403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-23.03.36.txt
 ## swap threshold exceeded
## server overview
2025-11-23.03.36 load[0] mem[59/72] mysql[1/12] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1335         159          84         868         773
Swap:          1999        1637         362
 03:36:01 up 16:33,  0 users,  load average: 0.36, 0.43, 0.48
## system overview
top - 03:36:02 up 16:33,  0 users,  load average: 0.36, 0.43, 0.48
Tasks: 207 total,   4 running, 201 sleeping,   0 stopped,   2 zombie
%Cpu(s): 56.2 us, 43.8 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   145832 free,  1384776 used,   889692 buff/cache
KiB Swap:  2047996 total,   371592 free,  1676404 used.   774612 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1916 mysql     20   0 1478544 242176   3052 S  37.5 10.0  13:49.64 /usr/sbin+
 87568 nigeria   20   0  404052  16136  10380 S  12.5  0.7   0:00.02 /opt/cpan+
   502 dbus      20   0   58720   1356    612 S   6.2  0.1   0:31.23 /usr/bin/+
 87217 nobody    20   0  277736  18604   3404 S   6.2  0.8   0:00.04 /usr/sbin+
     1 root      20   0   44508   3300   1464 S   0.0  0.1   1:20.49 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:03.43 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:02.31 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:58.99 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.15 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.16 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:02.28 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:09.27 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:35.32 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.07 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   150 root      20   0       0      0      0 R   0.0  0.0   0:01.34 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.69 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:04.33 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:03.17 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   39500   4548   4308 S   0.0  0.2   0:34.06 /usr/lib/+
   384 root      20   0   45352      8      4 S   0.0  0.0   0:00.39 /usr/lib/+
   412 root      16  -4   55532    444    324 S   0.0  0.0   0:05.54 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   499 root      20   0   21540    348    260 S   0.0  0.0   0:01.35 /usr/sbin+
   501 root      20   0   24704   1172    808 S   0.0  0.0   0:13.61 /usr/lib/+
   504 rpc       20   0   69256     44      0 S   0.0  0.0   0:00.05 /sbin/rpc+
   514 root      20   0  224148   3076    840 S   0.0  0.1   0:00.63 queueproc+
   515 polkitd   20   0  610540    832    456 S   0.0  0.0   0:07.93 /usr/lib/+
   521 root      20   0  152780     72     28 S   0.0  0.0   0:00.03 /usr/sbin+
   523 root      20   0   52852    316    220 S   0.0  0.0   0:00.01 /usr/sbin+
   524 nscd      20   0 1336536   1836    640 S   0.0  0.1   0:41.67 /usr/sbin+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0   24208     12      0 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124508    844    416 R   0.0  0.0   0:01.65 /usr/sbin+
   591 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   617 mailnull  20   0   90820   3792    864 S   0.0  0.2   0:01.20 /usr/sbin+
   631 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:03.40 [loop0]
   707 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [jbd2/loo+
   708 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 memcach+  20   0  342400     28     28 S   0.0  0.0   0:01.28 /usr/bin/+
   912 root      20   0 1277312   5772      4 S   0.0  0.2   0:24.77 /usr/bin/+
   913 systuser  20   0  111864     76      0 S   0.0  0.0   0:00.02 /usr/loca+
   914 root      20   0  572372    640    172 S   0.0  0.0   0:05.08 /usr/bin/+
   915 root      20   0   51508    456    292 S   0.0  0.0   0:00.87 /usr/sbin+
   916 telegraf  20   0 5654304  36660   5900 S   0.0  1.5   0:31.72 /usr/loca+
   917 systuser  20   0   12756     52      0 S   0.0  0.0   0:00.02 /usr/loca+
   925 systuser  20   0  114016  12972   2544 S   0.0  0.5   0:13.87 /usr/loca+
   926 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   927 root      20   0  111304    356    256 S   0.0  0.0   0:08.30 /usr/sbin+
   928 root      20   0 1349832   7800      0 S   0.0  0.3   0:25.75 /usr/bin/+
   930 root      20   0  445028    592    480 S   0.0  0.0   0:02.34 sw-engine+
   931 root      20   0  153404    220    136 S   0.0  0.0   0:01.29 pure-ftpd+
   932 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.02 /usr/loca+
   934 root      20   0  439788    404    312 S   0.0  0.0   0:01.56 php-fpm: +
   938 root      20   0  388892    536    436 S   0.0  0.0   0:01.73 php-fpm: +
   939 root      20   0 1828368 275256    856 S   0.0 11.4   0:30.45 /usr/loca+
   940 root      20   0  331088   5100   4396 S   0.0  0.2   0:17.03 /usr/sbin+
   949 named     20   0 1054796  37144   2188 S   0.0  1.5   0:27.11 /usr/sbin+
   958 root      20   0  400740   2444    604 S   0.0  0.1   0:07.95 php-fpm: +
   962 root      20   0  261692   6416   1660 S   0.0  0.3   0:09.38 cpsrvd (S+
   969 cpanelc+  20   0   10564   3448   2284 S   0.0  0.1   0:47.44 /usr/loca+
   979 root      20   0  396248    344    260 S   0.0  0.0   0:01.49 php-fpm: +
   985 root      20   0  389508    468    368 S   0.0  0.0   0:01.55 php-fpm: +
  1083 dovenull  20   0   47116   2132   1508 S   0.0  0.1   0:01.84 dovecot/p+
  1084 dovenull  20   0   48232   2596   1596 S   0.0  0.1   0:00.65 dovecot/i+
  1085 dovecot   20   0   10320    360    244 S   0.0  0.0   0:00.44 dovecot/a+
  1086 root      20   0   10452    480    292 S   0.0  0.0   0:01.13 dovecot/l+
  1087 dovenull  20   0   47264   2168   1540 S   0.0  0.1   0:02.13 dovecot/p+
  1088 dovenull  20   0   48324   2544   1584 S   0.0  0.1   0:00.61 dovecot/i+
  1093 root      20   0   24528   1884    492 S   0.0  0.1   0:00.39 dovecot/c+
  1101 dovecot   20   0   13568    556    336 S   0.0  0.0   0:00.16 dovecot/s+
  1142 root      20   0  247932  18672   1188 S   0.0  0.8   0:09.90 /usr/loca+
  1161 dovecot   20   0   41320   1524   1016 S   0.0  0.1   0:02.86 dovecot/a+
  1175 systuser  20   0  157708   2936    888 S   0.0  0.1   0:00.26 SonarPush+
  1177 wp-tool+  20   0  387556   3320   1388 S   0.0  0.1   0:00.51 /usr/bin/+
  1178 wp-tool+  20   0  412396   9420   1364 S   0.0  0.4   0:18.75 /usr/bin/+
  1260 root      20   0  262224  24620   6760 S   0.0  1.0   0:06.04 cpdavd - +
  1263 root      20   0  167452   3144   1776 S   0.0  0.1   0:00.94 dnsadmin +
  1264 root      20   0  209784  10172   2088 S   0.0  0.4   0:06.98 tailwatchd
  1800 root      20   0  299272    492    332 S   0.0  0.0   0:01.57 php-fpm: +
  1834 root      38  18  130416   1372    692 S   0.0  0.1   0:00.15 cpanellog+
  2048 root      20   0  267052   7672    476 S   0.0  0.3   0:04.22 /usr/sbin+
  2050 root      20   0   12804    332    212 S   0.0  0.0   0:06.36 /usr/loca+
  2051 root      20   0   12732    284    208 S   0.0  0.0   0:05.61 /usr/loca+
  2052 root      20   0   12840    344    216 S   0.0  0.0   0:06.00 /usr/loca+
  2059 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  5634 root      20   0  264952  99276   3724 S   0.0  4.1   0:03.59 spamd chi+
 44973 root      20   0  182480  10160   1100 S   0.0  0.4   0:11.63 lfd - sle+
 47566 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47579 oysipao+  20   0    3152     64     24 S   0.0  0.0   0:01.08 [kworker]
 54061 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 54854 root      20   0  247932  21484   1432 S   0.0  0.9   0:00.00 spamd chi+
 63462 root      20   0  123364    656    428 S   0.0  0.0   0:00.00 /usr/sbin+
 67099 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 67769 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 68530 root      20   0       0      0      0 D   0.0  0.0   0:00.02 [kworker/+
 71590 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 76134 nobody    20   0  277828  20332   4732 S   0.0  0.8   0:01.21 /usr/sbin+
 76827 nobody    20   0  277584  20424   4816 S   0.0  0.8   0:01.21 /usr/sbin+
 77789 nobody    20   0  277628  20200   4652 S   0.0  0.8   0:01.22 /usr/sbin+
 78337 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 78958 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 79473 nobody    20   0  277908  20560   4736 S   0.0  0.8   0:00.99 /usr/sbin+
 79474 nobody    20   0  277536  19724   4452 S   0.0  0.8   0:01.00 /usr/sbin+
 80919 nobody    20   0  277712  20124   4584 S   0.0  0.8   0:00.88 /usr/sbin+
 81033 nobody    20   0  277732  20092   4596 S   0.0  0.8   0:00.83 /usr/sbin+
 81298 worencom  20   0   38488   2572   1588 S   0.0  0.1   0:00.04 dovecot/i+
 81621 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 82315 root      20   0       0      0      0 D   0.0  0.0   0:00.02 [kworker/+
 84791 nobody    20   0  277520  19188   4052 S   0.0  0.8   0:00.38 /usr/sbin+
 84815 nobody    20   0  277644  19932   4432 S   0.0  0.8   0:00.30 /usr/sbin+
 85135 nobody    20   0  277656  19496   4100 S   0.0  0.8   0:00.33 /usr/sbin+
 85558 root      20   0       0      0      0 D   0.0  0.0   0:00.02 [kworker/+
 85973 nobody    20   0  277672  19204   3972 S   0.0  0.8   0:00.18 /usr/sbin+
 85974 nobody    20   0  277520  19088   3908 S   0.0  0.8   0:00.24 /usr/sbin+
 86020 nobody    20   0  277604  19548   4028 S   0.0  0.8   0:00.15 /usr/sbin+
 86185 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 86187 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 86408 nobody    20   0  277520  19012   3916 S   0.0  0.8   0:00.17 /usr/sbin+
 86913 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 86955 healtho+  20   0  482344  89636   4112 S   0.0  3.7   0:06.38 php-fpm: +
 87035 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 87083 nobody    20   0  277520  18708   3720 S   0.0  0.8   0:00.06 /usr/sbin+
 87229 nigeria   20   0  400460   5036   2400 S   0.0  0.2   0:00.01 php-fpm: +
 87313 oyotech+  20   0  389236   6380   2944 S   0.0  0.3   0:00.05 php-fpm: +
 87335 wp-tool+  20   0  445028    324    196 S   0.0  0.0   0:00.00 sw-engine+
 87413 nobody    20   0  277240  17728   3120 S   0.0  0.7   0:00.00 /usr/sbin+
 87429 nobody    20   0  277552  18244   3272 S   0.0  0.8   0:00.01 /usr/sbin+
 87440 oyotech+  20   0  389236   6332   2944 S   0.0  0.3   0:00.01 php-fpm: +
 87465 root      20   0  162436   5836   4340 S   0.0  0.2   0:00.01 sshd: roo+
 87467 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 87469 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: roo+
 87478 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 87479 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 87482 root      20   0  111304   4448   3416 S   0.0  0.2   0:00.00 sshd: [ac+
 87483 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 87492 cloudw    20   0  353712  15968  10484 S   0.0  0.7   0:00.01 /opt/cpan+
 87494 root      20   0  183076   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87496 root      20   0  183076   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 87497 root      20   0  183076   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 87498 root      20   0  183076   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 87499 root      20   0  183076   2416   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 87500 root      20   0  183076   2416   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 87501 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 87502 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 87503 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [crond] <+
 87504 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 87505 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 87506 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 87508 root      20   0  183076   2408   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87509 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 87510 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 87511 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 87512 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 87535 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 87537 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 87539 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87540 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 87541 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87542 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87543 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87544 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87545 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87546 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 87548 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87550 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 87551 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 87562 saboakin  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 87564 saboakin  20   0  404052  15616  10160 S   0.0  0.6   0:00.00 /opt/cpan+
 87565 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 87566 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 87570 pactpay   20   0  479860  16172  10572 R   0.0  0.7   0:00.00 /opt/cpan+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov22   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov22   0:03  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov22   0:58  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov22   0:09  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov22   0:35  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [deferwq]
root        150  0.0  0.0      0     0 ?        S    Nov22   0:01  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_1]
root        252  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov22   0:03  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   Nov22   0:04  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov22   0:03  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [xprtiod]
root        631  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov22   0:03  \_ [loop0]
root        707  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [jbd2/loop0-8]
root        708  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root      54061  0.0  0.0      0     0 ?        S    02:48   0:00  \_ [kworker/u200:0]
root      67099  0.0  0.0      0     0 ?        S    03:06   0:00  \_ [kworker/0:3]
root      67769  0.0  0.0      0     0 ?        S    03:07   0:00  \_ [kworker/1:3]
root      68530  0.0  0.0      0     0 ?        S    03:08   0:00  \_ [kworker/u200:1]
root      71590  0.0  0.0      0     0 ?        R    03:12   0:00  \_ [kworker/1:1]
root      78337  0.0  0.0      0     0 ?        S    03:22   0:00  \_ [kworker/0:2]
root      78958  0.0  0.0      0     0 ?        S    03:23   0:00  \_ [kworker/0:4]
root      81621  0.0  0.0      0     0 ?        S    03:27   0:00  \_ [kworker/1:0]
root      82315  0.0  0.0      0     0 ?        S    03:28   0:00  \_ [kworker/0:0]
root      85558  0.0  0.0      0     0 ?        S    03:33   0:00  \_ [kworker/0:1]
root      86185  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/1:2]
root      86187  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44508  3300 ?        Ss   Nov22   1:20 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  39500  4548 ?        Ss   Nov22   0:34 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352     8 ?        Ss   Nov22   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   444 ?        S<sl Nov22   0:05 /sbin/auditd
root        499  0.0  0.0  21540   348 ?        Ss   Nov22   0:01 /usr/sbin/irqbalance --foreground
root        501  0.0  0.0  24704  1172 ?        Ss   Nov22   0:13 /usr/lib/systemd/systemd-logind
dbus        502  0.0  0.0  58720  1356 ?        Ss   Nov22   0:31 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         504  0.0  0.0  69256    44 ?        Ss   Nov22   0:00 /sbin/rpcbind -w
root        514  0.0  0.1 224148  3076 ?        Ss   Nov22   0:00 queueprocd - waiting up to 60s to process a task
polkitd     515  0.0  0.0 610540   832 ?        Ssl  Nov22   0:07 /usr/lib/polkit-1/polkitd --no-debug
root        521  0.0  0.0 152780    72 ?        Ss   Nov22   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        523  0.0  0.0  52852   316 ?        Ss   Nov22   0:00 /usr/sbin/smartd -n -q never
nscd        524  0.0  0.0 1336536 1836 ?        Ssl  Nov22   0:41 /usr/sbin/nscd
root        544  0.0  0.0 195208     0 ?        Ssl  Nov22   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388     4 ?        Ss   Nov22   0:00 /usr/sbin/acpid
root        569  0.0  0.0  24208    12 ?        Ss   Nov22   0:00 /usr/sbin/atd -f
root        571  0.0  0.0 124508   844 ?        Ss   Nov22   0:01 /usr/sbin/crond -n
root      87494  0.0  0.0 183076  2416 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      87510  0.0  0.0 113284  1212 ?        Ss   03:36   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      87511  0.0  0.0 108052   360 ?        S    03:36   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      87512  0.0  0.0 113288  1520 ?        S    03:36   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      87576  0.0  0.0 153840  2096 ?        R    03:36   0:00  |               \_ ps auxf
root      87496  0.0  0.0 183076  2420 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      87548  0.0  0.0  20164   808 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      87497  0.0  0.0 183076  2420 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      87539  0.0  0.0  20164   808 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      87498  0.0  0.0 183076  2420 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      87542  0.0  0.0  20164   808 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      87499  0.0  0.0 183076  2416 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      87540  0.0  0.0  20164   804 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      87500  0.0  0.0 183076  2416 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      87543  0.0  0.0  20164   808 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      87501  0.0  0.0 183076  2412 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      87541  0.0  0.0  20164   808 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      87502  0.0  0.0 183076  2412 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      87544  0.0  0.0  20164   808 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      87504  0.0  0.0 183076  2412 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      87545  0.0  0.0  20164   808 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      87505  0.0  0.0 183076  2412 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      87537  0.0  0.0  20164   804 ?        Ss   03:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      87506  0.0  0.0 183076  2412 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      87546  0.0  0.0  20164   968 ?        Ss   03:36   0:00  |   \_ jailshell (pactpay) [87566] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   87566  0.0  0.0  20164   260 ?        S    03:36   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   87570  0.0  0.6 479860 16172 ?        Sl   03:36   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      87508  0.0  0.0 183076  2408 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      87551  0.0  0.0  20164   972 ?        Ss   03:36   0:00  |   \_ jailshell (nigeria) [87565] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   87565  0.0  0.0  20164   264 ?        S    03:36   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   87568  0.0  0.6 404052 16136 ?        S    03:36   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      87509  0.0  0.0 183076  2412 ?        S    03:36   0:00  \_ /usr/sbin/CROND -n
root      87550  0.0  0.0  20164   968 ?        Ss   03:36   0:00      \_ jailshell (saboakin) [87562] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  87562  0.0  0.0      0     0 ?        R    03:36   0:00          \_ [jailshell]
root        591  0.0  0.0 108296     4 tty1     Ss+  Nov22   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov22   0:00 /bin/bash
mailnull    617  0.0  0.1  90820  3792 ?        Ss   Nov22   0:01 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
memcach+    911  0.0  0.0 342400    28 ?        Ssl  Nov22   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        912  0.0  0.2 1277312 5772 ?        Ssl  Nov22   0:24 /usr/bin/checkstatus
systuser    913  0.0  0.0 111864    76 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        914  0.0  0.0 572372   640 ?        Ssl  Nov22   0:05 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        915  0.0  0.0  51508   456 ?        Ss   Nov22   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1083  0.0  0.0  47116  2132 ?        S    Nov22   0:01  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  48232  2596 ?        S    Nov22   0:00  \_ dovecot/imap-login
dovecot    1085  0.0  0.0  10320   360 ?        S    Nov22   0:00  \_ dovecot/anvil
root       1086  0.0  0.0  10452   480 ?        S    Nov22   0:01  \_ dovecot/log
dovenull   1087  0.0  0.0  47264  2168 ?        S    Nov22   0:02  \_ dovecot/pop3-login
dovenull   1088  0.0  0.1  48324  2544 ?        S    Nov22   0:00  \_ dovecot/imap-login
root       1093  0.0  0.0  24528  1884 ?        S    Nov22   0:00  \_ dovecot/config
dovecot    1101  0.0  0.0  13568   556 ?        S    Nov22   0:00  \_ dovecot/stats
dovecot    1161  0.0  0.0  41320  1524 ?        S    Nov22   0:02  \_ dovecot/auth
worencom  81298  0.0  0.1  38488  2572 ?        S    00:56   0:00  \_ dovecot/imap
root      86913  0.0  0.1  41052  2728 ?        S    03:35   0:00  \_ dovecot/auth -w
root      87035  0.0  0.1  60820  4508 ?        S    03:35   0:00  \_ dovecot/lmtp
telegraf    916  0.0  1.5 5654304 36660 ?       SLsl Nov22   0:31 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    917  0.0  0.0  12756    52 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    925  0.0  0.5 114016 12972 ?        Ssl  Nov22   0:13 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    926  0.0  0.0 112524    68 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        927  0.0  0.0 111304   356 ?        Ss   Nov22   0:08 /usr/sbin/sshd -D
root      87465  0.3  0.2 162436  5836 ?        Ss   03:35   0:00  \_ sshd: root [priv]
sshd      87469  0.0  0.1 115644  2632 ?        S    03:35   0:00  |   \_ sshd: root [net]
root      87478  0.0  0.2 157100  5076 ?        Ss   03:36   0:00  \_ sshd: unknown [priv]
sshd      87479  0.0  0.1 115644  2628 ?        S    03:36   0:00  |   \_ sshd: unknown [net]
root      87482  0.0  0.1 111304  4448 ?        Ss   03:36   0:00  \_ sshd: [accepted]
sshd      87483  0.0  0.1 115644  2628 ?        S    03:36   0:00      \_ sshd: [net]
root        928  0.0  0.3 1349832 7800 ?        Ssl  Nov22   0:25 /usr/bin/cspdaemon
root        930  0.0  0.0 445028   592 ?        Ss   Nov22   0:02 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  87335  0.0  0.0 445028   324 ?        S    03:35   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        931  0.0  0.0 153404   220 ?        Ss   Nov22   0:01 pure-ftpd (SERVER)
systuser    932  0.0  0.0  10132    36 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.0 439788   404 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        938  0.0  0.0 388892   536 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
oyotech+  87313  0.2  0.2 389236  6380 ?        S    03:35   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
oyotech+  87440  0.1  0.2 389236  6332 ?        S    03:35   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
root        939  0.0 11.3 1828368 275256 ?      Ssl  Nov22   0:30 /usr/local/cpanel/3rdparty/bin/clamd -F
root        940  0.0  0.2 331088  5100 ?        Ssl  Nov22   0:17 /usr/sbin/rsyslogd -n
named       949  0.0  1.5 1054796 37144 ?       Ssl  Nov22   0:27 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        958  0.0  0.1 400740  2444 ?        Ss   Nov22   0:07 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  86955 11.1  3.7 482344 89636 ?        S    03:35   0:06  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   87229  0.0  0.2 400460  5036 ?        S    03:35   0:00  \_ php-fpm: pool nigeriadecide_org
root        962  0.0  0.2 261692  6416 ?        Ss   Nov22   0:09 cpsrvd (SSL) - waiting for connections                   
root      87467  0.0  0.0      0     0 ?        Z    03:35   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    969  0.0  0.1  10564  3448 ?        Ss   Nov22   0:47 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        979  0.0  0.0 396248   344 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        985  0.0  0.0 389508   468 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1142  0.0  0.7 247932 18672 ?        Ss   Nov22   0:09 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5634  0.0  4.1 264952 99276 ?        S    Nov22   0:03  \_ spamd child
root      54854  0.0  0.8 247932 21484 ?        S    02:49   0:00  \_ spamd child
systuser   1175  0.0  0.1 157708  2936 ?        S    Nov22   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.1 387556  3320 ?        Ss   Nov22   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  0.3 412396  9420 ?        Ss   Nov22   0:18 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1260  0.0  1.0 262224 24620 ?        Ss   Nov22   0:06 cpdavd - accepting connections on: 2091, 2077, 2078
root       1263  0.0  0.1 167452  3144 ?        Ss   Nov22   0:00 dnsadmin - dormant mode
root       1264  0.0  0.4 209784 10172 ?        Ss   Nov22   0:06 tailwatchd
root       1800  0.0  0.0 299272   492 ?        Ss   Nov22   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1834  0.0  0.0 130416  1372 ?        SN   Nov22   0:00 cpanellogd - sleeping for logs
mysql      1916  1.3 10.0 1478544 242176 ?      Sl   Nov22  13:49 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2048  0.0  0.3 267052  7672 ?        Ss   Nov22   0:04 /usr/sbin/httpd -k start
root       2050  0.0  0.0  12804   332 ?        S    Nov22   0:06  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2051  0.0  0.0  12732   284 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2052  0.0  0.0  12840   344 ?        S    Nov22   0:06  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2059  0.0  0.0  53340     4 ?        S    Nov22   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    76134  0.1  0.8 277828 20332 ?        S    03:18   0:01  \_ /usr/sbin/httpd -k start
nobody    76827  0.1  0.8 277584 20424 ?        S    03:19   0:01  \_ /usr/sbin/httpd -k start
nobody    77789  0.1  0.8 277628 20200 ?        S    03:21   0:01  \_ /usr/sbin/httpd -k start
nobody    79473  0.1  0.8 277908 20560 ?        S    03:23   0:00  \_ /usr/sbin/httpd -k start
cloudw    87492  1.0  0.6 353712 15968 ?        S    03:36   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    79474  0.1  0.8 277536 19724 ?        S    03:23   0:01  \_ /usr/sbin/httpd -k start
nobody    80919  0.1  0.8 277712 20124 ?        S    03:25   0:00  \_ /usr/sbin/httpd -k start
nobody    81033  0.1  0.8 277732 20092 ?        S    03:26   0:00  \_ /usr/sbin/httpd -k start
nobody    84791  0.1  0.7 277520 19188 ?        S    03:31   0:00  \_ /usr/sbin/httpd -k start
nobody    84815  0.1  0.8 277644 19932 ?        S    03:31   0:00  \_ /usr/sbin/httpd -k start
nobody    85135  0.1  0.8 277656 19496 ?        S    03:32   0:00  \_ /usr/sbin/httpd -k start
nobody    85973  0.1  0.7 277672 19204 ?        S    03:33   0:00  \_ /usr/sbin/httpd -k start
nobody    85974  0.1  0.7 277520 19088 ?        S    03:33   0:00  \_ /usr/sbin/httpd -k start
nobody    86020  0.1  0.8 277604 19548 ?        S    03:33   0:00  \_ /usr/sbin/httpd -k start
nobody    86408  0.1  0.7 277520 19012 ?        S    03:34   0:00  \_ /usr/sbin/httpd -k start
nobody    87083  0.1  0.7 277520 18708 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
nobody    87217  0.1  0.7 277736 18604 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
nobody    87413  0.0  0.7 277240 17728 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
nobody    87429  0.1  0.7 277552 18244 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47566  0.0  0.0   3148     8 ?        Ss   Nov22   0:00 [kworker]
oysipao+  47579  0.0  0.0   3152    64 ?        S    Nov22   0:01  \_ [kworker]
root      44973  0.0  0.4 182480 10160 ?        Ss   00:00   0:11 lfd - sleeping
root      63462  0.0  0.0 123364   656 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 59576  Threads: 3  Questions: 5404869  Slow queries: 0  Opens: 12007  Flush tables: 1  Open tables: 2000  Queries per second avg: 90.722
*************************** 1. row ***************************
     Id: 82487
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 82491
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 82493
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 185.191.171.5 TIME_WAIT
      1 ::1 TIME_WAIT
      1 213.180.203.225 TIME_WAIT
      1 23.95.13.105 TIME_WAIT
      1 66.249.70.38 TIME_WAIT
      1 74.208.46.181 TIME_WAIT
      1 74.7.243.45 TIME_WAIT
      1 74.7.244.23 TIME_WAIT
      1 74.7.244.61 TIME_WAIT
      1 8.217.183.237 TIME_WAIT
      1 8.217.211.174 TIME_WAIT
      1 85.208.96.198 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 165.22.215.15 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 23-Nov-2025 03:36:02 WAT
   Restart Time: Saturday, 22-Nov-2025 11:03:10 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 16 hours 32 minutes 51 seconds
   Server load: 0.36 0.43 0.48
   Total accesses: 284778 - Total Traffic: 6.8 GB - Total Duration: 149216754
   CPU Usage: u7.01 s6.4 cu3372.86 cs2628.95 - 10.1% CPU load
   4.78 requests/sec - 118.8 kB/second - 24.9 kB/request - 523.976 ms/request
   11 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

K_KK__KKWWK._K.K._.._.._W.......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS    Req    Dur   Conn  Child  Slot      Client      Protocol            VHost                                        Request
   0-0  87413 1/4/15160   K 0.00 0     0     7671652 5.4   0.10  371.09 58.97.220.33    http/1.1 covid19.oyostate.gov.ng:443 GET /file/rk2.php HTTP/1.1
   1-0  84791 0/90/14856  _ 1.54 0     0     7886634 0.0   2.14  364.78 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   2-0  85135 1/87/14613  K 1.39 4     28    7754936 5.5   2.02  351.16 66.249.70.7     http/1.1 test.cloudware.ng:443       GET /?193880310?goodscode=0193626970 HTTP/1.1
   3-0  86408 4/39/14113  K 0.71 0     354   7244748 122.4 0.66  348.74 192.178.4.102   http/1.1 team.cloudware.ng:443       GET /?l=2965928055 HTTP/1.1
   4-0  87429 0/3/14403   _ 0.03 0     280   7267386 0.0   0.06  350.84 192.178.4.96    http/1.1 team.cloudware.ng:443       GET /?l=2470791949 HTTP/1.1
   5-0  84815 0/98/14774  _ 1.21 0     0     7482271 0.0   1.71  381.31 74.7.244.61     http/1.1 covid19.oyostate.gov.ng:443 GET /robots.txt HTTP/1.1
   6-0  80919 3/194/13668 K 3.70 3     298   6760196 97.4  5.45  343.14 192.178.4.103   http/1.1 team.cloudware.ng:443       GET /?l=3826598204 HTTP/1.1
   7-0  87083 2/15/14134  K 0.22 3     296   7134547 65.7  0.26  344.20 192.178.4.98    http/1.1 team.cloudware.ng:443       GET /?l=2257192417 HTTP/1.1
   8-0  79473 0/250/13576 W 4.17 0     0     6754104 0.0   6.94  325.65 192.178.4.100   http/1.1 team.cloudware.ng:80        GET /vendor/phpdocumentor/ HTTP/1.1
   9-0  79474 0/232/12554 W 4.03 0     0     6502776 0.0   5.20  311.62 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   10-0 81033 4/204/12507 K 3.40 1     397   6419259 123.5 4.73  298.44 192.178.4.97    http/1.1 team.cloudware.ng:443       GET /?l=1033015140 HTTP/1.1
   11-0 -     0/0/12605   . 0.00 15    0     6463585 0.0   0.00  313.04 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   12-0 85973 0/42/12498  _ 0.89 0     1     6444080 0.0   2.00  321.60 213.180.203.225 http/1.1 software.cloudware.ng:443   GET /robots.txt HTTP/1.1
   13-0 87217 3/11/12285  K 0.10 0     363   6212422 93.1  0.24  293.30 192.178.4.101   http/1.1 team.cloudware.ng:443       GET /?l=1407644309 HTTP/1.1
   14-0 -     0/0/11085   . 0.00 109   0     5526676 0.0   0.00  263.11 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   15-0 85974 1/46/9305   K 1.02 4     406   4592547 30.3  1.16  229.00 66.249.70.193   http/1.1 schoolplus.cloudware.ng:80  GET /?p=3080271729 HTTP/1.1
   16-0 -     0/0/9374    . 0.00 21    0     4660647 0.0   0.00  222.82 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   17-0 86020 0/74/8788   _ 0.59 0     0     4418180 0.0   0.43  217.95 58.97.220.33    http/1.1 oysipa.oyostate.gov.ng:80   GET /wp-includes/php-compat/mariju HTTP/1.1
   18-0 -     0/0/7774    . 0.00 128   0     4042253 0.0   0.00  183.77 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   19-0 -     0/0/8216    . 0.00 127   0     4002704 0.0   0.00  202.60 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   20-0 76134 0/313/6185  _ 4.64 0     7     3335135 0.0   7.57  143.28 58.97.220.33    http/1.1 covid-19.oyostate.gov.ng:80 GET /wp-includes/SimplePie/library/SimplePie/Net/click.php HTTP
   21-0 -     0/0/4896    . 0.00 850   0     2817295 0.0   0.00  123.22 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   22-0 -     0/0/3483    . 0.00 79    0     2016113 0.0   0.00  91.33  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   23-0 76827 0/300/3154  _ 4.74 0     265   1675518 0.0   6.24  65.21  192.178.4.105   http/1.1 team.cloudware.ng:443       GET /?l=2594641339 HTTP/1.1
   24-0 77789 0/318/1963  W 4.64 0     381   1428342 0.0   8.34  48.18  58.97.220.33    http/1.1 health.oyostate.gov.ng:80   GET /gaza.php HTTP/1.1
   25-0 -     0/0/2570    . 0.00 6510  0     1163271 0.0   0.00  57.91  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   26-0 -     0/0/1903    . 0.00 6024  0     1185213 0.0   0.00  47.42  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   27-0 -     0/0/1301    . 0.00 6473  0     843370  0.0   0.00  38.82  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   28-0 -     0/0/1528    . 0.00 6466  0     741140  0.0   0.00  34.17  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   29-0 -     0/0/1651    . 0.00 6007  0     952853  0.0   0.00  34.23  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   30-0 -     0/0/1294    . 0.00 7775  0     796559  0.0   0.00  30.37  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   31-0 -     0/0/535     . 0.00 7768  0     418251  0.0   0.00  9.62   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   32-0 -     0/0/521     . 0.00 7781  0     501649  0.0   0.00  10.47  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   33-0 -     0/0/226     . 0.00 7735  0     242996  0.0   0.00  4.32   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   34-0 -     0/0/723     . 0.00 7187  0     452012  0.0   0.00  11.57  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   35-0 -     0/0/645     . 0.00 7785  0     507090  0.0   0.00  14.62  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   36-0 -     0/0/89      . 0.00 7749  0     137985  0.0   0.00  0.74   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   37-0 -     0/0/222     . 0.00 7654  0     187355  0.0   0.00  4.82   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   38-0 -     0/0/661     . 0.00 7774  0     330279  0.0   0.00  12.67  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   39-0 -     0/0/582     . 0.00 7615  0     506531  0.0   0.00  13.50  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   40-0 -     0/0/227     . 0.00 7777  0     280411  0.0   0.00  4.37   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   41-0 -     0/0/416     . 0.00 7771  0     308037  0.0   0.00  9.50   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   42-0 -     0/0/144     . 0.00 7748  0     280413  0.0   0.00  1.55   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   43-0 -     0/0/290     . 0.00 6935  0     344154  0.0   0.00  5.96   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   44-0 -     0/0/292     . 0.00 7784  0     301816  0.0   0.00  6.10   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   45-0 -     0/0/198     . 0.00 7747  0     141072  0.0   0.00  1.57   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   46-0 -     0/0/60      . 0.00 16499 0     180509  0.0   0.00  0.80   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   47-0 -     0/0/67      . 0.00 16521 0     226531  0.0   0.00  1.33   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   48-0 -     0/0/203     . 0.00 16512 0     142085  0.0   0.00  4.09   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   49-0 -     0/0/284     . 0.00 16163 0     181603  0.0   0.00  4.73   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   50-0 -     0/0/82      . 0.00 16525 0     44788   0.0   0.00  1.22   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   51-0 -     0/0/8       . 0.00 16485 0     43835   0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   52-0 -     0/0/9       . 0.00 16494 0     45747   0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   53-0 -     0/0/29      . 0.00 16492 0     44492   0.0   0.00  0.32   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   54-0 -     0/0/536     . 0.00 14609 0     268842  0.0   0.00  11.18  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   55-0 -     0/0/4       . 0.00 16529 0     23627   0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   56-0 -     0/0/9       . 0.00 16488 0     47344   0.0   0.00  0.17   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   57-0 -     0/0/7       . 0.00 16490 0     44159   0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   58-0 -     0/0/43      . 0.00 16531 11655 23366   0.0   0.00  0.07   45.94.58.4      http/1.1 cloudware.ng:80             GET /requirements.txt HTTP/1.1
   59-0 -     0/0/141     . 0.00 15892 0     113874  0.0   0.00  3.52   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   60-0 -     0/0/132     . 0.00 16522 0     76946   0.0   0.00  2.87   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   61-0 -     0/0/6       . 0.00 16520 0     3701    0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   62-0 -     0/0/204     . 0.00 16079 0     97395   0.0   0.00  2.67   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   63-0 -     0/0/66      . 0.00 16504 0     27806   0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   64-0 -     0/0/11      . 0.00 16497 0     25454   0.0   0.00  0.16   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   65-0 -     0/0/9       . 0.00 16517 0     28822   0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   66-0 -     0/0/27      . 0.00 18043 0     28      0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   67-0 -     0/0/42      . 0.00 18048 0     46      0.0   0.00  0.05   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   68-0 -     0/0/3       . 0.00 18086 0     1240    0.0   0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   69-0 -     0/0/2       . 0.00 18085 0     703     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   70-0 -     0/0/5       . 0.00 18078 0     1790    0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   71-0 -     0/0/47      . 0.00 18026 0     737     0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   72-0 -     0/0/1       . 0.00 18097 0     0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   73-0 -     0/0/458     . 0.00 16632 0     263682  0.0   0.00  8.36   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   74-0 -     0/0/9       . 0.00 18074 0     4803    0.0   0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   75-0 -     0/0/1       . 0.00 18096 0     0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   76-0 -     0/0/23      . 0.00 18038 0     2942    0.0   0.00  0.21   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   77-0 -     0/0/200     . 0.00 17394 0     87870   0.0   0.00  4.44   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   78-0 -     0/0/63      . 0.00 17898 0     25484   0.0   0.00  1.24   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 926
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 0...39)
   index usage: 16%, cache usage: 22%
   total entries stored since starting: 197398
   total entries replaced since starting: 0
   total entries expired since starting: 196399
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 545 miss
   total removes since starting: 73 hit, 189 miss
Youez - 2016 - github.com/yon3zu
LinuXploit