403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.11.45.txt
 ## swap threshold exceeded
## server overview
2025-11-08.11.45 load[1] mem[66/62] mysql[2/11] httpd[17]
              total        used        free      shared  buff/cache   available
Mem:           2363        1517          87          44         759         630
Swap:          1999        1334         665
 11:45:01 up  1:58,  0 users,  load average: 1.46, 0.91, 1.09
## system overview
top - 11:45:01 up  1:58,  0 users,  load average: 1.46, 0.91, 1.09
Tasks: 213 total,   7 running, 205 sleeping,   0 stopped,   1 zombie
%Cpu(s): 84.4 us, 15.6 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    74348 free,  1568232 used,   777720 buff/cache
KiB Swap:  2047996 total,   681504 free,  1366492 used.   631132 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1773 mysql     20   0 1458588 237492   3768 S  81.2  9.8   2:56.70 /usr/sbin+
 73890 healtho+  20   0  447512  57504   3828 R  50.0  2.4   0:00.25 php-fpm: +
 73737 healtho+  20   0  461984  71524   4212 R  31.2  3.0   0:03.89 php-fpm: +
 74009 nigeria   20   0  400652  15936  10216 S   6.2  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44424   3500   1544 S   0.0  0.1   0:11.53 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.83 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.15 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:08.80 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.13 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.25 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:12.55 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.17 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   243 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   259 root       0 -20       0      0      0 S   0.0  0.0   0:01.32 [kworker/+
   268 root       0 -20       0      0      0 S   0.0  0.0   0:01.05 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.54 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39496   4096   3784 S   0.0  0.2   0:04.69 /usr/lib/+
   384 root      20   0   45352    372    216 S   0.0  0.0   0:00.35 /usr/lib/+
   407 root      16  -4   55532    492    364 S   0.0  0.0   0:00.79 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0  224280   7320   1192 S   0.0  0.3   0:00.23 queueproc+
   491 rpc       20   0   69256    232    124 S   0.0  0.0   0:00.01 /sbin/rpc+
   512 dbus      20   0   58768   1472    708 S   0.0  0.1   0:03.85 /usr/bin/+
   538 root      20   0   21540    432    324 S   0.0  0.0   0:00.15 /usr/sbin+
   539 root      20   0   52852    436    340 S   0.0  0.0   0:00.01 /usr/sbin+
   540 root      20   0   24896   1480    844 S   0.0  0.1   0:01.73 /usr/lib/+
   541 root      20   0  152780    228    184 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0    4388    128    124 S   0.0  0.0   0:00.00 /usr/sbin+
   544 polkitd   20   0  610540    972    516 S   0.0  0.0   0:01.02 /usr/lib/+
   547 nscd      20   0  928956   1472    768 S   0.0  0.1   0:03.72 /usr/sbin+
   566 root      20   0  195208     44     44 S   0.0  0.0   0:00.00 /usr/sbin+
   582 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   586 root      20   0  124472    492    364 S   0.0  0.0   0:00.20 /usr/sbin+
   588 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   605 root      20   0  114704    136    136 S   0.0  0.0   0:00.02 /bin/bash
   606 root      20   0  108296    148    144 S   0.0  0.0   0:00.00 /sbin/age+
   616 mailnull  20   0   89116   3784    764 S   0.0  0.2   0:00.13 /usr/sbin+
   679 root       0 -20       0      0      0 S   0.0  0.0   0:02.44 [loop0]
   709 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   969 systuser  20   0   11796     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   971 root      20   0 1763032 260508    628 S   0.0 10.8   0:13.52 /usr/loca+
   975 root      20   0  240976   6676   3288 S   0.0  0.3   0:02.27 /usr/sbin+
   976 named     20   0  637928  32776   1496 S   0.0  1.4   0:04.12 /usr/sbin+
   977 root      20   0  397344   3132    716 S   0.0  0.1   0:02.19 php-fpm: +
   982 systuser  20   0  114016  12988   2732 S   0.0  0.5   0:01.77 /usr/loca+
   983 root      20   0  572372    928    360 S   0.0  0.0   0:00.69 /usr/bin/+
   985 memcach+  20   0  342400      4      4 S   0.0  0.0   0:00.15 /usr/bin/+
   986 cpanelc+  20   0   10340   3512   2444 R   0.0  0.1   0:05.84 /usr/loca+
   987 root      20   0  386112    836    624 S   0.0  0.0   0:00.23 php-fpm: +
   988 systuser  20   0   11348     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   989 root      20   0  385496    816    608 S   0.0  0.0   0:00.25 php-fpm: +
   990 root      20   0  153404    376    296 S   0.0  0.0   0:00.15 pure-ftpd+
   992 systuser  20   0  111608   1560      0 S   0.0  0.1   0:00.00 /usr/loca+
   995 root      20   0  436392  11360  11148 S   0.0  0.5   0:00.29 php-fpm: +
   998 root      20   0  392856    268    188 S   0.0  0.0   0:00.22 php-fpm: +
  1006 telegraf  20   0 5654048  36080   5540 S   0.0  1.5   0:04.25 /usr/loca+
  1010 root      20   0   51508    576    412 S   0.0  0.0   0:00.11 /usr/sbin+
  1012 root      20   0  261292   7156   2028 S   0.0  0.3   0:01.10 cpsrvd (S+
  1024 root      20   0  445028   2648   2648 S   0.0  0.1   0:00.05 sw-engine+
  1025 systuser  20   0  112524   1984      0 S   0.0  0.1   0:00.01 /usr/loca+
  1031 root      20   0  111304    512    408 S   0.0  0.0   0:01.12 /usr/sbin+
  1129 dovenull  20   0   46984   2972   2192 S   0.0  0.1   0:00.11 dovecot/p+
  1130 dovenull  20   0   47460   3388   2232 S   0.0  0.1   0:00.09 dovecot/i+
  1131 dovecot   20   0   10320    420    304 S   0.0  0.0   0:00.02 dovecot/a+
  1132 root      20   0   10452    584    380 S   0.0  0.0   0:00.09 dovecot/l+
  1133 dovenull  20   0   47188   2692   1820 S   0.0  0.1   0:00.16 dovecot/p+
  1134 dovenull  20   0   47500   3232   2072 S   0.0  0.1   0:00.09 dovecot/i+
  1142 root      20   0   24528   2464    552 S   0.0  0.1   0:00.06 dovecot/c+
  1144 dovecot   20   0   13568    724    496 S   0.0  0.0   0:00.01 dovecot/s+
  1204 systuser  20   0  157704   2948    916 S   0.0  0.1   0:00.06 SonarPush+
  1217 wp-tool+  20   0  410452  35768   1748 S   0.0  1.5   0:06.04 /usr/bin/+
  1218 wp-tool+  20   0  387528  13148   1524 S   0.0  0.5   0:00.15 /usr/bin/+
  1221 dovecot   20   0   41168   1516   1068 S   0.0  0.1   0:00.17 dovecot/a+
  1264 root      20   0  209272  20288   2908 S   0.0  0.8   0:00.93 tailwatchd
  1266 root      20   0  167452   1464    860 S   0.0  0.1   0:00.15 dnsadmin +
  1268 root      20   0  262224  24616   6760 S   0.0  1.0   0:00.50 cpdavd - +
  1699 root      20   0  299272    964    584 S   0.0  0.0   0:00.19 php-fpm: +
  1717 root      38  18  130416   1444    720 S   0.0  0.1   0:00.02 cpanellog+
  1947 root      20   0  267032   8220    812 S   0.0  0.3   0:00.51 /usr/sbin+
  1952 root      20   0   12748    436    324 S   0.0  0.0   0:00.83 /usr/loca+
  1953 root      20   0   12732    400    320 S   0.0  0.0   0:00.69 /usr/loca+
  1954 root      20   0   12752    408    284 S   0.0  0.0   0:00.74 /usr/loca+
  1963 root      20   0   53268    196    196 S   0.0  0.0   0:00.05 /usr/loca+
  2286 root      20   0  181884  10864   1212 S   0.0  0.4   0:07.20 lfd - sle+
 10754 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10763 oysipao+  20   0    3152    528     36 S   0.0  0.0   0:00.12 [kworker]
 40228 root      20   0  248032 119780   3156 S   0.0  4.9   0:03.10 /usr/loca+
 42483 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 46911 root      20   0 1276100  10556    592 S   0.0  0.4   0:00.08 /usr/bin/+
 46948 root      20   0 1277056  11568    592 S   0.0  0.5   0:00.07 /usr/bin/+
 47195 root      20   0  258908 125572   2932 S   0.0  5.2   0:00.61 spamd chi+
 47196 root      20   0  248032 117192    608 S   0.0  4.8   0:00.00 spamd chi+
 47741 nobody    20   0  277584  20184   4764 S   0.0  0.8   0:02.74 /usr/sbin+
 48878 nobody    20   0  277648  20180   4716 S   0.0  0.8   0:02.82 /usr/sbin+
 50503 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 52088 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 54240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 57329 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 62022 nobody    20   0  277884  19824   4352 S   0.0  0.8   0:01.50 /usr/sbin+
 62143 worencom  20   0   38484   3348   2328 S   0.0  0.1   0:00.00 dovecot/i+
 62156 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 64389 nobody    20   0  277880  19824   4148 S   0.0  0.8   0:01.17 /usr/sbin+
 65704 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66275 nobody    20   0  277884  19864   4420 S   0.0  0.8   0:01.00 /usr/sbin+
 67838 nobody    20   0  277788  19188   3848 S   0.0  0.8   0:00.68 /usr/sbin+
 67846 nobody    20   0  277892  19184   3972 S   0.0  0.8   0:00.58 /usr/sbin+
 67847 nobody    20   0  277868  19312   4080 S   0.0  0.8   0:00.80 /usr/sbin+
 67852 nobody    20   0  277536  18952   3880 S   0.0  0.8   0:00.61 /usr/sbin+
 67853 nobody    20   0  277536  19504   4180 S   0.0  0.8   0:00.75 /usr/sbin+
 67855 nobody    20   0  277548  19620   4312 S   0.0  0.8   0:00.75 /usr/sbin+
 67977 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 68001 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 68412 nobody    20   0  277532  19728   4312 S   0.0  0.8   0:00.70 /usr/sbin+
 70537 nobody    20   0  277524  19200   4076 S   0.0  0.8   0:00.48 /usr/sbin+
 71116 nobody    20   0  277880  19136   3924 S   0.0  0.8   0:00.37 /usr/sbin+
 71252 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 71949 cloudw    20   0  471784   9172   4752 S   0.0  0.4   0:00.18 php-fpm: +
 71954 nobody    20   0  277556  18888   3872 S   0.0  0.8   0:00.27 /usr/sbin+
 72208 cloudw    20   0  471784   9152   4748 S   0.0  0.4   0:00.19 php-fpm: +
 72225 nobody    20   0  277536  18896   3904 S   0.0  0.8   0:00.25 /usr/sbin+
 72532 cloudw    20   0  471784   9152   4748 S   0.0  0.4   0:00.18 php-fpm: +
 72669 cloudw    20   0  471784   9156   4752 S   0.0  0.4   0:00.18 php-fpm: +
 72794 nobody    20   0  277536  18252   3324 S   0.0  0.8   0:00.03 /usr/sbin+
 72819 cloudw    20   0  471784   9156   4752 S   0.0  0.4   0:00.19 php-fpm: +
 72827 nobody    20   0  277536  18828   3824 S   0.0  0.8   0:00.18 /usr/sbin+
 72880 nobody    20   0  277876  18740   3624 S   0.0  0.8   0:00.16 /usr/sbin+
 73273 nobody    20   0  277536  18492   3548 S   0.0  0.8   0:00.06 /usr/sbin+
 73287 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 73427 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 73609 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 73610 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 73749 healtho+  20   0  459424  69680   4216 S   0.0  2.9   0:03.69 php-fpm: +
 73871 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 73882 nigeria   20   0  397064   5612   2372 S   0.0  0.2   0:00.00 php-fpm: +
 73885 cloudw    20   0  520948  60404   6684 S   0.0  2.5   0:00.45 php-fpm: +
 73895 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 73914 root      20   0  111304   4448   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 73915 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 73924 root      20   0  183040   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 73925 root      20   0  183040   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 73926 root      20   0  183040   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 73928 root      20   0  183040   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 73929 root      20   0  183040   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 73931 root      20   0  183040   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 73932 root      20   0  183040   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 73933 root      20   0  183040   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 73934 root      20   0  183040   2144   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 73935 root      20   0  183040   2144   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 73936 root      20   0  183040   2144   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 73937 root      20   0  183040   2144   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 73939 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73944 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 73946 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 73947 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 73958 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 73959 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 73960 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 73962 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 73963 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 73964 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 73965 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 73966 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 73967 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 /usr/loca+
 73971 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 73972 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 73973 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 73976 root      20   0  188224  11108   5148 S   0.0  0.5   0:00.02 /usr/loca+
 73977 root      20   0  113284   1464   1256 S   0.0  0.1   0:00.00 bash /usr+
 73990 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 73992 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 74001 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 74005 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 74013 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 74022 root      20   0  160224   2344   1636 S   0.0  0.1   0:00.00 top -n 2 +
 74039 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 74046 root      20   0   38648   6500   3040 R   0.0  0.3   0:00.00 /usr/loca+
 74048 root      20   0  113284    212      0 R   0.0  0.0   0:00.00 bash /usr+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:46   0:08  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:46   0:12  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        243  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        245  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        259  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/1:1H]
root        268  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        582  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        679  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [loop0]
root        709  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      42483  0.0  0.0      0     0 ?        S    10:54   0:00  \_ [kworker/0:3]
root      50503  0.0  0.0      0     0 ?        S    11:05   0:00  \_ [kworker/u200:2]
root      52088  0.0  0.0      0     0 ?        S    11:08   0:00  \_ [kworker/0:1]
root      54240  0.0  0.0      0     0 ?        S    11:11   0:00  \_ [kworker/1:0]
root      57329  0.0  0.0      0     0 ?        S    11:16   0:00  \_ [kworker/1:5]
root      62156  0.0  0.0      0     0 ?        S    11:24   0:00  \_ [kworker/1:3]
root      65704  0.0  0.0      0     0 ?        S    11:30   0:00  \_ [kworker/u200:1]
root      67977  0.0  0.0      0     0 ?        S    11:34   0:00  \_ [kworker/1:2]
root      68001  0.0  0.0      0     0 ?        S    11:34   0:00  \_ [kworker/0:0]
root      71252  0.0  0.0      0     0 ?        S    11:40   0:00  \_ [kworker/1:1]
root      73427  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44424  3500 ?        Ss   09:46   0:11 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  39496  4096 ?        Ss   09:46   0:04 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   372 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   492 ?        S<sl 09:46   0:00 /sbin/auditd
root        489  0.0  0.3 224280  7320 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
rpc         491  0.0  0.0  69256   232 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        512  0.0  0.0  58768  1472 ?        Ss   09:46   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        538  0.0  0.0  21540   432 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        539  0.0  0.0  52852   436 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
root        540  0.0  0.0  24896  1480 ?        Ss   09:46   0:01 /usr/lib/systemd/systemd-logind
root        541  0.0  0.0 152780   228 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        542  0.0  0.0   4388   128 ?        Ss   09:46   0:00 /usr/sbin/acpid
polkitd     544  0.0  0.0 610540   972 ?        Ssl  09:46   0:01 /usr/lib/polkit-1/polkitd --no-debug
nscd        547  0.0  0.0 928956  1472 ?        Ssl  09:46   0:03 /usr/sbin/nscd
root        566  0.0  0.0 195208    44 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        586  0.0  0.0 124472   492 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      73924  0.0  0.0 183040  2152 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      73964  0.0  0.0 113284  1212 ?        Ss   11:45   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      73977  0.0  0.0 113284  1464 ?        S    11:45   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      74050  0.0  0.0 113284   212 ?        R    11:45   0:00  |           \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      73925  0.0  0.0 183040  2152 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      73944  0.0  0.0 113284  1208 ?        Ss   11:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      73946  0.0  0.0 108052   356 ?        S    11:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      73947  0.0  0.0 113288  1516 ?        S    11:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      74049  0.0  0.0 153840  2092 ?        R    11:45   0:00  |               \_ ps auxf
root      73926  0.0  0.0 183040  2152 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      73962  0.0  0.0  20164   808 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      73928  0.0  0.0 183040  2152 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      73971  0.0  0.0  20164   808 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      73929  0.0  0.0 183040  2152 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      73967  0.0  0.0  20164   992 ?        Ss   11:45   0:00  |   \_ jailshell (cloudsms) [74051] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      73931  0.0  0.0 183040  2148 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      73965  0.0  0.0  20164   808 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      73932  0.0  0.0 183040  2148 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      73960  0.0  0.0  20164   808 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      73933  0.0  0.0 183040  2148 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      73958  0.0  0.0  20164   812 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      73934  0.0  0.0 183040  2144 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      73972  0.0  0.0  20164   812 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      73935  0.0  0.0 183040  2144 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      73963  0.0  0.0  20164   808 ?        Ss   11:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      73936  0.0  0.0 183040  2144 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      73973  0.0  0.0 113284  1212 ?        Ss   11:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      73976  0.0  0.4 188224 11108 ?        S    11:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      74022  0.0  0.0 160224  2344 ?        S    11:45   0:00  |           \_ top -n 2 -b -c
root      73937  0.0  0.0 183040  2144 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      73966  0.0  0.0  20164   972 ?        Ss   11:45   0:00  |   \_ jailshell (pactpay) [73990] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   73990  0.0  0.0  20164   260 ?        S    11:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   73992  0.0  0.7 476724 17484 ?        S    11:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      73939  0.0  0.0 183040  2140 ?        S    11:45   0:00  \_ /usr/sbin/CROND -n
root      73959  0.0  0.0  20164   968 ?        Ss   11:45   0:00      \_ jailshell (nigeria) [74001] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   74001  0.0  0.0  20164   260 ?        S    11:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   74009  0.0  0.6 400652 15936 ?        S    11:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        588  0.0  0.0  24208     0 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        605  0.0  0.0 114704   136 ttyS0    Ss+  09:46   0:00 /bin/bash
root        606  0.0  0.0 108296   148 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    616  0.0  0.1  89116  3784 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    969  0.0  0.0  11796    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        971  0.1 10.7 1763032 260508 ?      Ssl  09:46   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        975  0.0  0.2 240976  6676 ?        Ssl  09:46   0:02 /usr/sbin/rsyslogd -n
named       976  0.0  1.3 637928 32776 ?        Ssl  09:46   0:04 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        977  0.0  0.1 397344  3132 ?        Ss   09:46   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    71949  0.0  0.3 471784  9172 ?        S    11:41   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    72208  0.0  0.3 471784  9152 ?        S    11:41   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    72532  0.1  0.3 471784  9152 ?        S    11:42   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    72669  0.1  0.3 471784  9156 ?        S    11:42   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    72819  0.1  0.3 471784  9156 ?        S    11:42   0:00  \_ php-fpm: pool edoocds_cloudware_ng
healtho+  73737 15.0  2.9 461984 71788 ?        R    11:44   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  73749 14.7  2.8 459424 69680 ?        S    11:44   0:03  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   73882  0.0  0.2 397064  5612 ?        S    11:44   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    73885 15.0  2.4 520948 60404 ?        S    11:44   0:00  \_ php-fpm: pool cloudware_ng
healtho+  73890  8.6  2.4 449560 58560 ?        R    11:44   0:00  \_ php-fpm: pool health_oyostate_gov_ng
systuser    982  0.0  0.5 114016 12988 ?        Ssl  09:46   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        983  0.0  0.0 572372   928 ?        Ssl  09:46   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
memcach+    985  0.0  0.0 342400     4 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    986  0.0  0.1  10340  3512 ?        Rs   09:46   0:05 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        987  0.0  0.0 386112   836 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    988  0.0  0.0  11348    36 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        989  0.0  0.0 385496   816 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        990  0.0  0.0 153404   376 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
systuser    992  0.0  0.0 111608  1560 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        995  0.0  0.4 436392 11360 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        998  0.0  0.0 392856   268 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
telegraf   1006  0.0  1.4 5654048 36080 ?       SLsl 09:46   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1010  0.0  0.0  51508   576 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1129  0.0  0.1  46984  2972 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1130  0.0  0.1  47460  3388 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1131  0.0  0.0  10320   420 ?        S    09:46   0:00  \_ dovecot/anvil
root       1132  0.0  0.0  10452   584 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1133  0.0  0.1  47188  2692 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1134  0.0  0.1  47500  3232 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1142  0.0  0.1  24528  2464 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1144  0.0  0.0  13568   724 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1221  0.0  0.0  41168  1516 ?        S    09:46   0:00  \_ dovecot/auth
worencom  62143  0.0  0.1  38484  3348 ?        S    11:24   0:00  \_ dovecot/imap
root      73287  0.0  0.1  41052  2728 ?        S    11:43   0:00  \_ dovecot/auth -w
root       1012  0.0  0.2 261292  7156 ?        Ss   09:46   0:01 cpsrvd (SSL) - waiting for connections                   
root      73871  0.0  0.0      0     0 ?        Z    11:44   0:00  \_ [cpaneld - servi] <defunct>
root       1024  0.0  0.1 445028  2648 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser   1025  0.0  0.0 112524  1984 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1031  0.0  0.0 111304   512 ?        Ss   09:46   0:01 /usr/sbin/sshd -D
root      73609  0.0  0.1 111304  4268 ?        Ss   11:44   0:00  \_ sshd: [accepted]
sshd      73610  0.0  0.1 115644  2628 ?        S    11:44   0:00  |   \_ sshd: [net]
root      73895  0.0  0.1 111304  4268 ?        Ss   11:44   0:00  \_ sshd: [accepted]
root      73914  0.0  0.1 111304  4448 ?        Ss   11:45   0:00  \_ sshd: [accepted]
sshd      73915  0.0  0.1 115644  2624 ?        S    11:45   0:00  |   \_ sshd: [net]
root      74005  0.0  0.1 111304  4276 ?        Ss   11:45   0:00  \_ sshd: [accepted]
sshd      74013  0.0  0.1 115644  2632 ?        S    11:45   0:00      \_ sshd: [net]
systuser   1204  0.0  0.1 157704  2948 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1217  0.0  1.4 410452 35768 ?        Ss   09:46   0:06 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1218  0.0  0.5 387528 13148 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.8 209272 20288 ?        Ss   09:46   0:00 tailwatchd
root       1266  0.0  0.0 167452  1464 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1268  0.0  1.0 262224 24616 ?        Ss   09:46   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1699  0.0  0.0 299272   964 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1444 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1773  2.4  9.8 1458588 237492 ?      Sl   09:46   2:56 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  0.3 267032  8220 ?        Ss   09:46   0:00 /usr/sbin/httpd -k start
root       1952  0.0  0.0  12748   436 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1953  0.0  0.0  12732   400 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1954  0.0  0.0  12752   408 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1963  0.0  0.0  53268   196 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    47741  0.1  0.8 277584 20184 ?        S    11:01   0:02  \_ /usr/sbin/httpd -k start
nobody    48878  0.1  0.8 277648 20180 ?        S    11:03   0:02  \_ /usr/sbin/httpd -k start
nobody    62022  0.1  0.8 277884 19824 ?        S    11:24   0:01  \_ /usr/sbin/httpd -k start
nobody    64389  0.1  0.8 277880 19824 ?        S    11:27   0:01  \_ /usr/sbin/httpd -k start
nobody    66275  0.1  0.8 277884 19864 ?        S    11:31   0:01  \_ /usr/sbin/httpd -k start
nobody    67838  0.1  0.7 277788 19188 ?        S    11:33   0:00  \_ /usr/sbin/httpd -k start
nobody    67846  0.0  0.7 277892 19184 ?        S    11:33   0:00  \_ /usr/sbin/httpd -k start
nobody    67847  0.1  0.7 277868 19312 ?        S    11:33   0:00  \_ /usr/sbin/httpd -k start
nobody    67852  0.0  0.7 277536 18952 ?        S    11:33   0:00  \_ /usr/sbin/httpd -k start
nobody    67853  0.1  0.8 277536 19504 ?        S    11:33   0:00  \_ /usr/sbin/httpd -k start
nobody    67855  0.1  0.8 277548 19620 ?        S    11:33   0:00  \_ /usr/sbin/httpd -k start
nobody    68412  0.1  0.8 277532 19728 ?        S    11:35   0:00  \_ /usr/sbin/httpd -k start
nobody    70537  0.1  0.7 277524 19200 ?        S    11:39   0:00  \_ /usr/sbin/httpd -k start
nobody    71116  0.1  0.7 277880 19136 ?        R    11:40   0:00  \_ /usr/sbin/httpd -k start
nobody    71954  0.1  0.7 277556 18888 ?        S    11:41   0:00  \_ /usr/sbin/httpd -k start
nobody    72225  0.1  0.7 277536 18896 ?        S    11:41   0:00  \_ /usr/sbin/httpd -k start
nobody    72794  0.0  0.7 277536 18252 ?        S    11:42   0:00  \_ /usr/sbin/httpd -k start
nobody    72827  0.1  0.7 277536 18828 ?        S    11:42   0:00  \_ /usr/sbin/httpd -k start
nobody    72880  0.1  0.7 277876 18740 ?        S    11:43   0:00  \_ /usr/sbin/httpd -k start
nobody    73273  0.0  0.7 277536 18492 ?        S    11:43   0:00  \_ /usr/sbin/httpd -k start
root       2286  0.1  0.4 181884 10864 ?        Ss   09:46   0:07 lfd - sleeping
oysipao+  10754  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+  10763  0.0  0.0   3152   528 ?        S    10:01   0:00  \_ [kworker]
root      40228  0.0  4.9 248032 119780 ?       Ss   10:50   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      47195  0.0  5.1 258908 125572 ?       S    11:00   0:00  \_ spamd child
root      47196  0.0  4.8 248032 117192 ?       S    11:00   0:00  \_ spamd child
root      46911  0.0  0.4 1276100 10556 ?       Ssl  11:00   0:00 /usr/bin/cspdaemon
root      46948  0.0  0.4 1277056 11568 ?       Ssl  11:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 28807  Threads: 5  Questions: 1300685  Slow queries: 0  Opens: 3175  Flush tables: 1  Open tables: 1985  Queries per second avg: 45.151
*************************** 1. row ***************************
     Id: 18885
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 18887
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 18888
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 18893
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: System lock
   Info: SELECT * FROM `30` WHERE `phone`='2348179092255' LIMIT 1
*************************** 5. row ***************************
     Id: 18897
   User: unauthenticated user
   Host: localhost
     db: NULL
Command: Connect
   Time: 0
  State: Receiving from client
   Info: NULL
*************************** 6. row ***************************
     Id: 18898
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.140.113 TIME_WAIT
      1 ::1 TIME_WAIT
      1 40.77.167.7 TIME_WAIT
      1 45.88.97.84 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     36 103.253.27.28 TIME_WAIT
     37 103.253.27.139 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 11:45:02 WAT
   Restart Time: Saturday, 08-Nov-2025 03:45:00 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 1 second
   Server load: 1.46 0.91 1.09
   Total accesses: 35908 - Total Traffic: 535.5 MB - Total Duration: 20466564
   CPU Usage: u12.14 s4.25 cu329.93 cs217.45 - 1.96% CPU load
   1.25 requests/sec - 19.0 kB/second - 15.3 kB/request - 569.972 ms/request
   17 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

WWWW_KK_WWW_KWKWWKK.K...........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client      Protocol           VHost                                        Request
   0-0  68412 0/173/2055 W 2.49 0    0   1285727 0.0   2.76  34.45 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   1-0  71116 1/96/2091  W 1.20 0    0   1147422 30.8  1.43  37.99 66.249.70.200   http/1.1 schoolplus.cloudware.ng:80 GET /?p=356339593 HTTP/1.1
   2-0  47741 0/665/1892 W 9.51 151  0   1209026 0.0   10.52 34.55 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630323135312p2231223
   3-0  48878 0/778/2047 W 9.90 191  0   1091648 0.0   10.78 29.00 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630323131302p2231223
   4-0  66275 0/227/2041 _ 3.69 0    29  1172484 0.0   6.29  34.92 116.203.129.16  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue2.php HTTP/1.1
   5-0  70537 3/176/1954 K 1.68 3    402 1044619 91.4  1.72  26.53 66.249.70.192   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1583152928 HTTP/1.1
   6-0  71954 4/65/1945  K 0.94 2    408 1118697 125.5 1.08  28.30 66.249.70.198   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1607230314 HTTP/1.1
   7-0  72225 0/56/1582  _ 0.95 0    0   924954  0.0   1.05  23.51 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   8-0  67838 0/158/1953 W 2.36 171  0   865456  0.0   2.84  25.03 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630323133312p2231223
   9-0  72794 0/5/2052   W 0.11 111  0   1062069 0.0   0.13  26.55 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630323139312p2231223
   10-0 67846 0/125/1368 W 2.07 212  0   841419  0.0   2.76  21.83 45.227.253.15   http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630323334342p2231223
   11-0 67847 0/192/1636 _ 2.84 0    0   914445  0.0   3.63  25.63 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   12-0 62022 1/353/1641 K 5.95 4    349 906100  30.8  6.54  22.65 66.249.70.195   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1624136915 HTTP/1.1
   13-0 64389 0/280/1350 W 4.57 0    0   856236  0.0   4.63  21.31 103.253.27.139  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   14-0 72827 1/39/1343  K 0.66 2    393 692325  31.3  0.75  17.34 66.249.70.194   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3473654700 HTTP/1.1
   15-0 72880 0/36/1034  W 0.53 0    0   579896  0.0   0.60  16.01 103.253.27.28   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   16-0 67852 0/148/1187 W 2.12 131  0   682507  0.0   2.43  19.65 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630323137312p2231223
   17-0 73273 1/15/1005  K 0.22 3    410 519207  30.9  0.28  12.23 66.249.70.196   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1622197775 HTTP/1.1
   18-0 67853 1/185/1288 K 2.87 1    302 638691  31.5  2.92  17.21 66.249.70.197   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1368289382 HTTP/1.1
   19-0 -     0/0/912    . 0.00 663  0   466830  0.0   0.00  12.04 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 67855 1/193/524  K 2.81 0    498 330493  30.6  4.87  10.08 66.249.70.199   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1091675357 HTTP/1.1
   21-0 -     0/0/130    . 0.00 2206 0   121479  0.0   0.00  1.71  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/1140   . 0.00 1043 0   573870  0.0   0.00  16.71 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/728    . 0.00 1145 0   455894  0.0   0.00  8.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/72     . 0.00 2915 0   33687   0.0   0.00  1.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/18     . 0.00 2875 0   7478    0.0   0.00  0.17  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/8      . 0.00 2909 0   2104    0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/3      . 0.00 2935 0   1155    0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/2      . 0.00 2941 0   5       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/16     . 0.00 2876 0   7009    0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/8      . 0.00 2917 0   2127    0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/2      . 0.00 2937 0   13      0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/6      . 0.00 2923 0   2739    0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/2      . 0.00 2940 0   1       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/5      . 0.00 2918 0   2035    0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/7      . 0.00 2912 0   2468    0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/78     . 0.00 2661 0   121446  0.0   0.00  0.71  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/4      . 0.00 2922 0   2767    0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/193    . 0.00 2464 0   241489  0.0   0.00  1.67  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/3      . 0.00 2931 0   50      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/5      . 0.00 2921 0   2478    0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/21     . 0.00 2868 0   11757   0.0   0.00  0.53  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/8      . 0.00 2911 0   3645    0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/3      . 0.00 2928 0   709     0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/3      . 0.00 2933 0   703     0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/2      . 0.00 2939 0   2       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/9      . 0.00 2899 0   2869    0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/172    . 0.00 2487 0   242408  0.0   0.00  3.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/8      . 0.00 2910 0   2838    0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/10     . 0.00 2913 0   5104    0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/160    . 0.00 2571 0   174079  0.0   0.00  1.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/7      . 0.00 2914 0   2028    0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/175    . 0.00 2704 0   89852   0.0   0.00  1.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 376
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 22 seconds, (range: 1...85)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 9863
   total entries replaced since starting: 0
   total entries expired since starting: 9482
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 25 miss
   total removes since starting: 5 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit