[63/73] mysql[1/12] httpd[16]
              total        used        free      shared  buff/cache   available
Mem:           2363        1418         134          43         810         731
Swap:          1999        1617         382
 02:36:01 up 15:33,  0 users,  load average: 0.35, 0.46, 0.49
## system overview
top - 02:36:02 up 15:33,  0 users,  load average: 0.35, 0.46, 0.49
Tasks: 205 total,   2 running, 202 sleeping,   0 stopped,   1 zombie
%Cpu(s): 51.5 us, 39.4 sy,  0.0 ni,  9.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   127508 free,  1462324 used,   830468 buff/cache
KiB Swap:  2047996 total,   391460 free,  1656536 used.   739452 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1916 mysql     20   0 1478544 240088   3696 S  40.0  9.9  12:43.24 /usr/sbin+
     1 root      20   0   44508   3288   1464 S  13.3  0.1   1:15.75 /usr/lib/+
   360 root      20   0   40240   7524   7280 S   6.7  0.3   0:31.88 /usr/lib/+
   501 root      20   0   24704   1168    808 S   6.7  0.0   0:12.71 /usr/lib/+
   502 dbus      20   0   58720   1356    612 S   6.7  0.1   0:29.11 /usr/bin/+
   949 named     20   0 1054796  35116   2204 S   6.7  1.5   0:25.26 /usr/sbin+
 41056 nobody    20   0  277912  19860   4444 S   6.7  0.8   0:00.39 /usr/sbin+
 44582 pactpay   20   0  479860  16256  10640 S   6.7  0.7   0:00.01 /opt/cpan+
 44591 nigeria   20   0  404052  16144  10384 R   6.7  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:03.13 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:02.19 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:54.95 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.14 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.15 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:02.17 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:08.59 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:32.64 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.06 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   150 root      20   0       0      0      0 S   0.0  0.0   0:01.25 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.35 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:03.92 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:02.91 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   384 root      20   0   45352      8      4 S   0.0  0.0   0:00.39 /usr/lib/+
   412 root      16  -4   55532    460    340 S   0.0  0.0   0:05.18 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   499 root      20   0   21540    348    260 S   0.0  0.0   0:01.27 /usr/sbin+
   504 rpc       20   0   69256     44      0 S   0.0  0.0   0:00.05 /sbin/rpc+
   514 root      20   0  224148   3016    788 S   0.0  0.1   0:00.59 queueproc+
   515 polkitd   20   0  610540    840    464 S   0.0  0.0   0:07.37 /usr/lib/+
   521 root      20   0  152780     80     36 S   0.0  0.0   0:00.03 /usr/sbin+
   523 root      20   0   52852    184     96 S   0.0  0.0   0:00.01 /usr/sbin+
   524 nscd      20   0 1336536   1832    640 S   0.0  0.1   0:39.20 /usr/sbin+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0   24208     12      0 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124508    844    416 S   0.0  0.0   0:01.55 /usr/sbin+
   591 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   617 mailnull  20   0   90820   3784    856 S   0.0  0.2   0:01.10 /usr/sbin+
   631 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.60 [loop0]
   707 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [jbd2/loo+
   708 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 memcach+  20   0  342400     28     28 S   0.0  0.0   0:01.21 /usr/bin/+
   912 root      20   0 1277312   5772      4 S   0.0  0.2   0:24.76 /usr/bin/+
   913 systuser  20   0  111864     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   914 root      20   0  572372    644    176 S   0.0  0.0   0:04.78 /usr/bin/+
   915 root      20   0   51508    464    292 S   0.0  0.0   0:00.83 /usr/sbin+
   916 telegraf  20   0 5654304  36320   5924 S   0.0  1.5   0:29.78 /usr/loca+
   917 systuser  20   0   12756      0      0 S   0.0  0.0   0:00.02 /usr/loca+
   925 systuser  20   0  114016  12780   2740 S   0.0  0.5   0:13.02 /usr/loca+
   926 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   927 root      20   0  111304    356    256 S   0.0  0.0   0:07.79 /usr/sbin+
   928 root      20   0 1276100   7716      0 S   0.0  0.3   0:25.71 /usr/bin/+
   930 root      20   0  445028    592    480 S   0.0  0.0   0:02.19 sw-engine+
   931 root      20   0  153404    220    136 S   0.0  0.0   0:01.22 pure-ftpd+
   932 systuser  20   0   10132      0      0 S   0.0  0.0   0:00.02 /usr/loca+
   934 root      20   0  439788    404    312 S   0.0  0.0   0:01.47 php-fpm: +
   938 root      20   0  388892    536    436 S   0.0  0.0   0:01.45 php-fpm: +
   939 root      20   0 1828368 350444    944 S   0.0 14.5   0:30.13 /usr/loca+
   940 root      20   0  331088   7732   7112 S   0.0  0.3   0:15.89 /usr/sbin+
   958 root      20   0  400740   2444    604 S   0.0  0.1   0:07.15 php-fpm: +
   962 root      20   0  261692   6424   1724 S   0.0  0.3   0:08.76 cpsrvd (S+
   969 cpanelc+  20   0   10564   3456   2292 S   0.0  0.1   0:44.51 /usr/loca+
   979 root      20   0  396248    296    216 S   0.0  0.0   0:01.40 php-fpm: +
   985 root      20   0  389508    508    412 S   0.0  0.0   0:01.46 php-fpm: +
  1083 dovenull  20   0   47116   2008   1388 S   0.0  0.1   0:01.75 dovecot/p+
  1084 dovenull  20   0   48232   2500   1500 S   0.0  0.1   0:00.62 dovecot/i+
  1085 dovecot   20   0   10320    428    312 S   0.0  0.0   0:00.42 dovecot/a+
  1086 root      20   0   10452    536    348 S   0.0  0.0   0:01.07 dovecot/l+
  1087 dovenull  20   0   47264   2056   1428 S   0.0  0.1   0:02.00 dovecot/p+
  1088 dovenull  20   0   48324   2548   1592 S   0.0  0.1   0:00.58 dovecot/i+
  1093 root      20   0   24528   1884    492 S   0.0  0.1   0:00.36 dovecot/c+
  1101 dovecot   20   0   13568    532    316 S   0.0  0.0   0:00.15 dovecot/s+
  1142 root      20   0  247932  16364    720 S   0.0  0.7   0:09.46 /usr/loca+
  1161 dovecot   20   0   41320   1520   1012 S   0.0  0.1   0:02.70 dovecot/a+
  1175 systuser  20   0  157708   2856    808 S   0.0  0.1   0:00.25 SonarPush+
  1177 wp-tool+  20   0  387556   3344   1412 S   0.0  0.1   0:00.47 /usr/bin/+
  1178 wp-tool+  20   0  412396   9448   1384 S   0.0  0.4   0:17.63 /usr/bin/+
  1260 root      20   0  183900   6696   3460 S   0.0  0.3   0:05.77 cpdavd - +
  1263 root      20   0  167452   4164   2796 S   0.0  0.2   0:00.89 dnsadmin +
  1264 root      20   0  209648  10264   2340 S   0.0  0.4   0:06.54 tailwatchd
  1800 root      20   0  299272    492    332 S   0.0  0.0   0:01.48 php-fpm: +
  1834 root      38  18  130416   1372    692 S   0.0  0.1   0:00.14 cpanellog+
  2048 root      20   0  267052   7672    476 S   0.0  0.3   0:03.91 /usr/sbin+
  2050 root      20   0   12860    332    212 S   0.0  0.0   0:05.88 /usr/loca+
  2051 root      20   0   12732    284    208 S   0.0  0.0   0:05.20 /usr/loca+
  2052 root      20   0   12908    344    216 S   0.0  0.0   0:05.52 /usr/loca+
  2059 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  5633 root      20   0  270572  98992   3068 S   0.0  4.1   0:07.58 spamd chi+
  5634 root      20   0  247932  14780    264 S   0.0  0.6   0:00.03 spamd chi+
 13081 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 21598 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 23684 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kworker/+
 26981 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 31966 nobody    20   0  277712  20540   4924 S   0.0  0.8   0:01.83 /usr/sbin+
 32963 nobody    20   0  277904  20384   4716 S   0.0  0.8   0:01.47 /usr/sbin+
 34348 nobody    20   0  277640  20260   4780 S   0.0  0.8   0:01.42 /usr/sbin+
 34708 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 37122 nobody    20   0  277596  20208   4752 S   0.0  0.8   0:00.93 /usr/sbin+
 37232 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 38422 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 39336 nobody    20   0  277764  20200   4608 S   0.0  0.8   0:00.71 /usr/sbin+
 39606 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 39624 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 39665 nobody    20   0  277912  20112   4612 S   0.0  0.8   0:00.73 /usr/sbin+
 40244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 40610 nobody    20   0  277616  19568   4248 S   0.0  0.8   0:00.52 /usr/sbin+
 41538 nobody    20   0  277584  19540   4224 S   0.0  0.8   0:00.42 /usr/sbin+
 41557 nobody    20   0  277716  19760   4308 S   0.0  0.8   0:00.38 /usr/sbin+
 41817 nobody    20   0  277912  19664   4136 S   0.0  0.8   0:00.33 /usr/sbin+
 42015 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 42652 nobody    20   0  277704  19612   4168 S   0.0  0.8   0:00.24 /usr/sbin+
 42660 nobody    20   0  277728  19308   4012 S   0.0  0.8   0:00.26 /usr/sbin+
 43320 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 43355 nobody    20   0  277912  19388   3932 S   0.0  0.8   0:00.15 /usr/sbin+
 44011 nobody    20   0  277916  19104   3804 S   0.0  0.8   0:00.05 /usr/sbin+
 44097 nobody    20   0  277520  18816   3732 S   0.0  0.8   0:00.09 /usr/sbin+
 44159 healtho+  20   0  468044  75632   4104 S   0.0  3.1   0:04.02 php-fpm: +
 44176 oyotech+  20   0  389236   6356   2948 S   0.0  0.3   0:00.10 php-fpm: +
 44185 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 44314 oyotech+  20   0  389236   6348   2944 S   0.0  0.3   0:00.06 php-fpm: +
 44342 wp-tool+  20   0  445028    324    196 S   0.0  0.0   0:00.00 sw-engine+
 44347 healtho+  20   0  482180  89988   4100 S   0.0  3.7   0:01.86 php-fpm: +
 44356 nigeria   20   0  400460   5032   2396 S   0.0  0.2   0:00.00 php-fpm: +
 44405 nobody    20   0  277528  18120   3204 S   0.0  0.7   0:00.01 /usr/sbin+
 44420 nobody    20   0  277552  18624   3628 S   0.0  0.8   0:00.01 /usr/sbin+
 44421 nobody    20   0  277416  18180   3404 S   0.0  0.8   0:00.01 /usr/sbin+
 44431 nobody    20   0  277552  18236   3264 S   0.0  0.8   0:00.03 /usr/sbin+
 44478 root      20   0  162436   5828   4336 S   0.0  0.2   0:00.02 sshd: roo+
 44479 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 44500 mailnull  20   0   91016   4372   1228 S   0.0  0.2   0:00.00 /usr/sbin+
 44501 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 44511 oysipao+  20   0  439788   2244   1472 S   0.0  0.1   0:00.00 php-fpm: +
 44518 root      20   0  183076   2412   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 44519 root      20   0  183076   2424   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 44520 root      20   0  183076   2424   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 44521 root      20   0  183076   2424   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 44522 root      20   0  183076   2424   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 44523 root      20   0  183076   2424   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 44524 root      20   0  183076   2420   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 44525 root      20   0  183076   2420   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 44526 root      20   0  183076   2420   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 44527 root      20   0  183076   2416   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 44528 root      20   0  183076   2416   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 44530 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 44532 root      20   0  183076   2408   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 44534 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 44535 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 44536 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 44558 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 44560 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 44561 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 44562 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 44563 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 44564 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 44565 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 44566 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 44567 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 44568 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 44569 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 44571 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 44573 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 44580 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 44589 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 44973 root      20   0  181872   9020   1100 S   0.0  0.4   0:08.13 lfd - sle+
 47566 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47579 oysipao+  20   0    3152     80     40 S   0.0  0.0   0:01.00 [kworker]
 81298 worencom  20   0   38488   2828   1848 S   0.0  0.1   0:00.02 dovecot/i+
 83419 root      20   0  183044   1664   1108 S   0.0  0.1   0:00.00 /usr/sbin+
 83479 root      20   0  113284    736    556 S   0.0  0.0   0:00.00 /bin/sh -+
 83501 root      20   0  108056    336    264 S   0.0  0.0   0:00.00 sleep 2h +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov22   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov22   0:03  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov22   0:54  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov22   0:08  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov22   0:32  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [deferwq]
root        150  0.0  0.0      0     0 ?        S    Nov22   0:01  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_1]
root        252  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov22   0:03  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   Nov22   0:03  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [xprtiod]
root        631  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov22   0:02  \_ [loop0]
root        707  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [jbd2/loop0-8]
root        708  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root      13081  0.0  0.0      0     0 ?        S    01:48   0:00  \_ [kworker/0:4]
root      21598  0.0  0.0      0     0 ?        S    02:00   0:00  \_ [kworker/u200:2]
root      23684  0.0  0.0      0     0 ?        S    02:03   0:00  \_ [kworker/0:3]
root      26981  0.0  0.0      0     0 ?        S    02:08   0:00  \_ [kworker/1:5]
root      34708  0.0  0.0      0     0 ?        S    02:20   0:00  \_ [kworker/1:2]
root      37232  0.0  0.0      0     0 ?        S    02:24   0:00  \_ [kworker/u200:0]
root      38422  0.0  0.0      0     0 ?        S    02:26   0:00  \_ [kworker/0:1]
root      39606  0.0  0.0      0     0 ?        S    02:28   0:00  \_ [kworker/0:2]
root      39624  0.0  0.0      0     0 ?        S    02:28   0:00  \_ [kworker/1:1]
root      40244  0.0  0.0      0     0 ?        S    02:29   0:00  \_ [kworker/1:3]
root      42015  0.0  0.0      0     0 ?        S    02:32   0:00  \_ [kworker/u200:1]
root      43320  0.0  0.0      0     0 ?        S    02:34   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44508  3288 ?        Ss   Nov22   1:15 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.3  40240  7524 ?        Ss   Nov22   0:31 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352     8 ?        Ss   Nov22   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   460 ?        S<sl Nov22   0:05 /sbin/auditd
root        499  0.0  0.0  21540   348 ?        Ss   Nov22   0:01 /usr/sbin/irqbalance --foreground
root        501  0.0  0.0  24704  1168 ?        Ss   Nov22   0:12 /usr/lib/systemd/systemd-logind
dbus        502  0.0  0.0  58720  1356 ?        Ss   Nov22   0:29 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         504  0.0  0.0  69256    44 ?        Ss   Nov22   0:00 /sbin/rpcbind -w
root        514  0.0  0.1 224148  3016 ?        Ss   Nov22   0:00 queueprocd - waiting up to 60s to process a task
polkitd     515  0.0  0.0 610540   840 ?        Ssl  Nov22   0:07 /usr/lib/polkit-1/polkitd --no-debug
root        521  0.0  0.0 152780    80 ?        Ss   Nov22   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        523  0.0  0.0  52852   184 ?        Ss   Nov22   0:00 /usr/sbin/smartd -n -q never
nscd        524  0.0  0.0 1336536 1832 ?        Ssl  Nov22   0:39 /usr/sbin/nscd
root        544  0.0  0.0 195208     0 ?        Ssl  Nov22   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388     4 ?        Ss   Nov22   0:00 /usr/sbin/acpid
root        569  0.0  0.0  24208    12 ?        Ss   Nov22   0:00 /usr/sbin/atd -f
root        571  0.0  0.0 124508   844 ?        Ss   Nov22   0:01 /usr/sbin/crond -n
root      83419  0.0  0.0 183044  1664 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      83479  0.0  0.0 113284   736 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      83501  0.0  0.0 108056   336 ?        S    01:00   0:00  |       \_ sleep 2h 15m
root      44518  0.0  0.0 183076  2412 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      44534  0.0  0.0 113284  1208 ?        Ss   02:36   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      44535  0.0  0.0 108052   360 ?        S    02:36   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      44536  0.0  0.0 113288  1516 ?        S    02:36   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      44595  0.0  0.0 153840  2092 ?        R    02:36   0:00  |               \_ ps auxf
root      44519  0.0  0.1 183076  2424 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      44571  0.0  0.0  20164   808 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      44520  0.0  0.1 183076  2424 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      44561  0.0  0.0  20164   804 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      44521  0.0  0.1 183076  2424 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      44569  0.0  0.0  20164   808 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      44522  0.0  0.1 183076  2424 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      44568  0.0  0.0  20164   804 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      44523  0.0  0.1 183076  2424 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      44567  0.0  0.0  20164   808 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      44524  0.0  0.0 183076  2420 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      44565  0.0  0.0  20164   808 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      44525  0.0  0.0 183076  2420 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      44562  0.0  0.0  20164   804 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      44526  0.0  0.0 183076  2420 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      44573  0.0  0.0  20164   804 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      44527  0.0  0.0 183076  2416 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      44564  0.0  0.0  20164   808 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      44528  0.0  0.0 183076  2416 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      44563  0.0  0.0  20164   804 ?        Ss   02:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      44530  0.0  0.0 183076  2412 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      44560  0.0  0.0  20164   960 ?        Ss   02:36   0:00  |   \_ jailshell (pactpay) [44580] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   44580  0.0  0.0  20164   256 ?        S    02:36   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   44582  0.0  0.6 480124 16784 ?        S    02:36   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      44532  0.0  0.0 183076  2408 ?        S    02:36   0:00  \_ /usr/sbin/CROND -n
root      44566  0.0  0.0  20164   964 ?        Ss   02:36   0:00      \_ jailshell (nigeria) [44589] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   44589  0.0  0.0  20164   260 ?        S    02:36   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   44591  0.0  0.6 404052 16144 ?        R    02:36   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        591  0.0  0.0 108296     4 tty1     Ss+  Nov22   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov22   0:00 /bin/bash
mailnull    617  0.0  0.1  90820  3784 ?        Ss   Nov22   0:01 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  44500  0.0  0.1  91016  4372 ?        S    02:35   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
memcach+    911  0.0  0.0 342400    28 ?        Ssl  Nov22   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        912  0.0  0.2 1277312 5772 ?        Ssl  Nov22   0:24 /usr/bin/checkstatus
systuser    913  0.0  0.0 111864    76 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        914  0.0  0.0 572372   644 ?        Ssl  Nov22   0:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        915  0.0  0.0  51508   464 ?        Ss   Nov22   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1083  0.0  0.0  47116  2008 ?        S    Nov22   0:01  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  48232  2500 ?        S    Nov22   0:00  \_ dovecot/imap-login
dovecot    1085  0.0  0.0  10320   428 ?        S    Nov22   0:00  \_ dovecot/anvil
root       1086  0.0  0.0  10452   536 ?        S    Nov22   0:01  \_ dovecot/log
dovenull   1087  0.0  0.0  47264  2056 ?        S    Nov22   0:02  \_ dovecot/pop3-login
dovenull   1088  0.0  0.1  48324  2548 ?        S    Nov22   0:00  \_ dovecot/imap-login
root       1093  0.0  0.0  24528  1884 ?        S    Nov22   0:00  \_ dovecot/config
dovecot    1101  0.0  0.0  13568   532 ?        S    Nov22   0:00  \_ dovecot/stats
dovecot    1161  0.0  0.0  41320  1520 ?        S    Nov22   0:02  \_ dovecot/auth
worencom  81298  0.0  0.1  38488  2828 ?        S    00:56   0:00  \_ dovecot/imap
root      44185  0.0  0.1  41052  2728 ?        S    02:35   0:00  \_ dovecot/auth -w
telegraf    916  0.0  1.5 5654304 36320 ?       SLsl Nov22   0:29 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    917  0.0  0.0  12756     0 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    925  0.0  0.5 114016 12780 ?        Ssl  Nov22   0:13 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    926  0.0  0.0 112524    68 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        927  0.0  0.0 111304   356 ?        Ss   Nov22   0:07 /usr/sbin/sshd -D
root      44478  0.4  0.2 162436  5828 ?        Ss   02:35   0:00  \_ sshd: root [priv]
sshd      44479  0.0  0.1 115644  2628 ?        S    02:35   0:00      \_ sshd: root [net]
root        928  0.0  0.3 1276100 7716 ?        Ssl  Nov22   0:25 /usr/bin/cspdaemon
root        930  0.0  0.0 445028   592 ?        Ss   Nov22   0:02 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  44342  0.0  0.0 445028   324 ?        S    02:35   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        931  0.0  0.0 153404   220 ?        Ss   Nov22   0:01 pure-ftpd (SERVER)
systuser    932  0.0  0.0  10132     0 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.0 439788   404 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
oysipao+  44511  0.0  0.0 439788  2244 ?        S    02:36   0:00  \_ php-fpm: pool oysipa_oyostate_gov_ng
root        938  0.0  0.0 388892   536 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
oyotech+  44176  0.2  0.2 389236  6356 ?        S    02:35   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
oyotech+  44314  0.2  0.2 389236  6348 ?        S    02:35   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
root        939  0.0 14.4 1828368 350444 ?      Ssl  Nov22   0:30 /usr/local/cpanel/3rdparty/bin/clamd -F
root        940  0.0  0.3 331088  7732 ?        Ssl  Nov22   0:15 /usr/sbin/rsyslogd -n
named       949  0.0  1.4 1054796 35116 ?       Ssl  Nov22   0:25 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        958  0.0  0.1 400740  2444 ?        Ss   Nov22   0:07 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  44159 10.0  3.1 468044 75632 ?        S    02:35   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  44347  9.7  3.7 482180 89988 ?        S    02:35   0:01  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   44356  0.0  0.2 400460  5032 ?        S    02:35   0:00  \_ php-fpm: pool nigeriadecide_org
root        962  0.0  0.2 261692  6424 ?        Ss   Nov22   0:08 cpsrvd (SSL) - waiting for connections                   
root      44501  0.0  0.0      0     0 ?        Z    02:35   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    969  0.0  0.1  10564  3456 ?        Ss   Nov22   0:44 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        979  0.0  0.0 396248   296 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        985  0.0  0.0 389508   508 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1142  0.0  0.6 247932 16364 ?        Ss   Nov22   0:09 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5633  0.0  4.0 270572 98992 ?        S    Nov22   0:07  \_ spamd child
root       5634  0.0  0.6 247932 14780 ?        S    Nov22   0:00  \_ spamd child
systuser   1175  0.0  0.1 157708  2856 ?        S    Nov22   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.1 387556  3344 ?        Ss   Nov22   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  0.3 412396  9448 ?        Ss   Nov22   0:17 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1260  0.0  0.2 183900  6696 ?        Ss   Nov22   0:05 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1263  0.0  0.1 167452  4164 ?        Ss   Nov22   0:00 dnsadmin - dormant mode
root       1264  0.0  0.4 209648 10264 ?        Ss   Nov22   0:06 tailwatchd
root       1800  0.0  0.0 299272   492 ?        Ss   Nov22   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1834  0.0  0.0 130416  1372 ?        SN   Nov22   0:00 cpanellogd - sleeping for logs
mysql      1916  1.3  9.9 1478544 240088 ?      Sl   Nov22  12:43 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2048  0.0  0.3 267052  7672 ?        Ss   Nov22   0:03 /usr/sbin/httpd -k start
root       2050  0.0  0.0  12860   332 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2051  0.0  0.0  12732   284 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2052  0.0  0.0  12908   344 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2059  0.0  0.0  53340     4 ?        S    Nov22   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    31966  0.1  0.8 277712 20540 ?        S    02:15   0:01  \_ /usr/sbin/httpd -k start
nobody    32963  0.1  0.8 277904 20384 ?        S    02:17   0:01  \_ /usr/sbin/httpd -k start
nobody    34348  0.1  0.8 277640 20260 ?        S    02:19   0:01  \_ /usr/sbin/httpd -k start
nobody    37122  0.1  0.8 277596 20208 ?        S    02:24   0:00  \_ /usr/sbin/httpd -k start
nobody    39336  0.1  0.8 277764 20200 ?        S    02:27   0:00  \_ /usr/sbin/httpd -k start
nobody    39665  0.1  0.8 277912 20112 ?        S    02:28   0:00  \_ /usr/sbin/httpd -k start
nobody    40610  0.1  0.8 277616 19568 ?        S    02:29   0:00  \_ /usr/sbin/httpd -k start
nobody    41056  0.1  0.8 277912 19860 ?        S    02:30   0:00  \_ /usr/sbin/httpd -k start
nobody    41538  0.1  0.8 277584 19540 ?        S    02:31   0:00  \_ /usr/sbin/httpd -k start
nobody    41557  0.1  0.8 277716 19760 ?        S    02:31   0:00  \_ /usr/sbin/httpd -k start
nobody    41817  0.1  0.8 277912 19664 ?        S    02:31   0:00  \_ /usr/sbin/httpd -k start
nobody    42652  0.1  0.8 277704 19612 ?        S    02:33   0:00  \_ /usr/sbin/httpd -k start
nobody    42660  0.1  0.7 277728 19308 ?        S    02:33   0:00  \_ /usr/sbin/httpd -k start
nobody    43355  0.1  0.8 277912 19388 ?        S    02:34   0:00  \_ /usr/sbin/httpd -k start
nobody    44011  0.0  0.7 277916 19104 ?        S    02:35   0:00  \_ /usr/sbin/httpd -k start
nobody    44097  0.1  0.7 277520 18816 ?        S    02:35   0:00  \_ /usr/sbin/httpd -k start
nobody    44405  0.0  0.7 277528 18120 ?        S    02:35   0:00  \_ /usr/sbin/httpd -k start
nobody    44420  0.0  0.7 277552 18624 ?        S    02:35   0:00  \_ /usr/sbin/httpd -k start
nobody    44421  0.0  0.7 277416 18180 ?        S    02:35   0:00  \_ /usr/sbin/httpd -k start
nobody    44431  0.2  0.7 277552 18236 ?        S    02:35   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47566  0.0  0.0   3148     8 ?        Ss   Nov22   0:00 [kworker]
oysipao+  47579  0.0  0.0   3152    80 ?        S    Nov22   0:01  \_ [kworker]
root      44973  0.0  0.3 181872  9020 ?        Ss   00:00   0:08 lfd - sleeping
## mysql stats
Uptime: 55976  Threads: 3  Questions: 4933983  Slow queries: 0  Opens: 11096  Flush tables: 1  Open tables: 2000  Queries per second avg: 88.144
*************************** 1. row ***************************
     Id: 76468
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 76472
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `24` WHERE `phone`='2348104886540' LIMIT 1
*************************** 3. row ***************************
     Id: 76474
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.145.187 TIME_WAIT
      1 142.44.228.101 TIME_WAIT
      1 162.159.104.23 TIME_WAIT
      1 162.159.104.36 TIME_WAIT
      1 172.71.166.144 TIME_WAIT
      1 172.71.166.145 TIME_WAIT
      1 172.71.170.217 TIME_WAIT
      1 172.71.174.185 TIME_WAIT
      1 192.178.4.102 TIME_WAIT
      1 192.178.4.103 TIME_WAIT
      1 198.41.227.63 TIME_WAIT
      1 ::1 TIME_WAIT
      1 203.55.131.4 TIME_WAIT
      1 35.200.29.90 TIME_WAIT
      1 54.39.6.180 TIME_WAIT
      1 66.249.70.38 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 162.158.174.254 TIME_WAIT
      2 172.69.67.170 TIME_WAIT
      2 48.210.12.181 TIME_WAIT
      3 162.159.104.37 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 23-Nov-2025 02:36:02 WAT
   Restart Time: Saturday, 22-Nov-2025 11:03:10 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 15 hours 32 minutes 51 seconds
   Server load: 0.35 0.46 0.49
   Total accesses: 262391 - Total Traffic: 6.2 GB - Total Duration: 139655986
   CPU Usage: u7.49 s6.38 cu3175.84 cs2478.63 - 10.1% CPU load
   4.69 requests/sec - 115.3 kB/second - 24.6 kB/request - 532.244 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

_K_KKKK_KKW_KKK_R_KK............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS    Req    Dur   Conn  Child  Slot     Client     Protocol            VHost                                 Request
   0-0  44011 0/15/14029  _ 0.11 1     263   7164869 0.0   0.46  332.60 192.178.4.97  http/1.1 team.cloudware.ng:443       GET /?l=3829262028 HTTP/1.1
   1-0  40610 1/142/13712 K 2.10 1     0     7443049 0.7   2.48  338.17 58.97.220.33  http/1.1 covid19.oyostate.gov.ng:80  GET /wp-content/languages/about.php HTTP/1.1
   2-0  39336 0/185/13521 _ 2.67 0     0     7287026 0.0   5.97  321.57 ::1           http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   3-0  44405 1/3/13022   K 0.04 2     275   6778790 33.7  0.10  318.81 192.178.4.102 http/1.1 team.cloudware.ng:443       GET /?l=2624050011 HTTP/1.1
   4-0  34348 1/332/13269 K 5.45 0     296   6775346 35.7  8.32  322.62 192.178.4.99  http/1.1 team.cloudware.ng:443       GET /?l=3968878771 HTTP/1.1
   5-0  41056 1/128/13644 K 1.21 0     307   7006184 36.8  2.43  353.29 192.178.4.97  http/1.1 team.cloudware.ng:443       GET /?l=1934768384 HTTP/1.1
   6-0  41817 3/90/12592  K 1.46 1     265   6297313 96.2  3.75  312.49 192.178.4.103 http/1.1 team.cloudware.ng:443       GET /?l=3163517 HTTP/1.1
   7-0  42652 0/60/13045  _ 0.93 1     320   6639949 0.0   1.23  311.60 192.178.4.99  http/1.1 team.cloudware.ng:443       GET /?l=2685466270 HTTP/1.1
   8-0  41538 1/109/12426 K 1.76 1     6     6289756 0.8   2.22  296.72 58.97.220.33  http/1.1 covid-19.oyostate.gov.ng:80 GET /wp-fclass.php HTTP/1.1
   9-0  44097 6/19/11510  K 0.31 1     277   6043239 184.4 0.35  282.37 192.178.4.96  http/1.1 team.cloudware.ng:443       GET /?l=1750360528 HTTP/1.1
   10-0 39665 0/173/11494 W 2.92 0     0     5972525 0.0   3.84  270.28 ::1           http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   11-0 44420 0/5/11704   _ 0.02 0     268   6025740 0.0   0.04  285.90 58.97.220.33  http/1.1 health.oyostate.gov.ng:80   GET /.well-known/acme-challenge/admin.php HTTP/1.1
   12-0 32963 2/389/11608 K 5.40 3     299   6061665 66.7  9.41  296.04 192.178.4.100 http/1.1 team.cloudware.ng:443       GET /?l=3097967512 HTTP/1.1
   13-0 31966 1/413/11165 K 7.37 1     270   5721139 36.1  9.75  264.39 192.178.4.103 http/1.1 team.cloudware.ng:443       GET /?l=1504376889 HTTP/1.1
   14-0 43355 1/41/10140  K 0.63 1     3     5162572 0.5   0.89  238.63 58.97.220.33  http/1.1 oysipa.oyostate.gov.ng:80   GET /.well-known/pki-validation/about.php HTTP/1.1
   15-0 41557 0/95/8445   _ 1.53 0     7     4269369 0.0   2.43  209.66 58.97.220.33  http/1.1 covid-19.oyostate.gov.ng:80 GET /wp-includes/certificates/file.php HTTP/1.1
   16-0 37122 0/245/8475  R 3.50 34    969   4306944 0.0   5.51  196.08 61.26.152.201 http/1.1
   17-0 44421 0/6/7827    _ 0.01 0     933   4000006 0.0   0.40  191.34 58.97.220.33  http/1.1 health.oyostate.gov.ng:80   GET /wp-includes/IXR/about.php HTTP/1.1
   18-0 44431 4/6/6800    K 0.09 3     262   3646197 125.4 0.12  161.24 192.178.4.105 http/1.1 team.cloudware.ng:443       GET /?l=2014468170 HTTP/1.1
   19-0 42660 2/69/7569   K 1.16 1     264   3705944 65.2  1.23  180.92 192.178.4.104 http/1.1 team.cloudware.ng:443       GET /?l=3701298383 HTTP/1.1
   20-0 -     0/0/5644    . 0.00 531   0     3093247 0.0   0.00  129.78 ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   21-0 -     0/0/4237    . 0.00 1372  0     2520983 0.0   0.00  98.76  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   22-0 -     0/0/3214    . 0.00 1735  0     1902704 0.0   0.00  84.89  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   23-0 -     0/0/2854    . 0.00 2806  0     1555805 0.0   0.00  58.97  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   24-0 -     0/0/1636    . 0.00 2415  0     1282876 0.0   0.00  39.63  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   25-0 -     0/0/2570    . 0.00 2910  0     1163271 0.0   0.00  57.91  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   26-0 -     0/0/1903    . 0.00 2424  0     1185213 0.0   0.00  47.42  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   27-0 -     0/0/1301    . 0.00 2873  0     843370  0.0   0.00  38.82  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   28-0 -     0/0/1528    . 0.00 2866  0     741140  0.0   0.00  34.17  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   29-0 -     0/0/1651    . 0.00 2407  0     952853  0.0   0.00  34.23  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   30-0 -     0/0/1294    . 0.00 4175  0     796559  0.0   0.00  30.37  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   31-0 -     0/0/535     . 0.00 4168  0     418251  0.0   0.00  9.62   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   32-0 -     0/0/521     . 0.00 4181  0     501649  0.0   0.00  10.47  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   33-0 -     0/0/226     . 0.00 4135  0     242996  0.0   0.00  4.32   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   34-0 -     0/0/723     . 0.00 3587  0     452012  0.0   0.00  11.57  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   35-0 -     0/0/645     . 0.00 4185  0     507090  0.0   0.00  14.62  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   36-0 -     0/0/89      . 0.00 4149  0     137985  0.0   0.00  0.74   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   37-0 -     0/0/222     . 0.00 4054  0     187355  0.0   0.00  4.82   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   38-0 -     0/0/661     . 0.00 4174  0     330279  0.0   0.00  12.67  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   39-0 -     0/0/582     . 0.00 4015  0     506531  0.0   0.00  13.50  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   40-0 -     0/0/227     . 0.00 4177  0     280411  0.0   0.00  4.37   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   41-0 -     0/0/416     . 0.00 4171  0     308037  0.0   0.00  9.50   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   42-0 -     0/0/144     . 0.00 4148  0     280413  0.0   0.00  1.55   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   43-0 -     0/0/290     . 0.00 3335  0     344154  0.0   0.00  5.96   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   44-0 -     0/0/292     . 0.00 4184  0     301816  0.0   0.00  6.10   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   45-0 -     0/0/198     . 0.00 4147  0     141072  0.0   0.00  1.57   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   46-0 -     0/0/60      . 0.00 12899 0     180509  0.0   0.00  0.80   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   47-0 -     0/0/67      . 0.00 12921 0     226531  0.0   0.00  1.33   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   48-0 -     0/0/203     . 0.00 12912 0     142085  0.0   0.00  4.09   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   49-0 -     0/0/284     . 0.00 12563 0     181603  0.0   0.00  4.73   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   50-0 -     0/0/82      . 0.00 12925 0     44788   0.0   0.00  1.22   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   51-0 -     0/0/8       . 0.00 12885 0     43835   0.0   0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   52-0 -     0/0/9       . 0.00 12894 0     45747   0.0   0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   53-0 -     0/0/29      . 0.00 12892 0     44492   0.0   0.00  0.32   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   54-0 -     0/0/536     . 0.00 11008 0     268842  0.0   0.00  11.18  ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   55-0 -     0/0/4       . 0.00 12929 0     23627   0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   56-0 -     0/0/9       . 0.00 12888 0     47344   0.0   0.00  0.17   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   57-0 -     0/0/7       . 0.00 12890 0     44159   0.0   0.00  0.12   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   58-0 -     0/0/43      . 0.00 12931 11655 23366   0.0   0.00  0.07   45.94.58.4    http/1.1 cloudware.ng:80             GET /requirements.txt HTTP/1.1
   59-0 -     0/0/141     . 0.00 12292 0     113874  0.0   0.00  3.52   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   60-0 -     0/0/132     . 0.00 12922 0     76946   0.0   0.00  2.87   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   61-0 -     0/0/6       . 0.00 12920 0     3701    0.0   0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   62-0 -     0/0/204     . 0.00 12479 0     97395   0.0   0.00  2.67   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   63-0 -     0/0/66      . 0.00 12904 0     27806   0.0   0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   64-0 -     0/0/11      . 0.00 12897 0     25454   0.0   0.00  0.16   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   65-0 -     0/0/9       . 0.00 12917 0     28822   0.0   0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   66-0 -     0/0/27      . 0.00 14443 0     28      0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   67-0 -     0/0/42      . 0.00 14448 0     46      0.0   0.00  0.05   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   68-0 -     0/0/3       . 0.00 14486 0     1240    0.0   0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   69-0 -     0/0/2       . 0.00 14485 0     703     0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   70-0 -     0/0/5       . 0.00 14478 0     1790    0.0   0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   71-0 -     0/0/47      . 0.00 14426 0     737     0.0   0.00  0.08   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   72-0 -     0/0/1       . 0.00 14497 0     0       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   73-0 -     0/0/458     . 0.00 13032 0     263682  0.0   0.00  8.36   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   74-0 -     0/0/9       . 0.00 14474 0     4803    0.0   0.00  0.22   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   75-0 -     0/0/1       . 0.00 14496 0     0       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   76-0 -     0/0/23      . 0.00 14438 0     2942    0.0   0.00  0.21   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   77-0 -     0/0/200     . 0.00 13794 0     87870   0.0   0.00  4.44   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   78-0 -     0/0/63      . 0.00 14298 0     25484   0.0   0.00  1.24   ::1           http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 956
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 1...35)
   index usage: 16%, cache usage: 22%
   total entries stored since starting: 185624
   total entries replaced since starting: 0
   total entries expired since starting: 184598
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 495 miss
   total removes since starting: 70 hit, 189 miss
Youez - 2016 - github.com/yon3zu
LinuXploit