403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.20.21.txt
 ## swap threshold exceeded
## server overview
2025-11-07.20.21 load[0] mem[59/83] mysql[4/25] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1295         224          98         843         796
Swap:          1999        1714         285
 20:21:02 up 10:34,  0 users,  load average: 0.57, 0.73, 0.80
## system overview
top - 20:21:02 up 10:34,  0 users,  load average: 0.57, 0.73, 0.80
Tasks: 189 total,   1 running, 187 sleeping,   0 stopped,   1 zombie
%Cpu(s): 58.8 us, 17.6 sy,  0.0 ni, 23.5 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   246924 free,  1308804 used,   864572 buff/cache
KiB Swap:  2047996 total,   292424 free,  1755572 used.   833508 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1782 mysql     20   0 1484772 296728   3528 S  94.1 12.3  13:23.78 /usr/sbin+
  3820 nigeria   20   0  400652  15936  10220 S  11.8  0.7   0:00.09 /opt/cpan+
     1 root      20   0   44424   3484   1516 S   0.0  0.1   0:55.44 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:03.50 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.65 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:47.02 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.11 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.60 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.35 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:29.61 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.06 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.68 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:03.29 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:03.69 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:02.32 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   39500   5720   5480 S   0.0  0.2   0:18.72 /usr/lib/+
   382 root      20   0   45352      8      4 S   0.0  0.0   0:00.36 /usr/lib/+
   399 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
   409 root      16  -4   55532    456    336 S   0.0  0.0   0:02.96 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0   24720   1176    788 S   0.0  0.0   0:08.68 /usr/lib/+
   493 root      20   0  224268   4760   1120 S   0.0  0.2   0:00.53 queueproc+
   494 root      20   0  152780     76     36 S   0.0  0.0   0:00.02 /usr/sbin+
   499 nscd      20   0 1334484   1976    784 S   0.0  0.1   0:15.11 /usr/sbin+
   500 rpc       20   0   69256     24      0 S   0.0  0.0   0:00.04 /sbin/rpc+
   503 dbus      20   0   57032   1332    616 S   0.0  0.1   0:19.87 /usr/bin/+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0   52852    332    220 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  610540    976    600 S   0.0  0.0   0:05.09 /usr/lib/+
   541 root      20   0   21540    412    304 S   0.0  0.0   0:00.88 /usr/sbin+
   551 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  124480    428    296 S   0.0  0.0   0:01.06 /usr/sbin+
   558 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   570 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   622 mailnull  20   0   89116   3832    884 S   0.0  0.2   0:00.56 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:03.42 [loop0]
   677 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   959 systuser  20   0  114016  10628   2696 S   0.0  0.4   0:08.83 /usr/loca+
   960 systuser  20   0   11604     24      0 S   0.0  0.0   0:00.02 /usr/loca+
   961 root      20   0  572372    620    160 S   0.0  0.0   0:03.28 /usr/bin/+
   963 telegraf  20   0 5654304  35200   5936 S   0.0  1.5   0:20.72 /usr/loca+
   964 root      20   0   51508    604    424 S   0.0  0.0   0:00.47 /usr/sbin+
   966 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   968 systuser  20   0  111608      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 systuser  20   0   10388     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   970 systuser  20   0  113932      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   981 named     20   0  784388  38168   1788 S   0.0  1.6   0:24.23 /usr/sbin+
   982 root      20   0 1828076  90852    620 S   0.0  3.8   0:35.68 /usr/loca+
   984 root      20   0  386112    436    340 S   0.0  0.0   0:01.03 php-fpm: +
   992 root      20   0  397344   2420    612 S   0.0  0.1   0:09.40 php-fpm: +
   994 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.81 /usr/bin/+
  1007 root      20   0  392856    476    384 S   0.0  0.0   0:01.01 php-fpm: +
  1012 root      20   0  385496    552    452 S   0.0  0.0   0:01.22 php-fpm: +
  1013 root      20   0  322896   6716   5504 S   0.0  0.3   0:09.98 /usr/sbin+
  1014 root      20   0  261428  27584   4856 S   0.0  1.1   0:10.95 cpsrvd (S+
  1017 root      20   0  436392    408    320 S   0.0  0.0   0:01.16 php-fpm: +
  1018 root      20   0  153404    224    140 S   0.0  0.0   0:00.82 pure-ftpd+
  1020 root      20   0  111304    356    260 S   0.0  0.0   0:04.09 /usr/sbin+
  1026 cpanelc+  20   0   10532   3564   2304 S   0.0  0.1   0:30.09 /usr/loca+
  1096 dovenull  20   0   47060   2384   1640 S   0.0  0.1   0:00.59 dovecot/p+
  1097 dovenull  20   0   48360   3468   1868 S   0.0  0.1   0:00.32 dovecot/i+
  1098 dovecot   20   0   10320    316    200 S   0.0  0.0   0:00.09 dovecot/a+
  1099 root      20   0   10452    568    368 S   0.0  0.0   0:00.48 dovecot/l+
  1100 dovenull  20   0   47020   2356   1664 S   0.0  0.1   0:00.77 dovecot/p+
  1101 dovenull  20   0   48412   3852   2128 S   0.0  0.2   0:00.47 dovecot/i+
  1108 root      20   0   24568   2524    512 S   0.0  0.1   0:00.28 dovecot/c+
  1113 dovecot   20   0   13568    436    220 S   0.0  0.0   0:00.10 dovecot/s+
  1162 cloudw    20   0  471784   9260   4976 S   0.0  0.4   0:00.19 php-fpm: +
  1182 dovecot   20   0   41268   1548   1016 S   0.0  0.1   0:00.80 dovecot/a+
  1218 systuser  20   0  157708   2864    816 S   0.0  0.1   0:00.18 SonarPush+
  1233 wp-tool+  20   0  410452  21932   1404 S   0.0  0.9   0:31.10 /usr/bin/+
  1234 wp-tool+  20   0  387528   3280   1424 S   0.0  0.1   0:00.37 /usr/bin/+
  1264 root      20   0  183900   6104   2872 S   0.0  0.3   0:03.08 cpdavd - +
  1265 root      20   0  209456  10940   2120 S   0.0  0.5   0:03.69 tailwatchd
  1267 root      20   0  167452   4116   2748 S   0.0  0.2   0:00.61 dnsadmin +
  1455 cloudw    20   0  471784   9260   4976 S   0.0  0.4   0:00.20 php-fpm: +
  1465 nobody    20   0  277560  18220   4224 S   0.0  0.8   0:00.24 /usr/sbin+
  1466 nobody    20   0  277852  18328   4228 S   0.0  0.8   0:00.34 /usr/sbin+
  1480 nobody    20   0  277512  17524   3880 S   0.0  0.7   0:00.05 /usr/sbin+
  1481 nobody    20   0  277512  18056   4172 S   0.0  0.7   0:00.19 /usr/sbin+
  1482 nobody    20   0  277516  18092   4004 S   0.0  0.7   0:00.22 /usr/sbin+
  1483 nobody    20   0  277888  18524   4120 S   0.0  0.8   0:00.22 /usr/sbin+
  1713 root      20   0  299272    632    448 S   0.0  0.0   0:01.02 php-fpm: +
  1722 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  1728 root      38  18  130416   1376    692 S   0.0  0.1   0:00.10 cpanellog+
  1787 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  1930 cloudw    20   0  471784   9264   4980 S   0.0  0.4   0:00.20 php-fpm: +
  1968 root      20   0  266984   5096    600 S   0.0  0.2   0:02.49 /usr/sbin+
  1970 root      20   0   12852    328    212 S   0.0  0.0   0:03.50 /usr/loca+
  1971 root      20   0   12732    288    212 S   0.0  0.0   0:02.95 /usr/loca+
  1972 root      20   0   12896    340    216 S   0.0  0.0   0:03.21 /usr/loca+
  1977 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  2041 root      20   0  183988  12620   1104 S   0.0  0.5   0:33.33 lfd - sle+
  2504 nobody    20   0  277512  17688   3912 S   0.0  0.7   0:00.16 /usr/sbin+
  2659 nobody    20   0  277524  18096   4072 S   0.0  0.7   0:00.15 /usr/sbin+
  3168 nobody    20   0  277900  17768   3912 S   0.0  0.7   0:00.06 /usr/sbin+
  3309 nobody    20   0  277748  17788   3864 S   0.0  0.7   0:00.11 /usr/sbin+
  3310 nobody    20   0  277888  17752   3908 S   0.0  0.7   0:00.06 /usr/sbin+
  3372 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  3486 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
  3538 nigeria   20   0  402076  13372   4032 S   0.0  0.6   0:00.41 php-fpm: +
  3583 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  3593 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
  3665 healtho+  20   0  459288  69488   4192 S   0.0  2.9   0:02.82 php-fpm: +
  3690 healtho+  20   0  460196  71512   4308 S   0.0  3.0   0:02.40 php-fpm: +
  3740 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  3759 cloudw    20   0  405164  15264   3420 S   0.0  0.6   0:00.05 php-fpm: +
  3771 root      20   0  162436   5832   4336 S   0.0  0.2   0:00.01 sshd: roo+
  3774 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: roo+
  3775 healtho+  20   0  428568  38560   4188 S   0.0  1.6   0:00.31 php-fpm: +
  3782 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  3786 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
  3787 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
  3788 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
  3791 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
  3794 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  3797 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  3801 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  3804 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  3805 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  3806 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
  3807 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  3813 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
  3815 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  3819 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
  3878 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
  9063 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  9089 oysipao+  20   0    3152     56     16 S   0.0  0.0   0:00.70 [kworker]
 28537 root      20   0  248100  43392   1328 S   0.0  1.8   0:06.76 /usr/loca+
 32709 root      20   0  269720 101844   3028 S   0.0  4.2   0:24.20 spamd chi+
 32710 root      20   0  258916  90232   2772 S   0.0  3.7   0:00.77 spamd chi+
 56584 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 70876 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 80486 nobody    20   0  277856  19980   4776 S   0.0  0.8   0:03.10 /usr/sbin+
 82516 nobody    20   0  277576  20000   4848 S   0.0  0.8   0:02.19 /usr/sbin+
 84906 nobody    20   0  277576  20628   4964 S   0.0  0.9   0:02.00 /usr/sbin+
 85383 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 87469 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 89754 nobody    20   0  277632  19692   4800 S   0.0  0.8   0:01.77 /usr/sbin+
 90504 cloudw    20   0  471320   9144   5244 S   0.0  0.4   0:01.39 php-fpm: +
 90771 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 91532 nobody    20   0  277620  19424   4688 S   0.0  0.8   0:01.83 /usr/sbin+
 91838 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 92329 nobody    20   0  277844  19112   4436 S   0.0  0.8   0:00.96 /usr/sbin+
 94080 root      20   0 1276100  10332    596 S   0.0  0.4   0:00.06 /usr/bin/+
 94118 root      20   0 1277056  11628    596 S   0.0  0.5   0:00.07 /usr/bin/+
 96588 nobody    20   0  277912  19864   4596 S   0.0  0.8   0:01.01 /usr/sbin+
 97623 nobody    20   0  277844  19696   4476 S   0.0  0.8   0:01.14 /usr/sbin+
 97675 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 99512 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
101343 cloudw    20   0  471840   9496   5236 S   0.0  0.4   0:00.41 php-fpm: +
101881 nobody    20   0  277604  17720   3748 S   0.0  0.7   0:00.22 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:03  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:46   0:47  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    09:46   0:29  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    09:46   0:02  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        660  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [loop0]
root        677  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      56584  0.0  0.0      0     0 ?        S    18:51   0:00  \_ [kworker/0:4]
root      70876  0.0  0.0      0     0 ?        S    19:18   0:00  \_ [kworker/u200:0]
root      85383  0.0  0.0      0     0 ?        S    19:45   0:00  \_ [kworker/u200:1]
root      87469  0.0  0.0      0     0 ?        S    19:49   0:00  \_ [kworker/1:3]
root      90771  0.0  0.0      0     0 ?        S    19:55   0:00  \_ [kworker/1:4]
root      91838  0.0  0.0      0     0 ?        S    19:57   0:00  \_ [kworker/0:0]
root      97675  0.0  0.0      0     0 ?        S    20:07   0:00  \_ [kworker/0:3]
root      99512  0.0  0.0      0     0 ?        S    20:10   0:00  \_ [kworker/1:0]
root        399  0.0  0.0      0     0 ?        S    20:16   0:00  \_ [kworker/0:1]
root       1722  0.0  0.0      0     0 ?        S    20:18   0:00  \_ [kworker/1:1]
root       1787  0.0  0.0      0     0 ?        S    20:18   0:00  \_ [kworker/0:2]
root       3372  0.0  0.0      0     0 ?        S    20:20   0:00  \_ [kworker/1:2]
root          1  0.1  0.1  44424  3484 ?        Ss   09:46   0:55 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.2  39500  5720 ?        Ss   09:46   0:18 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45352     8 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   456 ?        S<sl 09:46   0:02 /sbin/auditd
root        489  0.0  0.0  24720  1176 ?        Ss   09:46   0:08 /usr/lib/systemd/systemd-logind
root        493  0.0  0.1 224268  4760 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
root        494  0.0  0.0 152780    76 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        499  0.0  0.0 1334484 1976 ?        Ssl  09:46   0:15 /usr/sbin/nscd
rpc         500  0.0  0.0  69256    24 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        503  0.0  0.0  57032  1332 ?        Ss   09:46   0:19 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        523  0.0  0.0 195208     0 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0  52852   332 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.0 610540   976 ?        Ssl  09:46   0:05 /usr/lib/polkit-1/polkitd --no-debug
root        541  0.0  0.0  21540   412 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        551  0.0  0.0  24208     4 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        552  0.0  0.0 124480   428 ?        Ss   09:46   0:01 /usr/sbin/crond -n
root       3782  0.0  0.0 183048  2140 ?        S    20:21   0:00  \_ /usr/sbin/CROND -n
root       3806  0.0  0.0 113284  1208 ?        Ss   20:21   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       3813  0.0  0.0 108052   360 ?        S    20:21   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       3819  0.0  0.0 113288  1520 ?        S    20:21   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       3882  0.0  0.0 153672  1780 ?        R    20:21   0:00  |               \_ ps auxf
root       3786  0.0  0.0 183048  2148 ?        S    20:21   0:00  \_ /usr/sbin/CROND -n
root       3804  0.0  0.0  20164   984 ?        Ss   20:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root       3787  0.0  0.0 183048  2148 ?        S    20:21   0:00  \_ /usr/sbin/CROND -n
root       3797  0.0  0.0  20164   808 ?        Ss   20:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       3788  0.0  0.0 183048  2148 ?        S    20:21   0:00  \_ /usr/sbin/CROND -n
root       3801  0.0  0.0  20164   804 ?        Ss   20:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       3791  0.0  0.0 183048  2148 ?        S    20:21   0:00  \_ /usr/sbin/CROND -n
root       3805  0.0  0.0  20164   804 ?        Ss   20:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       3794  0.0  0.0 183048  2144 ?        S    20:21   0:00  \_ /usr/sbin/CROND -n
root       3807  0.0  0.0  20164   968 ?        Ss   20:21   0:00      \_ jailshell (nigeria) [3815] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    3815  0.0  0.0  20164   260 ?        S    20:21   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    3820  0.0  0.6 400652 15936 ?        S    20:21   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0   4388     4 ?        Ss   09:46   0:00 /usr/sbin/acpid
root        569  0.0  0.0 114704     0 ttyS0    Ss+  09:46   0:00 /bin/bash
root        570  0.0  0.0 108296     8 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    622  0.0  0.1  89116  3832 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    959  0.0  0.4 114016 10628 ?        Ssl  09:46   0:08 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    960  0.0  0.0  11604    24 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        961  0.0  0.0 572372   620 ?        Ssl  09:46   0:03 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    963  0.0  1.4 5654304 35200 ?       SLsl 09:46   0:20 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0  51508   604 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1096  0.0  0.0  47060  2384 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1097  0.0  0.1  48360  3468 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1098  0.0  0.0  10320   316 ?        S    09:46   0:00  \_ dovecot/anvil
root       1099  0.0  0.0  10452   568 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1100  0.0  0.0  47020  2356 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1101  0.0  0.1  48412  3852 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1108  0.0  0.1  24568  2524 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1113  0.0  0.0  13568   436 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1182  0.0  0.0  41268  1548 ?        S    09:46   0:00  \_ dovecot/auth
root       3486  0.0  0.1  41052  2728 ?        S    20:20   0:00  \_ dovecot/auth -w
root        966  0.0  0.0 445028     0 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    968  0.0  0.0 111608     4 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    969  0.0  0.0  10388    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    970  0.0  0.0 113932     8 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
named       981  0.0  1.5 784388 38168 ?        Ssl  09:46   0:24 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        982  0.0  3.7 1828076 90852 ?       Ssl  09:46   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
root        984  0.0  0.0 386112   436 ?        Rs   09:46   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  0.0 397344  2420 ?        Ss   09:46   0:09 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    90504  0.0  0.3 471320  9144 ?        S    19:54   0:01  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw   101343  0.0  0.3 471840  9496 ?        S    20:13   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw     1162  0.0  0.3 471784  9260 ?        S    20:17   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw     1455  0.1  0.3 471784  9260 ?        S    20:17   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw     1930  0.1  0.3 471784  9264 ?        S    20:18   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
nigeria    3538  0.9  0.5 402076 13372 ?        S    20:20   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+   3665 13.4  2.8 459288 69488 ?        S    20:20   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+   3690 14.1  2.9 460196 71512 ?        S    20:20   0:02  \_ php-fpm: pool health_oyostate_gov_ng
cloudw     3759  1.6  0.6 405164 15264 ?        S    20:20   0:00  \_ php-fpm: pool cloudware_ng
healtho+   3775 15.5  1.5 428568 38560 ?        S    20:20   0:00  \_ php-fpm: pool health_oyostate_gov_ng
memcach+    994  0.0  0.0 342400     0 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1007  0.0  0.0 392856   476 ?        Ss   09:46   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root       1012  0.0  0.0 385496   552 ?        Ss   09:46   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1013  0.0  0.2 322896  6716 ?        Ssl  09:46   0:09 /usr/sbin/rsyslogd -n
root       1014  0.0  1.1 261428 27584 ?        Ss   09:46   0:10 cpsrvd (SSL) - waiting for connections                   
root       3740  0.0  0.0      0     0 ?        Z    20:20   0:00  \_ [cpaneld - servi] <defunct>
root       1017  0.0  0.0 436392   408 ?        Ss   09:46   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1018  0.0  0.0 153404   224 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
root       1020  0.0  0.0 111304   356 ?        Ss   09:46   0:04 /usr/sbin/sshd -D
root       3583  0.0  0.1 111304  4272 ?        Ss   20:20   0:00  \_ sshd: [accepted]
sshd       3593  0.0  0.1 115644  2632 ?        S    20:20   0:00  |   \_ sshd: [net]
root       3771  0.5  0.2 162436  5832 ?        Ss   20:20   0:00  \_ sshd: root [priv]
sshd       3774  0.0  0.1 115644  2632 ?        S    20:20   0:00      \_ sshd: root [net]
cpanelc+   1026  0.0  0.1  10532  3564 ?        Ss   09:46   0:30 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1218  0.0  0.1 157708  2864 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1233  0.0  0.9 410452 21932 ?        Ss   09:46   0:31 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1234  0.0  0.1 387528  3280 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.2 183900  6104 ?        Ss   09:46   0:03 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1265  0.0  0.4 209456 10940 ?        Ss   09:46   0:03 tailwatchd
root       1267  0.0  0.1 167452  4116 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1713  0.0  0.0 299272   632 ?        Ss   09:46   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1728  0.0  0.0 130416  1376 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1782  2.1 12.2 1484772 296728 ?      Sl   09:46  13:23 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1968  0.0  0.2 266984  5096 ?        Ss   09:46   0:02 /usr/sbin/httpd -k start
root       1970  0.0  0.0  12852   328 ?        S    09:46   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1971  0.0  0.0  12732   288 ?        S    09:46   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1972  0.0  0.0  12896   340 ?        S    09:46   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1977  0.0  0.0  53340     4 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    80486  0.1  0.8 277856 19980 ?        S    19:35   0:03  \_ /usr/sbin/httpd -k start
nobody    82516  0.0  0.8 277576 20000 ?        S    19:39   0:02  \_ /usr/sbin/httpd -k start
nobody    84906  0.0  0.8 277576 20628 ?        S    19:44   0:02  \_ /usr/sbin/httpd -k start
nobody    89754  0.1  0.8 277632 19692 ?        S    19:53   0:01  \_ /usr/sbin/httpd -k start
nobody    91532  0.1  0.8 277620 19424 ?        S    19:56   0:01  \_ /usr/sbin/httpd -k start
nobody    92329  0.0  0.7 277844 19112 ?        S    19:58   0:00  \_ /usr/sbin/httpd -k start
nobody    96588  0.1  0.8 277912 19864 ?        S    20:04   0:01  \_ /usr/sbin/httpd -k start
nobody    97623  0.1  0.8 277844 19696 ?        S    20:06   0:01  \_ /usr/sbin/httpd -k start
nobody   101881  0.0  0.7 277604 17720 ?        S    20:14   0:00  \_ /usr/sbin/httpd -k start
nobody     1465  0.1  0.7 277560 18220 ?        S    20:17   0:00  \_ /usr/sbin/httpd -k start
nobody     1466  0.1  0.7 277852 18328 ?        S    20:17   0:00  \_ /usr/sbin/httpd -k start
nobody     1480  0.0  0.7 277512 17524 ?        S    20:17   0:00  \_ /usr/sbin/httpd -k start
nobody     1481  0.0  0.7 277512 18056 ?        S    20:17   0:00  \_ /usr/sbin/httpd -k start
nobody     1482  0.1  0.7 277516 18092 ?        S    20:17   0:00  \_ /usr/sbin/httpd -k start
nobody     1483  0.1  0.7 277888 18524 ?        S    20:17   0:00  \_ /usr/sbin/httpd -k start
nobody     2504  0.1  0.7 277512 17688 ?        S    20:18   0:00  \_ /usr/sbin/httpd -k start
nobody     2659  0.1  0.7 277524 18096 ?        S    20:19   0:00  \_ /usr/sbin/httpd -k start
nobody     3168  0.0  0.7 277900 17768 ?        S    20:19   0:00  \_ /usr/sbin/httpd -k start
nobody     3309  0.1  0.7 277748 17788 ?        S    20:20   0:00  \_ /usr/sbin/httpd -k start
nobody     3310  0.0  0.7 277888 17752 ?        S    20:20   0:00  \_ /usr/sbin/httpd -k start
root       2041  0.0  0.5 183988 12620 ?        Ss   09:46   0:33 lfd - sleeping
oysipao+   9063  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+   9089  0.0  0.0   3152    56 ?        S    10:01   0:00  \_ [kworker]
root      28537  0.0  1.7 248100 43392 ?        Ss   10:50   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      32709  0.0  4.2 269720 101844 ?       S    11:00   0:24  \_ spamd child
root      32710  0.0  3.7 258916 90232 ?        S    11:00   0:00  \_ spamd child
root      94080  0.0  0.4 1276100 10332 ?       Ssl  20:00   0:00 /usr/bin/cspdaemon
root      94118  0.0  0.4 1277056 11628 ?       Ssl  20:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 59787  Threads: 2  Questions: 5689417  Slow queries: 0  Opens: 13528  Flush tables: 1  Open tables: 2000  Queries per second avg: 95.161
*************************** 1. row ***************************
     Id: 83924
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `13` WHERE `phone`='2348058748863' LIMIT 1
*************************** 2. row ***************************
     Id: 83934
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.157.111 TIME_WAIT
      1 138.226.31.172 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 203.210.242.99 TIME_WAIT
      1 45.157.184.201 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 54.39.0.240 TIME_WAIT
      1 84.37.38.1 TIME_WAIT
      1 91.208.184.168 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 114.119.145.216 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 52.173.9.238 TIME_WAIT
      4 78.157.49.100 TIME_WAIT
      5 104.248.90.230 TIME_WAIT
     83 157.230.45.41 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 20:21:02 WAT
   Restart Time: Friday, 07-Nov-2025 03:44:42 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 16 hours 36 minutes 20 seconds
   Server load: 0.57 0.73 0.80
   Total accesses: 149753 - Total Traffic: 2.5 GB - Total Duration: 332489912
   CPU Usage: u12.05 s6.45 cu1218.52 cs874.35 - 3.53% CPU load
   2.51 requests/sec - 44.1 kB/second - 17.6 kB/request - 2220.26 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

_KK_._WRK_._W_RWWRWW_K..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req   Dur    Conn Child  Slot      Client      Protocol           VHost                                        Request
   0-0  3168   0/15/8087  _ 0.21  0     349 16683902 0.0  0.36  136.79 66.249.70.33    http/1.1 support.cloudware.ng:443   GET /?c=1511206483 HTTP/1.1
   1-0  91532  1/468/7859 K 7.10  1     402 18932459 35.8 11.11 124.43 66.249.70.39    http/1.1 support.cloudware.ng:443   GET /?c=1283707161 HTTP/1.1
   2-0  3309   3/22/7946  K 0.42  1     486 15193893 99.0 0.48  133.05 66.249.70.32    http/1.1 support.cloudware.ng:443   GET /?c=1842016425 HTTP/1.1
   3-0  2504   0/32/8008  _ 0.68  0     516 13212762 0.0  0.73  150.34 157.230.45.41   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   4-0  -      0/0/8099   . 0.00  50    0   10913767 0.0  0.00  145.51 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   5-0  96588  0/240/8500 _ 3.55  0     0   12632477 0.0  4.86  139.55 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   6-0  92329  0/229/7374 W 3.55  175   0   13492058 0.0  4.19  131.69 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323534363638372p2231223
   7-0  1465   0/51/7058  R 0.89  1     300 57927330 0.0  1.11  116.63 217.113.194.130 http/1.1 team.cloudware.ng:443
   8-0  80486  1/779/7187 K 11.56 0     499 13101781 35.8 12.64 123.54 66.249.70.38    http/1.1 support.cloudware.ng:443   GET /?c=3468160824 HTTP/1.1
   9-0  2659   0/35/7565  _ 0.53  1     25  14041410 0.0  0.65  135.53 116.203.129.16  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue2.php HTTP/1.1
   10-0 -      0/0/6662   . 0.00  51    0   15122180 0.0  0.00  117.83 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   11-0 82516  0/626/5856 _ 7.85  1     48  15265700 0.0  8.41  100.11 116.203.134.67  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue4.php HTTP/1.1
   12-0 101881 0/50/6128  W 0.89  195   0   9514019  0.0  2.97  113.65 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323534363636372p2231223
   13-0 3310   0/15/6348  _ 0.16  1     25  11379281 0.0  0.23  114.11 128.140.8.200   http/1.1 cloudsms.com.ng:443        GET /cron/process_queue3.php HTTP/1.1
   14-0 97623  0/248/6845 R 4.56  2     394 10225426 0.0  4.58  116.82 102.89.69.13    http/1.1
   15-0 1466   0/70/4957  W 1.73  0     0   11392219 0.0  1.54  73.90  66.249.70.33    http/1.1 support.cloudware.ng:443   GET /?c=2932839968 HTTP/1.1
   16-0 89754  0/391/3524 W 7.69  215   0   11186553 0.0  8.61  64.96  173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323534363634372p2231223
   17-0 84906  0/782/5440 R 6.90  2     351 10539656 0.0  8.97  98.25  157.230.45.41   http/1.1
   18-0 1480   0/10/4216  W 0.15  155   0   5714830  0.0  0.20  75.95  173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323534363730372p2231223
   19-0 1481   0/49/2665  W 0.50  0     0   6126695  0.0  0.65  47.17  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   20-0 1482   0/84/2585  _ 0.65  0     288 3894810  0.0  0.74  37.67  157.230.45.41   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   21-0 1483   1/86/2326  K 0.87  0     345 6647883  35.5 2.03  37.37  66.249.70.34    http/1.1 support.cloudware.ng:443   GET /?c=1925645983 HTTP/1.1
   22-0 -      0/0/3009   . 0.00  1782  0   5032928  0.0  0.00  53.09  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -      0/0/1301   . 0.00  1537  0   3848943  0.0  0.00  18.42  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -      0/0/2017   . 0.00  187   0   3606163  0.0  0.00  33.76  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -      0/0/1299   . 0.00  3054  0   2830102  0.0  0.00  15.84  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -      0/0/438    . 0.00  2251  0   2530735  0.0  0.00  8.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -      0/0/927    . 0.00  1788  0   2252462  0.0  0.00  14.78  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -      0/0/440    . 0.00  3052  0   635273   0.0  0.00  6.44   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -      0/0/314    . 0.00  3051  0   275271   0.0  0.00  6.71   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -      0/0/157    . 0.00  3171  0   540532   0.0  0.00  12.74  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -      0/0/531    . 0.00  2060  0   1518643  0.0  0.00  13.84  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -      0/0/61     . 0.00  3443  0   35378    0.0  0.00  1.13   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -      0/0/225    . 0.00  3435  0   253874   0.0  0.00  1.95   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -      0/0/38     . 0.00  3406  0   25910    0.0  0.00  1.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -      0/0/87     . 0.00  3260  0   51413    0.0  0.00  1.49   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -      0/0/70     . 0.00  3265  0   60579    0.0  0.00  1.59   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -      0/0/29     . 0.00  3440  0   21078    0.0  0.00  0.28   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -      0/0/177    . 0.00  5993  0   148970   0.0  0.00  0.68   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -      0/0/29     . 0.00  5957  0   19380    0.0  0.00  0.19   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -      0/0/24     . 0.00  5974  0   23678    0.0  0.00  0.25   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -      0/0/379    . 0.00  5565  0   524981   0.0  0.00  4.65   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -      0/0/16     . 0.00  5992  0   20427    0.0  0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -      0/0/22     . 0.00  5986  0   22962    0.0  0.00  0.25   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -      0/0/29     . 0.00  5984  0   25557    0.0  0.00  0.25   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -      0/0/27     . 0.00  5988  0   19701    0.0  0.00  0.17   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -      0/0/21     . 0.00  5971  0   28569    0.0  0.00  0.49   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -      0/0/26     . 0.00  5973  0   19799    0.0  0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -      0/0/100    . 0.00  5707  0   148768   0.0  0.00  1.13   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -      0/0/124    . 0.00  5591  0   255240   0.0  0.00  1.29   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -      0/0/22     . 0.00  5962  0   24442    0.0  0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -      0/0/18     . 0.00  5990  0   22030    0.0  0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -      0/0/85     . 0.00  5534  0   589179   0.0  0.00  1.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -      0/0/78     . 0.00  5589  0   603289   0.0  0.00  0.40   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -      0/0/18     . 0.00  5982  0   23851    0.0  0.00  0.23   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -      0/0/49     . 0.00  5902  0   25330    0.0  0.00  0.71   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -      0/0/199    . 0.00  5968  0   131538   0.0  0.00  0.52   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -      0/0/9      . 0.00  5980  0   25766    0.0  0.00  0.27   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -      0/0/14     . 0.00  5987  0   11552    0.0  0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -      0/0/17     . 0.00  5983  0   23150    0.0  0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -      0/0/174    . 0.00  5897  0   257822   0.0  0.00  1.63   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -      0/0/13     . 0.00  5989  0   2372     0.0  0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -      0/0/22     . 0.00  5991  0   9224     0.0  0.00  0.15   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -      0/0/16     . 0.00  5976  0   9324     0.0  0.00  0.09   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -      0/0/159    . 0.00  5593  0   264229   0.0  0.00  1.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -      0/0/11     . 0.00  5994  0   12       0.0  0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -      0/0/14     . 0.00  5979  0   9273     0.0  0.00  0.05   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -      0/0/9      . 0.00  5970  0   3054     0.0  0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -      0/0/32     . 0.00  5903  0   9907     0.0  0.00  0.44   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -      0/0/10     . 0.00  5966  0   4334     0.0  0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -      0/0/13     . 0.00  5981  0   10386    0.0  0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -      0/0/79     . 0.00  5964  0   106205   0.0  0.00  1.05   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -      0/0/162    . 0.00  5953  0   223246   0.0  0.00  1.37   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -      0/0/11     . 0.00  5975  0   12978    0.0  0.00  0.26   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -      0/0/153    . 0.00  5592  0   249345   0.0  0.00  1.55   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -      0/0/758    . 0.00  3456  0   1462405  0.0  0.00  20.07  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -      0/0/106    . 0.00  5978  0   161928   0.0  0.00  1.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -      0/0/6      . 0.00  30098 0   4997     0.0  0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -      0/0/338    . 0.00  28341 0   272159   0.0  0.00  5.63   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -      0/0/1      . 0.00  30140 0   0        0.0  0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -      0/0/2      . 0.00  30122 0   7766     0.0  0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -      0/0/3      . 0.00  30105 0   10368    0.0  0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 808
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 13 seconds, (range: 0...57)
   index usage: 14%, cache usage: 19%
   total entries stored since starting: 83787
   total entries replaced since starting: 0
   total entries expired since starting: 82929
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 1 hit, 207 miss
   total removes since starting: 50 hit, 221 miss
 ## swap threshold exceeded
## server overview
2025-11-07.20.21 load[0] mem[63/60] mysql[4/11] httpd[15]
              total        used        free      shared  buff/cache   available
Mem:           2363        1424         147          37         791         735
Swap:          1999        1305         694
 20:21:02 up  1:31,  0 users,  load average: 0.92, 1.28, 1.32
## system overview
top - 20:21:02 up  1:31,  0 users,  load average: 1.57, 1.41, 1.36
Tasks: 176 total,   5 running, 170 sleeping,   0 stopped,   1 zombie
%Cpu(s): 84.4 us, 15.6 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   139856 free,  1469680 used,   810764 buff/cache
KiB Swap:  2047996 total,   710908 free,  1337088 used.   741288 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1964 mysql     20   0 1458592 219644   3444 S 100.0  9.1   2:14.28 /usr/sbin+
 53447 healtho+  20   0  451608  60836   4212 R  43.8  2.5   0:00.93 php-fpm: +
 53550 nigeria   20   0  400652  15940  10220 S   6.2  0.7   0:00.05 /opt/cpan+
     1 root      20   0   44416   3456   1540 S   0.0  0.1   0:08.77 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.66 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:06.81 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.99 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:09.18 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kauditd]
   233 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   239 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:00.71 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:00.87 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.30 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   39500   3608   3304 S   0.0  0.1   0:03.13 /usr/lib/+
   388 root      20   0   45356    248     84 S   0.0  0.0   0:00.33 /usr/lib/+
   412 root      16  -4   55532    492    364 S   0.0  0.0   0:00.51 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   484 polkitd   20   0  612240   2896    428 S   0.0  0.1   0:00.74 /usr/lib/+
   486 root      20   0  152780    140     96 S   0.0  0.0   0:00.00 /usr/sbin+
   487 root      20   0   21540    428    320 S   0.0  0.0   0:00.12 /usr/sbin+
   495 root      20   0   52852    404    308 S   0.0  0.0   0:00.01 /usr/sbin+
   496 dbus      20   0   57040   1336    628 S   0.0  0.1   0:02.86 /usr/bin/+
   501 nscd      20   0  926904   3432    760 S   0.0  0.1   0:02.53 /usr/sbin+
   505 rpc       20   0   69256    168     60 S   0.0  0.0   0:00.01 /sbin/rpc+
   525 root      20   0    4388     40     36 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  224144   5928   1176 S   0.0  0.2   0:00.14 queueproc+
   536 root      20   0   24896   1428    824 S   0.0  0.1   0:01.28 /usr/lib/+
   551 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0   24208     92     68 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    488    320 S   0.0  0.0   0:00.15 /usr/sbin+
   587 root      20   0  108296     48     44 S   0.0  0.0   0:00.00 /sbin/age+
   588 root      20   0  114704     24     24 S   0.0  0.0   0:00.02 /bin/bash
   630 mailnull  20   0   89112   3920    896 S   0.0  0.2   0:00.14 /usr/sbin+
   653 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   663 root       0 -20       0      0      0 S   0.0  0.0   0:03.13 [loop0]
   675 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1112 root      20   0  572372    888    312 S   0.0  0.0   0:00.55 /usr/bin/+
  1114 systuser  20   0   10132     48      0 S   0.0  0.0   0:00.01 /usr/loca+
  1115 telegraf  20   0 5654048  38952   6036 S   0.0  1.6   0:03.18 /usr/loca+
  1118 systuser  20   0   13012     52      0 S   0.0  0.0   0:00.00 /usr/loca+
  1122 systuser  20   0  112268     64      0 S   0.0  0.0   0:00.00 /usr/loca+
  1123 root      20   0   51508    500    336 S   0.0  0.0   0:00.09 /usr/sbin+
  1124 root      20   0  153404    304    220 S   0.0  0.0   0:00.11 pure-ftpd+
  1126 systuser  20   0  114016  13196   2952 S   0.0  0.5   0:01.34 /usr/loca+
  1127 root      20   0  111304    404    304 S   0.0  0.0   0:00.76 /usr/sbin+
  1128 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.11 /usr/bin/+
  1130 root      20   0  397344   2900    640 S   0.0  0.1   0:01.49 php-fpm: +
  1134 root      20   0  436392  11152  10948 S   0.0  0.5   0:00.27 php-fpm: +
  1135 root      20   0  232784   3356   2780 S   0.0  0.1   0:01.56 /usr/sbin+
  1138 root      20   0 1763032 306352    424 S   0.0 12.7   0:13.71 /usr/loca+
  1162 root      20   0  385496    700    492 S   0.0  0.0   0:00.20 php-fpm: +
  1168 named     20   0  785396  33488   1708 S   0.0  1.4   0:03.01 /usr/sbin+
  1170 root      20   0  261292   6948   1956 S   0.0  0.3   0:00.91 cpsrvd (S+
  1179 root      20   0  386112    600    396 S   0.0  0.0   0:00.21 php-fpm: +
  1191 root      20   0  392856    472    296 S   0.0  0.0   0:00.21 php-fpm: +
  1192 systuser  20   0  111864   1588      0 S   0.0  0.1   0:00.00 /usr/loca+
  1193 root      20   0  445028   2604   2604 S   0.0  0.1   0:00.05 sw-engine+
  1205 cpanelc+  20   0   10352   3168   2328 S   0.0  0.1   0:04.48 /usr/loca+
  1278 dovenull  20   0   46912   2664   2096 S   0.0  0.1   0:00.11 dovecot/p+
  1279 dovenull  20   0   47316   3012   2080 S   0.0  0.1   0:00.06 dovecot/i+
  1280 dovecot   20   0   10320    428    316 S   0.0  0.0   0:00.01 dovecot/a+
  1281 root      20   0   10452    428    252 S   0.0  0.0   0:00.06 dovecot/l+
  1282 dovenull  20   0   46916   2588   2020 S   0.0  0.1   0:00.09 dovecot/p+
  1283 dovenull  20   0   47136   2632   1784 S   0.0  0.1   0:00.05 dovecot/i+
  1287 root      20   0   24528   2248    508 S   0.0  0.1   0:00.05 dovecot/c+
  1292 dovecot   20   0   13568    516    316 S   0.0  0.0   0:00.01 dovecot/s+
  1350 root      20   0  248084 117536    968 S   0.0  4.9   0:03.46 /usr/loca+
  1362 systuser  20   0  157708   2844    856 S   0.0  0.1   0:00.03 SonarPush+
  1365 dovecot   20   0   41188   1456   1032 S   0.0  0.1   0:00.12 dovecot/a+
  1413 wp-tool+  20   0  387528  13088   1460 S   0.0  0.5   0:00.13 /usr/bin/+
  1414 wp-tool+  20   0  410452  35504   1472 S   0.0  1.5   0:04.61 /usr/bin/+
  1430 root      20   0  262224  24620   6760 S   0.0  1.0   0:00.70 cpdavd - +
  1435 root      20   0  209816  12936   2084 S   0.0  0.5   0:00.70 tailwatchd
  1436 root      20   0  167452   1300    700 S   0.0  0.1   0:00.12 dnsadmin +
  1844 root      20   0  299272    740    364 S   0.0  0.0   0:00.14 php-fpm: +
  1905 root      38  18  130416   1432    704 S   0.0  0.1   0:00.01 cpanellog+
  2132 root      20   0  266984   8328    668 S   0.0  0.3   0:00.37 /usr/sbin+
  2133 root      20   0   12804    340    240 S   0.0  0.0   0:00.61 /usr/loca+
  2134 root      20   0   12732    312    236 S   0.0  0.0   0:00.50 /usr/loca+
  2135 root      20   0   12832    328    224 S   0.0  0.0   0:00.55 /usr/loca+
  2142 root      20   0   53268     84     84 S   0.0  0.0   0:00.04 /usr/loca+
  2217 root      20   0  181456  10192   1140 S   0.0  0.4   0:05.35 lfd - sle+
  5902 root      20   0  261056 127456   2688 S   0.0  5.3   0:00.60 spamd chi+
  5903 root      20   0  248084 117000    472 S   0.0  4.8   0:00.00 spamd chi+
  8253 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  8272 oysipao+  20   0    3152    496      4 S   0.0  0.0   0:00.08 [kworker]
 13243 nobody    20   0  277640  20932   4908 S   0.0  0.9   0:05.44 /usr/sbin+
 15140 root      20   0       0      0      0 S   0.0  0.0   0:00.25 [kworker/+
 24334 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 34885 nobody    20   0  277584  20792   4964 S   0.0  0.9   0:02.67 /usr/sbin+
 36950 root      20   0       0      0      0 D   0.0  0.0   0:00.05 [kworker/+
 39165 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 39973 nobody    20   0  277528  20280   4744 S   0.0  0.8   0:01.85 /usr/sbin+
 41200 nobody    20   0  277540  20388   4832 S   0.0  0.8   0:01.63 /usr/sbin+
 42339 root      20   0 1341636  10696    600 S   0.0  0.4   0:00.06 /usr/bin/+
 42377 root      20   0 1277312  11596    596 S   0.0  0.5   0:00.06 /usr/bin/+
 43465 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 43971 root      20   0       0      0      0 D   0.0  0.0   0:00.04 [kworker/+
 45547 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 45632 nobody    20   0  277560  19848   4364 S   0.0  0.8   0:01.12 /usr/sbin+
 46122 nobody    20   0  277548  19800   4340 S   0.0  0.8   0:00.96 /usr/sbin+
 47998 nobody    20   0  277584  19792   4344 S   0.0  0.8   0:00.78 /usr/sbin+
 48001 nobody    20   0  277848  19920   4372 S   0.0  0.8   0:00.69 /usr/sbin+
 48923 nobody    20   0  277788  19696   4256 S   0.0  0.8   0:00.50 /usr/sbin+
 49400 nobody    20   0  277520  19328   4036 S   0.0  0.8   0:00.55 /usr/sbin+
 49828 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 50884 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 51128 nobody    20   0  277508  19128   3820 S   0.0  0.8   0:00.30 /usr/sbin+
 51192 nobody    20   0  277496  19604   4236 S   0.0  0.8   0:00.27 /usr/sbin+
 51203 nobody    20   0  277504  19092   3828 S   0.0  0.8   0:00.30 /usr/sbin+
 51204 nobody    20   0  277840  19416   4008 S   0.0  0.8   0:00.12 /usr/sbin+
 52253 root      20   0   41052   2816   2140 S   0.0  0.1   0:00.00 dovecot/a+
 52693 mailnull  20   0   89292   5728   2488 S   0.0  0.2   0:00.00 /usr/sbin+
 52735 mailnull  20   0   89284   5728   2500 S   0.0  0.2   0:00.00 /usr/sbin+
 53107 nobody    20   0  277732  19028   3592 S   0.0  0.8   0:00.05 /usr/sbin+
 53205 healtho+  20   0  459288  69524   4216 S   0.0  2.9   0:05.99 php-fpm: +
 53416 healtho+  20   0  457240  67416   4212 S   0.0  2.8   0:01.70 php-fpm: +
 53443 nigeria   20   0  397064   5452   2360 S   0.0  0.2   0:00.00 php-fpm: +
 53492 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 53496 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 53498 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 53501 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 53506 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 53508 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 53514 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 /usr/loca+
 53531 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 53533 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 53534 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 53536 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 53540 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 53543 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 53544 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 53547 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 53557 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 53594 cloudw    20   0  352096  15232  10128 S   0.0  0.6   0:00.00 /opt/cpan+
 53596 root      20   0  160244   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 53603 root      20   0   38516   5824   2932 R   0.0  0.2   0:00.00 /usr/loca+
 53604 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    18:49   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    18:49   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    18:49   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    18:49   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    18:49   0:06  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    18:49   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    18:49   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    18:49   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    18:49   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    18:49   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    18:49   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    18:49   0:09  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   18:49   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   18:49   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    18:49   0:00  \_ [kauditd]
root        233  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [ata_sff]
root        239  0.0  0.0      0     0 ?        S    18:49   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    18:49   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    18:49   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [xprtiod]
root        653  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [kvm-irqfd-clean]
root        663  0.0  0.0      0     0 ?        S<   18:49   0:03  \_ [loop0]
root        675  0.0  0.0      0     0 ?        S    18:49   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   18:49   0:00  \_ [ext4-rsv-conver]
root      15140  0.0  0.0      0     0 ?        S    19:12   0:00  \_ [kworker/0:4]
root      24334  0.0  0.0      0     0 ?        S    19:29   0:00  \_ [kworker/1:1]
root      36950  0.0  0.0      0     0 ?        S    19:52   0:00  \_ [kworker/u200:2]
root      39165  0.0  0.0      0     0 ?        S    19:56   0:00  \_ [kworker/1:2]
root      43465  0.0  0.0      0     0 ?        S    20:02   0:00  \_ [kworker/u200:0]
root      43971  0.0  0.0      0     0 ?        S    20:03   0:00  \_ [kworker/0:0]
root      45547  0.0  0.0      0     0 ?        S    20:06   0:00  \_ [kworker/1:0]
root      49828  0.0  0.0      0     0 ?        S    20:14   0:00  \_ [kworker/1:4]
root      50884  0.0  0.0      0     0 ?        S    20:16   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44416  3456 ?        Ss   18:49   0:08 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.1  39500  3608 ?        Ss   18:49   0:03 /usr/lib/systemd/systemd-journald
root        388  0.0  0.0  45356   248 ?        Ss   18:49   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   492 ?        S<sl 18:49   0:00 /sbin/auditd
polkitd     484  0.0  0.1 612240  2896 ?        Ssl  18:49   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        486  0.0  0.0 152780   140 ?        Ss   18:49   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.0  21540   428 ?        Ss   18:49   0:00 /usr/sbin/irqbalance --foreground
root        495  0.0  0.0  52852   404 ?        Ss   18:49   0:00 /usr/sbin/smartd -n -q never
dbus        496  0.0  0.0  57040  1336 ?        Ss   18:49   0:02 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        501  0.0  0.1 926904  3432 ?        Ssl  18:49   0:02 /usr/sbin/nscd
rpc         505  0.0  0.0  69256   168 ?        Ss   18:49   0:00 /sbin/rpcbind -w
root        525  0.0  0.0   4388    40 ?        Ss   18:49   0:00 /usr/sbin/acpid
root        530  0.0  0.2 224144  5928 ?        Ss   18:49   0:00 queueprocd - waiting up to 60s to process a task
root        536  0.0  0.0  24896  1428 ?        Ss   18:49   0:01 /usr/lib/systemd/systemd-logind
root        551  0.0  0.0 195208     0 ?        Ssl  18:49   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0  24208    92 ?        Ss   18:49   0:00 /usr/sbin/atd -f
root        575  0.0  0.0 124480   488 ?        Ss   18:49   0:00 /usr/sbin/crond -n
root      53496  0.0  0.0 183048  2144 ?        S    20:21   0:00  \_ /usr/sbin/CROND -n
root      53534  0.0  0.0 113284  1212 ?        Ss   20:21   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      53540  0.0  0.0 108052   356 ?        S    20:21   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      53543  0.0  0.0 113288  1520 ?        S    20:21   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      53605  0.0  0.0 153840  2092 ?        R    20:21   0:00  |               \_ ps auxf
root      53498  0.0  0.0 183048  2140 ?        S    20:21   0:00  \_ /usr/sbin/CROND -n
root      53536  0.0  0.0  20164   804 ?        Ss   20:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      53501  0.0  0.0 183048  2140 ?        S    20:21   0:00  \_ /usr/sbin/CROND -n
root      53514  0.0  0.0  20164   988 ?        Ss   20:21   0:00  |   \_ jailshell (cloudsms) [53607] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      53506  0.0  0.0 183048  2144 ?        S    20:21   0:00  \_ /usr/sbin/CROND -n
root      53531  0.0  0.0  20164   972 ?        Ss   20:21   0:00  |   \_ jailshell (pactpay) [53547] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   53547  0.0  0.0  20164   264 ?        S    20:21   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   53557  2.0  0.7 476724 17484 ?        S    20:21   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      53508  0.0  0.0 183048  2140 ?        S    20:21   0:00  \_ /usr/sbin/CROND -n
root      53533  0.0  0.0  20164   972 ?        Ss   20:21   0:00      \_ jailshell (nigeria) [53544] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   53544  0.0  0.0  20164   264 ?        S    20:21   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   53550  5.0  0.6 400652 15940 ?        S    20:21   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        587  0.0  0.0 108296    48 tty1     Ss+  18:49   0:00 /sbin/agetty --noclear tty1 linux
root        588  0.0  0.0 114704    24 ttyS0    Ss+  18:49   0:00 /bin/bash
mailnull    630  0.0  0.1  89112  3920 ?        Ss   18:49   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  52693  0.0  0.2  89292  5728 ?        S    20:19   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  52735  0.0  0.2  89284  5728 ?        S    20:19   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root       1112  0.0  0.0 572372   888 ?        Ssl  18:50   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1114  0.0  0.0  10132    48 ?        Ssl  18:50   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf   1115  0.0  1.6 5654048 38952 ?       SLsl 18:50   0:03 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser   1118  0.0  0.0  13012    52 ?        Ssl  18:50   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser   1122  0.0  0.0 112268    64 ?        Ssl  18:50   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1123  0.0  0.0  51508   500 ?        Ss   18:50   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1278  0.0  0.1  46912  2664 ?        S    18:50   0:00  \_ dovecot/pop3-login
dovenull   1279  0.0  0.1  47316  3012 ?        S    18:50   0:00  \_ dovecot/imap-login
dovecot    1280  0.0  0.0  10320   428 ?        S    18:50   0:00  \_ dovecot/anvil
root       1281  0.0  0.0  10452   428 ?        S    18:50   0:00  \_ dovecot/log
dovenull   1282  0.0  0.1  46916  2588 ?        S    18:50   0:00  \_ dovecot/pop3-login
dovenull   1283  0.0  0.1  47136  2632 ?        S    18:50   0:00  \_ dovecot/imap-login
root       1287  0.0  0.0  24528  2248 ?        S    18:50   0:00  \_ dovecot/config
dovecot    1292  0.0  0.0  13568   516 ?        S    18:50   0:00  \_ dovecot/stats
dovecot    1365  0.0  0.0  41188  1456 ?        S    18:50   0:00  \_ dovecot/auth
root      52253  0.0  0.1  41052  2816 ?        S    20:18   0:00  \_ dovecot/auth -w
root       1124  0.0  0.0 153404   304 ?        Ss   18:50   0:00 pure-ftpd (SERVER)
systuser   1126  0.0  0.5 114016 13196 ?        Ssl  18:50   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root       1127  0.0  0.0 111304   404 ?        Ss   18:50   0:00 /usr/sbin/sshd -D
memcach+   1128  0.0  0.0 342400     0 ?        Ssl  18:50   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1130  0.0  0.1 397344  2900 ?        Ss   18:50   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  53205 14.2  2.8 459288 69524 ?        S    20:20   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  53416 14.1  2.7 457240 67416 ?        S    20:20   0:01  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   53443  0.0  0.2 397064  5452 ?        S    20:20   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  53447 13.4  2.6 453656 62984 ?        R    20:20   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root       1134  0.0  0.4 436392 11152 ?        Ss   18:50   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1135  0.0  0.1 232784  3356 ?        Ssl  18:50   0:01 /usr/sbin/rsyslogd -n
root       1138  0.2 12.6 1763032 306352 ?      Ssl  18:50   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1162  0.0  0.0 385496   700 ?        Ss   18:50   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
named      1168  0.0  1.3 785396 33488 ?        Ssl  18:50   0:03 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1170  0.0  0.2 261292  6948 ?        Ss   18:50   0:00 cpsrvd (SSL) - waiting for connections                   
root      53492  0.0  0.0      0     0 ?        Z    20:20   0:00  \_ [cpaneld - servi] <defunct>
root       1179  0.0  0.0 386112   600 ?        Ss   18:50   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1191  0.0  0.0 392856   472 ?        Ss   18:50   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1192  0.0  0.0 111864  1588 ?        Ssl  18:50   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1193  0.0  0.1 445028  2604 ?        Ss   18:50   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
cpanelc+   1205  0.0  0.1  10352  3168 ?        Ss   18:50   0:04 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1350  0.0  4.8 248084 117536 ?       Ss   18:50   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5902  0.0  5.2 261056 127456 ?       S    18:56   0:00  \_ spamd child
root       5903  0.0  4.8 248084 117000 ?       S    18:56   0:00  \_ spamd child
systuser   1362  0.0  0.1 157708  2844 ?        S    18:50   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1413  0.0  0.5 387528 13088 ?        Ss   18:50   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1414  0.0  1.4 410452 35504 ?        Ss   18:50   0:04 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1430  0.0  1.0 262224 24620 ?        Ss   18:50   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1435  0.0  0.5 209816 12936 ?        Ss   18:50   0:00 tailwatchd
root       1436  0.0  0.0 167452  1300 ?        Ss   18:50   0:00 dnsadmin - dormant mode
root       1844  0.0  0.0 299272   740 ?        Ss   18:50   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1905  0.0  0.0 130416  1432 ?        SN   18:50   0:00 cpanellogd - sleeping for logs
mysql      1964  2.4  9.0 1458592 219644 ?      Sl   18:50   2:14 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2132  0.0  0.3 266984  8328 ?        Ss   18:50   0:00 /usr/sbin/httpd -k start
root       2133  0.0  0.0  12804   340 ?        S    18:50   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2134  0.0  0.0  12732   312 ?        S    18:50   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2135  0.0  0.0  12832   328 ?        S    18:50   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2142  0.0  0.0  53268    84 ?        S    18:50   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    13243  0.1  0.8 277640 20932 ?        S    19:08   0:05  \_ /usr/sbin/httpd -k start
nobody    53606  0.0  0.6 277640 16024 ?        R    20:21   0:00  |   \_ /usr/sbin/httpd -k start
nobody    34885  0.1  0.8 277584 20792 ?        S    19:48   0:02  \_ /usr/sbin/httpd -k start
nobody    39973  0.1  0.8 277528 20280 ?        S    19:57   0:01  \_ /usr/sbin/httpd -k start
nobody    41200  0.1  0.8 277540 20388 ?        S    19:59   0:01  \_ /usr/sbin/httpd -k start
nobody    45632  0.1  0.8 277560 19848 ?        S    20:06   0:01  \_ /usr/sbin/httpd -k start
nobody    46122  0.1  0.8 277548 19800 ?        S    20:07   0:00  \_ /usr/sbin/httpd -k start
nobody    47998  0.1  0.8 277584 19792 ?        S    20:10   0:00  \_ /usr/sbin/httpd -k start
nobody    48001  0.1  0.8 277848 19920 ?        S    20:10   0:00  \_ /usr/sbin/httpd -k start
nobody    48923  0.0  0.8 277788 19696 ?        S    20:12   0:00  \_ /usr/sbin/httpd -k start
nobody    49400  0.1  0.7 277520 19328 ?        S    20:13   0:00  \_ /usr/sbin/httpd -k start
nobody    51128  0.1  0.7 277508 19128 ?        S    20:16   0:00  \_ /usr/sbin/httpd -k start
nobody    51192  0.1  0.8 277496 19604 ?        S    20:16   0:00  \_ /usr/sbin/httpd -k start
nobody    51203  0.1  0.7 277504 19092 ?        S    20:16   0:00  \_ /usr/sbin/httpd -k start
nobody    51204  0.0  0.8 277840 19416 ?        S    20:16   0:00  \_ /usr/sbin/httpd -k start
nobody    53107  0.0  0.7 277732 19028 ?        S    20:20   0:00  \_ /usr/sbin/httpd -k start
cloudw    53594  0.0  0.6 352096 15232 ?        S    20:21   0:00      \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
root       2217  0.0  0.4 181456 10192 ?        Ss   18:50   0:05 lfd - sleeping
oysipao+   8253  0.0  0.0   3148   416 ?        Ss   19:00   0:00 [kworker]
oysipao+   8272  0.0  0.0   3152   496 ?        S    19:00   0:00  \_ [kworker]
root      42339  0.0  0.4 1341636 10696 ?       Ssl  20:00   0:00 /usr/bin/cspdaemon
root      42377  0.0  0.4 1277312 11596 ?       Ssl  20:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 5455  Threads: 4  Questions: 1060531  Slow queries: 0  Opens: 2712  Flush tables: 1  Open tables: 2000  Queries per second avg: 194.414
*************************** 1. row ***************************
     Id: 14072
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 14075
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 14076
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 4. row ***************************
     Id: 14085
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.143.119 TIME_WAIT
      1 170.23.17.83 TIME_WAIT
      1 192.250.232.199 TIME_WAIT
      1 ::1 TIME_WAIT
      1 213.201.163.42 TIME_WAIT
      1 66.249.70.38 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 35.203.210.156 TIME_WAIT
     78 157.230.45.41 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 20:21:02 WAT
   Restart Time: Friday, 07-Nov-2025 18:50:11 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 30 minutes 50 seconds
   Server load: 1.57 1.41 1.36
   Total accesses: 26141 - Total Traffic: 459.1 MB - Total Duration: 16924453
   CPU Usage: u12.9 s4.69 cu200.93 cs148.19 - 6.73% CPU load
   4.8 requests/sec - 86.3 kB/second - 18.0 kB/request - 647.429 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

KK_WWK.K_K..KW.K_...K....K......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc      M CPU    SS  Req   Dur   Conn  Child  Slot    Client     Protocol              VHost                                          Request
   0-0  49400 1/117/1480   K 2.11  3    96  906428  370.8 2.67  23.30 66.249.66.7   http/1.1 theforge.com.ng:80              GET /uploads/personal_info/tired@a/idImage/tired@a_Capture2.PNG
   1-0  45632 1/256/1596   K 4.04  2    350 1062218 31.1  5.04  37.95 66.249.70.192 http/1.1 schoolplus.cloudware.ng:80      GET /?p=3715761655 HTTP/1.1
   2-0  34885 0/761/1749   _ 9.81  0    395 1041963 0.0   10.47 27.00 66.249.70.38  http/1.1 support.cloudware.ng:443        GET /?c=2604613310 HTTP/1.1
   3-0  53107 1/16/1399    W 0.09  0    0   921010  31.5  0.15  29.49 66.249.70.199 http/1.1 schoolplus.cloudware.ng:80      GET /?p=22109683 HTTP/1.1
   4-0  46122 0/226/1514   W 3.09  0    0   917550  0.0   4.93  25.24 157.230.45.41 http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   5-0  41200 2/349/1564   K 6.44  4    396 994794  62.9  8.65  28.72 66.249.70.197 http/1.1 schoolplus.cloudware.ng:80      GET /?p=1679530155 HTTP/1.1
   6-0  -     0/0/1336     . 0.00  223  0   970832  0.0   0.00  31.70 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   7-0  51128 3/73/1470    K 1.09  3    387 988400  93.1  1.23  33.34 66.249.70.193 http/1.1 schoolplus.cloudware.ng:80      GET /?p=3489903516 HTTP/1.1
   8-0  51192 0/62/1484    _ 0.79  0    552 981898  0.0   0.93  24.09 157.230.45.41 http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   9-0  48923 3/140/1460   K 1.46  0    471 959340  93.4  1.82  25.89 66.249.70.196 http/1.1 schoolplus.cloudware.ng:80      GET /?p=1204561342 HTTP/1.1
   10-0 -     0/0/1502     . 0.00  155  0   885306  0.0   0.00  25.98 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   11-0 -     0/0/1571     . 0.00  120  0   909908  0.0   0.00  24.11 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   12-0 51203 1/72/1458    K 0.95  1    4   784091  18.2  1.16  18.07 66.249.66.70  http/1.1 health.oyostate.gov.ng:443      GET /wp-content/plugins/revslider/sr6/assets/css/rs6.css?ver=6.
   13-0 51204 0/34/777     W 0.32  0    0   526284  0.0   0.44  10.68 ::1           http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   14-0 -     0/0/558      . 0.00  214  0   433461  0.0   0.00  10.62 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   15-0 47998 1/175/563    K 2.79  1    337 431382  31.1  4.74  9.41  66.249.70.34  http/1.1 wptraining.cloudware.ng:80      GET /?q=1540478322 HTTP/1.1
   16-0 39973 0/394/994    _ 6.93  0    10  687660  0.0   7.92  17.77 23.21.175.228 http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/2019elections/blog/polling_unit_
   17-0 -     0/0/697      . 0.00  635  0   542136  0.0   0.00  13.82 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-0 -     0/0/226      . 0.00  304  0   288176  0.0   0.00  2.33  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   19-0 -     0/0/215      . 0.00  143  0   302338  0.0   0.00  2.22  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   20-0 48001 60/201/279   K 2.46  0    0   214759  31.4  2.96  4.03  48.218.56.208 http/1.1 bookingapp.staging.cloudware.ng GET /file15.php HTTP/1.1
   21-0 -     0/0/158      . 0.00  4133 0   204242  0.0   0.00  2.24  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   22-0 -     0/0/18       . 0.00  4325 0   26744   0.0   0.00  0.26  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 -     0/0/10       . 0.00  4305 0   15493   0.0   0.00  0.08  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 -     0/0/10       . 0.00  4306 0   19325   0.0   0.00  0.03  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 13243 59/1472/1472 K 20.22 0    63  644104  454.7 23.38 23.38 48.218.56.208 http/1.1 bookingapp.staging.cloudware.ng GET /cgi-sys/suspendedpage.cgi HTTP/1.1
   26-0 -     0/0/294      . 0.00  3518 0   141652  0.0   0.00  3.96  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/287      . 0.00  3601 0   122944  0.0   0.00  3.43  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 333
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 25 seconds, (range: 2...123)
   index usage: 5%, cache usage: 7%
   total entries stored since starting: 12256
   total entries replaced since starting: 0
   total entries expired since starting: 11919
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 1 hit, 26 miss
   total removes since starting: 4 hit, 1 miss
Youez - 2016 - github.com/yon3zu
LinuXploit