403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.48
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2026-01-05.15.15.txt
 ## swap threshold exceeded
## server overview
2026-01-05.15.15 load[0] mem[53/34] mysql[4/26] httpd[5]
              total        used        free      shared  buff/cache   available
Mem:           2363        1135         203         152        1025         890
Swap:          4047        1532        2515
 15:15:01 up 42 days, 18:03,  0 users,  load average: 0.16, 0.28, 0.34
## system overview
top - 15:15:01 up 42 days, 18:03,  0 users,  load average: 0.16, 0.28, 0.34
Tasks: 203 total,   6 running, 196 sleeping,   0 stopped,   1 zombie
%Cpu(s): 82.9 us, 17.1 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   205400 free,  1165256 used,  1049644 buff/cache
KiB Swap:  4145144 total,  2575404 free,  1569740 used.   908908 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 19908 mysql     20   0 1481756 309552   3944 S 100.0 12.8  62:53.51 /usr/sbin+
 51092 healtho+  20   0  465252  71864   4224 R  35.3  3.0   0:05.02 php-fpm: +
 51480 nigeria   20   0  404052  16140  10384 S  17.6  0.7   0:00.08 /opt/cpan+
     1 root      20   0  192272   3532   1540 S   5.9  0.1 102:45.79 /usr/lib/+
 51566 cloudsms  20   0  404052  15880  10216 R   5.9  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:05.40 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   5:54.86 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   1:44.84 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0  61:30.98 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:10.46 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:10.44 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   1:58.08 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   8:17.53 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:01.34 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.31 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0  65:15.09 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:07.21 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   108 root      20   0       0      0      0 S   0.0  0.0   1:03.85 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   8:34.06 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   7:10.44 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   3:57.88 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40240   2872   2612 S   0.0  0.1  31:11.94 /usr/lib/+
   383 root      20   0   45352      8      4 S   0.0  0.0   0:00.45 /usr/lib/+
   412 root      16  -4   55532    448    316 S   0.0  0.0   4:32.15 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   487 root      20   0   21540    348    260 S   0.0  0.0   1:34.35 /usr/sbin+
   489 root      20   0   24896   1180    792 S   0.0  0.0  16:15.72 /usr/lib/+
   494 polkitd   20   0  610664   1116    648 S   0.0  0.0   9:04.36 /usr/lib/+
   496 root      20   0   52852    316    224 S   0.0  0.0   0:00.57 /usr/sbin+
   503 dbus      20   0   58748   1384    604 S   0.0  0.1  35:42.63 /usr/bin/+
   511 rpc       20   0   69256     76     16 S   0.0  0.0   0:03.84 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   557 root      20   0   24208     24      0 S   0.0  0.0   0:00.10 /usr/sbin+
   558 root      20   0  124508    428    296 S   0.0  0.0   2:14.22 /usr/sbin+
   576 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   577 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   694 root       0 -20       0      0      0 S   0.0  0.0   3:38.10 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:15.70 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   928 systuser  20   0   11540     52      0 S   0.0  0.0   0:02.09 /usr/loca+
   929 systuser  20   0   12756     60      0 S   0.0  0.0   0:02.05 /usr/loca+
   931 systuser  20   0  112524     56      0 S   0.0  0.0   0:02.00 /usr/loca+
   932 systuser  20   0  111608     60      0 S   0.0  0.0   0:01.92 /usr/loca+
   935 root      20   0  572372    820    288 S   0.0  0.0   5:44.87 /usr/bin/+
   937 root      20   0  111304    364    256 S   0.0  0.0   6:44.27 /usr/sbin+
   939 root      20   0 1350728   9748      8 S   0.0  0.4   2:46.80 /usr/bin/+
   952 root      20   0  261164   6668   1700 S   0.0  0.3  13:01.23 cpsrvd (S+
   953 root      20   0  331088   4296   2992 S   0.0  0.2  16:49.02 /usr/sbin+
   972 memcach+  20   0  342400      0      0 S   0.0  0.0   1:30.76 /usr/bin/+
   974 root      20   0 1277312   2480      8 S   0.0  0.1   0:39.31 /usr/bin/+
   980 systuser  20   0  114272  10684   2792 S   0.0  0.4  18:49.00 /usr/loca+
  1144 systuser  20   0  157704   2880    888 S   0.0  0.1   0:19.65 SonarPush+
  1188 named     20   0 1185868  37240   1624 S   0.0  1.5  16:55.14 /usr/sbin+
  1239 root      20   0  167452   1200    652 S   0.0  0.0   1:02.44 dnsadmin +
  1243 root      20   0  209644  21192   3376 S   0.0  0.9   7:54.53 tailwatchd
  1244 root      20   0  183900   6688   3460 S   0.0  0.3   7:51.68 cpdavd - +
 12995 root      20   0 1483120  75956    720 S   0.0  3.1   1:27.00 /usr/loca+
 15361 oysipao+  20   0    3148      4      0 S   0.0  0.0   0:00.00 [kworker]
 15368 oysipao+  20   0    3156     40      4 S   0.0  0.0   1:33.86 [kworker]
 16217 root      20   0   51508    604    424 S   0.0  0.0   0:00.98 /usr/sbin+
 16224 dovenull  20   0   47308   2708   1740 S   0.0  0.1   0:01.79 dovecot/p+
 16225 dovenull  20   0   48196   3232   1760 S   0.0  0.1   0:00.78 dovecot/i+
 16226 dovecot   20   0   10320    296    184 S   0.0  0.0   0:00.34 dovecot/a+
 16227 root      20   0   10452    524    344 S   0.0  0.0   0:01.00 dovecot/l+
 16228 dovenull  20   0   47252   3340   2384 S   0.0  0.1   0:01.32 dovecot/p+
 16229 dovenull  20   0   48492   3800   1916 S   0.0  0.2   0:01.03 dovecot/i+
 16230 root      20   0   24528   2268    496 S   0.0  0.1   0:00.42 dovecot/c+
 16231 dovecot   20   0   13568    596    408 S   0.0  0.0   0:00.18 dovecot/s+
 16234 dovecot   20   0   41188   1512   1016 S   0.0  0.1   0:02.02 dovecot/a+
 16262 mailnull  20   0   89116   3812    876 S   0.0  0.2   0:01.48 /usr/sbin+
 16283 root      20   0  153404    220    136 S   0.0  0.0   0:02.36 pure-ftpd+
 16284 root      20   0  152780     80     40 S   0.0  0.0   0:00.07 /usr/sbin+
 16342 root      20   0  267196   4956    548 S   0.0  0.2   0:04.58 /usr/sbin+
 16343 root      20   0   12760    384    212 S   0.0  0.0   0:03.61 /usr/loca+
 16344 root      20   0   12732    284    208 S   0.0  0.0   0:02.87 /usr/loca+
 16345 root      20   0   12764    408    220 S   0.0  0.0   0:03.44 /usr/loca+
 16346 root      20   0   53268      8      8 S   0.0  0.0   0:00.04 /usr/loca+
 30548 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 32512 root      20   0       0      0      0 S   0.0  0.0   0:00.17 [kworker/+
 40677 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 41876 nobody    20   0  277868  21464   4900 S   0.0  0.9   0:00.78 /usr/sbin+
 42484 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 44611 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 44651 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 44804 nobody    20   0  278144  20364   4556 S   0.0  0.8   0:00.50 /usr/sbin+
 45441 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 45810 nobody    20   0  277640  19584   4460 S   0.0  0.8   0:00.41 /usr/sbin+
 45811 nobody    20   0  277988  19648   4692 S   0.0  0.8   0:00.42 /usr/sbin+
 47336 nobody    20   0  277616  19292   4424 S   0.0  0.8   0:00.35 /usr/sbin+
 47337 nobody    20   0  277984  19644   4500 S   0.0  0.8   0:00.33 /usr/sbin+
 47344 nobody    20   0  277652  19264   4356 S   0.0  0.8   0:00.28 /usr/sbin+
 47345 nobody    20   0  277924  19836   4480 S   0.0  0.8   0:00.32 /usr/sbin+
 47347 nobody    20   0  277524  18960   4384 S   0.0  0.8   0:00.29 /usr/sbin+
 47644 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 48061 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 49566 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 50151 nobody    20   0  277576  18176   3872 S   0.0  0.8   0:00.09 /usr/sbin+
 50634 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 50694 worencom  20   0   38488   3976   3024 S   0.0  0.2   0:00.00 dovecot/i+
 50858 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 50993 root      20   0  111304   4260   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 51105 wp-tool+  20   0  445028    328    196 S   0.0  0.0   0:00.00 sw-engine+
 51115 wp-tool+  20   0  445028    324    192 S   0.0  0.0   0:00.00 sw-engine+
 51144 mailnull  20   0   89508   5708   2460 S   0.0  0.2   0:00.00 /usr/sbin+
 51198 mailnull  20   0   89508   4940   1748 S   0.0  0.2   0:00.00 /usr/sbin+
 51227 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 51253 nigeria   20   0  400460   5304   2404 S   0.0  0.2   0:00.01 php-fpm: +
 51337 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 51365 mailnull  20   0   89508   5704   2460 S   0.0  0.2   0:00.00 /usr/sbin+
 51410 root      20   0  162436   5832   4344 S   0.0  0.2   0:00.02 sshd: roo+
 51412 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: roo+
 51426 root      20   0  183080   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 51427 root      20   0  183080   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 51428 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 51429 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 51431 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 51432 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 51433 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 51434 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 51435 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 51436 root      20   0  183076   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 51438 root      20   0  183076   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 51439 root      20   0  183076   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 51441 root      20   0  183076   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 51446 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 51448 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 51449 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 51450 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 51451 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 51452 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 51453 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 51455 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 51456 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 51458 root      20   0  188216  11076   5148 S   0.0  0.5   0:00.02 /usr/loca+
 51460 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 51461 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 51462 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 51464 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 51468 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 51470 root      20   0  113284   1464   1256 S   0.0  0.1   0:00.00 bash /usr+
 51476 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 51477 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 51478 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 51482 pactpay   20   0  480124  17676  11880 S   0.0  0.7   0:00.02 /opt/cpan+
 51506 root      20   0  160224   2340   1632 S   0.0  0.1   0:00.01 top -n 2 +
 51547 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 51554 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 51559 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 51564 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 51568 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 51570 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 51571 root      20   0  113284    216      0 R   0.0  0.0   0:00.00 bash /usr+
 51572 cloudsms  20   0  113284    180      0 R   0.0  0.0   0:00.00 /usr/loca+
 63107 root      20   0  185192  14340   1100 S   0.0  0.6   1:16.84 lfd - sle+
 72712 root      20   0  445028    596    480 S   0.0  0.0   2:55.83 sw-engine+
 72887 wp-tool+  20   0  412396   3780   1672 S   0.0  0.2  14:34.13 /usr/bin/+
 72891 wp-tool+  20   0  387556   3508   1632 S   0.0  0.1   0:23.72 /usr/bin/+
 81125 root      20   0  400740   2720    608 S   0.0  0.1   5:08.67 php-fpm: +
 81130 root      20   0  388892    444    352 S   0.0  0.0   0:50.94 php-fpm: +
 81135 root      20   0  396248    452    360 S   0.0  0.0   0:51.79 php-fpm: +
 81140 root      20   0  389508    520    424 S   0.0  0.0   0:52.82 php-fpm: +
 81145 root      20   0  439788    404    312 S   0.0  0.0   0:52.67 php-fpm: +
 85179 root      20   0  248728 121144   3840 S   0.0  5.0   0:07.61 /usr/loca+
 85330 telegraf  20   0 5654308  28452   5872 S   0.0  1.2  26:20.93 /usr/loca+
 89314 root      20   0  267156 133848   2860 S   0.0  5.5   0:07.35 spamd chi+
 89315 root      20   0  248728 118488   1220 S   0.0  4.9   0:00.03 spamd chi+
 91745 root      20   0  224392   4596    928 S   0.0  0.2   0:20.46 queueproc+
 92390 cpanelc+  20   0   10868   3968   2340 S   0.0  0.2  18:17.33 /usr/loca+
 92394 root      38  18  130416   1380    692 S   0.0  0.1   0:04.36 cpanellog+
 92408 nscd      20   0 1377676   2604    696 S   0.0  0.1   5:42.29 /usr/sbin+
 92476 root      20   0  299272    504    324 S   0.0  0.0   0:57.26 php-fpm: +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S     2025   0:05 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        R     2025   5:54  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S     2025   1:44  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S     2025   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S     2025  61:30  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S     2025   0:10  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S     2025   0:10  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S     2025   1:58  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S     2025   8:17  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S     2025   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S     2025   0:01  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S     2025  65:15  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN    2025   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN    2025   0:07  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [deferwq]
root        108  0.0  0.0      0     0 ?        S     2025   1:03  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S     2025   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S     2025   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<    2025   8:34  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<    2025   7:10  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S     2025   3:57  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kvm-irqfd-clean]
root        694  0.0  0.0      0     0 ?        S<    2025   3:38  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S     2025   0:15  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ext4-rsv-conver]
root      30548  0.0  0.0      0     0 ?        S    14:30   0:00  \_ [kworker/u200:1]
root      32512  0.0  0.0      0     0 ?        S    14:35   0:00  \_ [kworker/0:2]
root      40677  0.0  0.0      0     0 ?        S    14:54   0:00  \_ [kworker/1:1]
root      42484  0.0  0.0      0     0 ?        S    14:58   0:00  \_ [kworker/0:3]
root      44611  0.0  0.0      0     0 ?        S    15:02   0:00  \_ [kworker/0:5]
root      44651  0.0  0.0      0     0 ?        S    15:02   0:00  \_ [kworker/1:0]
root      45441  0.0  0.0      0     0 ?        S    15:03   0:00  \_ [kworker/u200:2]
root      47644  0.0  0.0      0     0 ?        S    15:07   0:00  \_ [kworker/1:3]
root      48061  0.0  0.0      0     0 ?        S    15:08   0:00  \_ [kworker/1:4]
root      49566  0.0  0.0      0     0 ?        S    15:11   0:00  \_ [kworker/0:0]
root      50858  0.0  0.0      0     0 ?        S    15:14   0:00  \_ [kworker/0:1]
root          1  0.1  0.1 192272  3532 ?        Ss    2025 102:45 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.1  40240  2872 ?        Ss    2025  31:11 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352     8 ?        Ss    2025   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   448 ?        S<sl  2025   4:32 /sbin/auditd
root        487  0.0  0.0  21540   348 ?        Ss    2025   1:34 /usr/sbin/irqbalance --foreground
root        489  0.0  0.0  24896  1180 ?        Ss    2025  16:15 /usr/lib/systemd/systemd-logind
polkitd     494  0.0  0.0 610664  1116 ?        Ssl   2025   9:04 /usr/lib/polkit-1/polkitd --no-debug
root        496  0.0  0.0  52852   316 ?        Ss    2025   0:00 /usr/sbin/smartd -n -q never
dbus        503  0.0  0.0  58748  1384 ?        Ss    2025  35:42 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         511  0.0  0.0  69256    76 ?        Ss    2025   0:03 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss    2025   0:00 /usr/sbin/acpid
root        530  0.0  0.0 195208     0 ?        Ssl   2025   0:00 /usr/sbin/gssproxy -D
root        557  0.0  0.0  24208    24 ?        Ss    2025   0:00 /usr/sbin/atd -f
root        558  0.0  0.0 124508   428 ?        Ss    2025   2:14 /usr/sbin/crond -n
root      51426  0.0  0.0 183080  2144 ?        S    15:15   0:00  \_ /usr/sbin/CROND -n
root      51448  0.0  0.0 113284  1212 ?        Ss   15:15   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      51470  0.0  0.0 113284  1472 ?        S    15:15   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      51574  0.0  0.0 113284   216 ?        R    15:15   0:00  |           \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      51427  0.0  0.0 183080  2148 ?        S    15:15   0:00  \_ /usr/sbin/CROND -n
root      51446  0.0  0.0 113284  1212 ?        Ss   15:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      51468  0.0  0.0 108052   356 ?        S    15:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      51476  0.0  0.0 113288  1516 ?        S    15:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      51573  0.0  0.0 153840  2092 ?        R    15:15   0:00  |               \_ ps auxf
root      51428  0.0  0.0 183076  2148 ?        S    15:15   0:00  \_ /usr/sbin/CROND -n
root      51462  0.0  0.0  20164   808 ?        Ss   15:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      51429  0.0  0.0 183076  2148 ?        S    15:15   0:00  \_ /usr/sbin/CROND -n
root      51452  0.0  0.0  20164   984 ?        Ss   15:15   0:00  |   \_ jailshell (cloudsms) [51559] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  51559  0.0  0.0  20164   260 ?        R    15:15   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  51564  0.0  0.0      0     0 ?        Z    15:15   0:00  |           \_ [bash] <defunct>
root      51431  0.0  0.0 183076  2148 ?        S    15:15   0:00  \_ /usr/sbin/CROND -n
root      51450  0.0  0.0  20164   804 ?        Ss   15:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      51432  0.0  0.0 183076  2148 ?        S    15:15   0:00  \_ /usr/sbin/CROND -n
root      51461  0.0  0.0  20164   988 ?        Ss   15:15   0:00  |   \_ jailshell (cloudsms) [51568] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  51568  0.0  0.0  20164   264 ?        S    15:15   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  51570  0.0  0.0 113284  1212 ?        S    15:15   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  51572  0.0  0.0 113284   180 ?        R    15:15   0:00  |               \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      51433  0.0  0.0 183076  2148 ?        S    15:15   0:00  \_ /usr/sbin/CROND -n
root      51449  0.0  0.0  20164   804 ?        Ss   15:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      51434  0.0  0.0 183076  2148 ?        S    15:15   0:00  \_ /usr/sbin/CROND -n
root      51460  0.0  0.0  20164   804 ?        Ss   15:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      51435  0.0  0.0 183076  2148 ?        S    15:15   0:00  \_ /usr/sbin/CROND -n
root      51464  0.0  0.0  20164   804 ?        Ss   15:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      51436  0.0  0.0 183076  2144 ?        S    15:15   0:00  \_ /usr/sbin/CROND -n
root      51453  0.0  0.0  20164   808 ?        Ss   15:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      51438  0.0  0.0 183076  2144 ?        S    15:15   0:00  \_ /usr/sbin/CROND -n
root      51455  0.0  0.0 113284  1212 ?        Ss   15:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      51458  0.0  0.4 188216 11076 ?        S    15:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      51506  0.0  0.0 160224  2340 ?        S    15:15   0:00  |           \_ top -n 2 -b -c
root      51439  0.0  0.0 183076  2136 ?        S    15:15   0:00  \_ /usr/sbin/CROND -n
root      51451  0.0  0.0  20164   964 ?        Ss   15:15   0:00  |   \_ jailshell (pactpay) [51478] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   51478  0.0  0.0  20164   260 ?        S    15:15   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   51482  0.0  0.7 480124 17676 ?        S    15:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      51441  0.0  0.0 183076  2140 ?        S    15:15   0:00  \_ /usr/sbin/CROND -n
root      51456  0.0  0.0  20164   968 ?        Ss   15:15   0:00      \_ jailshell (nigeria) [51477] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   51477  0.0  0.0  20164   260 ?        S    15:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   51480  0.0  0.6 404052 16140 ?        S    15:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        576  0.0  0.0 108296     4 tty1     Ss+   2025   0:00 /sbin/agetty --noclear tty1 linux
root        577  0.0  0.0 114704     0 ttyS0    Ss+   2025   0:00 /bin/bash
systuser    928  0.0  0.0  11540    52 ?        Ssl   2025   0:02 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    929  0.0  0.0  12756    60 ?        Ssl   2025   0:02 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    931  0.0  0.0 112524    56 ?        Ssl   2025   0:02 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    932  0.0  0.0 111608    60 ?        Ssl   2025   0:01 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        935  0.0  0.0 572372   820 ?        Ssl   2025   5:44 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        937  0.0  0.0 111304   364 ?        Ss    2025   6:44 /usr/sbin/sshd -D
root      50993  0.0  0.1 111304  4260 ?        Ss   15:14   0:00  \_ sshd: [accepted]
root      51227  0.0  0.1 111304  4264 ?        Ss   15:14   0:00  \_ sshd: [accepted]
root      51337  0.0  0.1 111304  4264 ?        Ss   15:14   0:00  \_ sshd: [accepted]
root      51410  2.0  0.2 162436  5832 ?        Ss   15:15   0:00  \_ sshd: root [priv]
sshd      51412  0.0  0.1 115644  2628 ?        S    15:15   0:00      \_ sshd: root [net]
root        939  0.0  0.4 1350728 9748 ?        Ssl   2025   2:46 /usr/bin/cspdaemon
root        952  0.0  0.2 261164  6668 ?        Ss    2025  13:01 cpsrvd (SSL) - waiting for connections                   
root      51547  0.0  0.0      0     0 ?        Z    15:15   0:00  \_ [webmaild - serv] <defunct>
root        953  0.0  0.1 331088  4296 ?        Ssl   2025  16:49 /usr/sbin/rsyslogd -n
memcach+    972  0.0  0.0 342400     0 ?        Ssl   2025   1:30 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.1 1277312 2480 ?        Ssl   2025   0:39 /usr/bin/checkstatus
systuser    980  0.0  0.4 114272 10684 ?        Ssl   2025  18:49 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser   1144  0.0  0.1 157704  2880 ?        S     2025   0:19 SonarPush 0.6.12 [sleeping]
root       1239  0.0  0.0 167452  1200 ?        Ss    2025   1:02 dnsadmin - dormant mode
root       1243  0.0  0.8 209644 21192 ?        Ss    2025   7:54 tailwatchd
root       1244  0.0  0.2 183900  6688 ?        Ss    2025   7:51 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
oysipao+  15361  0.0  0.0   3148     4 ?        Ss    2025   0:00 [kworker]
oysipao+  15368  0.0  0.0   3156    40 ?        S     2025   1:33  \_ [kworker]
telegraf  85330  0.0  1.1 5654308 28452 ?       SLsl  2025  26:20 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root      72712  0.0  0.0 445028   596 ?        Ss    2025   2:55 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  51105  0.0  0.0 445028   328 ?        S    15:14   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  51115  0.0  0.0 445028   324 ?        S    15:14   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  72887  0.0  0.1 412396  3780 ?        Ss    2025  14:34 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+  72891  0.0  0.1 387556  3508 ?        Ss    2025   0:23 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
named      1188  0.0  1.5 1185868 37240 ?       Ssl   2025  16:55 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root      81125  0.0  0.1 400740  2720 ?        Ss    2025   5:08 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  51092 18.5  2.9 465252 71864 ?        R    15:14   0:05  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   51253  0.0  0.2 400460  5304 ?        S    15:14   0:00  \_ php-fpm: pool nigeriadecide_org
root      81130  0.0  0.0 388892   444 ?        Ss    2025   0:50 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root      81135  0.0  0.0 396248   452 ?        Ss    2025   0:51 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root      81140  0.0  0.0 389508   520 ?        Ss    2025   0:52 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root      81145  0.0  0.0 439788   404 ?        Ss    2025   0:52 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root      91745  0.0  0.1 224392  4596 ?        Ss    2025   0:20 queueprocd - waiting up to 60s to process a task
cpanelc+  92390  0.0  0.1  10868  3968 ?        Rs    2025  18:17 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root      92394  0.0  0.0 130416  1380 ?        SN    2025   0:04 cpanellogd - sleeping for logs
nscd      92408  0.0  0.1 1377676 2604 ?        Ssl   2025   5:42 /usr/sbin/nscd
root      92476  0.0  0.0 299272   504 ?        Ss    2025   0:57 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root      12995  0.0  3.1 1483120 75956 ?       Ssl  Jan02   1:27 /usr/local/cpanel/3rdparty/bin/clamd -F
mysql     19908  1.6 12.7 1481756 309552 ?      Sl   Jan02  62:53 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root      16217  0.0  0.0  51508   604 ?        Ss   Jan04   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull  16224  0.0  0.1  47308  2708 ?        S    Jan04   0:01  \_ dovecot/pop3-login
dovenull  16225  0.0  0.1  48196  3232 ?        S    Jan04   0:00  \_ dovecot/imap-login
dovecot   16226  0.0  0.0  10320   296 ?        S    Jan04   0:00  \_ dovecot/anvil
root      16227  0.0  0.0  10452   524 ?        S    Jan04   0:01  \_ dovecot/log
dovenull  16228  0.0  0.1  47252  3340 ?        S    Jan04   0:01  \_ dovecot/pop3-login
dovenull  16229  0.0  0.1  48492  3800 ?        S    Jan04   0:01  \_ dovecot/imap-login
root      16230  0.0  0.0  24528  2268 ?        S    Jan04   0:00  \_ dovecot/config
dovecot   16231  0.0  0.0  13568   596 ?        S    Jan04   0:00  \_ dovecot/stats
dovecot   16234  0.0  0.0  41188  1512 ?        S    Jan04   0:02  \_ dovecot/auth
root      50634  0.0  0.1  41052  2728 ?        S    15:13   0:00  \_ dovecot/auth -w
worencom  50694  0.0  0.1  38488  3976 ?        S    15:13   0:00  \_ dovecot/imap
mailnull  16262  0.0  0.1  89116  3812 ?        Ss   Jan04   0:01 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  51144  0.0  0.2  89508  5708 ?        S    15:14   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  51198  0.0  0.2  89508  4940 ?        S    15:14   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  51365  0.0  0.2  89508  5704 ?        S    15:14   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root      16283  0.0  0.0 153404   220 ?        Ss   Jan04   0:02 pure-ftpd (SERVER)
root      16284  0.0  0.0 152780    80 ?        Ss   Jan04   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root      16342  0.0  0.2 267196  4956 ?        Ss   Jan04   0:04 /usr/sbin/httpd -k start
root      16343  0.0  0.0  12760   384 ?        S    Jan04   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      16344  0.0  0.0  12732   284 ?        S    Jan04   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      16345  0.0  0.0  12764   408 ?        S    Jan04   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      16346  0.0  0.0  53268     8 ?        S    Jan04   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    41876  0.0  0.8 277868 21464 ?        S    14:56   0:00  \_ /usr/sbin/httpd -k start
nobody    44804  0.0  0.8 278144 20364 ?        S    15:02   0:00  \_ /usr/sbin/httpd -k start
nobody    45810  0.0  0.8 277640 19584 ?        S    15:03   0:00  \_ /usr/sbin/httpd -k start
nobody    45811  0.0  0.8 277988 19648 ?        S    15:03   0:00  \_ /usr/sbin/httpd -k start
nobody    47336  0.0  0.7 277616 19292 ?        S    15:06   0:00  \_ /usr/sbin/httpd -k start
nobody    47337  0.0  0.8 277984 19644 ?        S    15:06   0:00  \_ /usr/sbin/httpd -k start
nobody    47344  0.0  0.7 277652 19264 ?        S    15:06   0:00  \_ /usr/sbin/httpd -k start
nobody    47345  0.0  0.8 277924 19836 ?        S    15:06   0:00  \_ /usr/sbin/httpd -k start
nobody    47347  0.0  0.7 277524 18960 ?        S    15:06   0:00  \_ /usr/sbin/httpd -k start
nobody    50151  0.0  0.7 277576 18176 ?        S    15:12   0:00  \_ /usr/sbin/httpd -k start
root      63107  0.1  0.5 185192 14340 ?        Ss   00:00   1:16 lfd - sleeping
root      85179  0.0  5.0 248728 121144 ?       Ss   04:47   0:07 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      89314  0.0  5.5 267156 133848 ?       S    04:57   0:07  \_ spamd child
root      89315  0.0  4.8 248728 118488 ?       S    04:57   0:00  \_ spamd child
## mysql stats
Uptime: 233944  Threads: 4  Questions: 21634364  Slow queries: 0  Opens: 55788  Flush tables: 1  Open tables: 2000  Queries per second avg: 92.476
*************************** 1. row ***************************
     Id: 314011
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 314015
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 314016
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 4. row ***************************
     Id: 314024
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: -1
  State: starting
   Info: show processlist
## network stats
      1 138.197.16.14 TIME_WAIT
      1 148.113.130.158 TIME_WAIT
      1 198.244.226.228 TIME_WAIT
      1 ::1 TIME_WAIT
      1 216.73.216.10 TIME_WAIT
      1 47.82.11.51 TIME_WAIT
      1 51.89.129.0 TIME_WAIT
      1 57.141.0.21 TIME_WAIT
      1 57.141.0.73 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 185.180.141.39 TIME_WAIT
      3 185.180.141.40 TIME_WAIT
      4 185.180.141.37 TIME_WAIT
      5 185.180.141.38 TIME_WAIT
     25 157.66.56.157 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.66 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Dec 8 2025 14:42:54
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 05-Jan-2026 15:15:02 WAT
   Restart Time: Sunday, 04-Jan-2026 22:02:00 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 17 hours 13 minutes 1 second
   Server load: 0.16 0.28 0.34
   Total accesses: 141747 - Total Traffic: 1.4 GB - Total Duration: 39761039
   CPU Usage: u3.29 s5.06 cu870.1 cs491.53 - 2.21% CPU load
   2.29 requests/sec - 23.2 kB/second - 10.2 kB/request - 280.507 ms/request
   5 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

._.K._K._CK.._.._W..............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req   Dur    Conn  Child  Slot      Client     Protocol              VHost                                          Request
   0-0  -     0/0/11356   . 0.00 139   0   2887310 0.0    0.00  126.15 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   1-0  50151 0/28/10093  _ 0.25 0     0   2837623 0.0    0.24  103.30 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80          GET /whm-server-status HTTP/1.0
   2-0  -     0/0/10781   . 0.00 503   0   2832564 0.0    0.00  105.18 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   3-0  47336 64/151/8661 K 0.97 0     93  2121555 2421.6 3.81  78.81  20.205.40.135  http/1.1 staging.cloudware.ng:443        GET /zz8.php HTTP/1.1
   4-0  -     0/0/10015   . 0.00 58    0   3131442 0.0    0.00  88.27  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   5-0  47337 0/101/10098 _ 1.32 1     27  2767572 0.0    0.86  87.02  116.203.134.67 http/1.1 cloudsms.com.ng:443             GET /cron/process_queue4.php HTTP/1.1
   6-0  47344 1/84/7123   K 0.63 2     7   2736117 10.7   0.90  83.88  192.178.4.102  http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/blog/blog/polling_unit_category.
   7-0  -     0/0/7195    . 0.00 354   0   2046937 0.0    0.00  73.28  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   8-0  41876 0/276/8743  _ 2.42 1     27  2213986 0.0    7.56  87.21  128.140.8.200  http/1.1 cloudsms.com.ng:443             GET /cron/process_queue3.php HTTP/1.1
   9-0  47345 1/98/6716   C 1.14 0     855 1821715 5.7    0.63  69.23  157.66.56.157  http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   10-0 44804 65/198/6133 K 3.83 0     25  1842581 28.9   1.35  65.51  20.205.40.135  http/1.1 proxy-subdomains-vhost.localhos GET /tin.php HTTP/1.1
   11-0 -     0/0/7377    . 0.00 501   0   1681830 0.0    0.00  67.89  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   12-0 -     0/0/6394    . 0.00 498   0   1547797 0.0    0.00  50.03  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   13-0 47347 0/86/3787   _ 1.20 0     0   1004481 0.0    0.76  33.73  ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   14-0 -     0/0/2798    . 0.00 652   0   815891  0.0    0.00  33.24  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   15-0 -     0/0/4312    . 0.00 423   0   1163647 0.0    0.00  40.36  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   16-0 45810 0/121/3927  _ 2.06 1     27  1435554 0.0    1.01  52.71  116.203.129.16 http/1.1 cloudsms.com.ng:443             GET /cron/process_queue1.php HTTP/1.1
   17-0 45811 0/127/1696  W 1.43 0     0   643106  0.0    1.13  11.17  ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   18-0 -     0/0/973     . 0.00 495   0   446020  0.0    0.00  4.85   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   19-0 -     0/0/577     . 0.00 7840  0   235612  0.0    0.00  4.39   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   20-0 -     0/0/706     . 0.00 6658  0   245393  0.0    0.00  3.17   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 -     0/0/817     . 0.00 7851  0   290142  0.0    0.00  4.82   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   22-0 -     0/0/316     . 0.00 7843  0   172444  0.0    0.00  2.45   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 -     0/0/330     . 0.00 7828  0   138901  0.0    0.00  0.63   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 -     0/0/1562    . 0.00 4330  0   456048  0.0    0.00  18.55  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 -     0/0/1132    . 0.00 12708 0   252694  0.0    0.00  6.42   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 -     0/0/1921    . 0.00 12396 0   510675  0.0    0.00  30.08  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/275     . 0.00 22990 0   63232   0.0    0.00  0.78   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -     0/0/360     . 0.00 23584 0   191352  0.0    0.00  25.20  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/858     . 0.00 23586 0   398130  0.0    0.00  6.45   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/106     . 0.00 23566 0   31317   0.0    0.00  0.21   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/140     . 0.00 23575 0   118125  0.0    0.00  0.45   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/260     . 0.00 23530 0   38702   0.0    0.00  1.28   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -     0/0/487     . 0.00 23583 0   106926  0.0    0.00  2.11   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -     0/0/299     . 0.00 23570 0   74787   0.0    0.00  1.33   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/215     . 0.00 23582 0   10240   0.0    0.00  0.40   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/410     . 0.00 23555 0   72790   0.0    0.00  17.17  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/212     . 0.00 23567 0   2587    0.0    0.00  0.38   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/140     . 0.00 23556 0   5668    0.0    0.00  1.29   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/214     . 0.00 23591 0   1085    0.0    0.00  0.26   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/120     . 0.00 23511 0   67829   0.0    0.00  1.77   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/276     . 0.00 22771 0   43451   0.0    0.00  1.74   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/81      . 0.00 23581 0   462     0.0    0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/115     . 0.00 23579 0   111     0.0    0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/106     . 0.00 23589 0   149     0.0    0.00  0.07   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/41      . 0.00 23590 0   1662    0.0    0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/9       . 0.00 23599 0   1609    0.0    0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/91      . 0.00 23569 0   1367    0.0    0.00  0.75   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/14      . 0.00 23588 0   1507    0.0    0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -     0/0/88      . 0.00 23568 0   872     0.0    0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -     0/0/590     . 0.00 19473 0   131183  0.0    0.00  4.25   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -     0/0/91      . 0.00 23573 0   1162    0.0    0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -     0/0/525     . 0.00 20238 0   113277  0.0    0.00  7.25   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -     0/0/5       . 0.00 23598 0   415     0.0    0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -     0/0/80      . 0.00 23565 0   1377    0.0    0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 464
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 25 seconds, (range: 1...71)
   index usage: 8%, cache usage: 11%
   total entries stored since starting: 73993
   total entries replaced since starting: 0
   total entries expired since starting: 73474
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 30 hit, 1440 miss
   total removes since starting: 55 hit, 144 miss
Youez - 2016 - github.com/yon3zu
LinuXploit