403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.12.09.txt
 ## swap threshold exceeded
## server overview
2025-11-08.12.09 load[1] mem[60/65] mysql[2/11] httpd[18]
              total        used        free      shared  buff/cache   available
Mem:           2363        1397         180          43         785         753
Swap:          1999        1379         620
 12:09:01 up  2:22,  0 users,  load average: 1.31, 0.88, 0.86
## system overview
top - 12:09:01 up  2:22,  0 users,  load average: 1.31, 0.88, 0.86
Tasks: 216 total,   6 running, 209 sleeping,   0 stopped,   1 zombie
%Cpu(s): 75.8 us, 24.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   171016 free,  1444296 used,   804988 buff/cache
KiB Swap:  2047996 total,   635388 free,  1412608 used.   758616 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 89069 healtho+  20   0  439324  50044   4208 R  50.0  2.1   0:00.53 php-fpm: +
  1773 mysql     20   0 1458588 238976   3752 S  37.5  9.9   3:29.94 /usr/sbin+
 89140 root      20   0  169872  16848   2876 D  31.2  0.7   0:00.09 /usr/loca+
 89045 healtho+  20   0  451100  61352   4180 R  25.0  2.5   0:00.91 php-fpm: +
    14 root      20   0       0      0      0 S   6.2  0.0   0:01.51 [ksoftirq+
 89148 nigeria   20   0  400652  15936  10220 S   6.2  0.7   0:00.03 /opt/cpan+
     1 root      20   0   44424   3668   1712 S   0.0  0.2   0:13.87 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.98 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.18 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:10.87 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.16 [migratio+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:13.34 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   243 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   259 root       0 -20       0      0      0 S   0.0  0.0   0:01.43 [kworker/+
   268 root       0 -20       0      0      0 S   0.0  0.0   0:01.13 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.62 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39496   8300   7984 S   0.0  0.3   0:05.54 /usr/lib/+
   384 root      20   0   45352    372    216 S   0.0  0.0   0:00.35 /usr/lib/+
   407 root      16  -4   55532    516    388 S   0.0  0.0   0:00.94 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0  224280   7584   1352 S   0.0  0.3   0:00.26 queueproc+
   491 rpc       20   0   69256    212    108 S   0.0  0.0   0:00.01 /sbin/rpc+
   512 dbus      20   0   58768   1472    708 S   0.0  0.1   0:04.65 /usr/bin/+
   538 root      20   0   21540    432    324 S   0.0  0.0   0:00.19 /usr/sbin+
   539 root      20   0   52852    396    300 S   0.0  0.0   0:00.01 /usr/sbin+
   540 root      20   0   24896   1476    840 S   0.0  0.1   0:02.08 /usr/lib/+
   541 root      20   0  152780    228    184 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0    4388    128    124 S   0.0  0.0   0:00.00 /usr/sbin+
   544 polkitd   20   0  610540    968    512 S   0.0  0.0   0:01.23 /usr/lib/+
   547 nscd      20   0  928956   1504    808 S   0.0  0.1   0:04.54 /usr/sbin+
   566 root      20   0  195208     44     44 S   0.0  0.0   0:00.00 /usr/sbin+
   582 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   586 root      20   0  124472    488    360 S   0.0  0.0   0:00.25 /usr/sbin+
   588 root      20   0   24208    160    136 S   0.0  0.0   0:00.00 /usr/sbin+
   605 root      20   0  114704    136    136 S   0.0  0.0   0:00.02 /bin/bash
   606 root      20   0  108296    148    144 S   0.0  0.0   0:00.00 /sbin/age+
   616 mailnull  20   0   89116   4028   1008 S   0.0  0.2   0:00.16 /usr/sbin+
   679 root       0 -20       0      0      0 S   0.0  0.0   0:02.46 [loop0]
   709 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   969 systuser  20   0   11796     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   971 root      20   0 1763032 196676    904 S   0.0  8.1   0:13.56 /usr/loca+
   975 root      20   0  240976  10388   6960 S   0.0  0.4   0:02.70 /usr/sbin+
   976 named     20   0 1186804  33768   1632 S   0.0  1.4   0:04.91 /usr/sbin+
   977 root      20   0  397344   3136    716 S   0.0  0.1   0:02.62 php-fpm: +
   982 systuser  20   0  114016  12960   2624 S   0.0  0.5   0:02.09 /usr/loca+
   983 root      20   0  572372    928    360 S   0.0  0.0   0:00.81 /usr/bin/+
   985 memcach+  20   0  342400      4      4 S   0.0  0.0   0:00.18 /usr/bin/+
   986 cpanelc+  20   0   10340   3504   2436 S   0.0  0.1   0:07.02 /usr/loca+
   987 root      20   0  386112    820    608 S   0.0  0.0   0:00.26 php-fpm: +
   988 systuser  20   0   11348     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   989 root      20   0  385496    744    536 S   0.0  0.0   0:00.27 php-fpm: +
   990 root      20   0  153404    376    296 S   0.0  0.0   0:00.18 pure-ftpd+
   992 systuser  20   0  111608   1560      0 S   0.0  0.1   0:00.00 /usr/loca+
   995 root      20   0  436392  11392  11180 S   0.0  0.5   0:00.33 php-fpm: +
   998 root      20   0  392856    572    404 S   0.0  0.0   0:00.24 php-fpm: +
  1006 telegraf  20   0 5654048  35992   5696 S   0.0  1.5   0:05.01 /usr/loca+
  1010 root      20   0   51508    576    412 S   0.0  0.0   0:00.13 /usr/sbin+
  1012 root      20   0  261032  29916   7548 S   0.0  1.2   0:01.41 cpsrvd (S+
  1024 root      20   0  445028   2648   2648 S   0.0  0.1   0:00.05 sw-engine+
  1025 systuser  20   0  112524   1984      0 S   0.0  0.1   0:00.01 /usr/loca+
  1031 root      20   0  111304    512    408 S   0.0  0.0   0:01.32 /usr/sbin+
  1129 dovenull  20   0   46984   2712   1932 S   0.0  0.1   0:00.14 dovecot/p+
  1130 dovenull  20   0   47600   3528   2240 S   0.0  0.1   0:00.10 dovecot/i+
  1131 dovecot   20   0   10320    404    288 S   0.0  0.0   0:00.02 dovecot/a+
  1132 root      20   0   10452    580    376 S   0.0  0.0   0:00.11 dovecot/l+
  1133 dovenull  20   0   47188   2644   1708 S   0.0  0.1   0:00.19 dovecot/p+
  1134 dovenull  20   0   47500   3424   2240 S   0.0  0.1   0:00.10 dovecot/i+
  1142 root      20   0   24700   2368    456 S   0.0  0.1   0:00.07 dovecot/c+
  1144 dovecot   20   0   13568    664    436 S   0.0  0.0   0:00.01 dovecot/s+
  1204 systuser  20   0  157704   2896    864 S   0.0  0.1   0:00.06 SonarPush+
  1217 wp-tool+  20   0  410452  36048   2028 S   0.0  1.5   0:07.22 /usr/bin/+
  1218 wp-tool+  20   0  387528  13408   1784 S   0.0  0.6   0:00.16 /usr/bin/+
  1221 dovecot   20   0   41168   1516   1068 S   0.0  0.1   0:00.20 dovecot/a+
  1264 root      20   0  209420  20440   2924 S   0.0  0.8   0:01.08 tailwatchd
  1266 root      20   0  167452   1464    860 S   0.0  0.1   0:00.16 dnsadmin +
  1268 root      20   0  183900   6692   3460 S   0.0  0.3   0:00.53 cpdavd - +
  1699 root      20   0  299272    964    584 S   0.0  0.0   0:00.22 php-fpm: +
  1717 root      38  18  130416   1440    716 S   0.0  0.1   0:00.02 cpanellog+
  1947 root      20   0  267032   8220    812 S   0.0  0.3   0:00.63 /usr/sbin+
  1952 root      20   0   12816    436    324 S   0.0  0.0   0:01.00 /usr/loca+
  1953 root      20   0   12732    400    320 S   0.0  0.0   0:00.83 /usr/loca+
  1954 root      20   0   12856    404    280 S   0.0  0.0   0:00.91 /usr/loca+
  1963 root      20   0   53268    196    196 S   0.0  0.0   0:00.05 /usr/loca+
  2286 root      20   0  181984  11056   1212 S   0.0  0.5   0:08.62 lfd - sle+
 10754 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10763 oysipao+  20   0    3152    520     28 S   0.0  0.0   0:00.14 [kworker]
 40228 root      20   0  248032 119724   3100 S   0.0  4.9   0:03.26 /usr/loca+
 47195 root      20   0  259304 125916   2948 S   0.0  5.2   0:01.06 spamd chi+
 47196 root      20   0  248032 117188    604 S   0.0  4.8   0:00.00 spamd chi+
 50503 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 54240 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 67853 nobody    20   0  277540  20256   4588 S   0.0  0.8   0:01.74 /usr/sbin+
 67977 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 68001 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 71252 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 71949 cloudw    20   0  471856   9448   5048 S   0.0  0.4   0:01.31 php-fpm: +
 73427 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 74758 nobody    20   0  277532  19964   4396 S   0.0  0.8   0:00.89 /usr/sbin+
 76930 worencom  20   0   38484   3584   2568 S   0.0  0.1   0:00.00 dovecot/i+
 77613 cloudw    20   0  471840   9500   5084 S   0.0  0.4   0:00.96 php-fpm: +
 79320 nobody    20   0  277896  19248   3952 S   0.0  0.8   0:00.45 /usr/sbin+
 80859 nobody    20   0  277528  19212   4060 S   0.0  0.8   0:00.42 /usr/sbin+
 81209 nobody    20   0  277556  19764   4300 S   0.0  0.8   0:00.85 /usr/sbin+
 82096 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 83628 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 84079 root      20   0 1276100  10752    596 S   0.0  0.4   0:00.05 /usr/bin/+
 84123 root      20   0 1277056  11948    596 S   0.0  0.5   0:00.06 /usr/bin/+
 84530 nobody    20   0  277536  19416   4000 S   0.0  0.8   0:00.45 /usr/sbin+
 84976 nobody    20   0  277840  19568   4000 S   0.0  0.8   0:00.43 /usr/sbin+
 85018 nobody    20   0  277880  19288   3956 S   0.0  0.8   0:00.63 /usr/sbin+
 85108 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 86312 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 86570 nobody    20   0  277628  18788   3656 S   0.0  0.8   0:00.11 /usr/sbin+
 86590 nobody    20   0  277908  19724   4024 S   0.0  0.8   0:00.36 /usr/sbin+
 86591 nobody    20   0  277884  18936   3696 S   0.0  0.8   0:00.14 /usr/sbin+
 86596 nobody    20   0  277780  19500   4168 S   0.0  0.8   0:00.26 /usr/sbin+
 86598 nobody    20   0  277880  19244   3764 S   0.0  0.8   0:00.35 /usr/sbin+
 86844 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 86985 nobody    20   0  277556  19064   3780 S   0.0  0.8   0:00.34 /usr/sbin+
 87358 nobody    20   0  277552  19148   3908 S   0.0  0.8   0:00.24 /usr/sbin+
 87815 nobody    20   0  277532  18608   3636 S   0.0  0.8   0:00.16 /usr/sbin+
 88557 root      20   0   41052   2732   2088 S   0.0  0.1   0:00.00 dovecot/a+
 88645 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 88695 mailnull  20   0   90256   9692   4244 S   0.0  0.4   0:00.01 /usr/sbin+
 88732 nobody    20   0  277592  18776   3608 S   0.0  0.8   0:00.03 /usr/sbin+
 88779 cloudw    20   0  471784   9144   4740 S   0.0  0.4   0:00.19 php-fpm: +
 88834 root      20   0  111304   4436   3400 S   0.0  0.2   0:00.00 sshd: [ac+
 88835 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 88926 cloudw    20   0  471784   9152   4748 S   0.0  0.4   0:00.18 php-fpm: +
 88969 nigeria   20   0  397064   5612   2368 S   0.0  0.2   0:00.01 php-fpm: +
 88972 root      20   0   28936   2372   1948 S   0.0  0.1   0:00.00 dovecot/q+
 88997 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 88998 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 89001 root      20   0  261032  24496   2100 S   0.0  1.0   0:00.00 cpaneld -+
 89012 nobody    20   0  277744  18584   3580 S   0.0  0.8   0:00.02 /usr/sbin+
 89021 root      20   0  111304   4260   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 89022 healtho+  20   0  457376  67636   4216 S   0.0  2.8   0:02.02 php-fpm: +
 89039 mailnull  20   0   89500   5600   2352 S   0.0  0.2   0:00.00 /usr/sbin+
 89040 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 89053 cloudw    20   0  470992   6700   3344 S   0.0  0.3   0:00.04 php-fpm: +
 89074 root      20   0  162436   5828   4336 S   0.0  0.2   0:00.01 sshd: roo+
 89075 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 89085 nobody    20   0  277232  17564   3040 S   0.0  0.7   0:00.00 /usr/sbin+
 89090 root      20   0  183040   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 89091 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 89092 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 89094 root      20   0  183040   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 89095 root      20   0  183040   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 89096 root      20   0  183040   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 89097 root      20   0  183040   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 89098 root      20   0  183040   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 89099 root      20   0  183040   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 89100 root      20   0  183040   2132   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 89101 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89103 root      20   0  183040   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 89105 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 89106 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 89107 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 89121 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 89122 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 89123 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89124 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 89125 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 89126 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 89127 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89129 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89131 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89132 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 89133 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 89144 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 89145 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 89147 pactpay   20   0  476724  17112  11408 S   0.0  0.7   0:00.02 /opt/cpan+
 89160 nobody    20   0  276956  14888    700 S   0.0  0.6   0:00.00 /usr/sbin+
 89161 nobody    20   0  276956  14888    700 S   0.0  0.6   0:00.00 /usr/sbin+
 89169 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 89173 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 89178 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 89179 root      20   0  169872  16848   2876 R   0.0  0.7   0:00.00 /usr/loca+
 89180 cloudsms  20   0  113284    180      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:46   0:10  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:46   0:13  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        243  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        245  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        259  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/1:1H]
root        268  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        582  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        679  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [loop0]
root        709  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      50503  0.0  0.0      0     0 ?        S    11:05   0:00  \_ [kworker/u200:2]
root      54240  0.0  0.0      0     0 ?        S    11:11   0:00  \_ [kworker/1:0]
root      67977  0.0  0.0      0     0 ?        S    11:34   0:00  \_ [kworker/1:2]
root      68001  0.0  0.0      0     0 ?        S    11:34   0:00  \_ [kworker/0:0]
root      71252  0.0  0.0      0     0 ?        S    11:40   0:00  \_ [kworker/1:1]
root      73427  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/0:2]
root      82096  0.0  0.0      0     0 ?        S    11:58   0:00  \_ [kworker/0:1]
root      83628  0.0  0.0      0     0 ?        S    12:00   0:00  \_ [kworker/u200:0]
root      85108  0.0  0.0      0     0 ?        S    12:02   0:00  \_ [kworker/1:3]
root      86312  0.0  0.0      0     0 ?        S    12:04   0:00  \_ [kworker/1:4]
root      86844  0.0  0.0      0     0 ?        S    12:05   0:00  \_ [kworker/0:3]
root      88645  0.0  0.0      0     0 ?        S    12:08   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44424  3668 ?        Ss   09:46   0:13 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.3  39496  8300 ?        Ss   09:46   0:05 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   372 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   516 ?        S<sl 09:46   0:00 /sbin/auditd
root        489  0.0  0.3 224280  7584 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
rpc         491  0.0  0.0  69256   212 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        512  0.0  0.0  58768  1472 ?        Ss   09:46   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        538  0.0  0.0  21540   432 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        539  0.0  0.0  52852   396 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
root        540  0.0  0.0  24896  1476 ?        Ss   09:46   0:02 /usr/lib/systemd/systemd-logind
root        541  0.0  0.0 152780   228 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        542  0.0  0.0   4388   128 ?        Ss   09:46   0:00 /usr/sbin/acpid
polkitd     544  0.0  0.0 610540   968 ?        Ssl  09:46   0:01 /usr/lib/polkit-1/polkitd --no-debug
nscd        547  0.0  0.0 928956  1504 ?        Ssl  09:46   0:04 /usr/sbin/nscd
root        566  0.0  0.0 195208    44 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        586  0.0  0.0 124472   488 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      89090  0.0  0.0 183040  2140 ?        S    12:09   0:00  \_ /usr/sbin/CROND -n
root      89105  0.0  0.0 113284  1212 ?        Ss   12:09   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      89106  0.0  0.0 108052   360 ?        S    12:09   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      89107  0.0  0.0 113288  1520 ?        S    12:09   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      89181  0.0  0.0 153840  2096 ?        R    12:09   0:00  |               \_ ps auxf
root      89091  0.0  0.0 183040  2144 ?        S    12:09   0:00  \_ /usr/sbin/CROND -n
root      89124  0.0  0.0  20164   804 ?        Ss   12:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      89092  0.0  0.0 183040  2144 ?        S    12:09   0:00  \_ /usr/sbin/CROND -n
root      89131  0.0  0.0  20164   808 ?        Ss   12:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      89094  0.0  0.0 183040  2140 ?        S    12:09   0:00  \_ /usr/sbin/CROND -n
root      89127  0.0  0.0  20164   808 ?        Ss   12:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      89095  0.0  0.0 183040  2140 ?        S    12:09   0:00  \_ /usr/sbin/CROND -n
root      89125  0.0  0.0  20164   804 ?        Ss   12:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      89096  0.0  0.0 183040  2140 ?        S    12:09   0:00  \_ /usr/sbin/CROND -n
root      89129  0.0  0.0  20164   808 ?        Ss   12:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      89097  0.0  0.0 183040  2136 ?        S    12:09   0:00  \_ /usr/sbin/CROND -n
root      89122  0.0  0.0  20164   984 ?        Ss   12:09   0:00  |   \_ jailshell (cloudsms) [89173] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  89173  0.0  0.0  20164   260 ?        S    12:09   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  89178  0.0  0.0 113284  1212 ?        S    12:09   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  89180  0.0  0.4 396264 11048 ?        R    12:09   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue4.php
root      89098  0.0  0.0 183040  2136 ?        S    12:09   0:00  \_ /usr/sbin/CROND -n
root      89133  0.0  0.0  20164   804 ?        Ss   12:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      89099  0.0  0.0 183040  2136 ?        S    12:09   0:00  \_ /usr/sbin/CROND -n
root      89123  0.0  0.0  20164   808 ?        Ss   12:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      89100  0.0  0.0 183040  2132 ?        S    12:09   0:00  \_ /usr/sbin/CROND -n
root      89132  0.0  0.0 113284  1212 ?        Ss   12:09   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      89140  0.0  0.6 169872 16848 ?        S    12:09   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      89179  0.0  0.0 113496  1420 ?        S    12:09   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root      89182  0.0  0.0 113496   188 ?        R    12:09   0:00  |               \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root      89101  0.0  0.0 183040  2140 ?        S    12:09   0:00  \_ /usr/sbin/CROND -n
root      89126  0.0  0.0  20164   964 ?        Ss   12:09   0:00  |   \_ jailshell (pactpay) [89144] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   89144  0.0  0.0  20164   260 ?        S    12:09   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   89147  0.0  0.7 476724 17112 ?        S    12:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      89103  0.0  0.0 183040  2136 ?        S    12:09   0:00  \_ /usr/sbin/CROND -n
root      89121  0.0  0.0  20164   964 ?        Ss   12:09   0:00      \_ jailshell (nigeria) [89145] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   89145  0.0  0.0  20164   260 ?        S    12:09   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   89148  0.0  0.6 400652 15936 ?        S    12:09   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        588  0.0  0.0  24208   160 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        605  0.0  0.0 114704   136 ttyS0    Ss+  09:46   0:00 /bin/bash
root        606  0.0  0.0 108296   148 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    616  0.0  0.1  89116  4028 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  88695  0.0  0.4  90256  9692 ?        S    12:08   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  89039  0.0  0.2  89500  5600 ?        S    12:08   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    969  0.0  0.0  11796    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        971  0.1  8.1 1763032 196676 ?      Ssl  09:46   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        975  0.0  0.4 240976 10388 ?        Ssl  09:46   0:02 /usr/sbin/rsyslogd -n
named       976  0.0  1.3 1186804 33768 ?       Ssl  09:46   0:04 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        977  0.0  0.1 397344  3136 ?        Ss   09:46   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    71949  0.0  0.3 471856  9448 ?        S    11:41   0:01  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    77613  0.0  0.3 471840  9500 ?        S    11:50   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    88779  0.4  0.3 471784  9144 ?        S    12:08   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    88926  0.7  0.3 471784  9152 ?        S    12:08   0:00  \_ php-fpm: pool edoocds_cloudware_ng
nigeria   88969  0.0  0.2 397064  5612 ?        S    12:08   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  89022 22.4  2.7 457376 67636 ?        S    12:08   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  89045 18.6  2.5 451100 61352 ?        R    12:08   0:00  \_ php-fpm: pool health_oyostate_gov_ng
cloudw    89053  1.0  0.2 470992  6700 ?        S    12:08   0:00  \_ php-fpm: pool edoocds_cloudware_ng
healtho+  89069 18.0  2.1 441372 50836 ?        R    12:08   0:00  \_ php-fpm: pool health_oyostate_gov_ng
systuser    982  0.0  0.5 114016 12960 ?        Ssl  09:46   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        983  0.0  0.0 572372   928 ?        Ssl  09:46   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
memcach+    985  0.0  0.0 342400     4 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    986  0.0  0.1  10340  3504 ?        Ss   09:46   0:07 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        987  0.0  0.0 386112   820 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    988  0.0  0.0  11348    36 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        989  0.0  0.0 385496   744 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        990  0.0  0.0 153404   376 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
systuser    992  0.0  0.0 111608  1560 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        995  0.0  0.4 436392 11392 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        998  0.0  0.0 392856   572 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
telegraf   1006  0.0  1.4 5654048 35992 ?       SLsl 09:46   0:05 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1010  0.0  0.0  51508   576 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1129  0.0  0.1  46984  2712 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1130  0.0  0.1  47600  3528 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1131  0.0  0.0  10320   404 ?        S    09:46   0:00  \_ dovecot/anvil
root       1132  0.0  0.0  10452   580 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1133  0.0  0.1  47188  2644 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1134  0.0  0.1  47500  3424 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1142  0.0  0.0  24700  2368 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1144  0.0  0.0  13568   664 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1221  0.0  0.0  41168  1516 ?        S    09:46   0:00  \_ dovecot/auth
worencom  76930  0.0  0.1  38484  3584 ?        S    11:49   0:00  \_ dovecot/imap
root      88557  0.0  0.1  41052  2732 ?        S    12:07   0:00  \_ dovecot/auth -w
root      88972  0.0  0.0  28936  2372 ?        S    12:08   0:00  \_ dovecot/quota-status -p postfix
root       1012  0.0  1.2 261032 29916 ?        Ss   09:46   0:01 cpsrvd (SSL) - waiting for connections                   
root      89001  0.0  1.0 261032 24496 ?        S    12:08   0:00  \_ cpaneld - serving 162.142.125.34
root      89040  0.0  0.0      0     0 ?        Z    12:08   0:00  \_ [cpaneld - servi] <defunct>
root       1024  0.0  0.1 445028  2648 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser   1025  0.0  0.0 112524  1984 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1031  0.0  0.0 111304   512 ?        Ss   09:46   0:01 /usr/sbin/sshd -D
root      88834  0.0  0.1 111304  4436 ?        Ss   12:08   0:00  \_ sshd: [accepted]
sshd      88835  0.0  0.1 115644  2628 ?        S    12:08   0:00  |   \_ sshd: [net]
root      88997  0.0  0.1 111304  4264 ?        Ss   12:08   0:00  \_ sshd: [accepted]
sshd      88998  0.0  0.1 115644  2628 ?        S    12:08   0:00  |   \_ sshd: [net]
root      89021  0.0  0.1 111304  4260 ?        Ss   12:08   0:00  \_ sshd: [accepted]
root      89074  1.0  0.2 162436  5828 ?        Ss   12:09   0:00  \_ sshd: root [priv]
sshd      89075  0.0  0.1 115644  2628 ?        S    12:09   0:00      \_ sshd: root [net]
systuser   1204  0.0  0.1 157704  2896 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1217  0.0  1.4 410452 36048 ?        Ss   09:46   0:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1218  0.0  0.5 387528 13408 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.8 209420 20440 ?        Ss   09:46   0:01 tailwatchd
root       1266  0.0  0.0 167452  1464 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1268  0.0  0.2 183900  6692 ?        Ss   09:46   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1699  0.0  0.0 299272   964 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1440 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1773  2.4  9.8 1458588 238976 ?      Sl   09:46   3:29 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  0.3 267032  8220 ?        Ss   09:46   0:00 /usr/sbin/httpd -k start
root       1952  0.0  0.0  12816   436 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1953  0.0  0.0  12732   400 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1954  0.0  0.0  12856   404 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1963  0.0  0.0  53268   196 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    67853  0.0  0.8 277540 20256 ?        S    11:33   0:01  \_ /usr/sbin/httpd -k start
nobody    74758  0.0  0.8 277532 19964 ?        S    11:46   0:00  \_ /usr/sbin/httpd -k start
nobody    79320  0.0  0.7 277896 19248 ?        S    11:53   0:00  \_ /usr/sbin/httpd -k start
nobody    80859  0.0  0.7 277528 19212 ?        S    11:56   0:00  \_ /usr/sbin/httpd -k start
nobody    81209  0.1  0.8 277556 19764 ?        S    11:56   0:00  \_ /usr/sbin/httpd -k start
nobody    84530  0.0  0.8 277536 19416 ?        S    12:01   0:00  \_ /usr/sbin/httpd -k start
nobody    84976  0.1  0.8 277840 19568 ?        S    12:01   0:00  \_ /usr/sbin/httpd -k start
nobody    85018  0.1  0.7 277880 19288 ?        S    12:01   0:00  \_ /usr/sbin/httpd -k start
nobody    86570  0.0  0.7 277628 18788 ?        S    12:04   0:00  \_ /usr/sbin/httpd -k start
nobody    86590  0.1  0.8 277908 19724 ?        S    12:04   0:00  \_ /usr/sbin/httpd -k start
nobody    86591  0.0  0.7 277884 18936 ?        S    12:04   0:00  \_ /usr/sbin/httpd -k start
nobody    86596  0.0  0.8 277780 19500 ?        S    12:04   0:00  \_ /usr/sbin/httpd -k start
nobody    86598  0.1  0.7 277880 19244 ?        S    12:04   0:00  \_ /usr/sbin/httpd -k start
nobody    86985  0.1  0.7 277556 19064 ?        S    12:05   0:00  \_ /usr/sbin/httpd -k start
nobody    87358  0.1  0.7 277552 19148 ?        S    12:05   0:00  \_ /usr/sbin/httpd -k start
nobody    87815  0.1  0.7 277532 18608 ?        S    12:06   0:00  \_ /usr/sbin/httpd -k start
nobody    88732  0.0  0.7 277592 18776 ?        S    12:08   0:00  \_ /usr/sbin/httpd -k start
nobody    89012  0.1  0.7 277744 18584 ?        S    12:08   0:00  \_ /usr/sbin/httpd -k start
nobody    89085  0.0  0.7 277232 17564 ?        S    12:09   0:00  \_ /usr/sbin/httpd -k start
nobody    89160  0.0  0.6 276956 14888 ?        S    12:09   0:00  \_ /usr/sbin/httpd -k start
nobody    89161  0.0  0.6 276956 14888 ?        S    12:09   0:00  \_ /usr/sbin/httpd -k start
root       2286  0.1  0.4 181984 11056 ?        Ss   09:46   0:08 lfd - sleeping
oysipao+  10754  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+  10763  0.0  0.0   3152   520 ?        S    10:01   0:00  \_ [kworker]
root      40228  0.0  4.9 248032 119724 ?       Ss   10:50   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      47195  0.0  5.2 259304 125916 ?       S    11:00   0:01  \_ spamd child
root      47196  0.0  4.8 248032 117188 ?       S    11:00   0:00  \_ spamd child
root      84079  0.0  0.4 1276100 10752 ?       Ssl  12:00   0:00 /usr/bin/cspdaemon
root      84123  0.0  0.4 1277056 11948 ?       Ssl  12:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 30248  Threads: 5  Questions: 1544885  Slow queries: 0  Opens: 3492  Flush tables: 1  Open tables: 1986  Queries per second avg: 51.073
*************************** 1. row ***************************
     Id: 22438
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 22441
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 22442
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 22446
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 22449
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.136.120 TIME_WAIT
      1 173.252.70.32 TIME_WAIT
      1 ::1 TIME_WAIT
      1 47.128.28.150 TIME_WAIT
      1 66.249.70.193 TIME_WAIT
      1 66.249.70.200 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 150.136.91.248 TIME_WAIT
     10 105.113.58.231 TIME_WAIT
     10 124.248.184.195 TIME_WAIT
     39 103.253.27.139 TIME_WAIT
     39 103.253.27.28 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 12:09:02 WAT
   Restart Time: Saturday, 08-Nov-2025 03:45:00 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 24 minutes 1 second
   Server load: 1.31 0.88 0.86
   Total accesses: 43815 - Total Traffic: 660.0 MB - Total Duration: 37432142
   CPU Usage: u5.94 s2.51 cu398.92 cs265.12 - 2.22% CPU load
   1.45 requests/sec - 22.3 kB/second - 15.4 kB/request - 854.323 ms/request
   17 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

W_KWKRWWKKK_RWWK__W..W.....W....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req    Dur   Conn Child  Slot     Client      Protocol           VHost                                        Request
   0-0  86570 0/32/2435  W 0.35 0    0    2251726 0.0  0.58  40.12 103.253.27.139  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   1-0  84530 0/104/2457 _ 1.71 0    0    1774420 0.0  1.84  43.61 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   2-0  87358 3/61/2149  K 0.81 1    443  2267858 97.2 0.94  38.85 66.249.70.192   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3828539771 HTTP/1.1
   3-0  79320 0/123/2218 W 2.21 45   0    2990227 0.0  8.62  38.18 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630333639372p2231223
   4-0  86985 3/76/2275  K 1.15 3    319  2182290 91.5 1.37  39.21 66.249.70.193   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3116517400 HTTP/1.1
   5-0  80859 0/125/2176 R 1.13 13   4    2076512 0.0  1.54  30.03 105.113.58.231  http/1.1
   6-0  86590 0/94/2345  W 1.37 0    0    1338141 0.0  1.33  34.98 124.248.184.195 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   7-0  87815 0/33/2077  W 0.61 5    0    1087862 0.0  0.63  28.46 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630333733372p2231223
   8-0  86591 1/33/2217  K 0.49 0    370  1831692 30.9 0.52  28.94 66.249.70.200   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2567789359 HTTP/1.1
   9-0  81209 1/211/2354 K 2.91 2    401  1962578 31.6 3.41  33.73 66.249.70.199   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3124961399 HTTP/1.1
   10-0 89012 1/8/1608   K 0.03 0    294  2333907 31.2 0.07  26.23 66.249.70.197   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2204216457 HTTP/1.1
   11-0 89085 0/1/2042   _ 0.00 0    25   1089529 0.0  0.01  31.64 116.203.134.67  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue4.php HTTP/1.1
   12-0 86596 0/71/1957  R 0.83 13   5    1044919 0.0  0.93  27.14 105.113.58.231  http/1.1
   13-0 88732 0/11/1568  W 0.02 25   0    984473  0.0  0.09  25.17 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630333731372p2231223
   14-0 84976 0/125/1739 W 1.47 0    0    810673  0.0  1.54  21.71 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   15-0 85018 1/220/1577 K 2.74 1    306  768552  31.7 2.59  23.26 66.249.70.195   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2478970094 HTTP/1.1
   16-0 89160 0/0/1376   _ 0.00 0    0    1947438 0.0  0.00  23.19 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 89161 0/0/1148   _ 0.00 0    0    1076637 0.0  0.00  14.42 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 67853 0/515/1618 W 5.87 0    0    2066093 0.0  6.60  20.89 103.253.27.28   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   19-0 -     0/0/1298   . 0.00 92   0    1043899 0.0  0.00  15.74 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/855    . 0.00 256  0    472930  0.0  0.00  14.84 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 86598 0/150/335  W 1.66 71   0    181406  0.0  1.25  3.92  173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630333637312p2231223
   22-0 -     0/0/1773   . 0.00 94   0    786642  0.0  0.00  24.46 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/731    . 0.00 1367 0    466407  0.0  0.00  8.24  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/77     . 0.00 1358 0    40454   0.0  0.00  1.25  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/19     . 0.00 1370 2036 11550   0.0  0.00  0.17  98.80.4.112     http/1.1
   26-0 -     0/0/11     . 0.00 1361 0    9391    0.0  0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 74758 2/212/215  W 3.23 0    0    1480478 62.6 4.08  4.09  66.249.70.196   http/1.1 schoolplus.cloudware.ng:80 GET /?p=75413576 HTTP/1.1
   28-0 -     0/0/5      . 0.00 1363 0    4898    0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/269    . 0.00 586  0    134925  0.0  0.00  6.92  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/8      . 0.00 4357 0    2127    0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/2      . 0.00 4377 0    13      0.0  0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/6      . 0.00 4363 0    2739    0.0  0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/2      . 0.00 4380 0    1       0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/5      . 0.00 4358 0    2035    0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/7      . 0.00 4352 0    2468    0.0  0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/78     . 0.00 4101 0    121446  0.0  0.00  0.71  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/4      . 0.00 4362 0    2767    0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/193    . 0.00 3904 0    241489  0.0  0.00  1.67  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/3      . 0.00 4371 0    50      0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/5      . 0.00 4361 0    2478    0.0  0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/21     . 0.00 4308 0    11757   0.0  0.00  0.53  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/8      . 0.00 4351 0    3645    0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/3      . 0.00 4368 0    709     0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/3      . 0.00 4373 0    703     0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/2      . 0.00 4379 0    2       0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/9      . 0.00 4339 0    2869    0.0  0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/172    . 0.00 3927 0    242408  0.0  0.00  3.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/8      . 0.00 4350 0    2838    0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/10     . 0.00 4353 0    5104    0.0  0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/160    . 0.00 4011 0    174079  0.0  0.00  1.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/7      . 0.00 4354 0    2028    0.0  0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/175    . 0.00 4144 0    89852   0.0  0.00  1.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 436
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 24 seconds, (range: 1...79)
   index usage: 7%, cache usage: 10%
   total entries stored since starting: 11681
   total entries replaced since starting: 0
   total entries expired since starting: 11237
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 45 miss
   total removes since starting: 8 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit