403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-15.23.03.txt
 ## swap threshold exceeded
## server overview
2025-11-15.23.03 load[0] mem[53/76] mysql[1/10] httpd[16]
              total        used        free      shared  buff/cache   available
Mem:           2363        1186         110          86        1066         925
Swap:          1999        1608         391
 23:03:01 up  8:38,  0 users,  load average: 0.36, 0.29, 0.32
## system overview
top - 23:03:01 up  8:38,  0 users,  load average: 0.36, 0.29, 0.32
Tasks: 197 total,   7 running, 189 sleeping,   0 stopped,   1 zombie
%Cpu(s): 62.5 us, 34.4 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  3.1 si,  0.0 st
KiB Mem :  2420300 total,    85768 free,  1241100 used,  1093432 buff/cache
KiB Swap:  2047996 total,   400412 free,  1647584 used.   921752 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  6013 healtho+  20   0  459496  67524   4056 R  46.7  2.8   0:02.78 php-fpm: +
  1785 mysql     20   0 1458332 263304   3484 S  20.0 10.9   7:43.27 /usr/sbin+
  6237 pactpay   20   0  479860  16168  10576 S  13.3  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44280   3448   1616 S   6.7  0.1   0:43.44 /usr/lib/+
   523 nscd      20   0 1264844   1952    912 S   6.7  0.1   0:25.91 /usr/sbin+
  6240 saboakin  20   0  404052  15612  10156 S   6.7  0.6   0:00.01 /opt/cpan+
  6241 nigeria   20   0  404052  16136  10380 R   6.7  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.01 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.53 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:32.35 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.41 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:06.02 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:19.96 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.53 [kauditd]
   234 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:02.54 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:02.08 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   343 root       0 -20       0      0      0 S   0.0  0.0   0:02.13 [kworker/+
   358 root      20   0   40244   8136   7828 S   0.0  0.3   0:15.32 /usr/lib/+
   385 root      20   0   45444    412    392 S   0.0  0.0   0:00.36 /usr/lib/+
   408 root      16  -4   55532    600    472 S   0.0  0.0   0:02.25 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   505 nobody    20   0  277844  20148   4352 S   0.0  0.8   0:00.73 /usr/sbin+
   512 root      20   0   21540    516    428 S   0.0  0.0   0:00.69 /usr/sbin+
   516 root      20   0  152780    328    284 S   0.0  0.0   0:00.02 /usr/sbin+
   521 root      20   0   24708   1328    956 S   0.0  0.1   0:07.21 /usr/lib/+
   524 root      20   0   52852    628    516 S   0.0  0.0   0:00.01 /usr/sbin+
   527 polkitd   20   0  612240   1304    908 S   0.0  0.1   0:04.24 /usr/lib/+
   529 root      20   0  224148   5424   1116 S   0.0  0.2   0:00.38 queueproc+
   531 dbus      20   0   58740   1504    788 S   0.0  0.1   0:16.35 /usr/bin/+
   539 rpc       20   0   69256    148     88 S   0.0  0.0   0:00.03 /sbin/rpc+
   541 root      20   0    4388     92     88 S   0.0  0.0   0:00.00 /usr/sbin+
   553 nobody    20   0  277480  19900   4236 S   0.0  0.8   0:00.60 /usr/sbin+
   555 root      20   0  195208    120    120 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    588    452 S   0.0  0.0   0:00.88 /usr/sbin+
   577 root      20   0   24208    140    112 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296    192    188 S   0.0  0.0   0:00.00 /sbin/age+
   591 root      20   0  114704    196    196 S   0.0  0.0   0:00.02 /bin/bash
   622 mailnull  20   0   89108   4112   1072 S   0.0  0.2   0:00.59 /usr/sbin+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.55 [loop0]
   721 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [jbd2/loo+
   722 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  111304    616    516 S   0.0  0.0   0:03.09 /usr/sbin+
   919 root      20   0 1350088   7848    200 S   0.0  0.3   0:19.99 /usr/bin/+
   920 systuser  20   0  111864     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   921 telegraf  20   0 5654304  35772   6088 S   0.0  1.5   0:17.16 /usr/loca+
   922 memcach+  20   0  342400    264    264 S   0.0  0.0   0:00.67 /usr/bin/+
   924 root      20   0  153404    504    420 S   0.0  0.0   0:00.64 pure-ftpd+
   926 root      20   0  572372   1080    504 S   0.0  0.0   0:02.70 /usr/bin/+
   927 systuser  20   0  114016  15724   2728 S   0.0  0.6   0:07.39 /usr/loca+
   928 systuser  20   0   12756     56      0 S   0.0  0.0   0:00.02 /usr/loca+
   929 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   930 root      20   0   51508    688    524 S   0.0  0.0   0:00.37 /usr/sbin+
   932 systuser  20   0  113932     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   933 root      20   0  445028    164    164 S   0.0  0.0   0:00.05 sw-engine+
   935 root      20   0 1277312   7444    220 S   0.0  0.3   0:24.27 /usr/bin/+
   946 root      20   0  396248    732    548 S   0.0  0.0   0:00.80 php-fpm: +
   954 named     20   0 1055796  38616   2104 S   0.0  1.6   0:15.69 /usr/sbin+
   957 root      20   0  298320   8340   7184 S   0.0  0.3   0:07.78 /usr/sbin+
   973 root      20   0  400740   3000    888 S   0.0  0.1   0:04.84 php-fpm: +
   975 root      20   0  439788   1784   1576 S   0.0  0.1   0:00.95 php-fpm: +
   978 cpanelc+  20   0   10456   3500   2248 S   0.0  0.1   0:25.24 /usr/loca+
   980 root      20   0  388892    864    648 S   0.0  0.0   0:00.93 php-fpm: +
   991 root      20   0  389508    636    544 S   0.0  0.0   0:00.87 php-fpm: +
   992 root      20   0 1763124  72668    472 S   0.0  3.0   0:14.11 /usr/loca+
   993 root      20   0  261288   6664   1572 S   0.0  0.3   0:06.51 cpsrvd (S+
  1065 dovenull  20   0   47524   3180   1808 S   0.0  0.1   0:00.58 dovecot/p+
  1066 dovenull  20   0   47828   3528   1908 S   0.0  0.1   0:00.36 dovecot/i+
  1067 dovecot   20   0   10320    556    440 S   0.0  0.0   0:00.10 dovecot/a+
  1068 root      20   0   10452    636    440 S   0.0  0.0   0:00.35 dovecot/l+
  1069 dovenull  20   0   47600   3244   1844 S   0.0  0.1   0:00.46 dovecot/p+
  1070 dovenull  20   0   47680   3360   1872 S   0.0  0.1   0:00.29 dovecot/i+
  1077 root      20   0   24528   2624    524 S   0.0  0.1   0:00.20 dovecot/c+
  1078 dovecot   20   0   13568    620    372 S   0.0  0.0   0:00.07 dovecot/s+
  1082 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  1150 root      20   0  248140 113940   1128 S   0.0  4.7   0:06.51 /usr/loca+
  1151 systuser  20   0  157704   3132   1088 S   0.0  0.1   0:00.15 SonarPush+
  1152 dovecot   20   0   41180   1620   1124 S   0.0  0.1   0:00.73 dovecot/a+
  1153 wp-tool+  20   0  387528   5148   1872 S   0.0  0.2   0:00.31 /usr/bin/+
  1154 wp-tool+  20   0  410452  30880   1936 S   0.0  1.3   0:26.22 /usr/bin/+
  1229 root      20   0  183900   6692   3460 S   0.0  0.3   0:01.93 cpdavd - +
  1231 root      20   0  209616  11788   1860 S   0.0  0.5   0:03.80 tailwatchd
  1232 root      20   0  167452   1484    884 S   0.0  0.1   0:00.46 dnsadmin +
  1638 root      20   0  299272    880    500 S   0.0  0.0   0:00.83 php-fpm: +
  1681 root      38  18  130416   1516    808 S   0.0  0.1   0:00.08 cpanellog+
  1789 nobody    20   0  277488  19752   4104 S   0.0  0.8   0:00.51 /usr/sbin+
  1909 root      20   0  266984   8868    804 S   0.0  0.4   0:03.07 /usr/sbin+
  1911 root      20   0   12748    508    364 S   0.0  0.0   0:03.74 /usr/loca+
  1912 root      20   0   12732    464    356 S   0.0  0.0   0:03.27 /usr/loca+
  1913 root      20   0   12756    516    360 S   0.0  0.0   0:03.56 /usr/loca+
  1918 root      20   0   53344    268    268 S   0.0  0.0   0:00.04 /usr/loca+
  1969 nobody    20   0  277724  20228   4236 S   0.0  0.8   0:00.46 /usr/sbin+
  1974 nobody    20   0  277508  19900   4192 S   0.0  0.8   0:00.42 /usr/sbin+
  1975 nobody    20   0  277524  19836   4168 S   0.0  0.8   0:00.57 /usr/sbin+
  1991 nobody    20   0  277508  19980   4292 S   0.0  0.8   0:00.55 /usr/sbin+
  1993 nobody    20   0  277508  20008   4328 S   0.0  0.8   0:00.43 /usr/sbin+
  1994 nobody    20   0  277700  19980   4164 S   0.0  0.8   0:00.30 /usr/sbin+
  2012 root      20   0  183888  13144   1248 S   0.0  0.5   0:29.72 lfd - sle+
  4286 nobody    20   0  277508  19680   4000 S   0.0  0.8   0:00.22 /usr/sbin+
  4996 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
  5117 nobody    20   0  277508  19420   3824 S   0.0  0.8   0:00.14 /usr/sbin+
  5396 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  5421 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  5456 nobody    20   0  277844  19568   3792 S   0.0  0.8   0:00.10 /usr/sbin+
  5457 nobody    20   0  277308  18372   3156 S   0.0  0.8   0:00.11 /usr/sbin+
  5671 nigeria   20   0  400460   5304   2344 S   0.0  0.2   0:00.00 php-fpm: +
  5945 healtho+  20   0  459496  66904   4292 S   0.0  2.8   0:04.36 php-fpm: +
  6157 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  6171 cloudw    20   0  366220  16592  10884 S   0.0  0.7   0:00.01 /opt/cpan+
  6173 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6175 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6176 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6177 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6178 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6179 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6180 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6181 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6182 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6183 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  6184 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  6185 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  6186 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  6187 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
  6188 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
  6189 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
  6208 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  6214 root      20   0  160240   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
  6215 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  6216 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  6220 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  6221 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  6222 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  6223 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  6224 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  6225 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  6226 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  6229 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  6230 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  6232 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  6234 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  6236 saboakin  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  6238 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
  6239 robocal+  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  6243 robocal+  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
  6246 robocal+  20   0  131852   3320   2384 R   0.0  0.1   0:00.00 /usr/loca+
  6248 cloudw    20   0  238932   8992   6360 R   0.0  0.4   0:00.00 /opt/cpan+
  8198 root      20   0  265880 128424   1276 S   0.0  5.3   0:03.68 spamd chi+
  8199 root      20   0  249268 115008    700 S   0.0  4.8   0:00.05 spamd chi+
 31033 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 31042 oysipao+  20   0    3152    496      4 S   0.0  0.0   0:00.54 [kworker]
 74773 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 74779 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 78851 root      20   0       0      0      0 R   0.0  0.0   0:00.06 [kworker/+
 86395 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 90943 nobody    20   0  277900  20948   4916 S   0.0  0.9   0:02.01 /usr/sbin+
 93029 nobody    20   0  277504  20656   4732 S   0.0  0.9   0:01.67 /usr/sbin+
 95309 nobody    20   0  277520  20608   4668 S   0.0  0.9   0:01.61 /usr/sbin+
 95809 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 95819 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
101400 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
101905 nobody    20   0  277508  19992   4288 S   0.0  0.8   0:00.73 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    14:24   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    14:24   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    14:24   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    14:24   0:32  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    14:24   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    14:24   0:06  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    14:24   0:19  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   14:24   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   14:24   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [kauditd]
root        234  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   14:24   0:02  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    14:24   0:02  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ext4-rsv-conver]
root        343  0.0  0.0      0     0 ?        S<   14:24   0:02  \_ [kworker/0:1H]
root        413  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   14:24   0:02  \_ [loop0]
root        721  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [jbd2/loop0-8]
root        722  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ext4-rsv-conver]
root      74773  0.0  0.0      0     0 ?        S    22:22   0:00  \_ [kworker/u200:1]
root      74779  0.0  0.0      0     0 ?        S    22:22   0:00  \_ [kworker/0:0]
root      78851  0.0  0.0      0     0 ?        S    22:27   0:00  \_ [kworker/1:2]
root      86395  0.0  0.0      0     0 ?        S    22:36   0:00  \_ [kworker/u200:2]
root      95809  0.0  0.0      0     0 ?        S    22:48   0:00  \_ [kworker/1:4]
root      95819  0.0  0.0      0     0 ?        S    22:48   0:00  \_ [kworker/0:1]
root     101400  0.0  0.0      0     0 ?        S    22:55   0:00  \_ [kworker/1:3]
root       1082  0.0  0.0      0     0 ?        S    22:57   0:00  \_ [kworker/0:2]
root       5396  0.0  0.0      0     0 ?        S    23:02   0:00  \_ [kworker/1:0]
root       5421  0.0  0.0      0     0 ?        S    23:02   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44280  3448 ?        Ss   14:24   0:43 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.3  40244  8136 ?        Ss   14:24   0:15 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45444   412 ?        Ss   14:24   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   600 ?        S<sl 14:24   0:02 /sbin/auditd
root        512  0.0  0.0  21540   516 ?        Ss   14:24   0:00 /usr/sbin/irqbalance --foreground
root        516  0.0  0.0 152780   328 ?        Ss   14:24   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        521  0.0  0.0  24708  1328 ?        Ss   14:24   0:07 /usr/lib/systemd/systemd-logind
nscd        523  0.0  0.0 1264844 1952 ?        Ssl  14:24   0:25 /usr/sbin/nscd
root        524  0.0  0.0  52852   628 ?        Ss   14:24   0:00 /usr/sbin/smartd -n -q never
polkitd     527  0.0  0.0 612240  1304 ?        Ssl  14:24   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        529  0.0  0.2 224148  5424 ?        Ss   14:24   0:00 queueprocd - waiting up to 60s to process a task
dbus        531  0.0  0.0  58740  1504 ?        Ss   14:24   0:16 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         539  0.0  0.0  69256   148 ?        Ss   14:24   0:00 /sbin/rpcbind -w
root        541  0.0  0.0   4388    92 ?        Ss   14:24   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208   120 ?        Ssl  14:24   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   588 ?        Ss   14:24   0:00 /usr/sbin/crond -n
root       6173  0.0  0.0 183048  2156 ?        S    23:03   0:00  \_ /usr/sbin/CROND -n
root       6187  0.0  0.0 113284  1208 ?        Ss   23:03   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       6188  0.0  0.0 108052   356 ?        S    23:03   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       6189  0.0  0.0 113288  1520 ?        S    23:03   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       6249  0.0  0.0 153840  2092 ?        R    23:03   0:00  |               \_ ps auxf
root       6175  0.0  0.0 183048  2156 ?        S    23:03   0:00  \_ /usr/sbin/CROND -n
root       6225  0.0  0.0  20164   808 ?        Ss   23:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       6176  0.0  0.0 183048  2152 ?        S    23:03   0:00  \_ /usr/sbin/CROND -n
root       6224  0.0  0.0  20164   808 ?        Ss   23:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       6177  0.0  0.0 183048  2152 ?        S    23:03   0:00  \_ /usr/sbin/CROND -n
root       6226  0.0  0.0  20164   804 ?        Ss   23:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root       6178  0.0  0.0 183048  2152 ?        S    23:03   0:00  \_ /usr/sbin/CROND -n
root       6215  0.0  0.0  20164   808 ?        Ss   23:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       6179  0.0  0.0 183048  2148 ?        S    23:03   0:00  \_ /usr/sbin/CROND -n
root       6223  0.0  0.0  20164   808 ?        Ss   23:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       6180  0.0  0.0 183048  2148 ?        S    23:03   0:00  \_ /usr/sbin/CROND -n
root       6222  0.0  0.0  20164   808 ?        Ss   23:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       6181  0.0  0.0 183048  2148 ?        S    23:03   0:00  \_ /usr/sbin/CROND -n
root       6216  0.0  0.0  20164   968 ?        Rs   23:03   0:00  |   \_ jailshell (cloudsms) [6238] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms   6238  0.0  0.0      0     0 ?        Z    23:03   0:00  |       \_ [jailshell] <defunct>
root       6182  0.0  0.0 183048  2148 ?        S    23:03   0:00  \_ /usr/sbin/CROND -n
root       6208  0.0  0.0  20164   804 ?        Ss   23:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       6183  0.0  0.0 183048  2152 ?        S    23:03   0:00  \_ /usr/sbin/CROND -n
root       6220  0.0  0.0  20164   968 ?        Ss   23:03   0:00  |   \_ jailshell (pactpay) [6234] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    6234  0.0  0.0  20164   264 ?        S    23:03   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    6237  0.0  0.6 479860 16168 ?        Sl   23:03   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       6184  0.0  0.0 183048  2152 ?        S    23:03   0:00  \_ /usr/sbin/CROND -n
root       6221  0.0  0.0  20164   968 ?        Ss   23:03   0:00  |   \_ jailshell (robocallscloudsm) [6239] d /home/robocallscloudsm/public_html && /usr/local/bin/php artisan schedule:run >> /dev/null 2>&1
robocal+   6239  0.0  0.0  20164   264 ?        S    23:03   0:00  |       \_ jailshell (robocallscloudsm) [init] d /home/robocallscloudsm/public_html && /usr/local/bin/php artisan schedule:run >> /dev/null 2>&1
robocal+   6243  0.0  0.0 113284  1212 ?        S    23:03   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/robocallscloudsm/public_html && /usr/local/bin/php artisan schedule:run >> /dev/null 2>&1
robocal+   6246  0.0  0.1 131852  3320 ?        R    23:03   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/bin/php artisan schedule:run
root       6185  0.0  0.0 183048  2144 ?        S    23:03   0:00  \_ /usr/sbin/CROND -n
root       6230  0.0  0.0  20164   968 ?        Ss   23:03   0:00  |   \_ jailshell (nigeria) [6232] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    6232  0.0  0.0  20164   264 ?        S    23:03   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    6241  0.0  0.6 404052 16136 ?        S    23:03   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root       6186  0.0  0.0 183048  2152 ?        S    23:03   0:00  \_ /usr/sbin/CROND -n
root       6229  0.0  0.0  20164   968 ?        Ss   23:03   0:00      \_ jailshell (saboakin) [6236] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin   6236  0.0  0.0  20164   264 ?        S    23:03   0:00          \_ jailshell (saboakin) [init] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin   6240  0.0  0.3 203680  8636 ?        R    23:03   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/saboakin/public_html/massmailer/cron.php
root        577  0.0  0.0  24208   140 ?        Ss   14:24   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296   192 tty1     Ss+  14:24   0:00 /sbin/agetty --noclear tty1 linux
root        591  0.0  0.0 114704   196 ttyS0    Ss+  14:24   0:00 /bin/bash
mailnull    622  0.0  0.1  89108  4112 ?        Ss   14:24   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 111304   616 ?        Ss   14:24   0:03 /usr/sbin/sshd -D
root        919  0.0  0.3 1350088 7848 ?        Ssl  14:24   0:19 /usr/bin/cspdaemon
systuser    920  0.0  0.0 111864    72 ?        Ssl  14:24   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    921  0.0  1.4 5654304 35772 ?       SLsl 14:24   0:17 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    922  0.0  0.0 342400   264 ?        Ssl  14:24   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        924  0.0  0.0 153404   504 ?        Ss   14:24   0:00 pure-ftpd (SERVER)
root        926  0.0  0.0 572372  1080 ?        Ssl  14:24   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    927  0.0  0.6 114016 15724 ?        Ssl  14:24   0:07 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    928  0.0  0.0  12756    56 ?        Ssl  14:24   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.0  10132    44 ?        Ssl  14:24   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        930  0.0  0.0  51508   688 ?        Ss   14:24   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1065  0.0  0.1  47524  3180 ?        S    14:24   0:00  \_ dovecot/pop3-login
dovenull   1066  0.0  0.1  47828  3528 ?        S    14:24   0:00  \_ dovecot/imap-login
dovecot    1067  0.0  0.0  10320   556 ?        S    14:24   0:00  \_ dovecot/anvil
root       1068  0.0  0.0  10452   636 ?        S    14:24   0:00  \_ dovecot/log
dovenull   1069  0.0  0.1  47600  3244 ?        S    14:24   0:00  \_ dovecot/pop3-login
dovenull   1070  0.0  0.1  47680  3360 ?        S    14:24   0:00  \_ dovecot/imap-login
root       1077  0.0  0.1  24528  2624 ?        S    14:24   0:00  \_ dovecot/config
dovecot    1078  0.0  0.0  13568   620 ?        S    14:24   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180  1620 ?        S    14:24   0:00  \_ dovecot/auth
root       4996  0.0  0.1  60820  4512 ?        S    23:01   0:00  \_ dovecot/lmtp
systuser    932  0.0  0.0 113932    72 ?        Ssl  14:24   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        933  0.0  0.0 445028   164 ?        Ss   14:24   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        935  0.0  0.3 1277312 7444 ?        Ssl  14:24   0:24 /usr/bin/checkstatus
root        946  0.0  0.0 396248   732 ?        Ss   14:24   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
named       954  0.0  1.5 1055796 38616 ?       Ssl  14:24   0:15 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        957  0.0  0.3 298320  8340 ?        Ssl  14:24   0:07 /usr/sbin/rsyslogd -n
root        973  0.0  0.1 400740  3000 ?        Ss   14:24   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria    5671  0.0  0.2 400460  5304 ?        S    23:02   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+   5945 19.8  2.7 459496 66904 ?        S    23:02   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+   6013 18.5  2.7 459496 67524 ?        R    23:02   0:02  \_ php-fpm: pool health_oyostate_gov_ng
root        975  0.0  0.0 439788  1784 ?        Ss   14:24   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
cpanelc+    978  0.0  0.1  10456  3500 ?        Ss   14:24   0:25 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        980  0.0  0.0 388892   864 ?        Ss   14:24   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        991  0.0  0.0 389508   636 ?        Ss   14:24   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  3.0 1763124 72668 ?       Ssl  14:24   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        993  0.0  0.2 261288  6664 ?        Ss   14:24   0:06 cpsrvd (SSL) - waiting for connections                   
root       6157  0.0  0.0      0     0 ?        Z    23:02   0:00  \_ [cpaneld - servi] <defunct>
root       1150  0.0  4.7 248140 113940 ?       Ss   14:24   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8198  0.0  5.3 265880 128424 ?       S    14:30   0:03  \_ spamd child
root       8199  0.0  4.7 249268 115008 ?       S    14:30   0:00  \_ spamd child
systuser   1151  0.0  0.1 157704  3132 ?        S    14:24   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1153  0.0  0.2 387528  5148 ?        Ss   14:24   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1154  0.0  1.2 410452 30880 ?        Ss   14:24   0:26 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1229  0.0  0.2 183900  6692 ?        Ss   14:24   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1231  0.0  0.4 209616 11788 ?        Ss   14:24   0:03 tailwatchd
root       1232  0.0  0.0 167452  1484 ?        Ss   14:24   0:00 dnsadmin - dormant mode
root       1638  0.0  0.0 299272   880 ?        Ss   14:24   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1681  0.0  0.0 130416  1516 ?        SN   14:24   0:00 cpanellogd - sleeping for logs
mysql      1785  1.4 10.8 1458332 263304 ?      Sl   14:24   7:43 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1909  0.0  0.3 266984  8868 ?        Ss   14:24   0:03 /usr/sbin/httpd -k start
root       1911  0.0  0.0  12748   508 ?        S    14:24   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1912  0.0  0.0  12732   464 ?        S    14:24   0:03  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1913  0.0  0.0  12756   516 ?        S    14:24   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1918  0.0  0.0  53344   268 ?        S    14:24   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    90943  0.1  0.8 277900 20948 ?        S    22:41   0:02  \_ /usr/sbin/httpd -k start
nobody    93029  0.1  0.8 277504 20656 ?        S    22:44   0:01  \_ /usr/sbin/httpd -k start
nobody    95309  0.1  0.8 277520 20608 ?        S    22:47   0:01  \_ /usr/sbin/httpd -k start
nobody   101905  0.1  0.8 277508 19992 ?        S    22:55   0:00  \_ /usr/sbin/httpd -k start
nobody      505  0.1  0.8 277844 20148 ?        S    22:56   0:00  \_ /usr/sbin/httpd -k start
nobody      553  0.1  0.8 277480 19900 ?        S    22:56   0:00  \_ /usr/sbin/httpd -k start
cloudw     6171  1.0  0.6 366220 16856 ?        R    23:02   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody     1789  0.1  0.8 277488 19752 ?        S    22:57   0:00  \_ /usr/sbin/httpd -k start
nobody     1969  0.1  0.8 277724 20228 ?        S    22:58   0:00  \_ /usr/sbin/httpd -k start
nobody     1974  0.1  0.8 277508 19900 ?        S    22:58   0:00  \_ /usr/sbin/httpd -k start
nobody     1975  0.1  0.8 277524 19836 ?        S    22:58   0:00  \_ /usr/sbin/httpd -k start
nobody     1991  0.1  0.8 277508 19980 ?        S    22:58   0:00  \_ /usr/sbin/httpd -k start
nobody     1993  0.1  0.8 277508 20008 ?        S    22:58   0:00  \_ /usr/sbin/httpd -k start
nobody     1994  0.1  0.8 277700 19980 ?        S    22:58   0:00  \_ /usr/sbin/httpd -k start
nobody     4286  0.1  0.8 277508 19680 ?        S    23:00   0:00  \_ /usr/sbin/httpd -k start
cloudw     6248  0.0  0.6 300552 16564 ?        Rl   23:03   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody     5117  0.1  0.8 277508 19420 ?        S    23:01   0:00  \_ /usr/sbin/httpd -k start
nobody     5456  0.1  0.8 277844 19568 ?        S    23:02   0:00  \_ /usr/sbin/httpd -k start
nobody     5457  0.1  0.7 277308 18372 ?        S    23:02   0:00  \_ /usr/sbin/httpd -k start
root       2012  0.0  0.5 183888 13144 ?        Ss   14:24   0:29 lfd - sleeping
oysipao+  31033  0.0  0.0   3148   416 ?        Ss   15:00   0:00 [kworker]
oysipao+  31042  0.0  0.0   3152   496 ?        S    15:00   0:00  \_ [kworker]
## mysql stats
Uptime: 31115  Threads: 4  Questions: 2925430  Slow queries: 0  Opens: 9042  Flush tables: 1  Open tables: 2000  Queries per second avg: 94.019
*************************** 1. row ***************************
     Id: 41267
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 41269
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 41273
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 41275
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.210.140.130 TIME_WAIT
      1 104.210.140.141 TIME_WAIT
      1 114.119.143.119 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 45.8.25.32 TIME_WAIT
      1 72.167.46.126 TIME_WAIT
      1 92.71.66.136 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 162.142.125.120 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 15-Nov-2025 23:03:01 WAT
   Restart Time: Saturday, 15-Nov-2025 14:24:30 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 38 minutes 30 seconds
   Server load: 0.36 0.29 0.32
   Total accesses: 171753 - Total Traffic: 3.9 GB - Total Duration: 96517032
   CPU Usage: u8.02 s6.21 cu2106.51 cs1781.13 - 12.5% CPU load
   5.52 requests/sec - 130.2 kB/second - 23.6 kB/request - 561.953 ms/request
   16 requests currently being processed, 0 workers gracefully restarting, 1 idle workers

.K..KK_WKKWK.....KKK.K.WK.KK....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req   Dur   Conn  Child  Slot     Client     Protocol           VHost                               Request
   0-0  -      0/0/8168   . 0.00 34    0   4653206 0.0   0.00  183.94 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   1-0  1789   2/98/8200  K 2.24 1     342 4826650 60.3  2.37  190.22 66.249.70.3   http/1.1 test.cloudware.ng:443      GET /1284433126?goodscode=1282750490 HTTP/1.1
   2-0  -      0/0/7925   . 0.00 33    0   4471230 0.0   0.00  185.66 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   3-0  -      0/0/7933   . 0.00 39    0   4387353 0.0   0.00  181.77 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   4-0  90943  2/366/8306 K 9.68 0     380 4814196 58.6  8.79  186.97 66.249.70.7   http/1.1 test.cloudware.ng:443      GET /3027302859?goodscode=3023335990 HTTP/1.1
   5-0  5117   1/26/7989  K 0.86 0     313 4559643 35.9  0.62  178.07 66.249.70.193 http/1.1 schoolplus.cloudware.ng:80 GET /?p=4026824391 HTTP/1.1
   6-0  93029  0/312/8256 _ 7.42 0     0   4478484 0.0   7.30  187.40 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   7-0  4286   1/43/7484  W 0.91 0     0   4097747 32.2  0.91  166.87 66.249.70.1   http/1.1 test.cloudware.ng:443      GET /3027274517?goodscode=3023307686 HTTP/1.1
   8-0  101905 6/131/7663 K 3.66 3     234 4189543 164.8 3.27  170.31 66.249.70.6   http/1.1 test.cloudware.ng:443      GET /270055911?goodscode=0269702734 HTTP/1.1
   9-0  5456   5/19/7234  K 0.41 1     374 3981097 140.2 0.41  189.07 66.249.70.7   http/1.1 test.cloudware.ng:443      GET /3028376385?goodscode=3024408110 HTTP/1.1
   10-0 5457   82/82/7187 W 0.11 0     0   3983585 368.3 0.36  178.24 178.128.60.47 http/1.1 health.oyostate.gov.ng:443 POST //wp-login.php HTTP/1.1
   11-0 95309  3/287/7506 K 7.36 0     350 4033258 85.0  6.99  173.71 66.249.70.8   http/1.1 test.cloudware.ng:443      GET /1618866608?goodscode=1616745658 HTTP/1.1
   12-0 -      0/0/7000   . 0.00 260   0   4142205 0.0   0.00  157.46 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 -      0/0/7265   . 0.00 108   0   4095026 0.0   0.00  167.41 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-0 -      0/0/6324   . 0.00 261   0   3459435 0.0   0.00  145.85 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 -      0/0/6711   . 0.00 160   0   3828906 0.0   0.00  148.57 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 -      0/0/6385   . 0.00 275   0   3327933 0.0   0.00  141.33 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 1969   2/87/5281  K 2.13 2     380 2877391 59.5  2.03  120.09 66.249.70.3   http/1.1 test.cloudware.ng:443      GET /1276208722?goodscode=1274536866 HTTP/1.1
   18-0 505    7/145/5184 K 3.39 2     453 2841977 194.1 3.60  122.07 66.249.70.8   http/1.1 test.cloudware.ng:443      GET /219388129?goodscode=0219101358 HTTP/1.1
   19-0 553    3/112/5560 K 2.69 0     417 2849424 86.2  2.73  118.01 66.249.70.2   http/1.1 test.cloudware.ng:443      GET /3027329402?goodscode=3023362498 HTTP/1.1
   20-0 -      0/0/3791   . 0.00 287   0   2177541 0.0   0.00  88.02  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 1974   7/80/3708  K 1.89 0     309 2085100 190.4 1.87  88.13  66.249.70.5   http/1.1 test.cloudware.ng:443      GET /1020845456?goodscode=1019508282 HTTP/1.1
   22-0 -      0/0/3723   . 0.00 283   0   2186831 0.0   0.00  93.37  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 1975   0/102/3836 W 2.66 0     0   2120725 0.0   2.61  89.98  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   24-0 1991   3/99/1963  K 2.51 1     493 1363782 82.9  2.40  51.53  66.249.70.6   http/1.1 test.cloudware.ng:443      GET /49114426?goodscode=0049050818 HTTP/1.1
   25-0 -      0/0/1226   . 0.00 285   0   661088  0.0   0.00  28.04  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 1993   1/84/970   K 1.92 1     375 552244  33.1  2.02  23.17  66.249.70.4   http/1.1 test.cloudware.ng:443      GET /1618917383?goodscode=1616796366 HTTP/1.1
   27-0 1994   1/58/341   K 1.30 2     354 199719  31.0  1.43  6.99   66.249.70.7   http/1.1 test.cloudware.ng:443      GET /3006230372?goodscode=3002291122 HTTP/1.1
   28-0 -      0/0/504    . 0.00 1256  4   281545  0.0   0.00  11.70  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -      0/0/454    . 0.00 1266  0   254392  0.0   0.00  10.28  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -      0/0/1082   . 0.00 501   0   643654  0.0   0.00  26.27  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -      0/0/414    . 0.00 1265  0   182253  0.0   0.00  6.95   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -      0/0/194    . 0.00 1577  0   127823  0.0   0.00  4.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -      0/0/139    . 0.00 1596  0   83183   0.0   0.00  2.67   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -      0/0/580    . 0.00 1598  0   351973  0.0   0.00  11.12  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -      0/0/217    . 0.00 1575  0   115196  0.0   0.00  2.52   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -      0/0/98     . 0.00 1268  0   125071  0.0   0.00  2.23   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -      0/0/16     . 0.00 1558  0   6572    0.0   0.00  0.16   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -      0/0/26     . 0.00 1563  0   15132   0.0   0.00  0.46   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -      0/0/328    . 0.00 1610  0   207302  0.0   0.00  7.57   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -      0/0/96     . 0.00 1240  0   108764  0.0   0.00  1.96   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -      0/0/55     . 0.00 1465  0   40950   0.0   0.00  0.99   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -      0/0/116    . 0.00 1609  4   69988   0.0   0.00  2.98   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -      0/0/103    . 0.00 1573  0   64981   0.0   0.00  2.44   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -      0/0/36     . 0.00 1562  0   9203    0.0   0.00  0.51   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -      0/0/342    . 0.00 1507  0   195433  0.0   0.00  8.43   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -      0/0/18     . 0.00 1571  0   14837   0.0   0.00  0.19   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -      0/0/14     . 0.00 1595  4   2942    0.0   0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -      0/0/14     . 0.00 1584  0   18099   0.0   0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -      0/0/44     . 0.00 1508  0   53145   0.0   0.00  2.25   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -      0/0/442    . 0.00 1608  2   253167  0.0   0.00  9.85   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -      0/0/29     . 0.00 1593  0   12168   0.0   0.00  0.52   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -      0/0/23     . 0.00 1568  0   8738    0.0   0.00  0.35   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -      0/0/87     . 0.00 1565  0   53024   0.0   0.00  1.72   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -      0/0/260    . 0.00 1603  0   132345  0.0   0.00  5.83   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -      0/0/407    . 0.00 1191  0   301017  0.0   0.00  13.68  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -      0/0/31     . 0.00 1570  0   30801   0.0   0.00  0.66   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -      0/0/23     . 0.00 1510  0   8119    0.0   0.00  0.32   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -      0/0/198    . 0.00 1530  0   155907  0.0   0.00  4.53   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -      0/0/14     . 0.00 1588  0   14882   0.0   0.00  0.16   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -      0/0/139    . 0.00 1567  0   85769   0.0   0.00  3.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -      0/0/15     . 0.00 1585  0   16376   0.0   0.00  0.16   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -      0/0/114    . 0.00 1606  10  68683   0.0   0.00  2.82   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -      0/0/15     . 0.00 1569  0   10302   0.0   0.00  0.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -      0/0/7      . 0.00 1592  0   2367    0.0   0.00  0.07   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -      0/0/6      . 0.00 1605  0   601     0.0   0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -      0/0/14     . 0.00 1601  0   1401    0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -      0/0/8      . 0.00 1607  1   54      0.0   0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -      0/0/15     . 0.00 1586  0   16257   0.0   0.00  0.07   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -      0/0/83     . 0.00 1604  0   33103   0.0   0.00  1.78   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -      0/0/57     . 0.00 1587  0   64542   0.0   0.00  1.17   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -      0/0/874    . 0.00 1531  0   488023  0.0   0.00  20.31  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -      0/0/68     . 0.00 1551  0   49615   0.0   0.00  1.58   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -      0/0/136    . 0.00 1534  0   92358   0.0   0.00  3.17   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -      0/0/54     . 0.00 1499  0   42053   0.0   0.00  1.34   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -      0/0/13     . 0.00 1581  0   12308   0.0   0.00  0.12   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -      0/0/149    . 0.00 1582  0   87089   0.0   0.00  3.26   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -      0/0/13     . 0.00 1602  0   1935    0.0   0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -      0/0/16     . 0.00 1579  0   16052   0.0   0.00  0.22   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -      0/0/41     . 0.00 1466  0   30094   0.0   0.00  0.73   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -      0/0/19     . 0.00 6206  0   6786    0.0   0.00  0.30   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -      0/0/359    . 0.00 4931  0   198767  0.0   0.00  8.30   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   82-0 -      0/0/3      . 0.00 20124 0   23      0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   83-0 -      0/0/3      . 0.00 20098 0   644     0.0   0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   84-0 -      0/0/2      . 0.00 20116 0   3       0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   85-0 -      0/0/7      . 0.00 20083 0   3861    0.0   0.00  0.17   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 813
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...30)
   index usage: 14%, cache usage: 19%
   total entries stored since starting: 93283
   total entries replaced since starting: 0
   total entries expired since starting: 92432
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 325 miss
   total removes since starting: 41 hit, 51 miss
Youez - 2016 - github.com/yon3zu
LinuXploit