403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.12.48.txt
 ## swap threshold exceeded
## server overview
2025-11-17.12.48 load[4] mem[71/74] mysql[4/25] httpd[15]
              total        used        free      shared  buff/cache   available
Mem:           2363        1589         189          52         584         543
Swap:          1999        1553         446
 12:48:02 up  7:27,  0 users,  load average: 4.21, 1.40, 0.93
## system overview
top - 12:48:02 up  7:27,  0 users,  load average: 4.21, 1.40, 0.93
Tasks: 205 total,   8 running, 195 sleeping,   0 stopped,   2 zombie
%Cpu(s): 88.2 us, 11.8 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   185968 free,  1634756 used,   599576 buff/cache
KiB Swap:  2047996 total,   457260 free,  1590736 used.   549092 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1468028 263744   3520 S 156.2 10.9   6:30.73 /usr/sbin+
 87636 nigeria   20   0  404052  16144  10384 S  12.5  0.7   0:00.05 /opt/cpan+
 86169 nobody    20   0  277888  18012   3912 S   6.2  0.7   0:00.11 /usr/sbin+
 87411 healtho+  20   0  482532  87400   4336 R   6.2  3.6   0:06.22 php-fpm: +
 87556 healtho+  20   0  431968  38520   4216 R   6.2  1.6   0:00.36 php-fpm: +
     1 root      20   0   44400   3348   1456 S   0.0  0.1   0:35.65 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.85 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.49 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:29.43 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.47 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.37 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:54.59 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.56 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:05.29 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:04.25 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:01.73 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   39500   4720   4480 S   0.0  0.2   0:15.17 /usr/lib/+
   376 root      20   0   45376      8      4 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    444    316 S   0.0  0.0   0:02.35 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780     72     28 S   0.0  0.0   0:00.02 /usr/sbin+
   475 polkitd   20   0  612240   1064    684 S   0.0  0.0   0:03.74 /usr/lib/+
   476 root      20   0   24716   1156    788 S   0.0  0.0   0:06.31 /usr/lib/+
   483 root      20   0   21540    348    260 S   0.0  0.0   0:00.59 /usr/sbin+
   484 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   485 root      20   0   52852    220    124 S   0.0  0.0   0:00.01 /usr/sbin+
   492 dbus      20   0   58700   1348    600 S   0.0  0.1   0:14.49 /usr/bin/+
   494 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  994492   1256    616 S   0.0  0.1   0:25.74 /usr/sbin+
   515 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224280   5836   1264 S   0.0  0.2   0:00.45 queueproc+
   545 root      20   0  124480    424    292 S   0.0  0.0   0:00.78 /usr/sbin+
   546 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120   3692    752 S   0.0  0.2   0:00.49 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:03.82 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    356    256 S   0.0  0.0   0:03.37 /usr/sbin+
   912 systuser  20   0  113016     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  298320   4888   4128 S   0.0  0.2   0:07.65 /usr/sbin+
   918 named     20   0 1185864  36836   1588 S   0.0  1.5   0:18.54 /usr/sbin+
   919 root      20   0 1828136 254912    428 S   0.0 10.5   0:35.72 /usr/loca+
   924 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   925 root      20   0   51508    604    424 S   0.0  0.0   0:00.32 /usr/sbin+
   926 root      20   0  572372    760    296 S   0.0  0.0   0:02.37 /usr/bin/+
   928 root      20   0  445028    588    480 S   0.0  0.0   0:01.08 sw-engine+
   937 root      20   0  439788    360    268 S   0.0  0.0   0:00.99 php-fpm: +
   938 systuser  20   0  114016  13936   2520 S   0.0  0.6   0:06.55 /usr/loca+
   939 root      20   0  261032  27292   4976 S   0.0  1.1   0:05.84 cpsrvd (S+
   943 root      20   0 1277312   2352      8 S   0.0  0.1   0:20.32 /usr/bin/+
   944 root      20   0 1276356   6780      8 S   0.0  0.3   0:24.99 /usr/bin/+
   947 cpanelc+  20   0   10400   3424   2388 R   0.0  0.1   0:22.70 /usr/loca+
   952 root      20   0  396248    272    188 S   0.0  0.0   0:00.88 php-fpm: +
   957 root      20   0  388892    332    236 S   0.0  0.0   0:00.92 php-fpm: +
   962 systuser  20   0   14068     36      0 S   0.0  0.0   0:00.02 /usr/loca+
   963 telegraf  20   0 5654048  34320   4352 S   0.0  1.4   0:15.13 /usr/loca+
   964 root      20   0  153404    292    188 S   0.0  0.0   0:00.56 pure-ftpd+
   967 root      20   0  400740    780    608 S   0.0  0.0   0:04.58 php-fpm: +
   968 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   969 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.60 /usr/bin/+
   974 root      20   0  389508    244    156 S   0.0  0.0   0:00.85 php-fpm: +
  1080 dovenull  20   0   47616   2952   1652 S   0.0  0.1   0:00.45 dovecot/p+
  1081 dovenull  20   0   48020   2920   1564 S   0.0  0.1   0:00.25 dovecot/i+
  1082 dovecot   20   0   10320    456    344 S   0.0  0.0   0:00.06 dovecot/a+
  1083 root      20   0   10452    452    256 S   0.0  0.0   0:00.31 dovecot/l+
  1084 dovenull  20   0   47520   2952   1576 S   0.0  0.1   0:00.54 dovecot/p+
  1085 dovenull  20   0   47764   2704   1344 S   0.0  0.1   0:00.24 dovecot/i+
  1091 root      20   0   24528   2412    496 S   0.0  0.1   0:00.19 dovecot/c+
  1095 dovecot   20   0   13568    600    400 S   0.0  0.0   0:00.07 dovecot/s+
  1160 dovecot   20   0   41160   1460    980 S   0.0  0.1   0:00.60 dovecot/a+
  1168 systuser  20   0  157704   2972   1004 S   0.0  0.1   0:00.13 SonarPush+
  1176 wp-tool+  20   0  387556   3296   1412 S   0.0  0.1   0:00.31 /usr/bin/+
  1177 wp-tool+  20   0  412368   9444   1364 S   0.0  0.4   0:08.77 /usr/bin/+
  1211 root      20   0  209332  18972   1472 S   0.0  0.8   0:03.34 tailwatchd
  1213 root      20   0  183900   5192   1976 S   0.0  0.2   0:01.32 cpdavd - +
  1216 root      20   0  167452   3316   1948 S   0.0  0.1   0:00.56 dnsadmin +
  1627 root      20   0  299272    484    320 S   0.0  0.0   0:00.73 php-fpm: +
  1673 root      38  18  130416   1352    676 S   0.0  0.1   0:00.07 cpanellog+
  1928 root      20   0  266984   4940    472 S   0.0  0.2   0:03.43 /usr/sbin+
  1932 root      20   0   12840    324    212 S   0.0  0.0   0:03.52 /usr/loca+
  1933 root      20   0   12732    288    208 S   0.0  0.0   0:03.06 /usr/loca+
  1934 root      20   0   12888    332    216 S   0.0  0.0   0:03.32 /usr/loca+
  1939 root      20   0   53256      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4438 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kworker/+
 10515 root      30  10  132964      4      0 S   0.0  0.0   0:00.00 ConfigSer+
 10528 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 161+
 34076 root      20   0       0      0      0 S   0.0  0.0   0:00.21 [kworker/+
 40045 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152     40      0 S   0.0  0.0   0:00.51 [kworker]
 40218 root      20   0  183648  11324   1100 S   0.0  0.5   0:24.93 lfd - sle+
 61465 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 70862 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72520 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 72858 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 74905 nobody    20   0  277680  19204   4804 S   0.0  0.8   0:01.46 /usr/sbin+
 76291 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 76296 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 82158 nobody    20   0       0      0      0 Z   0.0  0.0   0:00.74 [httpd] <+
 82991 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 83594 nobody    20   0  277876  18652   4292 S   0.0  0.8   0:00.45 /usr/sbin+
 83595 nobody    20   0  277504  18272   4260 S   0.0  0.8   0:00.39 /usr/sbin+
 84494 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 86065 nobody    20   0  277880  18300   4024 S   0.0  0.8   0:00.12 /usr/sbin+
 86085 nobody    20   0  277780  17844   3924 S   0.0  0.7   0:00.10 /usr/sbin+
 86087 nobody    20   0  277876  17984   3996 S   0.0  0.7   0:00.10 /usr/sbin+
 86095 nobody    20   0  277760  17880   3900 S   0.0  0.7   0:00.15 /usr/sbin+
 86100 nobody    20   0  277884  18220   3948 S   0.0  0.8   0:00.13 /usr/sbin+
 86102 nobody    20   0  277752  17984   3908 S   0.0  0.7   0:00.12 /usr/sbin+
 86108 nobody    20   0  277496  17988   4012 S   0.0  0.7   0:00.12 /usr/sbin+
 86112 nobody    20   0  277752  18296   4136 S   0.0  0.8   0:00.13 /usr/sbin+
 86116 nobody    20   0  277900  18556   4140 S   0.0  0.8   0:00.08 /usr/sbin+
 86123 nobody    20   0  277744  18096   3984 S   0.0  0.7   0:00.07 /usr/sbin+
 86141 nobody    20   0  277744  17992   3984 S   0.0  0.7   0:00.15 /usr/sbin+
 86144 nobody    20   0  277744  18104   3992 S   0.0  0.7   0:00.15 /usr/sbin+
 86165 nobody    20   0  277492  17792   4052 S   0.0  0.7   0:00.10 /usr/sbin+
 86166 nobody    20   0  277744  17584   3668 S   0.0  0.7   0:00.22 /usr/sbin+
 86168 nobody    20   0  277744  17676   3756 S   0.0  0.7   0:00.17 /usr/sbin+
 86879 root      20   0  111304   4268   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 87089 nobody    20   0  277504  17388   3684 S   0.0  0.7   0:00.03 /usr/sbin+
 87107 nobody    20   0  277496  17200   3468 S   0.0  0.7   0:00.05 /usr/sbin+
 87122 nobody    20   0  277496  17296   3640 S   0.0  0.7   0:00.05 /usr/sbin+
 87123 nobody    20   0  277496  17168   3544 S   0.0  0.7   0:00.03 /usr/sbin+
 87124 nobody    20   0  277876  17500   3744 S   0.0  0.7   0:00.05 /usr/sbin+
 87125 nobody    20   0  277496  17424   3660 S   0.0  0.7   0:00.06 /usr/sbin+
 87288 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 87383 wp-tool+  20   0  445028    312    188 S   0.0  0.0   0:00.00 sw-engine+
 87428 nobody    20   0  277744  16848   3160 S   0.0  0.7   0:00.03 /usr/sbin+
 87445 nobody    20   0  277752  17256   3636 S   0.0  0.7   0:00.01 /usr/sbin+
 87518 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 87542 healtho+  20   0  456676  64668   4260 S   0.0  2.7   0:01.31 php-fpm: +
 87543 healtho+  20   0  458592  65248   4216 S   0.0  2.7   0:01.36 php-fpm: +
 87544 mailnull  20   0   89304   4980   1792 S   0.0  0.2   0:00.00 /usr/sbin+
 87562 healtho+  20   0  431968  38516   4212 S   0.0  1.6   0:00.35 php-fpm: +
 87580 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 87581 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87582 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87584 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87586 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87588 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87589 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87590 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87592 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 87594 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 87605 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 87606 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87608 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 87609 root      20   0   20164    980    784 S   0.0  0.0   0:00.00 /usr/loca+
 87610 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87611 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87612 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 87615 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 87616 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 87617 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 87622 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 87629 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 87633 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 87639 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 87642 pactpay   20   0  480124  17684  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 87651 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 87672 cloudw    20   0  353712  15976  10492 R   0.0  0.7   0:00.01 /opt/cpan+
 87685 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 87686 root      20   0   38648   6320   3020 R   0.0  0.3   0:00.00 /usr/loca+
 87687 nobody    20   0  277888  14100      0 R   0.0  0.6   0:00.00 /usr/sbin+
 92278 root      20   0  248096 117420   1016 S   0.0  4.9   0:03.58 /usr/loca+
 98393 root      20   0  265876 131516   2108 S   0.0  5.4   0:03.37 spamd chi+
 98394 root      20   0  249240 118772   1272 S   0.0  4.9   0:00.04 spamd chi+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    05:20   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    05:20   0:29  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    05:20   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    05:20   0:54  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   05:20   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   05:20   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   05:20   0:05  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   05:20   0:04  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    05:20   0:01  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   05:20   0:03  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    05:20   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   05:20   0:00  \_ [ext4-rsv-conver]
root      72858  0.0  0.0      0     0 ?        S    10:31   0:00  \_ [kworker/u200:0]
root       4438  0.0  0.0      0     0 ?        S    11:04   0:00  \_ [kworker/u200:1]
root      34076  0.0  0.0      0     0 ?        S    11:41   0:00  \_ [kworker/1:2]
root      61465  0.0  0.0      0     0 ?        S    12:14   0:00  \_ [kworker/1:3]
root      70862  0.0  0.0      0     0 ?        S    12:26   0:00  \_ [kworker/0:0]
root      72520  0.0  0.0      0     0 ?        S    12:28   0:00  \_ [kworker/1:4]
root      76291  0.0  0.0      0     0 ?        S    12:33   0:00  \_ [kworker/0:1]
root      76296  0.0  0.0      0     0 ?        S    12:33   0:00  \_ [kworker/0:4]
root      82991  0.0  0.0      0     0 ?        S    12:42   0:00  \_ [kworker/1:0]
root      84494  0.0  0.0      0     0 ?        S    12:44   0:00  \_ [kworker/1:1]
root      87651  0.0  0.0      0     0 ?        S    12:48   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44400  3348 ?        Ss   05:20   0:35 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.1  39500  4720 ?        Ss   05:20   0:15 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376     8 ?        Ss   05:20   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   444 ?        S<sl 05:20   0:02 /sbin/auditd
root        470  0.0  0.0 152780    72 ?        Ss   05:20   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240  1064 ?        Ssl  05:20   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1156 ?        Ss   05:20   0:06 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   348 ?        Ss   05:20   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256    60 ?        Ss   05:20   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   220 ?        Ss   05:20   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1348 ?        Ss   05:20   0:14 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208     0 ?        Ssl  05:20   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 994492  1256 ?        Ssl  05:20   0:25 /usr/sbin/nscd
root        515  0.0  0.0   4388     4 ?        Ss   05:20   0:00 /usr/sbin/acpid
root        519  0.0  0.2 224280  5836 ?        Ss   05:20   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   424 ?        Ss   05:20   0:00 /usr/sbin/crond -n
root      87580  0.0  0.0 183048  2140 ?        S    12:48   0:00  \_ /usr/sbin/CROND -n
root      87612  0.0  0.0 113284  1212 ?        Ss   12:48   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      87622  0.0  0.0 108052   360 ?        S    12:48   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      87629  0.0  0.0 113288  1520 ?        S    12:48   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      87688  0.0  0.0 153840  2092 ?        R    12:48   0:00  |               \_ ps auxf
root      87581  0.0  0.0 183048  2144 ?        S    12:48   0:00  \_ /usr/sbin/CROND -n
root      87609  0.0  0.0  20164   980 ?        Ss   12:48   0:00  |   \_ jailshell (cloudsms) [87689] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  87689  0.0  0.0  20164   256 ?        S    12:48   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      87582  0.0  0.0 183048  2144 ?        S    12:48   0:00  \_ /usr/sbin/CROND -n
root      87617  0.0  0.0  20164   808 ?        Ss   12:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      87584  0.0  0.0 183048  2144 ?        S    12:48   0:00  \_ /usr/sbin/CROND -n
root      87608  0.0  0.0  20164   804 ?        Ss   12:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      87586  0.0  0.0 183048  2144 ?        S    12:48   0:00  \_ /usr/sbin/CROND -n
root      87611  0.0  0.0  20164   808 ?        Ss   12:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      87588  0.0  0.0 183048  2144 ?        S    12:48   0:00  \_ /usr/sbin/CROND -n
root      87616  0.0  0.0  20164   804 ?        Ss   12:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      87589  0.0  0.0 183048  2144 ?        S    12:48   0:00  \_ /usr/sbin/CROND -n
root      87606  0.0  0.0  20164   808 ?        Ss   12:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      87590  0.0  0.0 183048  2144 ?        S    12:48   0:00  \_ /usr/sbin/CROND -n
root      87610  0.0  0.0  20164   808 ?        Ss   12:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      87592  0.0  0.0 183048  2148 ?        S    12:48   0:00  \_ /usr/sbin/CROND -n
root      87605  0.0  0.0  20164   964 ?        Ss   12:48   0:00  |   \_ jailshell (pactpay) [87639] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   87639  0.0  0.0  20164   256 ?        S    12:48   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   87642  2.0  0.7 480124 17684 ?        S    12:48   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      87594  0.0  0.0 183048  2144 ?        S    12:48   0:00  \_ /usr/sbin/CROND -n
root      87615  0.0  0.0  20164   968 ?        Ss   12:48   0:00      \_ jailshell (nigeria) [87633] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   87633  0.0  0.0  20164   264 ?        S    12:48   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   87636  5.0  0.6 404052 16144 ?        S    12:48   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208     4 ?        Ss   05:20   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704     0 ttyS0    Ss+  05:20   0:00 /bin/bash
root        556  0.0  0.0 108296     4 tty1     Ss+  05:20   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.1  89120  3692 ?        Ss   05:20   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  87544  0.0  0.2  89304  4980 ?        S    12:47   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   356 ?        Ss   05:20   0:03 /usr/sbin/sshd -D
root      86879  0.0  0.1 111304  4268 ?        Ss   12:47   0:00  \_ sshd: [accepted]
systuser    912  0.0  0.0 113016    76 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.2 298320  4888 ?        Ssl  05:20   0:07 /usr/sbin/rsyslogd -n
named       918  0.0  1.5 1185864 36836 ?       Ssl  05:20   0:18 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.1 10.5 1828136 254912 ?      Ssl  05:20   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388    48 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   604 ?        Ss   05:20   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.1  47616  2952 ?        S    05:20   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  48020  2920 ?        S    05:20   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   456 ?        S    05:20   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   452 ?        S    05:20   0:00  \_ dovecot/log
dovenull   1084  0.0  0.1  47520  2952 ?        S    05:20   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  47764  2704 ?        S    05:20   0:00  \_ dovecot/imap-login
root       1091  0.0  0.0  24528  2412 ?        S    05:20   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   600 ?        S    05:20   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41160  1460 ?        S    05:20   0:00  \_ dovecot/auth
root      87288  0.0  0.1  60820  4512 ?        S    12:47   0:00  \_ dovecot/lmtp
root        926  0.0  0.0 572372   760 ?        Ssl  05:20   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.0 445028   588 ?        Ss   05:20   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  87383  0.0  0.0 445028   312 ?        S    12:47   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.0 439788   360 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 13936 ?        Ssl  05:20   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  1.1 261032 27292 ?        Ss   05:20   0:05 cpsrvd (SSL) - waiting for connections                   
root      87518  0.0  0.0      0     0 ?        Z    12:47   0:00  \_ [cpaneld - servi] <defunct>
root        943  0.0  0.0 1277312 2352 ?        Ssl  05:20   0:20 /usr/bin/checkstatus
root        944  0.0  0.2 1276356 6780 ?        Ssl  05:20   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10400  3424 ?        Ss   05:20   0:22 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   272 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   332 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    36 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.4 5654048 34320 ?       SLsl 05:20   0:15 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   292 ?        Ss   05:20   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740   780 ?        Ss   05:20   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  87411 34.6  3.6 482532 87400 ?        R    12:47   0:06  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  87542 26.4  2.6 456676 64668 ?        R    12:47   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  87543 27.2  2.6 458592 65248 ?        R    12:47   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  87556 12.6  1.5 431968 38520 ?        R    12:47   0:00  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  87562 18.0  1.5 431968 38516 ?        R    12:47   0:00  \_ php-fpm: pool health_oyostate_gov_ng
systuser    968  0.0  0.0 112524    68 ?        Ssl  05:20   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400     0 ?        Ssl  05:20   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   244 ?        Ss   05:20   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser   1168  0.0  0.1 157704  2972 ?        S    05:20   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.1 387556  3296 ?        Ss   05:20   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  0.3 412368  9444 ?        Ss   05:20   0:08 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.7 209332 18972 ?        Ss   05:20   0:03 tailwatchd
root       1213  0.0  0.2 183900  5192 ?        Ss   05:20   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1216  0.0  0.1 167452  3316 ?        Ss   05:20   0:00 dnsadmin - dormant mode
root       1627  0.0  0.0 299272   484 ?        Ss   05:20   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1352 ?        SN   05:20   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.2 266984  4940 ?        Ss   05:20   0:03 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12840   324 ?        S    05:20   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   288 ?        S    05:20   0:03  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12888   332 ?        R    05:20   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256     4 ?        S    05:20   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    74905  0.1  0.7 277680 19204 ?        S    12:31   0:01  \_ /usr/sbin/httpd -k start
nobody    82158  0.1  0.0      0     0 ?        Z    12:40   0:00  \_ [httpd] <defunct>
nobody    83594  0.1  0.7 277876 18676 ?        S    12:42   0:00  \_ /usr/sbin/httpd -k start
nobody    83595  0.1  0.7 277504 18272 ?        S    12:42   0:00  \_ /usr/sbin/httpd -k start
nobody    86065  0.1  0.7 277880 18300 ?        S    12:46   0:00  \_ /usr/sbin/httpd -k start
nobody    86085  0.0  0.7 277780 17844 ?        S    12:46   0:00  \_ /usr/sbin/httpd -k start
nobody    86087  0.0  0.7 277876 17984 ?        S    12:46   0:00  \_ /usr/sbin/httpd -k start
nobody    86095  0.1  0.7 277760 17880 ?        S    12:46   0:00  \_ /usr/sbin/httpd -k start
nobody    86100  0.1  0.7 277884 18220 ?        S    12:46   0:00  \_ /usr/sbin/httpd -k start
nobody    86102  0.1  0.7 277752 17984 ?        S    12:46   0:00  \_ /usr/sbin/httpd -k start
nobody    86108  0.1  0.7 277496 17988 ?        S    12:46   0:00  \_ /usr/sbin/httpd -k start
nobody    86112  0.1  0.7 277752 18296 ?        S    12:46   0:00  \_ /usr/sbin/httpd -k start
nobody    86116  0.0  0.7 277900 18556 ?        S    12:46   0:00  \_ /usr/sbin/httpd -k start
nobody    86123  0.0  0.7 277744 18096 ?        S    12:46   0:00  \_ /usr/sbin/httpd -k start
nobody    86141  0.1  0.7 277744 17992 ?        S    12:46   0:00  \_ /usr/sbin/httpd -k start
nobody    86144  0.1  0.7 277744 18104 ?        S    12:46   0:00  \_ /usr/sbin/httpd -k start
nobody    86165  0.0  0.7 277492 17792 ?        S    12:46   0:00  \_ /usr/sbin/httpd -k start
nobody    86166  0.1  0.7 277744 17584 ?        S    12:46   0:00  \_ /usr/sbin/httpd -k start
nobody    86168  0.1  0.7 277744 17676 ?        S    12:46   0:00  \_ /usr/sbin/httpd -k start
nobody    86169  0.0  0.7 277888 18012 ?        S    12:46   0:00  \_ /usr/sbin/httpd -k start
cloudw    87687  0.0  0.5 284976 12420 ?        R    12:48   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    87089  0.0  0.7 277504 17388 ?        S    12:47   0:00  \_ /usr/sbin/httpd -k start
nobody    87107  0.1  0.7 277496 17200 ?        S    12:47   0:00  \_ /usr/sbin/httpd -k start
nobody    87122  0.1  0.7 277496 17296 ?        S    12:47   0:00  \_ /usr/sbin/httpd -k start
nobody    87123  0.0  0.7 277496 17168 ?        S    12:47   0:00  \_ /usr/sbin/httpd -k start
nobody    87124  0.1  0.7 277876 17500 ?        S    12:47   0:00  \_ /usr/sbin/httpd -k start
nobody    87125  0.1  0.7 277496 17424 ?        S    12:47   0:00  \_ /usr/sbin/httpd -k start
nobody    87428  0.1  0.6 277744 16848 ?        S    12:47   0:00  \_ /usr/sbin/httpd -k start
nobody    87445  0.0  0.7 277752 17256 ?        S    12:47   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.4 10.8 1468028 263744 ?      Sl   05:21   6:30 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148     8 ?        Ss   06:01   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152    40 ?        S    06:01   0:00  \_ [kworker]
root      40218  0.1  0.4 183648 11324 ?        Ss   06:01   0:24 lfd - sleeping
root      10515  0.0  0.0 132964     4 ?        SN   09:26   0:00 ConfigServer Version Check
root      10528  0.0  0.0 108056     0 ?        SN   09:26   0:00  \_ sleep 16186
root      92278  0.0  4.8 248096 117420 ?       Ss   10:49   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      98393  0.0  5.4 265876 131516 ?       S    10:55   0:03  \_ spamd child
root      98394  0.0  4.9 249240 118772 ?       S    10:55   0:00  \_ spamd child
## mysql stats
Uptime: 48508  Threads: 8  Questions: 2258702  Slow queries: 0  Opens: 11765  Flush tables: 1  Open tables: 2000  Queries per second avg: 46.563
*************************** 1. row ***************************
     Id: 32528
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 32530
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 32533
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 4. row ***************************
     Id: 32539
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 32540
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 6. row ***************************
     Id: 32541
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 7. row ***************************
     Id: 32542
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 8. row ***************************
     Id: 32544
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 142.44.220.186 TIME_WAIT
      1 142.44.233.212 TIME_WAIT
      1 172.213.11.146 TIME_WAIT
      1 172.213.11.156 TIME_WAIT
      1 192.178.4.102 TIME_WAIT
      1 192.178.4.97 TIME_WAIT
      1 ::1 TIME_WAIT
      1 40.77.167.46 TIME_WAIT
      1 43.231.115.89 TIME_WAIT
      1 54.39.203.196 TIME_WAIT
      1 54.39.6.110 TIME_WAIT
      1 66.249.70.5 TIME_WAIT
      1 68.65.121.177 TIME_WAIT
      1 96.30.57.23 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 20.127.187.7 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 12:48:02 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 13 hours 29 minutes 13 seconds
   Server load: 4.21 1.40 0.93
   Total accesses: 158728 - Total Traffic: 3.9 GB - Total Duration: 126714515
   CPU Usage: u3.46 s4.57 cu2156.83 cs1770.35 - 8.1% CPU load
   3.27 requests/sec - 84.6 kB/second - 25.9 kB/request - 798.312 ms/request
   26 requests currently being processed, 0 workers gracefully restarting, 1 idle workers

KK.WWWW.RWK_KW.W.......W.W....K.WW...W...K......WK..W...........
........WK.KW...................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU  SS  Req   Dur    Conn  Child  Slot      Client      Protocol           VHost                              Request
   0-0  87089 1/17/6898  K 0.03 2   402 3688116  33.9  0.08  173.59 192.178.4.100   http/1.1 team.cloudware.ng:443      GET /?l=297726849 HTTP/1.1
   1-0  74905 1/286/6325 K 6.58 1   270 3413358  33.8  6.00  175.91 192.178.4.97    http/1.1 team.cloudware.ng:443      GET /?l=3204955277 HTTP/1.1
   2-0  -     0/0/6729   . 0.00 2   0   3385612  0.0   0.00  164.96 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   3-0  87107 0/12/6571  W 0.20 0   0   3346730  0.0   0.21  165.39 138.199.39.176  http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   4-0  87122 4/13/6423  W 0.14 0   0   3276770  124.5 0.18  164.58 192.178.4.105   http/1.1 team.cloudware.ng:443      GET /?l=2549910626 HTTP/1.1
   5-0  87123 0/13/6230  W 0.06 0   0   3207728  0.0   0.09  157.63 138.199.39.176  http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   6-0  87124 0/16/6453  W 0.06 0   0   3309351  0.0   0.09  164.37 138.199.39.176  http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   7-0  -     0/0/6158   . 0.00 0   0   3262645  0.0   0.00  164.02 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   8-0  87125 0/14/6071  R 0.19 1   555 3062201  0.0   0.22  146.28 209.159.155.153 http/1.1 health.oyostate.gov.ng:443
   9-0  83594 0/86/5913  W 2.16 0   0   3009379  0.0   1.87  147.18 138.199.39.176  http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   10-0 86065 1/25/5782  K 0.41 0   371 2963682  35.4  0.46  147.01 192.178.4.98    http/1.1 team.cloudware.ng:443      GET /?l=3090679464 HTTP/1.1
   11-0 87428 0/5/5669   _ 0.12 0   479 2993420  0.0   0.15  141.07 192.178.4.99    http/1.1 team.cloudware.ng:443      GET /?l=1231605079 HTTP/1.1
   12-0 83595 2/67/5523  K 1.62 3   462 2936223  63.5  1.71  140.74 192.178.4.102   http/1.1 team.cloudware.ng:443      GET /?l=2950607325 HTTP/1.1
   13-0 87445 0/5/5506   W 0.00 1   0   2916483  0.0   0.02  141.35 168.235.203.253 http/1.1 health.oyostate.gov.ng:443 GET / HTTP/1.1
   14-0 -     0/0/5351   . 0.00 62  0   46183943 0.0   0.00  132.97 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 86085 0/25/4948  W 0.33 0   0   2649339  0.0   0.42  133.60 138.199.39.176  http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   16-0 -     0/0/5893   . 0.00 102 0   3010014  0.0   0.00  147.19 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 -     0/0/5211   . 0.00 88  0   2777535  0.0   0.00  134.92 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 -     0/0/4735   . 0.00 59  0   2502199  0.0   0.00  120.08 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/4403   . 0.00 89  0   2252768  0.0   0.00  111.67 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/4422   . 0.00 63  0   2322553  0.0   0.00  106.69 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/3928   . 0.00 74  0   2161479  0.0   0.00  103.33 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/3762   . 0.00 60  0   2063681  0.0   0.00  90.55  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 86087 0/26/3768  W 0.34 0   0   1841747  0.0   0.40  94.87  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   24-0 -     0/0/3554   . 0.00 103 0   1827996  0.0   0.00  89.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 86095 0/31/2679  W 0.63 0   0   1567793  0.0   0.75  70.81  138.199.39.176  http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   26-0 -     0/0/2350   . 0.00 70  0   1137608  0.0   0.00  55.36  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/2198   . 0.00 43  0   1435412  0.0   0.00  52.07  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/1820   . 0.00 101 0   941912   0.0   0.00  46.31  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/954    . 0.00 82  0   491878   0.0   0.00  24.15  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 86100 1/23/1939  K 0.49 2   462 990600   35.2  0.66  47.60  192.178.4.104   http/1.1 team.cloudware.ng:443      GET /?l=283772177 HTTP/1.1
   31-0 -     0/0/967    . 0.00 100 0   457078   0.0   0.00  22.25  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 86102 0/27/590   W 0.46 0   0   283445   0.0   0.59  12.95  138.199.39.176  http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   33-0 86108 0/27/869   W 0.42 0   0   432329   0.0   0.50  21.30  138.199.39.176  http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   34-0 -     0/0/665    . 0.00 72  0   326018   0.0   0.00  16.55  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/722    . 0.00 68  0   393283   0.0   0.00  19.52  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/541    . 0.00 83  0   317035   0.0   0.00  12.95  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 86112 0/35/756   W 0.35 0   0   479911   0.0   0.52  17.05  138.199.39.176  http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   38-0 -     0/0/282    . 0.00 78  0   154430   0.0   0.00  7.44   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/777    . 0.00 98  0   463841   0.0   0.00  19.62  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/256    . 0.00 54  0   110598   0.0   0.00  5.28   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 86116 1/23/122   K 0.21 0   339 81599    36.2  0.26  2.87   192.178.4.96    http/1.1 team.cloudware.ng:443      GET /?l=3917595039 HTTP/1.1
   42-0 -     0/0/53     . 0.00 97  0   22522    0.0   0.00  1.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/138    . 0.00 96  0   60088    0.0   0.00  2.89   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/987    . 0.00 75  0   600004   0.0   0.00  24.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/81     . 0.00 80  0   48253    0.0   0.00  1.73   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/49     . 0.00 69  0   18198    0.0   0.00  0.80   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/136    . 0.00 77  0   60138    0.0   0.00  3.37   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 86123 0/26/258   W 0.20 0   0   147133   0.0   0.32  6.49   138.199.39.176  http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   49-0 86141 3/29/195   K 0.57 1   261 118498   97.4  0.64  4.79   192.178.4.103   http/1.1 team.cloudware.ng:443      GET /?l=1224121386 HTTP/1.1
   50-0 -     0/0/20     . 0.00 66  0   7008     0.0   0.00  0.26   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/23     . 0.00 67  0   8849     0.0   0.00  0.36   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 86144 6/33/149   W 0.68 0   0   97181    9.5   0.67  3.70   66.249.70.7     http/1.1 test.cloudware.ng:443      GET /886952745?goodscode=0885791054 HTTP/1.1
   53-0 -     0/0/160    . 0.00 79  0   85651    0.0   0.00  3.82   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/252    . 0.00 3   0   146630   0.0   0.00  6.58   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/81     . 0.00 113 0   38998    0.0   0.00  1.88   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/194    . 0.00 95  0   100880   0.0   0.00  5.54   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/57     . 0.00 111 0   26445    0.0   0.00  1.32   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/14     . 0.00 65  0   6001     0.0   0.00  0.24   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/12     . 0.00 112 0   5289     0.0   0.00  0.26   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/3      . 0.00 110 0   2        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/149    . 0.00 87  0   86015    0.0   0.00  3.88   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/16     . 0.00 76  0   11116    0.0   0.00  0.36   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/120    . 0.00 94  0   58678    0.0   0.00  3.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/48     . 0.00 64  0   24918    0.0   0.00  1.20   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/117    . 0.00 109 0   58413    0.0   0.00  2.88   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/39     . 0.00 58  0   20831    0.0   0.00  1.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/56     . 0.00 108 0   33511    0.0   0.00  1.51   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/4      . 0.00 91  0   81       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/155    . 0.00 90  0   97175    0.0   0.00  4.09   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/4      . 0.00 93  0   311      0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/26     . 0.00 84  0   15675    0.0   0.00  0.42   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 86165 0/26/178   W 0.41 0   0   113753   0.0   0.38  4.62   192.178.4.100   http/1.1 team.cloudware.ng:443      GET /?l=1691569235 HTTP/1.1
   73-0 86166 1/39/54    K 0.93 0   359 42975    35.7  0.99  1.24   192.178.4.96    http/1.1 team.cloudware.ng:443      GET /?l=4203158322 HTTP/1.1
   74-0 -     0/0/19     . 0.00 92  0   8502     0.0   0.00  0.27   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 86168 4/35/40    K 0.69 2   385 38893    126.3 0.74  0.81   192.178.4.101   http/1.1 team.cloudware.ng:443      GET /?l=578742767 HTTP/1.1
   76-0 86169 0/22/26    W 0.69 0   0   19163    0.0   0.55  0.56   192.178.4.104   http/1.1 team.cloudware.ng:443      GET /?l=1720369771 HTTP/1.1
   77-0 -     0/0/73     . 0.00 107 0   42789    0.0   0.00  1.74   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/19     . 0.00 73  0   9916     0.0   0.00  0.43   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/6      . 0.00 106 0   1903     0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -     0/0/4      . 0.00 86  0   2369     0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1489
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 8 seconds, (range: 0...28)
   index usage: 26%, cache usage: 36%
   total entries stored since starting: 119075
   total entries replaced since starting: 0
   total entries expired since starting: 117563
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 23 hit, 393 miss
   total removes since starting: 23 hit, 29 miss
Youez - 2016 - github.com/yon3zu
LinuXploit