403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-23.03.42.txt
 ## swap threshold exceeded
## server overview
2025-11-23.03.42 load[0] mem[62/70] mysql[1/27] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1434         123          83         805         678
Swap:          1999        1607         392
 03:42:02 up 16:39,  0 users,  load average: 0.67, 0.48, 0.49
## system overview
top - 03:42:02 up 16:39,  0 users,  load average: 0.67, 0.48, 0.49
Tasks: 207 total,   3 running, 203 sleeping,   0 stopped,   1 zombie
%Cpu(s): 51.4 us, 28.6 sy,  0.0 ni, 20.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   131780 free,  1463608 used,   824912 buff/cache
KiB Swap:  2047996 total,   401964 free,  1646032 used.   698620 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1916 mysql     20   0 1482504 299652   3752 S  58.8 12.4  13:56.19 /usr/sbin+
 91737 pactpay   20   0  480124  17312  11576 S  11.8  0.7   0:00.02 /opt/cpan+
 91743 nigeria   20   0  404052  16144  10384 R  11.8  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44508   3312   1472 S   5.9  0.1   1:20.95 /usr/lib/+
   501 root      20   0   24704   1172    808 S   5.9  0.0   0:13.70 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:03.45 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:02.32 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:59.39 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.15 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.16 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:02.30 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:09.32 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:35.67 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.07 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   150 root      20   0       0      0      0 S   0.0  0.0   0:01.34 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.75 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:04.37 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:03.19 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   39500   5304   5064 S   0.0  0.2   0:34.24 /usr/lib/+
   384 root      20   0   45352      8      4 S   0.0  0.0   0:00.39 /usr/lib/+
   412 root      16  -4   55532    444    324 S   0.0  0.0   0:05.56 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   499 root      20   0   21540    348    260 S   0.0  0.0   0:01.36 /usr/sbin+
   502 dbus      20   0   58720   1356    612 S   0.0  0.1   0:31.42 /usr/bin/+
   504 rpc       20   0   69256     44      0 S   0.0  0.0   0:00.05 /sbin/rpc+
   514 root      20   0  224148   4488   1208 S   0.0  0.2   0:00.64 queueproc+
   515 polkitd   20   0  610540    832    456 S   0.0  0.0   0:07.97 /usr/lib/+
   521 root      20   0  152780     72     28 S   0.0  0.0   0:00.03 /usr/sbin+
   523 root      20   0   52852    276    180 S   0.0  0.0   0:00.01 /usr/sbin+
   524 nscd      20   0 1336536   1840    644 S   0.0  0.1   0:41.90 /usr/sbin+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0   24208     12      0 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124508    844    416 S   0.0  0.0   0:01.66 /usr/sbin+
   591 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   617 mailnull  20   0   88984  12564   5000 S   0.0  0.5   0:01.28 /usr/sbin+
   631 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:03.42 [loop0]
   707 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [jbd2/loo+
   708 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 memcach+  20   0  342400     28     28 S   0.0  0.0   0:01.29 /usr/bin/+
   912 root      20   0 1277312   5772      4 S   0.0  0.2   0:24.77 /usr/bin/+
   913 systuser  20   0  111864     76      0 S   0.0  0.0   0:00.02 /usr/loca+
   914 root      20   0  572372    640    172 S   0.0  0.0   0:05.12 /usr/bin/+
   915 root      20   0   51508    456    292 S   0.0  0.0   0:00.88 /usr/sbin+
   916 telegraf  20   0 5654304  36536   5532 S   0.0  1.5   0:31.91 /usr/loca+
   917 systuser  20   0   12756     52      0 S   0.0  0.0   0:00.02 /usr/loca+
   925 systuser  20   0  114016  12864   2428 S   0.0  0.5   0:13.95 /usr/loca+
   926 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   927 root      20   0  111304    356    256 S   0.0  0.0   0:08.33 /usr/sbin+
   928 root      20   0 1349832   7800      0 S   0.0  0.3   0:25.76 /usr/bin/+
   930 root      20   0  445028    592    480 S   0.0  0.0   0:02.35 sw-engine+
   931 root      20   0  153404    220    136 S   0.0  0.0   0:01.30 pure-ftpd+
   932 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.02 /usr/loca+
   934 root      20   0  439788    400    308 S   0.0  0.0   0:01.58 php-fpm: +
   938 root      20   0  388892    572    468 S   0.0  0.0   0:01.75 php-fpm: +
   939 root      20   0 1828368 266004    588 S   0.0 11.0   0:30.45 /usr/loca+
   940 root      20   0  331088   6008   5248 S   0.0  0.2   0:17.13 /usr/sbin+
   949 named     20   0 1054796  37236   2036 S   0.0  1.5   0:27.28 /usr/sbin+
   958 root      20   0  400740   2480    632 S   0.0  0.1   0:08.02 php-fpm: +
   962 root      20   0  261692   6360   1600 S   0.0  0.3   0:09.42 cpsrvd (S+
   969 cpanelc+  20   0   10564   3448   2284 S   0.0  0.1   0:47.73 /usr/loca+
   979 root      20   0  396248    536    444 S   0.0  0.0   0:01.50 php-fpm: +
   985 root      20   0  389508    436    336 S   0.0  0.0   0:01.56 php-fpm: +
  1083 dovenull  20   0   47116   1788   1164 S   0.0  0.1   0:01.85 dovecot/p+
  1084 dovenull  20   0   48232   2220   1244 S   0.0  0.1   0:00.65 dovecot/i+
  1085 dovecot   20   0   10320    360    244 S   0.0  0.0   0:00.44 dovecot/a+
  1086 root      20   0   10452    480    292 S   0.0  0.0   0:01.14 dovecot/l+
  1087 dovenull  20   0   47264   1808   1180 S   0.0  0.1   0:02.13 dovecot/p+
  1088 dovenull  20   0   48324   2456   1492 S   0.0  0.1   0:00.61 dovecot/i+
  1093 root      20   0   24528   1884    492 S   0.0  0.1   0:00.40 dovecot/c+
  1101 dovecot   20   0   13568    556    336 S   0.0  0.0   0:00.16 dovecot/s+
  1142 root      20   0  247932  18672   1188 S   0.0  0.8   0:09.94 /usr/loca+
  1161 dovecot   20   0   41320   1524   1016 S   0.0  0.1   0:02.87 dovecot/a+
  1175 systuser  20   0  157708   2936    888 S   0.0  0.1   0:00.26 SonarPush+
  1177 wp-tool+  20   0  387556   3320   1388 S   0.0  0.1   0:00.51 /usr/bin/+
  1178 wp-tool+  20   0  412396   9420   1364 S   0.0  0.4   0:18.86 /usr/bin/+
  1260 root      20   0  262224  22732   4872 S   0.0  0.9   0:06.04 cpdavd - +
  1263 root      20   0  167452   3140   1772 R   0.0  0.1   0:00.95 dnsadmin +
  1264 root      20   0  209784  10452   2148 S   0.0  0.4   0:07.04 tailwatchd
  1800 root      20   0  299272    492    332 S   0.0  0.0   0:01.59 php-fpm: +
  1834 root      38  18  130416   1364    684 S   0.0  0.1   0:00.15 cpanellog+
  2048 root      20   0  267052  31992   6556 S   0.0  1.3   0:04.41 /usr/sbin+
  5634 root      20   0  264952  98996   3444 S   0.0  4.1   0:03.61 spamd chi+
 44973 root      20   0  182480  10320   1156 S   0.0  0.4   0:12.01 lfd - sle+
 47566 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47579 oysipao+  20   0    3152     64     24 S   0.0  0.0   0:01.08 [kworker]
 54061 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 54854 root      20   0  247932  21484   1432 S   0.0  0.9   0:00.00 spamd chi+
 63462 root      20   0  123576    656    428 S   0.0  0.0   0:00.00 /usr/sbin+
 67099 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 67769 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 68530 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 71590 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 78337 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 81298 worencom  20   0   38488   2544   1560 S   0.0  0.1   0:00.04 dovecot/i+
 81621 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 82315 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 85558 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 88712 root      30  10  113284   1488   1276 S   0.0  0.1   0:00.00 /bin/bash+
 88718 root      30  10  132964   4544   1012 S   0.0  0.2   0:00.00 ConfigSer+
 88729 root      30  10  108056    360    284 S   0.0  0.0   0:00.00 sleep 183+
 89124 root      20   0   12784   1304   1124 S   0.0  0.1   0:00.03 /usr/loca+
 89125 root      20   0   12732   1308   1128 S   0.0  0.1   0:00.02 /usr/loca+
 89126 root      20   0   12808   1308   1128 S   0.0  0.1   0:00.02 /usr/loca+
 89136 root      20   0   53340  11852   2532 S   0.0  0.5   0:00.05 /usr/loca+
 89137 nobody    20   0  277816  35692   4084 S   0.0  1.5   0:00.32 /usr/sbin+
 89138 nobody    20   0  277612  35388   3972 S   0.0  1.5   0:00.32 /usr/sbin+
 89139 nobody    20   0  277804  35720   4140 S   0.0  1.5   0:00.30 /usr/sbin+
 89217 nobody    20   0  277544  35412   4064 S   0.0  1.5   0:00.45 /usr/sbin+
 89243 root      30  10  113284   1496   1256 S   0.0  0.1   0:00.00 bash /etc+
 89244 root      30  10  113644    976    832 S   0.0  0.0   0:00.00 awk -v pr+
 89297 root      30  10  108056    360    284 S   0.0  0.0   0:00.00 sleep 235
 89306 nobody    20   0  277528  35328   4000 S   0.0  1.5   0:00.33 /usr/sbin+
 89311 nobody    20   0  277804  35468   3884 S   0.0  1.5   0:00.30 /usr/sbin+
 89319 nobody    20   0  277576  35300   3920 S   0.0  1.5   0:00.28 /usr/sbin+
 89332 nobody    20   0  277740  35396   3852 S   0.0  1.5   0:00.21 /usr/sbin+
 89345 nobody    20   0  277584  35304   3916 S   0.0  1.5   0:00.36 /usr/sbin+
 89396 nobody    20   0  277748  35464   3940 S   0.0  1.5   0:00.28 /usr/sbin+
 89401 nobody    20   0  277548  35280   3936 S   0.0  1.5   0:00.32 /usr/sbin+
 89414 nobody    20   0  277804  35452   3872 S   0.0  1.5   0:00.29 /usr/sbin+
 89415 nobody    20   0  277536  35216   3884 S   0.0  1.5   0:00.32 /usr/sbin+
 89542 nobody    20   0  277800  35636   4064 S   0.0  1.5   0:00.27 /usr/sbin+
 89799 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 90450 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 90653 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 90943 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 91034 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 91040 nobody    20   0  277516  35036   3720 S   0.0  1.4   0:00.10 /usr/sbin+
 91191 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 91315 nobody    20   0  277808  34916   3344 S   0.0  1.4   0:00.07 /usr/sbin+
 91425 nobody    20   0  277940  34856   3312 S   0.0  1.4   0:00.03 /usr/sbin+
 91467 nigeria   20   0  400460   5044   2404 S   0.0  0.2   0:00.01 php-fpm: +
 91498 healtho+  20   0  482476  90124   4112 S   0.0  3.7   0:03.13 php-fpm: +
 91502 oyotech+  20   0  389236   6340   2948 S   0.0  0.3   0:00.05 php-fpm: +
 91521 nobody    20   0  277940  35268   3736 S   0.0  1.5   0:00.04 /usr/sbin+
 91617 wp-tool+  20   0  445028    324    196 S   0.0  0.0   0:00.00 sw-engine+
 91648 oyotech+  20   0  389236   6160   2852 S   0.0  0.3   0:00.00 php-fpm: +
 91651 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 91667 root      20   0  183076   2416   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 91668 root      20   0  183076   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 91669 root      20   0  183076   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 91670 root      20   0  183076   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 91671 root      20   0  183076   2420   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 91672 root      20   0  183076   2416   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 91673 root      20   0  183076   2416   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 91675 root      20   0  183076   2416   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 91676 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 91677 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 91678 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 91679 root      20   0  183076   2416   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 91681 root      20   0  183076   2412   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 91683 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 91684 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 91685 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 91704 cloudw    20   0  353712  15968  10484 S   0.0  0.7   0:00.01 /opt/cpan+
 91706 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 91707 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 91708 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 91709 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 91710 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 91711 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 91712 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 91713 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 91714 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 91716 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 91717 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 91718 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 91719 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 91728 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 91733 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 91734 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 91738 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov22   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov22   0:03  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov22   0:59  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov22   0:09  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov22   0:35  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [deferwq]
root        150  0.0  0.0      0     0 ?        S    Nov22   0:01  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_1]
root        252  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov22   0:03  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   Nov22   0:04  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov22   0:03  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [xprtiod]
root        631  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov22   0:03  \_ [loop0]
root        707  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [jbd2/loop0-8]
root        708  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root      54061  0.0  0.0      0     0 ?        S    02:48   0:00  \_ [kworker/u200:0]
root      67099  0.0  0.0      0     0 ?        S    03:06   0:00  \_ [kworker/0:3]
root      67769  0.0  0.0      0     0 ?        S    03:07   0:00  \_ [kworker/1:3]
root      68530  0.0  0.0      0     0 ?        S    03:08   0:00  \_ [kworker/u200:1]
root      71590  0.0  0.0      0     0 ?        S    03:12   0:00  \_ [kworker/1:1]
root      78337  0.0  0.0      0     0 ?        S    03:22   0:00  \_ [kworker/0:2]
root      81621  0.0  0.0      0     0 ?        S    03:27   0:00  \_ [kworker/1:0]
root      82315  0.0  0.0      0     0 ?        S    03:28   0:00  \_ [kworker/0:0]
root      85558  0.0  0.0      0     0 ?        S    03:33   0:00  \_ [kworker/0:1]
root      89799  0.0  0.0      0     0 ?        S    03:39   0:00  \_ [kworker/0:4]
root      90450  0.0  0.0      0     0 ?        S    03:40   0:00  \_ [kworker/1:2]
root      90943  0.0  0.0      0     0 ?        S    03:40   0:00  \_ [kworker/u200:2]
root      91191  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44508  3312 ?        Ss   Nov22   1:20 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.2  39500  5304 ?        Ss   Nov22   0:34 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352     8 ?        Ss   Nov22   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   444 ?        S<sl Nov22   0:05 /sbin/auditd
root        499  0.0  0.0  21540   348 ?        Ss   Nov22   0:01 /usr/sbin/irqbalance --foreground
root        501  0.0  0.0  24704  1172 ?        Ss   Nov22   0:13 /usr/lib/systemd/systemd-logind
dbus        502  0.0  0.0  58720  1356 ?        Ss   Nov22   0:31 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         504  0.0  0.0  69256    44 ?        Ss   Nov22   0:00 /sbin/rpcbind -w
root        514  0.0  0.1 224148  4488 ?        Ss   Nov22   0:00 queueprocd - waiting up to 60s to process a task
polkitd     515  0.0  0.0 610540   832 ?        Ssl  Nov22   0:07 /usr/lib/polkit-1/polkitd --no-debug
root        521  0.0  0.0 152780    72 ?        Ss   Nov22   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        523  0.0  0.0  52852   276 ?        Ss   Nov22   0:00 /usr/sbin/smartd -n -q never
nscd        524  0.0  0.0 1336536 1840 ?        Ssl  Nov22   0:41 /usr/sbin/nscd
root        544  0.0  0.0 195208     0 ?        Ssl  Nov22   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388     4 ?        Ss   Nov22   0:00 /usr/sbin/acpid
root        569  0.0  0.0  24208    12 ?        Ss   Nov22   0:00 /usr/sbin/atd -f
root        571  0.0  0.0 124508   844 ?        Ss   Nov22   0:01 /usr/sbin/crond -n
root      91667  0.0  0.0 183076  2416 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      91683  0.0  0.0 113284  1208 ?        Ss   03:42   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      91684  0.0  0.0 108052   356 ?        S    03:42   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      91685  0.0  0.0 113288  1520 ?        S    03:42   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      91749  0.0  0.0 153840  2100 ?        R    03:42   0:00  |               \_ ps auxf
root      91668  0.0  0.0 183076  2420 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      91716  0.0  0.0  20164   808 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      91669  0.0  0.0 183076  2420 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      91718  0.0  0.0  20164   804 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      91670  0.0  0.0 183076  2420 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      91712  0.0  0.0  20164   808 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      91671  0.0  0.0 183076  2420 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      91710  0.0  0.0  20164   804 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      91672  0.0  0.0 183076  2416 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      91709  0.0  0.0  20164   804 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      91673  0.0  0.0 183076  2416 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      91714  0.0  0.0  20164   808 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      91675  0.0  0.0 183076  2416 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      91707  0.0  0.0  20164   808 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      91676  0.0  0.0 183076  2412 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      91713  0.0  0.0  20164   808 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      91677  0.0  0.0 183076  2412 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      91719  0.0  0.0  20164   808 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      91678  0.0  0.0 183076  2412 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      91717  0.0  0.0  20164   804 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      91679  0.0  0.0 183076  2416 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      91708  0.0  0.0  20164   968 ?        Ss   03:42   0:00  |   \_ jailshell (pactpay) [91734] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   91734  0.0  0.0  20164   264 ?        S    03:42   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   91737  0.0  0.7 480124 17312 ?        S    03:42   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      91681  0.0  0.0 183076  2412 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      91711  0.0  0.0  20164   972 ?        Ss   03:42   0:00      \_ jailshell (nigeria) [91738] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   91738  0.0  0.0  20164   264 ?        S    03:42   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   91743  0.0  0.6 404052 16144 ?        S    03:42   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        591  0.0  0.0 108296     4 tty1     Ss+  Nov22   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov22   0:00 /bin/bash
mailnull    617  0.0  0.5  88984 12564 ?        Ss   Nov22   0:01 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
memcach+    911  0.0  0.0 342400    28 ?        Ssl  Nov22   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        912  0.0  0.2 1277312 5772 ?        Ssl  Nov22   0:24 /usr/bin/checkstatus
systuser    913  0.0  0.0 111864    76 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        914  0.0  0.0 572372   640 ?        Ssl  Nov22   0:05 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        915  0.0  0.0  51508   456 ?        Ss   Nov22   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1083  0.0  0.0  47116  1788 ?        S    Nov22   0:01  \_ dovecot/pop3-login
dovenull   1084  0.0  0.0  48232  2220 ?        S    Nov22   0:00  \_ dovecot/imap-login
dovecot    1085  0.0  0.0  10320   360 ?        S    Nov22   0:00  \_ dovecot/anvil
root       1086  0.0  0.0  10452   480 ?        S    Nov22   0:01  \_ dovecot/log
dovenull   1087  0.0  0.0  47264  1808 ?        S    Nov22   0:02  \_ dovecot/pop3-login
dovenull   1088  0.0  0.1  48324  2456 ?        S    Nov22   0:00  \_ dovecot/imap-login
root       1093  0.0  0.0  24528  1884 ?        S    Nov22   0:00  \_ dovecot/config
dovecot    1101  0.0  0.0  13568   556 ?        S    Nov22   0:00  \_ dovecot/stats
dovecot    1161  0.0  0.0  41320  1524 ?        S    Nov22   0:02  \_ dovecot/auth
worencom  81298  0.0  0.1  38488  2544 ?        S    00:56   0:00  \_ dovecot/imap
root      90653  0.0  0.1  60820  4512 ?        S    03:40   0:00  \_ dovecot/lmtp
root      91034  0.0  0.1  41052  2728 ?        S    03:40   0:00  \_ dovecot/auth -w
telegraf    916  0.0  1.5 5654304 36536 ?       SLsl Nov22   0:31 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    917  0.0  0.0  12756    52 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    925  0.0  0.5 114016 12864 ?        Ssl  Nov22   0:13 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    926  0.0  0.0 112524    68 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        927  0.0  0.0 111304   356 ?        Ss   Nov22   0:08 /usr/sbin/sshd -D
root      91706  0.0  0.1 111304  4268 ?        Ss   03:42   0:00  \_ sshd: [accepted]
sshd      91728  0.0  0.1 115644  2632 ?        S    03:42   0:00      \_ sshd: [net]
root        928  0.0  0.3 1349832 7800 ?        Ssl  Nov22   0:25 /usr/bin/cspdaemon
root        930  0.0  0.0 445028   592 ?        Ss   Nov22   0:02 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  91617  0.0  0.0 445028   324 ?        S    03:41   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        931  0.0  0.0 153404   220 ?        Ss   Nov22   0:01 pure-ftpd (SERVER)
systuser    932  0.0  0.0  10132    36 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.0 439788   400 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        938  0.0  0.0 388892   572 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
oyotech+  91502  0.2  0.2 389236  6340 ?        S    03:41   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
oyotech+  91648  0.0  0.2 389236  6160 ?        S    03:41   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
root        939  0.0 10.9 1828368 266004 ?      Ssl  Nov22   0:30 /usr/local/cpanel/3rdparty/bin/clamd -F
root        940  0.0  0.2 331088  6008 ?        Ssl  Nov22   0:17 /usr/sbin/rsyslogd -n
named       949  0.0  1.5 1054796 37236 ?       Ssl  Nov22   0:27 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        958  0.0  0.1 400740  2480 ?        Ss   Nov22   0:08 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   91467  0.0  0.2 400460  5044 ?        S    03:41   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  91498 14.2  3.7 482476 90124 ?        S    03:41   0:03  \_ php-fpm: pool health_oyostate_gov_ng
root        962  0.0  0.2 261692  6360 ?        Ss   Nov22   0:09 cpsrvd (SSL) - waiting for connections                   
root      91651  0.0  0.0      0     0 ?        Z    03:41   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    969  0.0  0.1  10564  3448 ?        Rs   Nov22   0:47 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        979  0.0  0.0 396248   536 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        985  0.0  0.0 389508   436 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1142  0.0  0.7 247932 18672 ?        Ss   Nov22   0:09 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5634  0.0  4.0 264952 98996 ?        S    Nov22   0:03  \_ spamd child
root      54854  0.0  0.8 247932 21484 ?        S    02:49   0:00  \_ spamd child
systuser   1175  0.0  0.1 157708  2936 ?        S    Nov22   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.1 387556  3320 ?        Ss   Nov22   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  0.3 412396  9420 ?        Ss   Nov22   0:18 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1260  0.0  0.9 262224 22732 ?        Ss   Nov22   0:06 cpdavd - accepting connections on: 2091, 2077, 2078
root       1263  0.0  0.1 167452  3140 ?        Ss   Nov22   0:00 dnsadmin - dormant mode
root       1264  0.0  0.4 209784 10452 ?        Ss   Nov22   0:07 tailwatchd
root       1800  0.0  0.0 299272   492 ?        Ss   Nov22   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1834  0.0  0.0 130416  1364 ?        SN   Nov22   0:00 cpanellogd - sleeping for logs
mysql      1916  1.3 12.3 1482504 299652 ?      Sl   Nov22  13:56 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2048  0.0  1.3 267052 31992 ?        Ss   Nov22   0:04 /usr/sbin/httpd -k start
root      89124  0.0  0.0  12784  1304 ?        S    03:38   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      89125  0.0  0.0  12732  1308 ?        S    03:38   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      89126  0.0  0.0  12808  1308 ?        S    03:38   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      89136  0.0  0.4  53340 11852 ?        S    03:38   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    89137  0.1  1.4 277816 35692 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
nobody    89138  0.1  1.4 277612 35388 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
nobody    89139  0.1  1.4 277804 35720 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
nobody    89217  0.1  1.4 277544 35412 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
nobody    89306  0.1  1.4 277528 35328 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
nobody    89311  0.1  1.4 277804 35468 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
nobody    89319  0.1  1.4 277576 35300 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
cloudw    91704  0.0  0.6 353712 15968 ?        S    03:42   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    89332  0.0  1.4 277740 35396 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
nobody    89345  0.1  1.4 277584 35304 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
nobody    89396  0.1  1.4 277748 35464 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
nobody    89401  0.1  1.4 277548 35280 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
nobody    89414  0.1  1.4 277804 35452 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
nobody    89415  0.1  1.4 277536 35216 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
nobody    89542  0.1  1.4 277800 35636 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
nobody    91040  0.1  1.4 277516 35036 ?        S    03:40   0:00  \_ /usr/sbin/httpd -k start
nobody    91315  0.1  1.4 277808 34916 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    91425  0.0  1.4 277940 34856 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    91521  0.2  1.4 277940 35268 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47566  0.0  0.0   3148     8 ?        Ss   Nov22   0:00 [kworker]
oysipao+  47579  0.0  0.0   3152    64 ?        S    Nov22   0:01  \_ [kworker]
root      44973  0.0  0.4 182480 10320 ?        Ss   00:00   0:12 lfd - sleeping
root      63462  0.0  0.0 123576   656 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
root      88712  0.0  0.0 113284  1488 ?        SN   03:38   0:00  \_ /bin/bash /bin/run-parts /etc/cron.daily
root      89243  0.0  0.0 113284  1496 ?        SN   03:38   0:00      \_ bash /etc/cron.daily/maldet
root      89297  0.0  0.0 108056   360 ?        SN   03:38   0:00      |   \_ sleep 235
root      89244  0.0  0.0 113644   976 ?        SN   03:38   0:00      \_ awk -v progname=/etc/cron.daily/maldet progname { ????   print progname ":\n" ????   progname=""; ???       } ???       { print; }
root      88718  0.0  0.1 132964  4544 ?        SN   03:38   0:00 ConfigServer Version Check
root      88729  0.0  0.0 108056   360 ?        SN   03:38   0:00  \_ sleep 18395
## mysql stats
Uptime: 59936  Threads: 3  Questions: 5448197  Slow queries: 0  Opens: 12983  Flush tables: 1  Open tables: 2000  Queries per second avg: 90.900
*************************** 1. row ***************************
     Id: 83103
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 83105
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 83107
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 192.178.4.104 TIME_WAIT
      1 ::1 TIME_WAIT
      1 43.157.170.13 TIME_WAIT
      1 54.39.203.126 TIME_WAIT
      1 74.7.244.61 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 192.178.4.102 TIME_WAIT
      2 192.178.4.99 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 23-Nov-2025 03:42:02 WAT
   Restart Time: Saturday, 22-Nov-2025 11:03:10 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 16 hours 38 minutes 51 seconds
   Server load: 0.67 0.48 0.49
   Total accesses: 286949 - Total Traffic: 6.8 GB - Total Duration: 150143288
   CPU Usage: u3.84 s5.17 cu3404.59 cs2652.65 - 10.1% CPU load
   4.79 requests/sec - 119.0 kB/second - 24.9 kB/request - 523.24 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

W_KK_KK_RK._K_KK....K..KR.......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS    Req    Dur   Conn  Child  Slot      Client     Protocol            VHost                                   Request
   0-1  89306 0/83/15284 W 1.15 0     0     7726701 0.0   1.70  373.97 ::1            http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   1-1  91040 0/26/14962 _ 0.37 0     0     7929884 0.0   0.69  367.78 58.97.220.33   http/1.1 oysipa.oyostate.gov.ng:80   GET /wp-includes/certificates/plugins HTTP/1.1
   2-1  89217 3/97/14752 K 1.75 1     293   7816168 95.6  2.07  354.40 192.178.4.98   http/1.1 team.cloudware.ng:443       GET /?l=214927400 HTTP/1.1
   3-1  91315 5/16/14178 K 0.27 4     398   7279427 157.5 0.41  350.65 192.178.4.97   http/1.1 team.cloudware.ng:443       GET /?l=2486488455 HTTP/1.1
   4-1  89311 0/79/14521 _ 1.11 0     347   7317438 0.0   1.96  354.51 192.178.4.100  http/1.1 team.cloudware.ng:443       GET /?l=662593773 HTTP/1.1
   5-1  89319 1/79/14898 K 0.99 0     315   7527929 34.3  1.57  384.05 192.178.4.101  http/1.1 team.cloudware.ng:443       GET /?l=4212927399 HTTP/1.1
   6-1  89332 1/58/13745 K 0.70 0     6     6787515 0.9   1.02  344.48 58.97.220.33   http/1.1 covid-19.oyostate.gov.ng:80 GET /wp-includes/block-supports/settings.php HTTP/1.1
   7-1  89345 0/85/14240 _ 1.42 0     0     7172840 0.0   1.73  346.34 ::1            http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   8-1  91425 0/11/13622 R 0.13 1     0     6771528 0.0   0.24  326.60 18.213.240.226 http/1.1 nigeriadecide.org:443
   9-1  91521 4/7/12605  K 0.13 1     271   6515809 129.0 0.18  312.36 192.178.4.102  http/1.1 team.cloudware.ng:443       GET /?l=3244237227 HTTP/1.1
   10-1 -     0/0/12569  . 0.00 195   0     6443534 0.0   0.00  299.73 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   11-1 89396 0/73/12713 _ 1.00 0     0     6507819 0.0   1.46  315.15 74.7.244.61    http/1.1 covid19.oyostate.gov.ng:443 GET /robots.txt HTTP/1.1
   12-1 89401 4/80/12619 K 1.19 3     344   6501932 125.6 1.98  324.87 192.178.4.103  http/1.1 team.cloudware.ng:443       GET /?l=4055579754 HTTP/1.1
   13-1 89414 0/68/12390 _ 1.06 0     1179  6263025 0.0   1.72  296.53 58.97.220.33   http/1.1 health.oyostate.gov.ng:80   GET /wp-content/plugins/akismet/Sym.php HTTP/1.1
   14-1 89415 1/76/11173 K 1.17 0     259   5572325 33.5  2.08  265.60 192.178.4.104  http/1.1 team.cloudware.ng:443       GET /?l=1319586360 HTTP/1.1
   15-1 89542 3/71/9403  K 0.92 0     314   4635933 97.8  1.50  231.75 192.178.4.105  http/1.1 team.cloudware.ng:443       GET /?l=2079696473 HTTP/1.1
   16-1 -     0/0/9457   . 0.00 11    0     4697070 0.0   0.00  224.97 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   17-1 -     0/0/8870   . 0.00 34    0     4457430 0.0   0.00  219.98 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   18-1 -     0/0/7812   . 0.00 187   0     4057553 0.0   0.00  184.47 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   19-1 -     0/0/8260   . 0.00 89    0     4019282 0.0   0.00  204.21 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   20-1 89137 1/87/6313  K 1.16 0     1245  3386887 100.7 1.68  146.23 58.97.220.33   http/1.1 health.oyostate.gov.ng:80   GET /wp-admin/includes/wp-hoard.php HTTP/1.1
   21-1 -     0/0/4913   . 0.00 194   0     2824758 0.0   0.00  123.77 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   22-1 -     0/0/3484   . 0.00 198   0     2016114 0.0   0.00  91.33  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   23-1 89138 1/82/3276  K 1.14 0     11    1725152 0.8   1.95  68.58  58.97.220.33   http/1.1 covid-19.oyostate.gov.ng:80 GET /wp-includes/block-supports/shadow.php HTTP/1.1
   24-1 89139 0/77/2081  R 1.03 1     411   1486488 0.0   1.72  51.67  192.178.4.101  http/1.1 team.cloudware.ng:443
   25-0 -     0/0/2570   . 0.00 6871  0     1163271 0.0   0.00  57.91  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   26-0 -     0/0/1903   . 0.00 6384  0     1185213 0.0   0.00  47.42  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   27-0 -     0/0/1301   . 0.00 6834  0     843370  0.0   0.00  38.82  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   28-0 -     0/0/1528   . 0.00 6827  0     741140  0.0   0.00  34.17  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   29-0 -     0/0/1651   . 0.00 6367  0     952853  0.0   0.00  34.23  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   30-0 -     0/0/1294   . 0.00 8135  0     796559  0.0   0.00  30.37  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   31-0 -     0/0/535    . 0.00 8128  0     418251  0.0   0.00  9.62   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   32-0 -     0/0/521    . 0.00 8141  0     501649  0.0   0.00  10.47  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   33-0 -     0/0/226    . 0.00 8095  0     242996  0.0   0.00  4.32   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   34-0 -     0/0/723    . 0.00 7547  0     452012  0.0   0.00  11.57  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   35-0 -     0/0/645    . 0.00 8145  0     507090  0.0   0.00  14.62  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   36-0 -     0/0/89     . 0.00 8109  0     137985  0.0   0.00  0.74   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   37-0 -     0/0/222    . 0.00 8014  0     187355  0.0   0.00  4.82   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   38-0 -     0/0/661    . 0.00 8134  0     330279  0.0   0.00  12.67  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   39-0 -     0/0/582    . 0.00 7975  0     506531  0.0   0.00  13.50  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   40-0 -     0/0/227    . 0.00 8137  0     280411  0.0   0.00  4.37   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   41-0 -     0/0/416    . 0.00 8131  0     308037  0.0   0.00  9.50   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   42-0 -     0/0/144    . 0.00 8108  0     280413  0.0   0.00  1.55   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   43-0 -     0/0/290    . 0.00 7295  0     344154  0.0   0.00  5.96   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   44-0 -     0/0/292    . 0.00 8144  0     301816  0.0   0.00  6.10   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   45-0 -     0/0/198    . 0.00 8107  0     141072  0.0   0.00  1.57   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   46-0 -     0/0/60     . 0.00 16859 0     180509  0.0   0.00  0.80   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   47-0 -     0/0/67     . 0.00 16881 0     226531  0.0   0.00  1.33   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   48-0 -     0/0/203    . 0.00 16872 0     142085  0.0   0.00  4.09   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   49-0 -     0/0/284    . 0.00 16523 0     181603  0.0   0.00  4.73   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   50-0 -     0/0/82     . 0.00 16885 0     44788   0.0   0.00  1.22   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   51-0 -     0/0/8      . 0.00 16845 0     43835   0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   52-0 -     0/0/9      . 0.00 16854 0     45747   0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   53-0 -     0/0/29     . 0.00 16852 0     44492   0.0   0.00  0.32   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   54-0 -     0/0/536    . 0.00 14969 0     268842  0.0   0.00  11.18  ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   55-0 -     0/0/4      . 0.00 16889 0     23627   0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   56-0 -     0/0/9      . 0.00 16848 0     47344   0.0   0.00  0.17   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   57-0 -     0/0/7      . 0.00 16850 0     44159   0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   58-0 -     0/0/43     . 0.00 16891 11655 23366   0.0   0.00  0.07   45.94.58.4     http/1.1 cloudware.ng:80             GET /requirements.txt HTTP/1.1
   59-0 -     0/0/141    . 0.00 16252 0     113874  0.0   0.00  3.52   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   60-0 -     0/0/132    . 0.00 16882 0     76946   0.0   0.00  2.87   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   61-0 -     0/0/6      . 0.00 16880 0     3701    0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   62-0 -     0/0/204    . 0.00 16439 0     97395   0.0   0.00  2.67   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   63-0 -     0/0/66     . 0.00 16864 0     27806   0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   64-0 -     0/0/11     . 0.00 16857 0     25454   0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   65-0 -     0/0/9      . 0.00 16877 0     28822   0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   66-0 -     0/0/27     . 0.00 18403 0     28      0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   67-0 -     0/0/42     . 0.00 18408 0     46      0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   68-0 -     0/0/3      . 0.00 18446 0     1240    0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   69-0 -     0/0/2      . 0.00 18445 0     703     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   70-0 -     0/0/5      . 0.00 18438 0     1790    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   71-0 -     0/0/47     . 0.00 18386 0     737     0.0   0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   72-0 -     0/0/1      . 0.00 18457 0     0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   73-0 -     0/0/458    . 0.00 16992 0     263682  0.0   0.00  8.36   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   74-0 -     0/0/9      . 0.00 18434 0     4803    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   75-0 -     0/0/1      . 0.00 18456 0     0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   76-0 -     0/0/23     . 0.00 18398 0     2942    0.0   0.00  0.21   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   77-0 -     0/0/200    . 0.00 17754 0     87870   0.0   0.00  4.44   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   78-0 -     0/0/63     . 0.00 18258 0     25484   0.0   0.00  1.24   ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 782
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 73 seconds, (range: 65...93)
   index usage: 13%, cache usage: 18%
   total entries stored since starting: 782
   total entries replaced since starting: 0
   total entries expired since starting: 0
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 0 miss
   total removes since starting: 0 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit