403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.12.18.txt
 ## swap threshold exceeded
## server overview
2025-11-08.12.18 load[2] mem[64/65] mysql[7/11] httpd[16]
              total        used        free      shared  buff/cache   available
Mem:           2363        1434         180          51         748         709
Swap:          1999        1388         611
 12:18:02 up  2:31,  0 users,  load average: 2.02, 1.41, 1.08
## system overview
top - 12:18:02 up  2:31,  0 users,  load average: 2.02, 1.41, 1.08
Tasks: 206 total,   7 running, 198 sleeping,   0 stopped,   1 zombie
%Cpu(s): 84.8 us, 15.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   179784 free,  1471640 used,   768876 buff/cache
KiB Swap:  2047996 total,   626428 free,  1421568 used.   723140 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1773 mysql     20   0 1458588 238724   3504 S  87.5  9.9   3:46.03 /usr/sbin+
 93897 healtho+  20   0  477420  87856   4300 R  37.5  3.6   0:05.12 php-fpm: +
 93878 healtho+  20   0  463148  74284   4380 R  31.2  3.1   0:05.39 php-fpm: +
 94112 nigeria   20   0  400652  15932  10220 R  12.5  0.7   0:00.07 /opt/cpan+
 94148 cloudw    20   0  352096  15228  10112 R   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44424   3492   1536 S   0.0  0.1   0:14.61 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.06 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.19 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:11.63 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.17 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.61 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:13.58 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.21 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   243 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   259 root       0 -20       0      0      0 S   0.0  0.0   0:01.47 [kworker/+
   268 root       0 -20       0      0      0 S   0.0  0.0   0:01.16 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.66 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39496   2856   2540 S   0.0  0.1   0:05.81 /usr/lib/+
   384 root      20   0   45352    372    216 S   0.0  0.0   0:00.35 /usr/lib/+
   407 root      16  -4   55532    504    376 S   0.0  0.0   0:00.99 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0  224280   7580   1348 S   0.0  0.3   0:00.27 queueproc+
   491 rpc       20   0   69256    212    108 S   0.0  0.0   0:00.01 /sbin/rpc+
   512 dbus      20   0   58768   1472    708 S   0.0  0.1   0:04.93 /usr/bin/+
   538 root      20   0   21540    432    324 S   0.0  0.0   0:00.20 /usr/sbin+
   539 root      20   0   52852    396    300 S   0.0  0.0   0:00.01 /usr/sbin+
   540 root      20   0   24896   1476    840 S   0.0  0.1   0:02.20 /usr/lib/+
   541 root      20   0  152780    228    184 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0    4388    128    124 S   0.0  0.0   0:00.00 /usr/sbin+
   544 polkitd   20   0  610540    968    512 S   0.0  0.0   0:01.30 /usr/lib/+
   547 nscd      20   0  928956   1508    812 S   0.0  0.1   0:04.83 /usr/sbin+
   566 root      20   0  195208     44     44 S   0.0  0.0   0:00.00 /usr/sbin+
   582 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   586 root      20   0  124472    488    360 S   0.0  0.0   0:00.26 /usr/sbin+
   588 root      20   0   24208    160    136 S   0.0  0.0   0:00.00 /usr/sbin+
   605 root      20   0  114704    136    136 S   0.0  0.0   0:00.02 /bin/bash
   606 root      20   0  108296    148    144 S   0.0  0.0   0:00.00 /sbin/age+
   616 mailnull  20   0   89116   4028   1008 S   0.0  0.2   0:00.18 /usr/sbin+
   679 root       0 -20       0      0      0 S   0.0  0.0   0:02.47 [loop0]
   709 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   969 systuser  20   0   11796     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   971 root      20   0 1763032 187684   1164 S   0.0  7.8   0:13.61 /usr/loca+
   975 root      20   0  249168   5740   2296 S   0.0  0.2   0:02.85 /usr/sbin+
   976 named     20   0 1186804  34164   1816 S   0.0  1.4   0:05.27 /usr/sbin+
   977 root      20   0  397344   3136    716 S   0.0  0.1   0:02.80 php-fpm: +
   982 systuser  20   0  114016  13076   2724 S   0.0  0.5   0:02.21 /usr/loca+
   983 root      20   0  572372    928    360 S   0.0  0.0   0:00.86 /usr/bin/+
   985 memcach+  20   0  342400      4      4 S   0.0  0.0   0:00.19 /usr/bin/+
   986 cpanelc+  20   0   10340   3504   2436 S   0.0  0.1   0:07.45 /usr/loca+
   987 root      20   0  386112    820    608 S   0.0  0.0   0:00.28 php-fpm: +
   988 systuser  20   0   11348     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   989 root      20   0  385496    744    536 S   0.0  0.0   0:00.29 php-fpm: +
   990 root      20   0  153404    380    296 S   0.0  0.0   0:00.19 pure-ftpd+
   992 systuser  20   0  111608   1560      0 S   0.0  0.1   0:00.00 /usr/loca+
   995 root      20   0  436392  11392  11180 S   0.0  0.5   0:00.35 php-fpm: +
   998 root      20   0  392856    572    404 S   0.0  0.0   0:00.26 php-fpm: +
  1006 telegraf  20   0 5654048  36228   5744 S   0.0  1.5   0:05.29 /usr/loca+
  1010 root      20   0   51508    576    412 S   0.0  0.0   0:00.13 /usr/sbin+
  1012 root      20   0  261032  27884   5516 S   0.0  1.2   0:01.50 cpsrvd (S+
  1024 root      20   0  445028   2648   2648 S   0.0  0.1   0:00.05 sw-engine+
  1025 systuser  20   0  112524   1984      0 S   0.0  0.1   0:00.01 /usr/loca+
  1031 root      20   0  111304    512    408 S   0.0  0.0   0:01.38 /usr/sbin+
  1129 dovenull  20   0   46984   2712   1932 S   0.0  0.1   0:00.14 dovecot/p+
  1130 dovenull  20   0   47744   3520   2232 S   0.0  0.1   0:00.11 dovecot/i+
  1131 dovecot   20   0   10320    404    288 S   0.0  0.0   0:00.02 dovecot/a+
  1132 root      20   0   10452    580    376 S   0.0  0.0   0:00.11 dovecot/l+
  1133 dovenull  20   0   47188   2644   1708 S   0.0  0.1   0:00.20 dovecot/p+
  1134 dovenull  20   0   47500   3416   2232 S   0.0  0.1   0:00.11 dovecot/i+
  1142 root      20   0   24528   2604    552 S   0.0  0.1   0:00.07 dovecot/c+
  1144 dovecot   20   0   13568    664    436 S   0.0  0.0   0:00.01 dovecot/s+
  1204 systuser  20   0  157704   2896    864 S   0.0  0.1   0:00.06 SonarPush+
  1217 wp-tool+  20   0  410452  35768   1748 S   0.0  1.5   0:07.67 /usr/bin/+
  1218 wp-tool+  20   0  387528  13172   1548 S   0.0  0.5   0:00.16 /usr/bin/+
  1221 dovecot   20   0   41168   1516   1068 S   0.0  0.1   0:00.21 dovecot/a+
  1264 root      20   0  209324  20388   2916 S   0.0  0.8   0:01.25 tailwatchd
  1266 root      20   0  167452   1460    856 S   0.0  0.1   0:00.17 dnsadmin +
  1268 root      20   0  183900   6104   2872 S   0.0  0.3   0:00.53 cpdavd - +
  1699 root      20   0  299272    964    584 S   0.0  0.0   0:00.24 php-fpm: +
  1717 root      38  18  130416   1444    720 S   0.0  0.1   0:00.02 cpanellog+
  1947 root      20   0  267032   8220    812 S   0.0  0.3   0:00.68 /usr/sbin+
  1952 root      20   0   12852    436    324 S   0.0  0.0   0:01.07 /usr/loca+
  1953 root      20   0   12732    400    320 S   0.0  0.0   0:00.88 /usr/loca+
  1954 root      20   0   12896    404    280 S   0.0  0.0   0:00.97 /usr/loca+
  1963 root      20   0   53268    196    196 S   0.0  0.0   0:00.05 /usr/loca+
  2286 root      20   0  182248  11296   1212 S   0.0  0.5   0:09.13 lfd - sle+
 10754 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10763 oysipao+  20   0    3152    520     28 S   0.0  0.0   0:00.15 [kworker]
 40228 root      20   0  248032 119724   3100 S   0.0  4.9   0:03.32 /usr/loca+
 47195 root      20   0  259304 125876   2908 S   0.0  5.2   0:01.12 spamd chi+
 47196 root      20   0  248032 117188    604 S   0.0  4.8   0:00.00 spamd chi+
 71252 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 71949 cloudw    20   0  471856   9448   5048 S   0.0  0.4   0:01.67 php-fpm: +
 73427 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 76930 worencom  20   0   38484   3560   2544 S   0.0  0.1   0:00.00 dovecot/i+
 79320 nobody    20   0  277896  19432   4136 S   0.0  0.8   0:01.01 /usr/sbin+
 80859 nobody    20   0  277528  19532   4200 S   0.0  0.8   0:01.18 /usr/sbin+
 83628 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 84079 root      20   0 1276100  10752    596 S   0.0  0.4   0:00.06 /usr/bin/+
 84123 root      20   0 1277056  11788    596 S   0.0  0.5   0:00.06 /usr/bin/+
 84976 nobody    20   0  277840  20112   4400 S   0.0  0.8   0:00.98 /usr/sbin+
 85108 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 86312 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 86570 nobody    20   0  277572  19112   3952 S   0.0  0.8   0:00.54 /usr/sbin+
 86591 nobody    20   0  277884  19684   4084 S   0.0  0.8   0:00.55 /usr/sbin+
 86598 nobody    20   0  277880  19476   3908 S   0.0  0.8   0:00.51 /usr/sbin+
 86844 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 88645 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 89053 cloudw    20   0  471808   9504   5088 S   0.0  0.4   0:00.55 php-fpm: +
 89085 nobody    20   0  277564  19276   4020 S   0.0  0.8   0:00.75 /usr/sbin+
 89689 nobody    20   0  277540  19012   3976 S   0.0  0.8   0:00.63 /usr/sbin+
 89839 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 90208 nobody    20   0  277536  18868   3744 S   0.0  0.8   0:00.46 /usr/sbin+
 90209 nobody    20   0  277880  19248   4104 S   0.0  0.8   0:00.59 /usr/sbin+
 90900 root      20   0       0      0      0 R   0.0  0.0   0:00.01 [kworker/+
 91329 nobody    20   0  277528  19108   4108 S   0.0  0.8   0:00.26 /usr/sbin+
 91330 nobody    20   0  277592  18888   3832 S   0.0  0.8   0:00.28 /usr/sbin+
 91938 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 92878 nobody    20   0  277536  18636   3688 S   0.0  0.8   0:00.18 /usr/sbin+
 93106 nobody    20   0  277532  18732   3768 S   0.0  0.8   0:00.16 /usr/sbin+
 93218 nobody    20   0  277556  18504   3536 S   0.0  0.8   0:00.05 /usr/sbin+
 93234 nobody    20   0  277556  18708   3628 S   0.0  0.8   0:00.22 /usr/sbin+
 93235 nobody    20   0  277884  18748   3624 S   0.0  0.8   0:00.13 /usr/sbin+
 93388 cloudw    20   0  471784   9144   4740 S   0.0  0.4   0:00.17 php-fpm: +
 93399 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 93404 nobody    20   0  277868  18752   3664 S   0.0  0.8   0:00.06 /usr/sbin+
 93465 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 93624 cloudw    20   0  471784   9144   4740 S   0.0  0.4   0:00.17 php-fpm: +
 93670 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 93792 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 93793 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 93840 nobody    20   0  277232  17716   3184 S   0.0  0.7   0:00.00 /usr/sbin+
 93856 healtho+  20   0  466692  78208   4300 S   0.0  3.2   0:05.88 php-fpm: +
 93859 cloudw    20   0  471784   9148   4744 S   0.0  0.4   0:00.17 php-fpm: +
 93933 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 93987 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 94055 nobody    20   0  277384  16764   2112 S   0.0  0.7   0:00.00 /usr/sbin+
 94062 nigeria   20   0  397064   5612   2368 S   0.0  0.2   0:00.00 php-fpm: +
 94064 healtho+  20   0  397064   3088    568 S   0.0  0.1   0:00.00 php-fpm: +
 94069 root      20   0  183040   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 94070 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94071 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94072 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94074 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94075 root      20   0  183040   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94076 root      20   0  183040   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94077 root      20   0  183040   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94079 root      20   0  183040   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94080 root      20   0  183040   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94081 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 94083 root      20   0  183040   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94086 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 94087 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 94088 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 94089 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 94090 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 94091 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 94093 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 94094 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 94096 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 94097 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 94099 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 94100 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 94101 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 94102 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 94111 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 94113 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 94116 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 94154 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 94159 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 94160 cloudsms  20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:46   0:11  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:46   0:13  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        243  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        245  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        259  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/1:1H]
root        268  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        582  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        679  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [loop0]
root        709  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      71252  0.0  0.0      0     0 ?        S    11:40   0:00  \_ [kworker/1:1]
root      73427  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/0:2]
root      83628  0.0  0.0      0     0 ?        S    12:00   0:00  \_ [kworker/u200:0]
root      85108  0.0  0.0      0     0 ?        S    12:02   0:00  \_ [kworker/1:3]
root      86312  0.0  0.0      0     0 ?        S    12:04   0:00  \_ [kworker/1:4]
root      86844  0.0  0.0      0     0 ?        S    12:05   0:00  \_ [kworker/0:3]
root      88645  0.0  0.0      0     0 ?        S    12:08   0:00  \_ [kworker/0:4]
root      89839  0.0  0.0      0     0 ?        S    12:10   0:00  \_ [kworker/1:2]
root      90900  0.0  0.0      0     0 ?        S    12:12   0:00  \_ [kworker/u200:1]
root      91938  0.0  0.0      0     0 ?        S    12:14   0:00  \_ [kworker/0:0]
root      93465  0.0  0.0      0     0 ?        S    12:17   0:00  \_ [kworker/0:1]
root          1  0.1  0.1  44424  3492 ?        Ss   09:46   0:14 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  39496  2856 ?        Ss   09:46   0:05 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   372 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   504 ?        S<sl 09:46   0:00 /sbin/auditd
root        489  0.0  0.3 224280  7580 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
rpc         491  0.0  0.0  69256   212 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        512  0.0  0.0  58768  1472 ?        Ss   09:46   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        538  0.0  0.0  21540   432 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        539  0.0  0.0  52852   396 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
root        540  0.0  0.0  24896  1476 ?        Ss   09:46   0:02 /usr/lib/systemd/systemd-logind
root        541  0.0  0.0 152780   228 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        542  0.0  0.0   4388   128 ?        Ss   09:46   0:00 /usr/sbin/acpid
polkitd     544  0.0  0.0 610540   968 ?        Ssl  09:46   0:01 /usr/lib/polkit-1/polkitd --no-debug
nscd        547  0.0  0.0 928956  1508 ?        Ssl  09:46   0:04 /usr/sbin/nscd
root        566  0.0  0.0 195208    44 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        586  0.0  0.0 124472   488 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      94069  0.0  0.0 183040  2140 ?        S    12:18   0:00  \_ /usr/sbin/CROND -n
root      94086  0.0  0.0 113284  1212 ?        Ss   12:18   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      94087  0.0  0.0 108052   356 ?        S    12:18   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      94099  0.0  0.0 113288  1516 ?        S    12:18   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      94162  0.0  0.0 153840  2088 ?        R    12:18   0:00  |               \_ ps auxf
root      94070  0.0  0.0 183040  2144 ?        S    12:18   0:00  \_ /usr/sbin/CROND -n
root      94089  0.0  0.0  20164   804 ?        Ss   12:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      94071  0.0  0.0 183040  2144 ?        S    12:18   0:00  \_ /usr/sbin/CROND -n
root      94101  0.0  0.0  20164   804 ?        Ss   12:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      94072  0.0  0.0 183040  2144 ?        S    12:18   0:00  \_ /usr/sbin/CROND -n
root      94088  0.0  0.0  20164   988 ?        Ss   12:18   0:00  |   \_ jailshell (cloudsms) [94159] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
cloudsms  94159  0.0  0.0  20164   260 ?        S    12:18   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
cloudsms  94160  0.0  0.0 113284  1212 ?        S    12:18   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
cloudsms  94161  0.0  0.2 229132  5784 ?        R    12:18   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php
root      94074  0.0  0.0 183040  2144 ?        S    12:18   0:00  \_ /usr/sbin/CROND -n
root      94090  0.0  0.0  20164   808 ?        Ss   12:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      94075  0.0  0.0 183040  2140 ?        S    12:18   0:00  \_ /usr/sbin/CROND -n
root      94094  0.0  0.0  20164   804 ?        Ss   12:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      94076  0.0  0.0 183040  2140 ?        S    12:18   0:00  \_ /usr/sbin/CROND -n
root      94091  0.0  0.0  20164   804 ?        Ss   12:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      94077  0.0  0.0 183040  2136 ?        S    12:18   0:00  \_ /usr/sbin/CROND -n
root      94096  0.0  0.0  20164   808 ?        Ss   12:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      94079  0.0  0.0 183040  2136 ?        S    12:18   0:00  \_ /usr/sbin/CROND -n
root      94102  0.0  0.0  20164   808 ?        Ss   12:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      94080  0.0  0.0 183040  2136 ?        S    12:18   0:00  \_ /usr/sbin/CROND -n
root      94100  0.0  0.0  20164   804 ?        Ss   12:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      94081  0.0  0.0 183040  2140 ?        S    12:18   0:00  \_ /usr/sbin/CROND -n
root      94097  0.0  0.0  20164   968 ?        Ss   12:18   0:00  |   \_ jailshell (pactpay) [94113] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   94113  0.0  0.0  20164   264 ?        S    12:18   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   94116  0.0  0.7 476724 17484 ?        S    12:18   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      94083  0.0  0.0 183040  2136 ?        S    12:18   0:00  \_ /usr/sbin/CROND -n
root      94093  0.0  0.0  20164   968 ?        Ss   12:18   0:00      \_ jailshell (nigeria) [94111] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   94111  0.0  0.0  20164   264 ?        S    12:18   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   94112  0.0  0.6 400652 15932 ?        S    12:18   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        588  0.0  0.0  24208   160 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        605  0.0  0.0 114704   136 ttyS0    Ss+  09:46   0:00 /bin/bash
root        606  0.0  0.0 108296   148 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    616  0.0  0.1  89116  4028 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    969  0.0  0.0  11796    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        971  0.1  7.7 1763032 187684 ?      Ssl  09:46   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        975  0.0  0.2 249168  5740 ?        Ssl  09:46   0:02 /usr/sbin/rsyslogd -n
named       976  0.0  1.4 1186804 34164 ?       Ssl  09:46   0:05 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        977  0.0  0.1 397344  3136 ?        Ss   09:46   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    71949  0.0  0.3 471856  9448 ?        S    11:41   0:01  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    89053  0.1  0.3 471808  9504 ?        S    12:08   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    93388  0.2  0.3 471784  9144 ?        S    12:16   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    93624  0.3  0.3 471784  9144 ?        S    12:17   0:00  \_ php-fpm: pool edoocds_cloudware_ng
healtho+  93856 24.5  3.2 466692 78208 ?        S    12:17   0:05  \_ php-fpm: pool health_oyostate_gov_ng
cloudw    93859  0.7  0.3 471784  9148 ?        S    12:17   0:00  \_ php-fpm: pool edoocds_cloudware_ng
healtho+  93878 25.7  3.0 463148 74284 ?        R    12:17   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  93897 27.0  3.6 477420 88120 ?        R    12:17   0:05  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   94062  0.0  0.2 397064  5612 ?        S    12:18   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  94064  0.0  0.1 397064  3088 ?        S    12:18   0:00  \_ php-fpm: pool health_oyostate_gov_ng
systuser    982  0.0  0.5 114016 13076 ?        Ssl  09:46   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        983  0.0  0.0 572372   928 ?        Ssl  09:46   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
memcach+    985  0.0  0.0 342400     4 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    986  0.0  0.1  10340  3504 ?        Rs   09:46   0:07 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        987  0.0  0.0 386112   820 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    988  0.0  0.0  11348    36 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        989  0.0  0.0 385496   744 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        990  0.0  0.0 153404   380 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
systuser    992  0.0  0.0 111608  1560 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        995  0.0  0.4 436392 11392 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        998  0.0  0.0 392856   572 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
telegraf   1006  0.0  1.4 5654048 36228 ?       SLsl 09:46   0:05 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1010  0.0  0.0  51508   576 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1129  0.0  0.1  46984  2712 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1130  0.0  0.1  47744  3520 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1131  0.0  0.0  10320   404 ?        S    09:46   0:00  \_ dovecot/anvil
root       1132  0.0  0.0  10452   580 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1133  0.0  0.1  47188  2644 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1134  0.0  0.1  47500  3416 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1142  0.0  0.1  24528  2604 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1144  0.0  0.0  13568   664 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1221  0.0  0.0  41168  1516 ?        S    09:46   0:00  \_ dovecot/auth
worencom  76930  0.0  0.1  38484  3560 ?        S    11:49   0:00  \_ dovecot/imap
root      93399  0.0  0.1  41052  2728 ?        S    12:16   0:00  \_ dovecot/auth -w
root      93670  0.0  0.1  60820  4508 ?        S    12:17   0:00  \_ dovecot/lmtp
root       1012  0.0  1.1 261032 27884 ?        Ss   09:46   0:01 cpsrvd (SSL) - waiting for connections                   
root      93987  0.0  0.0      0     0 ?        Z    12:17   0:00  \_ [cpaneld - servi] <defunct>
root       1024  0.0  0.1 445028  2648 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser   1025  0.0  0.0 112524  1984 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1031  0.0  0.0 111304   512 ?        Ss   09:46   0:01 /usr/sbin/sshd -D
root      93792  0.0  0.1 111304  4268 ?        Ss   12:17   0:00  \_ sshd: [accepted]
sshd      93793  0.0  0.1 115644  2624 ?        S    12:17   0:00  |   \_ sshd: [net]
root      93933  0.0  0.1 111304  4268 ?        Ss   12:17   0:00  \_ sshd: [accepted]
systuser   1204  0.0  0.1 157704  2896 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1217  0.0  1.4 410452 35768 ?        Ss   09:46   0:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1218  0.0  0.5 387528 13172 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.8 209324 20388 ?        Ss   09:46   0:01 tailwatchd
root       1266  0.0  0.0 167452  1460 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1268  0.0  0.2 183900  6104 ?        Ss   09:46   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1699  0.0  0.0 299272   964 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1444 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1773  2.4  9.8 1458588 238724 ?      Sl   09:46   3:46 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  0.3 267032  8220 ?        Ss   09:46   0:00 /usr/sbin/httpd -k start
root       1952  0.0  0.0  12852   436 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1953  0.0  0.0  12732   400 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1954  0.0  0.0  12896   404 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1963  0.0  0.0  53268   196 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    79320  0.0  0.8 277896 19432 ?        S    11:53   0:01  \_ /usr/sbin/httpd -k start
nobody    80859  0.0  0.8 277528 19532 ?        S    11:56   0:01  \_ /usr/sbin/httpd -k start
nobody    84976  0.1  0.8 277840 20112 ?        S    12:01   0:00  \_ /usr/sbin/httpd -k start
nobody    86570  0.0  0.7 277572 19112 ?        R    12:04   0:00  \_ /usr/sbin/httpd -k start
nobody    86591  0.0  0.8 277884 19684 ?        S    12:04   0:00  \_ /usr/sbin/httpd -k start
nobody    86598  0.0  0.8 277880 19476 ?        S    12:04   0:00  \_ /usr/sbin/httpd -k start
nobody    89085  0.1  0.7 277564 19276 ?        S    12:09   0:00  \_ /usr/sbin/httpd -k start
nobody    89689  0.1  0.7 277540 19012 ?        S    12:10   0:00  \_ /usr/sbin/httpd -k start
nobody    90208  0.1  0.7 277536 18868 ?        S    12:10   0:00  \_ /usr/sbin/httpd -k start
nobody    90209  0.1  0.7 277880 19248 ?        S    12:10   0:00  \_ /usr/sbin/httpd -k start
nobody    91329  0.0  0.7 277528 19108 ?        S    12:12   0:00  \_ /usr/sbin/httpd -k start
nobody    91330  0.0  0.7 277592 18888 ?        S    12:12   0:00  \_ /usr/sbin/httpd -k start
nobody    92878  0.1  0.7 277536 18636 ?        S    12:15   0:00  \_ /usr/sbin/httpd -k start
nobody    93106  0.1  0.7 277532 18732 ?        S    12:16   0:00  \_ /usr/sbin/httpd -k start
nobody    93218  0.0  0.7 277556 18504 ?        S    12:16   0:00  \_ /usr/sbin/httpd -k start
nobody    93234  0.2  0.7 277556 18708 ?        S    12:16   0:00  \_ /usr/sbin/httpd -k start
nobody    93235  0.1  0.7 277884 18748 ?        S    12:16   0:00  \_ /usr/sbin/httpd -k start
nobody    93404  0.0  0.7 277868 18752 ?        S    12:17   0:00  \_ /usr/sbin/httpd -k start
nobody    93840  0.0  0.7 277232 17716 ?        S    12:17   0:00  \_ /usr/sbin/httpd -k start
nobody    94055  0.0  0.6 277384 16764 ?        S    12:18   0:00  \_ /usr/sbin/httpd -k start
cloudw    94148  0.0  0.6 352096 15228 ?        S    12:18   0:00      \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
root       2286  0.1  0.4 182248 11296 ?        Ss   09:46   0:09 lfd - sleeping
oysipao+  10754  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+  10763  0.0  0.0   3152   520 ?        S    10:01   0:00  \_ [kworker]
root      40228  0.0  4.9 248032 119724 ?       Ss   10:50   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      47195  0.0  5.2 259304 125876 ?       S    11:00   0:01  \_ spamd child
root      47196  0.0  4.8 248032 117188 ?       S    11:00   0:00  \_ spamd child
root      84079  0.0  0.4 1276100 10752 ?       Ssl  12:00   0:00 /usr/bin/cspdaemon
root      84123  0.0  0.4 1277056 11788 ?       Ssl  12:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 30788  Threads: 6  Questions: 1671816  Slow queries: 0  Opens: 3662  Flush tables: 1  Open tables: 1986  Queries per second avg: 54.300
*************************** 1. row ***************************
     Id: 24199
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 24200
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 24202
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 24204
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 24211
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.154.89 TIME_WAIT
      1 122.51.207.51 TIME_WAIT
      1 124.248.184.195 TIME_WAIT
      1 ::1 TIME_WAIT
      1 48.218.56.208 TIME_WAIT
      1 54.39.203.90 TIME_WAIT
      1 66.249.70.192 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 45.11.89.19 TIME_WAIT
     35 103.253.27.139 TIME_WAIT
     38 103.253.27.28 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 12:18:02 WAT
   Restart Time: Saturday, 08-Nov-2025 03:45:00 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 33 minutes 1 second
   Server load: 2.02 1.41 1.08
   Total accesses: 46952 - Total Traffic: 709.4 MB - Total Duration: 43331512
   CPU Usage: u6.27 s2.92 cu421.59 cs281.04 - 2.31% CPU load
   1.53 requests/sec - 23.6 kB/second - 15.5 kB/request - 922.89 ms/request
   15 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

KWW__WWWW_CKK_W.R.._.K..WK......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS  Req   Dur    Conn  Child  Slot     Client      Protocol              VHost                                          Request
   0-0  86570 40/157/2560 K 2.04 0    65  2776091 164.3  2.29  41.83 48.218.56.208   http/1.1 scorecard.staging.cloudware.ng: GET /cgi-sys/suspendedpage.cgi HTTP/1.1
   1-0  93218 0/13/2586   W 0.17 43   0   1848568 0.0    0.19  45.61 173.199.190.174 http/1.1 edoocds.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323630343233392p2231223
   2-0  93404 0/15/2300   W 0.13 3    0   2343297 0.0    0.16  40.65 173.199.190.174 http/1.1 edoocds.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323630343237392p2231223
   3-0  79320 0/237/2332  _ 4.47 0    417 3540176 0.0    11.03 40.59 66.249.70.36    http/1.1 wptraining.cloudware.ng:80      GET /?q=3445007562 HTTP/1.1
   4-0  91329 0/85/2397   _ 0.69 0    342 2255625 0.0    0.89  40.87 103.253.27.28   http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   5-0  80859 0/365/2416  W 4.07 0    0   2156008 0.0    4.28  32.77 103.253.27.139  http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   6-0  91330 0/77/2466   W 1.09 63   0   1400995 0.0    0.97  36.36 173.199.190.174 http/1.1 edoocds.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323630343231392p2231223
   7-0  93840 0/1/2106    W 0.00 23   0   1865679 0.0    0.01  28.87 173.199.190.174 http/1.1 edoocds.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323630343235392p2231223
   8-0  86591 0/131/2315  W 2.02 0    0   2281453 0.0    2.23  30.66 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   9-0  93234 0/119/2570  _ 1.04 0    376 2030569 0.0    0.67  35.91 66.249.70.34    http/1.1 wptraining.cloudware.ng:80      GET /?q=2617834083 HTTP/1.1
   10-0 92878 2/36/1702   C 0.70 5    464 2407178 13.0   0.79  28.67 124.248.184.195 http/1.1 health.oyostate.gov.ng:443      GET /wp-login.php HTTP/1.1
   11-0 89085 3/240/2281  K 3.25 3    313 1170796 95.5   2.77  34.40 66.249.70.37    http/1.1 wptraining.cloudware.ng:80      GET /?q=875505996 HTTP/1.1
   12-0 94055 2/2/1983    K 0.03 0    395 1419362 61.7   0.06  27.48 66.249.70.35    http/1.1 wptraining.cloudware.ng:80      GET /?q=3277967756 HTTP/1.1
   13-0 93106 0/36/1606   _ 0.61 0    0   1444187 0.0    0.69  25.87 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   14-0 84976 84/317/1931 W 2.97 0    0   944873  8301.2 11.31 31.48 45.11.89.19     http/1.1 health.oyostate.gov.ng:80       GET /wp-content/plugins/backup-backup/readme.txt HTTP/1.1
   15-0 -     0/0/1618    . 0.00 80   0   790176  0.0    0.00  23.89 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   16-0 93235 0/29/1460   R 0.44 1    84  1989443 0.0    0.51  24.33 103.253.27.28   http/1.1
   17-0 -     0/0/1247    . 0.00 423  0   1091252 0.0    0.00  15.00 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-0 -     0/0/1684    . 0.00 101  0   2582033 0.0    0.00  21.77 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   19-0 89689 0/231/1529  _ 1.99 0    301 1177982 0.0    2.31  18.05 66.249.70.39    http/1.1 support.cloudware.ng:443        GET /?c=4093880938 HTTP/1.1
   20-0 -     0/0/886     . 0.00 339  0   486766  0.0    0.00  15.12 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 86598 1/191/376   K 2.18 0    394 1126449 35.4   1.85  4.52  66.249.70.32    http/1.1 support.cloudware.ng:443        GET /?c=430557805 HTTP/1.1
   22-0 -     0/0/1785    . 0.00 394  0   792393  0.0    0.00  24.61 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 -     0/0/845     . 0.00 82   0   530634  0.0    0.00  10.62 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 90208 0/105/182   W 1.92 91   0   105165  0.0    1.84  3.08  173.199.190.174 http/1.1 edoocds.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323630343139312p2231223
   25-0 90209 4/207/226   K 1.74 1    397 142386  128.3  2.25  2.42  66.249.70.38    http/1.1 wptraining.cloudware.ng:80      GET /?q=2342198760 HTTP/1.1
   26-0 -     0/0/121     . 0.00 42   0   76580   0.0    0.00  1.84  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/273     . 0.00 343  0   1500580 0.0    0.00  4.70  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -     0/0/9       . 0.00 419  0   6259    0.0    0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/269     . 0.00 1127 0   134925  0.0    0.00  6.92  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/8       . 0.00 4898 0   2127    0.0    0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/2       . 0.00 4918 0   13      0.0    0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/6       . 0.00 4904 0   2739    0.0    0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -     0/0/2       . 0.00 4921 0   1       0.0    0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -     0/0/5       . 0.00 4899 0   2035    0.0    0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/7       . 0.00 4893 0   2468    0.0    0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/78      . 0.00 4642 0   121446  0.0    0.00  0.71  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/4       . 0.00 4903 0   2767    0.0    0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/193     . 0.00 4444 0   241489  0.0    0.00  1.67  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/3       . 0.00 4912 0   50      0.0    0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/5       . 0.00 4902 0   2478    0.0    0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/21      . 0.00 4849 0   11757   0.0    0.00  0.53  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/8       . 0.00 4892 0   3645    0.0    0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/3       . 0.00 4909 0   709     0.0    0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/3       . 0.00 4914 0   703     0.0    0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/2       . 0.00 4920 0   2       0.0    0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/9       . 0.00 4880 0   2869    0.0    0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/172     . 0.00 4467 0   242408  0.0    0.00  3.68  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/8       . 0.00 4891 0   2838    0.0    0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -     0/0/10      . 0.00 4894 0   5104    0.0    0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -     0/0/160     . 0.00 4552 0   174079  0.0    0.00  1.68  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -     0/0/7       . 0.00 4895 0   2028    0.0    0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -     0/0/175     . 0.00 4684 0   89852   0.0    0.00  1.23  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 273
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 41 seconds, (range: 0...177)
   index usage: 4%, cache usage: 6%
   total entries stored since starting: 12291
   total entries replaced since starting: 0
   total entries expired since starting: 12009
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 45 miss
   total removes since starting: 9 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit