403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.11.03.txt
 ## swap threshold exceeded
## server overview
2025-11-08.11.03 load[8] mem[74/59] mysql[10/10] httpd[18]
              total        used        free      shared  buff/cache   available
Mem:           2363        1692          75          36         596         457
Swap:          1999        1256         743
 11:03:03 up  1:16,  0 users,  load average: 8.65, 5.79, 3.13
## system overview
top - 11:03:03 up  1:16,  0 users,  load average: 8.65, 5.79, 3.13
Tasks: 208 total,  10 running, 197 sleeping,   0 stopped,   1 zombie
%Cpu(s): 84.8 us, 15.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    76392 free,  1727580 used,   616328 buff/cache
KiB Swap:  2047996 total,   761340 free,  1286656 used.   473816 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1773 mysql     20   0 1458324 234508   3380 S  37.5  9.7   1:56.86 /usr/sbin+
 48975 cloudw    20   0  425424  34968   3632 R  37.5  1.4   0:00.12 php-fpm: +
 48902 healtho+  20   0  428568  38672   4180 R  31.2  1.6   0:00.37 php-fpm: +
 48677 healtho+  20   0  459424  69700   4216 R  18.8  2.9   0:05.27 php-fpm: +
 48869 healtho+  20   0  451096  61292   4212 R  18.8  2.5   0:01.00 php-fpm: +
 48673 healtho+  20   0  461848  71272   4212 R  12.5  2.9   0:05.82 php-fpm: +
 48770 healtho+  20   0  459288  69632   4216 R  12.5  2.9   0:04.27 php-fpm: +
 48935 nigeria   20   0  400652  15936  10216 S   6.2  0.7   0:00.05 /opt/cpan+
 48990 cloudsms  20   0  400652  15672  10056 R   6.2  0.6   0:00.01 /opt/cpan+
 48994 cloudsms  20   0  400652  14880   9680 R   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44424   3464   1508 S   0.0  0.1   0:08.13 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.57 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.11 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:05.64 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.85 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:11.52 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   243 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   259 root       0 -20       0      0      0 S   0.0  0.0   0:01.16 [kworker/+
   268 root       0 -20       0      0      0 S   0.0  0.0   0:00.92 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.41 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40240   2640   2324 S   0.0  0.1   0:02.91 /usr/lib/+
   384 root      20   0   45352    372    216 S   0.0  0.0   0:00.35 /usr/lib/+
   407 root      16  -4   55532    492    364 S   0.0  0.0   0:00.47 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0  224280   7188   1060 S   0.0  0.3   0:00.20 queueproc+
   491 rpc       20   0   69256    232    124 S   0.0  0.0   0:00.01 /sbin/rpc+
   512 dbus      20   0   58768   1472    708 S   0.0  0.1   0:02.60 /usr/bin/+
   538 root      20   0   21540    432    324 S   0.0  0.0   0:00.10 /usr/sbin+
   539 root      20   0   52852    292    224 S   0.0  0.0   0:00.01 /usr/sbin+
   540 root      20   0   24896   1480    844 S   0.0  0.1   0:01.17 /usr/lib/+
   541 root      20   0  152780    196    152 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0    4388    128    124 S   0.0  0.0   0:00.00 /usr/sbin+
   544 polkitd   20   0  610540    972    516 S   0.0  0.0   0:00.69 /usr/lib/+
   547 nscd      20   0  928956   1376    728 S   0.0  0.1   0:02.44 /usr/sbin+
   566 root      20   0  195208     44     44 S   0.0  0.0   0:00.00 /usr/sbin+
   582 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   586 root      20   0  124472    492    364 S   0.0  0.0   0:00.14 /usr/sbin+
   588 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   605 root      20   0  114704    136    136 S   0.0  0.0   0:00.02 /bin/bash
   606 root      20   0  108296    148    144 S   0.0  0.0   0:00.00 /sbin/age+
   616 mailnull  20   0   89116   3604    584 S   0.0  0.1   0:00.10 /usr/sbin+
   679 root       0 -20       0      0      0 S   0.0  0.0   0:02.43 [loop0]
   709 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   969 systuser  20   0   11796     44      0 S   0.0  0.0   0:00.00 /usr/loca+
   971 root      20   0 1763032 341816    540 S   0.0 14.1   0:13.48 /usr/loca+
   975 root      20   0  232784   5300   1996 S   0.0  0.2   0:01.43 /usr/sbin+
   976 named     20   0  637928  31740   1520 S   0.0  1.3   0:02.74 /usr/sbin+
   977 root      20   0  397344   3124    708 S   0.0  0.1   0:01.50 php-fpm: +
   982 systuser  20   0  114016  12660   2464 S   0.0  0.5   0:01.21 /usr/loca+
   983 root      20   0  572372    928    360 S   0.0  0.0   0:00.49 /usr/bin/+
   985 memcach+  20   0  342400      4      4 S   0.0  0.0   0:00.09 /usr/bin/+
   986 cpanelc+  20   0    9688   2768   2424 S   0.0  0.1   0:03.78 /usr/loca+
   987 root      20   0  386112    604    396 S   0.0  0.0   0:00.17 php-fpm: +
   988 systuser  20   0   11348     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   989 root      20   0  385496    684    476 S   0.0  0.0   0:00.18 php-fpm: +
   990 root      20   0  153404    376    296 S   0.0  0.0   0:00.10 pure-ftpd+
   992 systuser  20   0  111608   1560      0 S   0.0  0.1   0:00.00 /usr/loca+
   995 root      20   0  436392  11288  11076 S   0.0  0.5   0:00.23 php-fpm: +
   998 root      20   0  392856    268    188 S   0.0  0.0   0:00.17 php-fpm: +
  1006 telegraf  20   0 5654048  33236   2728 S   0.0  1.4   0:02.86 /usr/loca+
  1010 root      20   0   51508    512    348 S   0.0  0.0   0:00.08 /usr/sbin+
  1012 root      20   0  261028   6428   1540 S   0.0  0.3   0:00.77 cpsrvd (S+
  1024 root      20   0  445028   2648   2648 S   0.0  0.1   0:00.05 sw-engine+
  1025 systuser  20   0  112524   1984      0 S   0.0  0.1   0:00.01 /usr/loca+
  1031 root      20   0  111304    512    408 S   0.0  0.0   0:00.65 /usr/sbin+
  1129 dovenull  20   0   46912   1964   1368 S   0.0  0.1   0:00.07 dovecot/p+
  1130 dovenull  20   0   47328   2696   1680 S   0.0  0.1   0:00.06 dovecot/i+
  1131 dovecot   20   0   10320    420    304 S   0.0  0.0   0:00.01 dovecot/a+
  1132 root      20   0   10452    584    380 S   0.0  0.0   0:00.05 dovecot/l+
  1133 dovenull  20   0   46912   2192   1520 S   0.0  0.1   0:00.10 dovecot/p+
  1134 dovenull  20   0   47360   1936   1016 S   0.0  0.1   0:00.06 dovecot/i+
  1142 root      20   0   24528   2280    400 S   0.0  0.1   0:00.05 dovecot/c+
  1144 dovecot   20   0   13568    480    260 S   0.0  0.0   0:00.00 dovecot/s+
  1204 systuser  20   0  157704   2948    916 S   0.0  0.1   0:00.04 SonarPush+
  1217 wp-tool+  20   0  410452  36032   2012 S   0.0  1.5   0:03.98 /usr/bin/+
  1218 wp-tool+  20   0  387528  13384   1760 S   0.0  0.6   0:00.13 /usr/bin/+
  1221 dovecot   20   0   41168   1216    768 S   0.0  0.1   0:00.11 dovecot/a+
  1264 root      20   0  209128  20592   3232 S   0.0  0.9   0:00.74 tailwatchd
  1266 root      20   0  167452   1268    664 S   0.0  0.1   0:00.11 dnsadmin +
  1268 root      20   0  183900   4400   1164 S   0.0  0.2   0:00.31 cpdavd - +
  1699 root      20   0  299272    768    388 S   0.0  0.0   0:00.11 php-fpm: +
  1717 root      38  18  130416   1428    708 S   0.0  0.1   0:00.01 cpanellog+
  1947 root      20   0  267032   8216    808 S   0.0  0.3   0:00.38 /usr/sbin+
  1952 root      20   0   12748    432    324 S   0.0  0.0   0:00.56 /usr/loca+
  1953 root      20   0   12732    400    320 S   0.0  0.0   0:00.46 /usr/loca+
  1954 root      20   0   12752    404    280 S   0.0  0.0   0:00.49 /usr/loca+
  1963 root      20   0   53268    196    196 S   0.0  0.0   0:00.05 /usr/loca+
  2286 root      20   0  181476  10324   1184 S   0.0  0.4   0:04.58 lfd - sle+
  2965 nobody    20   0  277828  21176   4572 S   0.0  0.9   0:05.06 /usr/sbin+
  8194 root      20   0       0      0      0 S   0.0  0.0   0:00.90 [kworker/+
 10754 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10763 oysipao+  20   0    3152    528     36 S   0.0  0.0   0:00.06 [kworker]
 27719 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 29465 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 30000 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 33079 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 38857 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 39702 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 40228 root      20   0  248032 119516   2892 S   0.0  4.9   0:02.80 /usr/loca+
 42247 nobody    20   0  277560  19468   4304 S   0.0  0.8   0:00.62 /usr/sbin+
 42483 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 43750 nobody    20   0  277540  19192   4164 S   0.0  0.8   0:00.59 /usr/sbin+
 43772 nobody    20   0  277840  19308   4156 S   0.0  0.8   0:00.44 /usr/sbin+
 43791 nobody    20   0  277540  19376   4232 S   0.0  0.8   0:00.47 /usr/sbin+
 43839 nobody    20   0  277560  19292   4236 S   0.0  0.8   0:00.58 /usr/sbin+
 44565 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 44872 nobody    20   0  277884  19516   4216 S   0.0  0.8   0:00.30 /usr/sbin+
 45049 nobody    20   0  277516  19264   4164 S   0.0  0.8   0:00.39 /usr/sbin+
 45152 nobody    20   0  277516  19260   4152 S   0.0  0.8   0:00.35 /usr/sbin+
 45213 nobody    20   0  277912  19380   4104 S   0.0  0.8   0:00.30 /usr/sbin+
 45214 nobody    20   0  277884  19404   4124 S   0.0  0.8   0:00.30 /usr/sbin+
 45703 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 46169 nobody    20   0  277536  19132   4048 S   0.0  0.8   0:00.23 /usr/sbin+
 46476 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 46911 root      20   0 1276100  10556    592 S   0.0  0.4   0:00.05 /usr/bin/+
 46948 root      20   0 1277056  15060    592 S   0.0  0.6   0:00.06 /usr/bin/+
 47079 nobody    20   0  277648  19208   3916 S   0.0  0.8   0:00.16 /usr/sbin+
 47195 root      20   0  249172 118284    604 S   0.0  4.9   0:00.03 spamd chi+
 47196 root      20   0  248032 116972    388 S   0.0  4.8   0:00.00 spamd chi+
 47337 nobody    20   0  277880  19132   3908 S   0.0  0.8   0:00.15 /usr/sbin+
 47741 nobody    20   0  277516  18956   3980 S   0.0  0.8   0:00.09 /usr/sbin+
 47765 nobody    20   0  277596  19032   3872 S   0.0  0.8   0:00.17 /usr/sbin+
 47766 nobody    20   0  277524  18964   3908 S   0.0  0.8   0:00.07 /usr/sbin+
 47776 nobody    20   0  277536  18768   3772 S   0.0  0.8   0:00.15 /usr/sbin+
 47777 nobody    20   0  277896  19080   3828 S   0.0  0.8   0:00.11 /usr/sbin+
 47778 nobody    20   0  277884  19272   4028 S   0.0  0.8   0:00.11 /usr/sbin+
 47779 nobody    20   0  277888  19312   4108 S   0.0  0.8   0:00.08 /usr/sbin+
 47946 root      20   0   41052   2796   2132 S   0.0  0.1   0:00.00 dovecot/a+
 48296 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 48404 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 48405 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 48407 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 48410 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 48621 root      20   0  111304   4456   3420 S   0.0  0.2   0:00.00 sshd: [ac+
 48622 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 48700 root      38  18  208280  40200   3528 R   0.0  1.7   0:01.05 cpanellog+
 48838 root      20   0  157100   5080   3788 S   0.0  0.2   0:00.00 sshd: unk+
 48839 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: unk+
 48844 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 48849 nigeria   20   0  397064   5612   2372 S   0.0  0.2   0:00.00 php-fpm: +
 48861 nobody    20   0  277516  17456   2828 S   0.0  0.7   0:00.00 /usr/sbin+
 48871 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 48875 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: unk+
 48878 nobody    20   0  277516  17456   2828 S   0.0  0.7   0:00.00 /usr/sbin+
 48880 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 48888 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 48890 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 48892 root      20   0  183040   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 48894 root      20   0  183040   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 48897 root      20   0  183040   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 48898 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48900 root      20   0  183040   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 48905 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 48907 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
 48908 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 48914 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 48915 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 48916 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 48917 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
 48923 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 48927 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 48931 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 48932 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 48938 pactpay   20   0  476724  17480  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 48982 cloudw    20   0  352096  15236  10128 S   0.0  0.6   0:00.01 /opt/cpan+
 48985 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 48988 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 48991 root      20   0  160220   2068   1580 R   0.0  0.1   0:00.00 top -bcn1
 48992 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 48993 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:46   0:05  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    09:46   0:11  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        243  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        245  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        259  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/1:1H]
root        268  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        582  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        679  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [loop0]
root        709  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root       8194  0.0  0.0      0     0 ?        S    09:57   0:00  \_ [kworker/u200:0]
root      27719  0.0  0.0      0     0 ?        S    10:31   0:00  \_ [kworker/0:0]
root      29465  0.0  0.0      0     0 ?        S    10:34   0:00  \_ [kworker/0:5]
root      30000  0.0  0.0      0     0 ?        S    10:35   0:00  \_ [kworker/1:0]
root      33079  0.0  0.0      0     0 ?        S    10:40   0:00  \_ [kworker/0:1]
root      38857  0.0  0.0      0     0 ?        S    10:49   0:00  \_ [kworker/u200:2]
root      39702  0.0  0.0      0     0 ?        S    10:50   0:00  \_ [kworker/1:4]
root      42483  0.0  0.0      0     0 ?        S    10:54   0:00  \_ [kworker/0:3]
root      44565  0.0  0.0      0     0 ?        S    10:57   0:00  \_ [kworker/1:2]
root      45703  0.0  0.0      0     0 ?        S    10:59   0:00  \_ [kworker/u200:1]
root      46476  0.0  0.0      0     0 ?        S    11:00   0:00  \_ [kworker/0:2]
root      48296  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44424  3464 ?        Ss   09:46   0:08 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  40240  2644 ?        Ss   09:46   0:02 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   372 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   492 ?        S<sl 09:46   0:00 /sbin/auditd
root        489  0.0  0.2 224280  7188 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
rpc         491  0.0  0.0  69256   232 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        512  0.0  0.0  58768  1472 ?        Ss   09:46   0:02 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        538  0.0  0.0  21540   432 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        539  0.0  0.0  52852   292 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
root        540  0.0  0.0  24896  1480 ?        Ss   09:46   0:01 /usr/lib/systemd/systemd-logind
root        541  0.0  0.0 152780   196 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        542  0.0  0.0   4388   128 ?        Ss   09:46   0:00 /usr/sbin/acpid
polkitd     544  0.0  0.0 610540   972 ?        Ssl  09:46   0:00 /usr/lib/polkit-1/polkitd --no-debug
nscd        547  0.0  0.0 928956  1376 ?        Ssl  09:46   0:02 /usr/sbin/nscd
root        566  0.0  0.0 195208    44 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        586  0.0  0.0 124472   492 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      48888  0.0  0.0 183040  2144 ?        S    11:03   0:00  \_ /usr/sbin/CROND -n
root      48915  0.0  0.0 113284  1212 ?        Ss   11:03   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      48923  0.0  0.0 108052   356 ?        S    11:03   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      48932  0.0  0.0 113288  1516 ?        S    11:03   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      48995  0.0  0.0 153840  2100 ?        R    11:03   0:00  |               \_ ps auxf
root      48890  0.0  0.0 183040  2144 ?        S    11:03   0:00  \_ /usr/sbin/CROND -n
root      48916  0.0  0.0  20164   804 ?        Ss   11:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      48892  0.0  0.0 183040  2140 ?        S    11:03   0:00  \_ /usr/sbin/CROND -n
root      48917  0.0  0.0  20164   992 ?        Ss   11:03   0:00  |   \_ jailshell (cloudsms) [48992] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  48992  0.0  0.0  20164   264 ?        S    11:03   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  48993  0.0  0.0 113284  1212 ?        S    11:03   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  48994  0.0  0.6 400652 15408 ?        S    11:03   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      48897  0.0  0.0 183040  2136 ?        S    11:03   0:00  \_ /usr/sbin/CROND -n
root      48905  0.0  0.0  20164   988 ?        Ss   11:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      48997  0.0  0.0  20164   260 ?        R    11:03   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      48898  0.0  0.0 183040  2140 ?        S    11:03   0:00  \_ /usr/sbin/CROND -n
root      48908  0.0  0.0  20164   968 ?        Ss   11:03   0:00  |   \_ jailshell (pactpay) [48927] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   48927  0.0  0.0  20164   256 ?        S    11:03   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   48938  2.0  0.7 476724 17480 ?        S    11:03   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      48900  0.0  0.0 183040  2136 ?        S    11:03   0:00  \_ /usr/sbin/CROND -n
root      48914  0.0  0.0  20164   972 ?        Ss   11:03   0:00      \_ jailshell (nigeria) [48931] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   48931  0.0  0.0  20164   264 ?        S    11:03   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   48935  6.0  0.6 400652 15936 ?        S    11:03   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        588  0.0  0.0  24208     0 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        605  0.0  0.0 114704   136 ttyS0    Ss+  09:46   0:00 /bin/bash
root        606  0.0  0.0 108296   148 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    616  0.0  0.1  89116  3604 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    969  0.0  0.0  11796    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        971  0.2 14.1 1763032 341816 ?      Ssl  09:46   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        975  0.0  0.2 232784  5300 ?        Ssl  09:46   0:01 /usr/sbin/rsyslogd -n
named       976  0.0  1.3 637928 31740 ?        Ssl  09:46   0:02 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        977  0.0  0.1 397344  3124 ?        Ss   09:46   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  48673 32.3  2.9 461848 71272 ?        R    11:02   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  48677 31.1  2.9 461984 71280 ?        R    11:02   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  48770 33.1  2.9 461848 71212 ?        R    11:02   0:04  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   48849  0.0  0.2 397064  5612 ?        S    11:02   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  48869 34.6  2.5 451096 61292 ?        R    11:03   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  48902 27.0  2.4 449560 59516 ?        R    11:03   0:00  \_ php-fpm: pool health_oyostate_gov_ng
cloudw    48975 14.0  1.6 431888 40172 ?        R    11:03   0:00  \_ php-fpm: pool cloudware_ng
systuser    982  0.0  0.5 114016 12660 ?        Ssl  09:46   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        983  0.0  0.0 572372   928 ?        Ssl  09:46   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
memcach+    985  0.0  0.0 342400     4 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    986  0.0  0.1   9688  2768 ?        Rs   09:46   0:03 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        987  0.0  0.0 386112   604 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    988  0.0  0.0  11348    36 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        989  0.0  0.0 385496   684 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        990  0.0  0.0 153404   376 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
systuser    992  0.0  0.0 111608  1560 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        995  0.0  0.4 436392 11288 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        998  0.0  0.0 392856   268 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
telegraf   1006  0.0  1.3 5654048 33236 ?       SLsl 09:46   0:02 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1010  0.0  0.0  51508   512 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1129  0.0  0.0  46912  1964 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1130  0.0  0.1  47328  2696 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1131  0.0  0.0  10320   420 ?        S    09:46   0:00  \_ dovecot/anvil
root       1132  0.0  0.0  10452   584 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1133  0.0  0.0  46912  2192 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1134  0.0  0.0  47360  1936 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1142  0.0  0.0  24528  2280 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1144  0.0  0.0  13568   480 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1221  0.0  0.0  41168  1216 ?        S    09:46   0:00  \_ dovecot/auth
root      47946  0.0  0.1  41052  2796 ?        S    11:01   0:00  \_ dovecot/auth -w
root       1012  0.0  0.2 261028  6428 ?        Ss   09:46   0:00 cpsrvd (SSL) - waiting for connections                   
root      48844  0.0  0.0      0     0 ?        Z    11:02   0:00  \_ [cpaneld - servi] <defunct>
root       1024  0.0  0.1 445028  2648 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser   1025  0.0  0.0 112524  1984 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1031  0.0  0.0 111304   512 ?        Ss   09:46   0:00 /usr/sbin/sshd -D
root      48404  0.0  0.1 111304  4276 ?        Ss   11:02   0:00  \_ sshd: [accepted]
sshd      48405  0.0  0.1 115644  2632 ?        S    11:02   0:00  |   \_ sshd: [net]
root      48407  0.0  0.1 111304  4272 ?        Ss   11:02   0:00  \_ sshd: [accepted]
root      48410  0.0  0.1 111304  4264 ?        Ss   11:02   0:00  \_ sshd: [accepted]
root      48621  0.0  0.1 111304  4456 ?        Ss   11:02   0:00  \_ sshd: [accepted]
sshd      48622  0.0  0.1 115644  2632 ?        S    11:02   0:00  |   \_ sshd: [net]
root      48838  0.0  0.2 157100  5080 ?        Ss   11:02   0:00  \_ sshd: unknown [priv]
sshd      48839  0.0  0.1 115644  2632 ?        S    11:02   0:00  |   \_ sshd: unknown [net]
root      48871  0.0  0.2 157100  5076 ?        Ss   11:03   0:00  \_ sshd: unknown [priv]
sshd      48875  0.0  0.1 115644  2628 ?        S    11:03   0:00  |   \_ sshd: unknown [net]
root      48880  0.0  0.1 111304  4268 ?        Ss   11:03   0:00  \_ sshd: [accepted]
systuser   1204  0.0  0.1 157704  2948 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1217  0.0  1.4 410452 36032 ?        Ss   09:46   0:03 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1218  0.0  0.5 387528 13384 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.8 209128 20592 ?        Ss   09:46   0:00 tailwatchd
root       1266  0.0  0.0 167452  1268 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1268  0.0  0.1 183900  4400 ?        Ss   09:46   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1699  0.0  0.0 299272   768 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1428 ?        SN   09:46   0:00 cpanellogd - updating bandwidth
root      48700  7.0  1.6 208280 40200 ?        RN   11:02   0:01  \_ cpanellogd - updating bandwidth for workflowmanageme
mysql      1773  2.5  9.6 1458324 234508 ?      Sl   09:46   1:56 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  0.3 267032  8216 ?        Ss   09:46   0:00 /usr/sbin/httpd -k start
root       1952  0.0  0.0  12748   432 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1953  0.0  0.0  12732   400 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1954  0.0  0.0  12752   404 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1963  0.0  0.0  53268   196 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     2965  0.1  0.8 277828 21176 ?        S    09:48   0:05  \_ /usr/sbin/httpd -k start
nobody    42247  0.1  0.8 277560 19468 ?        S    10:53   0:00  \_ /usr/sbin/httpd -k start
nobody    43750  0.1  0.7 277540 19192 ?        S    10:55   0:00  \_ /usr/sbin/httpd -k start
nobody    48998  0.0  0.6 277540 15028 ?        R    11:03   0:00  |   \_ /usr/sbin/httpd -k start
nobody    43772  0.1  0.7 277840 19308 ?        S    10:55   0:00  \_ /usr/sbin/httpd -k start
nobody    43791  0.1  0.8 277540 19376 ?        S    10:55   0:00  \_ /usr/sbin/httpd -k start
nobody    43839  0.1  0.7 277560 19292 ?        S    10:55   0:00  \_ /usr/sbin/httpd -k start
nobody    44872  0.0  0.8 277884 19516 ?        S    10:57   0:00  \_ /usr/sbin/httpd -k start
nobody    45049  0.1  0.7 277516 19264 ?        S    10:58   0:00  \_ /usr/sbin/httpd -k start
nobody    45152  0.1  0.7 277516 19260 ?        S    10:58   0:00  \_ /usr/sbin/httpd -k start
nobody    45213  0.1  0.8 277912 19380 ?        S    10:58   0:00  \_ /usr/sbin/httpd -k start
nobody    45214  0.1  0.8 277884 19404 ?        S    10:58   0:00  \_ /usr/sbin/httpd -k start
nobody    46169  0.1  0.7 277536 19132 ?        S    10:59   0:00  \_ /usr/sbin/httpd -k start
nobody    47079  0.1  0.7 277648 19208 ?        S    11:00   0:00  \_ /usr/sbin/httpd -k start
nobody    47337  0.1  0.7 277880 19132 ?        S    11:00   0:00  \_ /usr/sbin/httpd -k start
nobody    47741  0.0  0.7 277516 18956 ?        S    11:01   0:00  \_ /usr/sbin/httpd -k start
nobody    47765  0.1  0.7 277596 19036 ?        S    11:01   0:00  \_ /usr/sbin/httpd -k start
nobody    47766  0.0  0.7 277524 18964 ?        S    11:01   0:00  \_ /usr/sbin/httpd -k start
nobody    47776  0.1  0.7 277536 18768 ?        S    11:01   0:00  \_ /usr/sbin/httpd -k start
nobody    47777  0.1  0.7 277896 19080 ?        S    11:01   0:00  \_ /usr/sbin/httpd -k start
nobody    47778  0.1  0.7 277884 19272 ?        S    11:01   0:00  \_ /usr/sbin/httpd -k start
nobody    47779  0.0  0.7 277888 19312 ?        S    11:01   0:00  \_ /usr/sbin/httpd -k start
nobody    48861  0.0  0.7 277516 17456 ?        S    11:02   0:00  \_ /usr/sbin/httpd -k start
nobody    48878  0.0  0.7 277516 17456 ?        S    11:03   0:00  \_ /usr/sbin/httpd -k start
root       2286  0.1  0.4 181476 10324 ?        Ss   09:46   0:04 lfd - sleeping
oysipao+  10754  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+  10763  0.0  0.0   3152   528 ?        S    10:01   0:00  \_ [kworker]
root      40228  0.3  4.9 248032 119516 ?       Ss   10:50   0:02 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      47195  0.0  4.8 249172 118284 ?       S    11:00   0:00  \_ spamd child
root      47196  0.0  4.8 248032 116972 ?       S    11:00   0:00  \_ spamd child
root      46911  0.0  0.4 1276100 10556 ?       Ssl  11:00   0:00 /usr/bin/cspdaemon
root      46948  0.0  0.6 1277056 15060 ?       Ssl  11:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 26289  Threads: 11  Questions: 849536  Slow queries: 0  Opens: 2641  Flush tables: 1  Open tables: 1956  Queries per second avg: 32.315
*************************** 1. row ***************************
     Id: 12586
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 12589
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 12591
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 4. row ***************************
     Id: 12595
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 12596
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 6. row ***************************
     Id: 12598
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 7. row ***************************
     Id: 12599
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 8. row ***************************
     Id: 12600
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 9. row ***************************
     Id: 12602
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 10. row ***************************
     Id: 12603
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 11. row ***************************
     Id: 12605
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 103.252.89.75 TIME_WAIT
      1 104.253.247.128 TIME_WAIT
      1 107.175.196.101 TIME_WAIT
      1 138.226.24.129 TIME_WAIT
      1 ::1 TIME_WAIT
      1 45.227.253.15 TIME_WAIT
      1 47.128.26.51 TIME_WAIT
      1 52.167.144.204 TIME_WAIT
      1 66.249.70.193 TIME_WAIT
      1 66.249.70.195 TIME_WAIT
      1 84.239.25.19 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 130.33.59.10 TIME_WAIT
     25 103.253.27.28 TIME_WAIT
     26 103.253.27.139 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 11:03:03 WAT
   Restart Time: Saturday, 08-Nov-2025 03:45:00 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 7 hours 18 minutes 2 seconds
   Server load: 8.65 5.79 3.13
   Total accesses: 23951 - Total Traffic: 347.6 MB - Total Duration: 14266403
   CPU Usage: u8.12 s2.98 cu209.54 cs143.32 - 1.38% CPU load
   .911 requests/sec - 13.5 kB/second - 14.9 kB/request - 595.65 ms/request
   20 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

WWWWKKK.._WKWWW._WWRKWRW..............W........_................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client      Protocol           VHost                             Request
   0-0  48861 0/1/1409    W 0.00  1   0    837257 0.0   0.00  22.31 89.187.162.104  http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   1-0  44872 0/107/1430  W 0.71  1   0    764042 0.0   3.14  20.30 89.187.162.104  http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   2-0  47741 0/34/1261   W 0.17  1   0    838693 0.0   0.29  24.32 217.113.194.125 http/1.1 cloudware.ng:443           GET /category/computer-software/ HTTP/1.1
   3-0  48878 0/1/1270    W 0.00  0   0    728781 0.0   0.00  18.22 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   4-0  47337 4/49/1358   K 0.43  4   405  798119 125.1 0.50  21.11 66.249.70.195   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2894789290 HTTP/1.1
   5-0  45049 1/207/1282  K 0.84  4   507  742943 32.6  0.94  18.25 66.249.70.198   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2671540409 HTTP/1.1
   6-0  2965  1/1422/1422 K 19.14 0   564  811661 31.5  19.16 19.16 66.249.70.194   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3396945593 HTTP/1.1
   7-0  -     0/0/1080    . 0.00  13  0    654434 0.0   0.00  15.94 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   8-0  -     0/0/1261    . 0.00  73  0    552158 0.0   0.00  15.26 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   9-0  45152 0/114/1194  _ 1.10  0   1324 730175 0.0   1.15  17.64 89.187.162.104  http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   10-0 42247 0/180/906   W 2.54  0   0    575336 0.0   2.39  13.50 89.187.162.104  http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   11-0 46169 1/71/1000   K 0.60  2   541  563297 31.0  0.69  14.39 66.249.70.197   http/1.1 schoolplus.cloudware.ng:80 GET /?p=4156492833 HTTP/1.1
   12-0 45213 0/114/1192  W 0.74  1   0    639977 0.0   0.87  14.57 89.187.162.104  http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   13-0 45214 0/112/1058  W 0.98  1   0    631931 0.0   0.88  16.62 89.187.162.104  http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   14-0 43750 2/180/603   W 2.06  0   0    418050 61.5  2.18  9.63  66.249.70.196   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2291830056 HTTP/1.1
   15-0 -     0/0/782     . 0.00  71  0    425917 0.0   0.00  11.81 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 47079 0/51/940    _ 0.49  0   1571 535798 0.0   0.73  15.50 89.187.162.104  http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   17-0 47765 0/125/886   W 0.30  0   0    442904 0.0   0.40  10.48 89.187.162.104  http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   18-0 47766 0/31/847    W 0.11  1   0    428426 0.0   0.19  11.81 103.253.27.28   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   19-0 47776 0/97/830    R 0.40  1   832  409566 0.0   0.36  10.67 89.187.162.104  http/1.1 health.oyostate.gov.ng:443
   20-0 47777 5/35/178    K 0.30  1   445  142150 154.5 0.37  2.68  66.249.70.199   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2757054358 HTTP/1.1
   21-0 47778 0/33/42     W 0.24  0   0    67558  0.0   0.26  0.36  89.187.162.104  http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   22-0 47779 0/34/553    R 0.16  0   2    339164 0.0   0.23  9.45  185.191.171.12  http/1.1 nigeriadecide.org:443
   23-0 43772 0/150/185   W 1.46  0   0    258075 0.0   1.39  1.76  103.253.27.139  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   24-0 -     0/0/72      . 0.00  397 0    33687  0.0   0.00  1.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/18      . 0.00  357 0    7478   0.0   0.00  0.17  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/8       . 0.00  391 0    2104   0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/3       . 0.00  417 0    1155   0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/2       . 0.00  423 0    5      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/16      . 0.00  358 0    7009   0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/8       . 0.00  399 0    2127   0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/2       . 0.00  419 0    13     0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/6       . 0.00  405 0    2739   0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/2       . 0.00  422 0    1      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/5       . 0.00  400 0    2035   0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/7       . 0.00  394 0    2468   0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/78      . 0.00  143 0    121446 0.0   0.00  0.71  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/4       . 0.00  404 0    2767   0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 43791 0/176/176   W 1.24  0   0    219818 0.0   1.58  1.58  89.187.162.104  http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   39-0 -     0/0/3       . 0.00  413 0    50     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/5       . 0.00  403 0    2478   0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/21      . 0.00  350 0    11757  0.0   0.00  0.53  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/8       . 0.00  393 0    3645   0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/3       . 0.00  410 0    709    0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/3       . 0.00  415 0    703    0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/2       . 0.00  421 0    2      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/9       . 0.00  381 0    2869   0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 43839 0/161/161   _ 2.27  0   1170 228999 0.0   3.62  3.62  89.187.162.104  http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   48-0 -     0/0/8       . 0.00  392 0    2838   0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/10      . 0.00  395 0    5104   0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/160     . 0.00  53  0    174079 0.0   0.00  1.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/7       . 0.00  396 0    2028   0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/175     . 0.00  185 0    89852  0.0   0.00  1.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1796
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 0...28)
   index usage: 31%, cache usage: 45%
   total entries stored since starting: 6844
   total entries replaced since starting: 0
   total entries expired since starting: 5044
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 15 miss
   total removes since starting: 4 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit