403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.13.33.txt
 ## swap threshold exceeded
## server overview
2025-11-08.13.33 load[0] mem[60/69] mysql[1/11] httpd[16]
              total        used        free      shared  buff/cache   available
Mem:           2363        1353         251          45         758         791
Swap:          1999        1460         539
 13:33:01 up  3:46,  0 users,  load average: 0.91, 0.89, 0.91
## system overview
top - 13:33:01 up  3:46,  0 users,  load average: 0.91, 0.89, 0.91
Tasks: 212 total,  11 running, 200 sleeping,   0 stopped,   1 zombie
%Cpu(s): 57.6 us, 42.4 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   226084 free,  1416748 used,   777468 buff/cache
KiB Swap:  2047996 total,   552444 free,  1495552 used.   778748 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1773 mysql     20   0 1458588 246184   3388 S  18.8 10.2   5:33.73 /usr/sbin+
 34587 healtho+  20   0  457244  67624   4212 R  18.8  2.8   0:02.39 php-fpm: +
 34776 saboakin  20   0       0      0      0 R  12.5  0.0   0:00.02 [php-cgi]
     1 root      20   0   44424   3504   1548 S   6.2  0.1   0:20.95 /usr/lib/+
 34753 cloudw    20   0  352096  15236  10132 S   6.2  0.6   0:00.01 /opt/cpan+
 34777 nigeria   20   0  400652  15676   9960 R   6.2  0.6   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 R   0.0  0.0   0:01.56 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.28 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:17.82 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.26 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.34 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:15.40 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.27 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   243 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   259 root       0 -20       0      0      0 S   0.0  0.0   0:01.81 [kworker/+
   268 root       0 -20       0      0      0 S   0.0  0.0   0:01.42 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.94 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39496   5324   5076 S   0.0  0.2   0:07.63 /usr/lib/+
   384 root      20   0   45352    224    216 S   0.0  0.0   0:00.35 /usr/lib/+
   407 root      16  -4   55532    504    376 S   0.0  0.0   0:01.26 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0  224280   5436   1348 S   0.0  0.2   0:00.31 queueproc+
   491 rpc       20   0   69256    168    108 S   0.0  0.0   0:00.02 /sbin/rpc+
   512 dbus      20   0   58768   1468    708 S   0.0  0.1   0:07.32 /usr/bin/+
   538 root      20   0   21540    408    324 S   0.0  0.0   0:00.30 /usr/sbin+
   539 root      20   0   52852    276    180 S   0.0  0.0   0:00.01 /usr/sbin+
   540 root      20   0   24896   1476    840 S   0.0  0.1   0:03.27 /usr/lib/+
   541 root      20   0  152780    220    176 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0    4388    128    124 S   0.0  0.0   0:00.00 /usr/sbin+
   544 polkitd   20   0  610540    864    472 S   0.0  0.0   0:01.91 /usr/lib/+
   547 nscd      20   0  928956   1480    808 S   0.0  0.1   0:07.18 /usr/sbin+
   566 root      20   0  195208     44     44 S   0.0  0.0   0:00.00 /usr/sbin+
   582 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   586 root      20   0  124472    488    360 S   0.0  0.0   0:00.39 /usr/sbin+
   588 root      20   0   24208    144    120 S   0.0  0.0   0:00.00 /usr/sbin+
   605 root      20   0  114704    136    136 S   0.0  0.0   0:00.02 /bin/bash
   606 root      20   0  108296    148    144 S   0.0  0.0   0:00.00 /sbin/age+
   616 mailnull  20   0   89116   3884    944 S   0.0  0.2   0:00.24 /usr/sbin+
   679 root       0 -20       0      0      0 S   0.0  0.0   0:02.55 [loop0]
   709 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   969 systuser  20   0   11796     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   971 root      20   0 1763032 141856    784 S   0.0  5.9   0:13.75 /usr/loca+
   975 root      20   0  257360   7400   4548 S   0.0  0.3   0:03.89 /usr/sbin+
   976 named     20   0 1186804  35920   1832 S   0.0  1.5   0:07.65 /usr/sbin+
   977 root      20   0  397344   3136    716 S   0.0  0.1   0:04.32 php-fpm: +
   982 systuser  20   0  114016  13172   2640 S   0.0  0.5   0:03.21 /usr/loca+
   983 root      20   0  572372    920    352 S   0.0  0.0   0:01.22 /usr/bin/+
   985 memcach+  20   0  342400      4      4 S   0.0  0.0   0:00.29 /usr/bin/+
   986 cpanelc+  20   0   10460   3668   2456 R   0.0  0.2   0:11.00 /usr/loca+
   987 root      20   0  386112    848    636 S   0.0  0.0   0:00.39 php-fpm: +
   988 systuser  20   0   11348     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   989 root      20   0  385496    888    672 S   0.0  0.0   0:00.39 php-fpm: +
   990 root      20   0  153404    380    296 S   0.0  0.0   0:00.29 pure-ftpd+
   992 systuser  20   0  111608     72      0 S   0.0  0.0   0:00.00 /usr/loca+
   995 root      20   0  436392   1840   1628 S   0.0  0.1   0:00.49 php-fpm: +
   998 root      20   0  392856    572    404 S   0.0  0.0   0:00.35 php-fpm: +
  1006 telegraf  20   0 5654048  36432   5592 S   0.0  1.5   0:07.69 /usr/loca+
  1010 root      20   0   51508    576    412 S   0.0  0.0   0:00.19 /usr/sbin+
  1012 root      20   0  261164  27600   5044 S   0.0  1.1   0:02.24 cpsrvd (S+
  1024 root      20   0  445028     64     64 S   0.0  0.0   0:00.05 sw-engine+
  1025 systuser  20   0  112524   1984      0 S   0.0  0.1   0:00.01 /usr/loca+
  1031 root      20   0  111304    512    408 S   0.0  0.0   0:01.72 /usr/sbin+
  1129 dovenull  20   0   46984   2904   2124 S   0.0  0.1   0:00.22 dovecot/p+
  1130 dovenull  20   0   48120   3932   2332 S   0.0  0.2   0:00.20 dovecot/i+
  1131 dovecot   20   0   10320    404    288 S   0.0  0.0   0:00.04 dovecot/a+
  1132 root      20   0   10452    580    376 S   0.0  0.0   0:00.17 dovecot/l+
  1133 dovenull  20   0   47188   3084   2132 S   0.0  0.1   0:00.30 dovecot/p+
  1134 dovenull  20   0   47744   3648   2296 S   0.0  0.2   0:00.16 dovecot/i+
  1142 root      20   0   24528   2600    548 S   0.0  0.1   0:00.11 dovecot/c+
  1144 dovecot   20   0   13568    660    436 S   0.0  0.0   0:00.03 dovecot/s+
  1204 systuser  20   0  157704   2888    864 S   0.0  0.1   0:00.08 SonarPush+
  1217 wp-tool+  20   0  410452  35752   1748 R   0.0  1.5   0:11.36 /usr/bin/+
  1218 wp-tool+  20   0  387528  13168   1544 S   0.0  0.5   0:00.20 /usr/bin/+
  1221 dovecot   20   0   41168   1528   1068 S   0.0  0.1   0:00.34 dovecot/a+
  1264 root      20   0  209536  20644   2964 S   0.0  0.9   0:01.84 tailwatchd
  1266 root      20   0  167452   1464    860 S   0.0  0.1   0:00.23 dnsadmin +
  1268 root      20   0  183900   6692   3460 S   0.0  0.3   0:00.72 cpdavd - +
  1699 root      20   0  299272    944    564 S   0.0  0.0   0:00.35 php-fpm: +
  1717 root      38  18  130416   1440    712 S   0.0  0.1   0:00.03 cpanellog+
  1947 root      20   0  267032   8220    812 S   0.0  0.3   0:01.01 /usr/sbin+
  1952 root      20   0   12832    436    324 S   0.0  0.0   0:01.61 /usr/loca+
  1953 root      20   0   12732    400    320 S   0.0  0.0   0:01.34 /usr/loca+
  1954 root      20   0   12864    404    280 S   0.0  0.0   0:01.46 /usr/loca+
  1963 root      20   0   53268    196    196 S   0.0  0.0   0:00.05 /usr/loca+
  2286 root      20   0  182624  10664   1212 S   0.0  0.4   0:13.72 lfd - sle+
 10754 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10763 oysipao+  20   0    3152    520     28 S   0.0  0.0   0:00.23 [kworker]
 10808 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 11876 nobody    20   0  277564  20196   4584 S   0.0  0.8   0:01.64 /usr/sbin+
 16284 nobody    20   0  277556  19576   4280 S   0.0  0.8   0:01.38 /usr/sbin+
 16306 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 16689 root      20   0 1341636  10492    600 S   0.0  0.4   0:00.07 /usr/bin/+
 16730 root      20   0 1277312  11556    596 S   0.0  0.5   0:00.07 /usr/bin/+
 17133 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 18620 nobody    20   0  277884  20300   4484 S   0.0  0.8   0:01.49 /usr/sbin+
 19215 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 20687 cloudw    20   0  471856   9432   5044 S   0.0  0.4   0:01.12 php-fpm: +
 22182 nobody    20   0  277884  20172   4460 S   0.0  0.8   0:01.54 /usr/sbin+
 22298 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 22355 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 24232 nobody    20   0  277536  19664   4244 S   0.0  0.8   0:00.72 /usr/sbin+
 25280 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 27049 nobody    20   0  277880  19812   4344 S   0.0  0.8   0:00.96 /usr/sbin+
 27555 nobody    20   0  277556  19336   4188 S   0.0  0.8   0:00.77 /usr/sbin+
 28676 root      20   0       0      0      0 D   0.0  0.0   0:00.02 [kworker/+
 28840 nobody    20   0  277904  19892   4292 S   0.0  0.8   0:00.65 /usr/sbin+
 28850 nobody    20   0  277556  19708   4180 S   0.0  0.8   0:00.50 /usr/sbin+
 29057 nobody    20   0  277572  19876   4364 S   0.0  0.8   0:00.72 /usr/sbin+
 29796 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 31009 cloudw    20   0  471840   9428   5040 S   0.0  0.4   0:00.37 php-fpm: +
 31199 nobody    20   0  277564  19228   4128 S   0.0  0.8   0:00.26 /usr/sbin+
 31260 nobody    20   0  277912  19368   4068 S   0.0  0.8   0:00.41 /usr/sbin+
 31327 nobody    20   0  277536  18976   3892 S   0.0  0.8   0:00.27 /usr/sbin+
 31445 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 33772 cloudw    20   0  471784   9144   4740 S   0.0  0.4   0:00.18 php-fpm: +
 33854 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 33960 nobody    20   0  277536  18568   3620 S   0.0  0.8   0:00.11 /usr/sbin+
 33975 cloudw    20   0  471784   9152   4748 S   0.0  0.4   0:00.18 php-fpm: +
 33980 nobody    20   0  277892  18836   3700 S   0.0  0.8   0:00.11 /usr/sbin+
 33991 nobody    20   0  277520  18720   3752 S   0.0  0.8   0:00.13 /usr/sbin+
 33993 nobody    20   0  277556  18876   3840 S   0.0  0.8   0:00.11 /usr/sbin+
 34091 cloudw    20   0  471784   9152   4748 S   0.0  0.4   0:00.18 php-fpm: +
 34231 nobody    20   0  277532  18896   3844 S   0.0  0.8   0:00.06 /usr/sbin+
 34576 healtho+  20   0  462400  73964   4316 S   0.0  3.1   0:02.73 php-fpm: +
 34643 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 34644 nobody    20   0  277520  18272   3372 S   0.0  0.8   0:00.03 /usr/sbin+
 34662 mailnull  20   0   89496   5676   2452 S   0.0  0.2   0:00.00 /usr/sbin+
 34665 healtho+  20   0  451100  61348   4212 S   0.0  2.5   0:01.03 php-fpm: +
 34667 nobody    20   0  277400  17992   3260 S   0.0  0.7   0:00.00 /usr/sbin+
 34670 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 34671 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpsrvd (+
 34696 nobody    20   0  277384  16768   2116 S   0.0  0.7   0:00.00 /usr/sbin+
 34706 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 34707 root      20   0  183040   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 34708 root      20   0  183040   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 34709 root      20   0  183040   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 34710 root      20   0  183040   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 34711 root      20   0  183040   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 34712 root      20   0  183040   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 34713 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 34715 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 34716 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 34717 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 34718 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 34719 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 34720 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 34721 root      20   0  108052    352    284 S   0.0  0.0   0:00.00 /usr/bin/+
 34722 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 34742 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 34747 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 34749 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 34754 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 34755 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 34756 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 34757 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 34758 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 34759 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 34760 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 34761 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 34762 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 34763 root      20   0   20164    964    768 S   0.0  0.0   0:00.00 jailshell+
 34764 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 34771 saboakin  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 34772 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 34775 robocal+  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 34778 robocal+  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 34779 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 34780 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 34782 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 34783 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 34784 pactpay   20   0  207992   4588   3204 R   0.0  0.2   0:00.00 /opt/cpan+
 34785 robocal+  20   0  131852   3320   2388 R   0.0  0.1   0:00.00 /usr/loca+
 34786 cloudsms  20   0  400652  15404  10000 R   0.0  0.6   0:00.00 /opt/cpan+
 40228 root      20   0  248032 119724   3100 S   0.0  4.9   0:03.85 /usr/loca+
 47195 root      20   0  267344 133772   2944 S   0.0  5.5   0:02.29 spamd chi+
 47196 root      20   0  248032 117188    604 S   0.0  4.8   0:00.00 spamd chi+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:46   0:17  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    09:46   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:46   0:15  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        243  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        245  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        259  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/1:1H]
root        268  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        582  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        679  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [loop0]
root        709  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      10808  0.0  0.0      0     0 ?        S    12:51   0:00  \_ [kworker/u200:2]
root      16306  0.0  0.0      0     0 ?        S    13:00   0:00  \_ [kworker/1:3]
root      17133  0.0  0.0      0     0 ?        S    13:01   0:00  \_ [kworker/0:3]
root      19215  0.0  0.0      0     0 ?        S    13:05   0:00  \_ [kworker/1:0]
root      22298  0.0  0.0      0     0 ?        S    13:10   0:00  \_ [kworker/u200:0]
root      22355  0.0  0.0      0     0 ?        S    13:10   0:00  \_ [kworker/0:1]
root      25280  0.0  0.0      0     0 ?        S    13:16   0:00  \_ [kworker/0:4]
root      28676  0.0  0.0      0     0 ?        D    13:23   0:00  \_ [kworker/1:1]
root      29796  0.0  0.0      0     0 ?        S    13:25   0:00  \_ [kworker/0:0]
root      31445  0.0  0.0      0     0 ?        S    13:28   0:00  \_ [kworker/1:2]
root      33854  0.0  0.0      0     0 ?        S    13:31   0:00  \_ [kworker/0:2]
root      34783  0.0  0.0      0     0 ?        S    13:33   0:00  \_ [kworker/u200:1]
root          1  0.1  0.1  44424  3504 ?        Ss   09:46   0:20 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  39496  5324 ?        Ss   09:46   0:07 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   224 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   504 ?        S<sl 09:46   0:01 /sbin/auditd
root        489  0.0  0.2 224280  5436 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
rpc         491  0.0  0.0  69256   168 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        512  0.0  0.0  58768  1468 ?        Ss   09:46   0:07 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        538  0.0  0.0  21540   408 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        539  0.0  0.0  52852   276 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
root        540  0.0  0.0  24896  1476 ?        Ss   09:46   0:03 /usr/lib/systemd/systemd-logind
root        541  0.0  0.0 152780   220 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        542  0.0  0.0   4388   128 ?        Ss   09:46   0:00 /usr/sbin/acpid
polkitd     544  0.0  0.0 610540   864 ?        Ssl  09:46   0:01 /usr/lib/polkit-1/polkitd --no-debug
nscd        547  0.0  0.0 928956  1480 ?        Ssl  09:46   0:07 /usr/sbin/nscd
root        566  0.0  0.0 195208    44 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        586  0.0  0.0 124472   488 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      34706  0.0  0.0 183040  2144 ?        S    13:33   0:00  \_ /usr/sbin/CROND -n
root      34720  0.0  0.0 113284  1212 ?        Ss   13:33   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      34721  0.0  0.0 108052   352 ?        S    13:33   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      34722  0.0  0.0 113288  1520 ?        S    13:33   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      34787  0.0  0.0 153840  2092 ?        R    13:33   0:00  |               \_ ps auxf
root      34707  0.0  0.0 183040  2148 ?        S    13:33   0:00  \_ /usr/sbin/CROND -n
root      34742  0.0  0.0  20164   808 ?        Ss   13:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      34708  0.0  0.0 183040  2148 ?        S    13:33   0:00  \_ /usr/sbin/CROND -n
root      34759  0.0  0.0  20164   804 ?        Ss   13:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      34709  0.0  0.0 183040  2148 ?        S    13:33   0:00  \_ /usr/sbin/CROND -n
root      34760  0.0  0.0  20164   804 ?        Ss   13:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      34710  0.0  0.0 183040  2144 ?        S    13:33   0:00  \_ /usr/sbin/CROND -n
root      34757  0.0  0.0  20164   968 ?        Ss   13:33   0:00  |   \_ jailshell (cloudsms) [34780] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  34780  0.0  0.0  20164   260 ?        S    13:33   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  34782  0.0  0.0 113284  1212 ?        S    13:33   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  34786  0.0  0.6 400652 15404 ?        S    13:33   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      34711  0.0  0.0 183040  2144 ?        S    13:33   0:00  \_ /usr/sbin/CROND -n
root      34756  0.0  0.0  20164   804 ?        Ss   13:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      34712  0.0  0.0 183036  2204 ?        S    13:33   0:00  \_ /usr/sbin/CROND -n
root      34713  0.0  0.0 183040  2140 ?        S    13:33   0:00  \_ /usr/sbin/CROND -n
root      34755  0.0  0.0  20164   804 ?        Ss   13:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      34715  0.0  0.0 183040  2140 ?        S    13:33   0:00  \_ /usr/sbin/CROND -n
root      34754  0.0  0.0  20164   808 ?        Ss   13:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      34716  0.0  0.0 183040  2140 ?        S    13:33   0:00  \_ /usr/sbin/CROND -n
root      34763  0.0  0.0  20164   964 ?        Ss   13:33   0:00  |   \_ jailshell (pactpay) [34779] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   34779  0.0  0.0  20164   256 ?        S    13:33   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   34784  0.0  0.4 368196  9976 ?        R    13:33   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      34717  0.0  0.0 183040  2140 ?        S    13:33   0:00  \_ /usr/sbin/CROND -n
root      34762  0.0  0.0  20164   968 ?        Ss   13:33   0:00  |   \_ jailshell (robocallscloudsm) [34775]  /home/robocallscloudsm/public_html && /usr/local/bin/php artisan schedule:run >> /dev/null 2>&1
robocal+  34775  0.0  0.0      0     0 ?        D    13:33   0:00  |       \_ [jailshell]
root      34718  0.0  0.0 183040  2140 ?        S    13:33   0:00  \_ /usr/sbin/CROND -n
root      34758  0.0  0.0  20164   968 ?        Ss   13:33   0:00  |   \_ jailshell (nigeria) [34772] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   34772  0.0  0.0  20164   256 ?        S    13:33   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   34777  0.0  0.6 400652 15676 ?        S    13:33   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      34719  0.0  0.0 183040  2140 ?        S    13:33   0:00  \_ /usr/sbin/CROND -n
root      34761  0.0  0.0  20164   972 ?        Ss   13:33   0:00      \_ jailshell (saboakin) [34771] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  34771  0.0  0.0      0     0 ?        D    13:33   0:00          \_ [jailshell]
root        588  0.0  0.0  24208   144 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        605  0.0  0.0 114704   136 ttyS0    Ss+  09:46   0:00 /bin/bash
root        606  0.0  0.0 108296   148 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    616  0.0  0.1  89116  3884 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  34662  0.0  0.2  89496  5676 ?        S    13:32   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    969  0.0  0.0  11796    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        971  0.1  5.8 1763032 141856 ?      Ssl  09:46   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        975  0.0  0.3 257360  7400 ?        Ssl  09:46   0:03 /usr/sbin/rsyslogd -n
named       976  0.0  1.4 1186804 35920 ?       Ssl  09:46   0:07 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        977  0.0  0.1 397344  3136 ?        Ss   09:46   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    20687  0.0  0.3 471856  9432 ?        S    13:08   0:01  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    31009  0.1  0.3 471840  9428 ?        S    13:27   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    33772  0.1  0.3 471784  9144 ?        S    13:30   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    33975  0.1  0.3 471784  9152 ?        S    13:31   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    34091  0.2  0.3 471784  9152 ?        S    13:31   0:00  \_ php-fpm: pool edoocds_cloudware_ng
healtho+  34576 14.3  3.0 462400 73964 ?        S    13:32   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  34587 13.3  2.7 457244 67624 ?        R    13:32   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  34665 17.1  2.5 451100 61348 ?        S    13:32   0:01  \_ php-fpm: pool health_oyostate_gov_ng
systuser    982  0.0  0.5 114016 13172 ?        Ssl  09:46   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        983  0.0  0.0 572372   920 ?        Ssl  09:46   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
memcach+    985  0.0  0.0 342400     4 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    986  0.0  0.1  10460  3668 ?        Ss   09:46   0:11 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        987  0.0  0.0 386112   848 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    988  0.0  0.0  11348    36 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        989  0.0  0.0 385496   888 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        990  0.0  0.0 153404   380 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
systuser    992  0.0  0.0 111608    72 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        995  0.0  0.0 436392  1840 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        998  0.0  0.0 392856   572 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
telegraf   1006  0.0  1.5 5654048 36432 ?       SLsl 09:46   0:07 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1010  0.0  0.0  51508   576 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1129  0.0  0.1  46984  2904 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1130  0.0  0.1  48120  3932 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1131  0.0  0.0  10320   404 ?        S    09:46   0:00  \_ dovecot/anvil
root       1132  0.0  0.0  10452   580 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1133  0.0  0.1  47188  3084 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1134  0.0  0.1  47744  3648 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1142  0.0  0.1  24528  2600 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1144  0.0  0.0  13568   660 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1221  0.0  0.0  41168  1528 ?        S    09:46   0:00  \_ dovecot/auth
root      34670  0.0  0.1  41052  2728 ?        S    13:32   0:00  \_ dovecot/auth -w
root       1012  0.0  1.1 261164 27600 ?        Ss   09:46   0:02 cpsrvd (SSL) - waiting for connections                   
root      34671  0.0  0.0      0     0 ?        Z    13:32   0:00  \_ [cpsrvd (SSL) - ] <defunct>
root       1024  0.0  0.0 445028    64 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser   1025  0.0  0.0 112524  1984 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1031  0.0  0.0 111304   512 ?        Ss   09:46   0:01 /usr/sbin/sshd -D
root      34643  0.0  0.1 111304  4268 ?        Ss   13:32   0:00  \_ sshd: [accepted]
systuser   1204  0.0  0.1 157704  2888 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1217  0.0  1.4 410452 35752 ?        Ss   09:46   0:11 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1218  0.0  0.5 387528 13168 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.8 209536 20644 ?        Ss   09:46   0:01 tailwatchd
root       1266  0.0  0.0 167452  1464 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1268  0.0  0.2 183900  6692 ?        Ss   09:46   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1699  0.0  0.0 299272   944 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1440 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1773  2.4 10.1 1458588 246184 ?      Sl   09:46   5:33 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  0.3 267032  8220 ?        Ss   09:46   0:01 /usr/sbin/httpd -k start
root       1952  0.0  0.0  12832   436 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1953  0.0  0.0  12732   400 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1954  0.0  0.0  12864   404 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1963  0.0  0.0  53268   196 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    11876  0.0  0.8 277564 20196 ?        S    12:52   0:01  \_ /usr/sbin/httpd -k start
nobody    16284  0.0  0.8 277556 19576 ?        S    13:00   0:01  \_ /usr/sbin/httpd -k start
nobody    18620  0.0  0.8 277884 20300 ?        S    13:04   0:01  \_ /usr/sbin/httpd -k start
nobody    22182  0.1  0.8 277884 20172 ?        S    13:09   0:01  \_ /usr/sbin/httpd -k start
nobody    24232  0.0  0.8 277536 19664 ?        S    13:14   0:00  \_ /usr/sbin/httpd -k start
nobody    27049  0.1  0.8 277880 19812 ?        S    13:19   0:00  \_ /usr/sbin/httpd -k start
nobody    27555  0.1  0.7 277556 19336 ?        S    13:20   0:00  \_ /usr/sbin/httpd -k start
nobody    28840  0.1  0.8 277904 19892 ?        S    13:23   0:00  \_ /usr/sbin/httpd -k start
nobody    28850  0.0  0.8 277556 19708 ?        S    13:23   0:00  \_ /usr/sbin/httpd -k start
nobody    29057  0.1  0.8 277572 19876 ?        S    13:24   0:00  \_ /usr/sbin/httpd -k start
nobody    31199  0.0  0.7 277564 19228 ?        S    13:27   0:00  \_ /usr/sbin/httpd -k start
nobody    31260  0.1  0.8 277912 19368 ?        S    13:27   0:00  \_ /usr/sbin/httpd -k start
nobody    31327  0.0  0.7 277536 18976 ?        S    13:28   0:00  \_ /usr/sbin/httpd -k start
nobody    33960  0.1  0.7 277536 18568 ?        S    13:31   0:00  \_ /usr/sbin/httpd -k start
nobody    33980  0.1  0.7 277892 18836 ?        S    13:31   0:00  \_ /usr/sbin/httpd -k start
nobody    33991  0.1  0.7 277520 18720 ?        S    13:31   0:00  \_ /usr/sbin/httpd -k start
nobody    33993  0.1  0.7 277556 18876 ?        S    13:31   0:00  \_ /usr/sbin/httpd -k start
nobody    34231  0.0  0.7 277532 18896 ?        S    13:32   0:00  \_ /usr/sbin/httpd -k start
nobody    34644  0.3  0.7 277520 18272 ?        S    13:32   0:00  \_ /usr/sbin/httpd -k start
cloudw    34753  0.0  0.6 352096 15236 ?        S    13:33   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    34667  0.0  0.7 277400 18100 ?        S    13:32   0:00  \_ /usr/sbin/httpd -k start
nobody    34696  0.0  0.6 277384 16768 ?        S    13:33   0:00  \_ /usr/sbin/httpd -k start
root       2286  0.1  0.4 182624 10664 ?        Ss   09:46   0:13 lfd - sleeping
oysipao+  10754  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+  10763  0.0  0.0   3152   520 ?        S    10:01   0:00  \_ [kworker]
root      40228  0.0  4.9 248032 119724 ?       Ss   10:50   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      47195  0.0  5.5 267344 133772 ?       S    11:00   0:02  \_ spamd child
root      47196  0.0  4.8 248032 117188 ?       S    11:00   0:00  \_ spamd child
root      16689  0.0  0.4 1341636 10492 ?       Ssl  13:00   0:00 /usr/bin/cspdaemon
root      16730  0.0  0.4 1277312 11556 ?       Ssl  13:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 35287  Threads: 6  Questions: 2454358  Slow queries: 0  Opens: 4813  Flush tables: 1  Open tables: 2000  Queries per second avg: 69.554
*************************** 1. row ***************************
     Id: 36299
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 36304
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 36306
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 36308
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.37.31.41 TIME_WAIT
      1 114.119.140.113 TIME_WAIT
      1 15.235.27.32 TIME_WAIT
      1 170.23.31.92 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 199.120.14.40 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.222.168.23 TIME_WAIT
      1 85.254.180.83 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      9 104.248.90.230 TIME_WAIT
     37 103.253.27.139 TIME_WAIT
     37 103.253.27.28 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 13:33:01 WAT
   Restart Time: Saturday, 08-Nov-2025 03:45:00 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 9 hours 48 minutes
   Server load: 0.91 0.89 0.91
   Total accesses: 71326 - Total Traffic: 1.1 GB - Total Duration: 94930956
   CPU Usage: u8.9 s3.95 cu621.7 cs426.28 - 3.01% CPU load
   2.02 requests/sec - 31.3 kB/second - 15.5 kB/request - 1330.94 ms/request
   16 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

KWKWKWKWR_WCK_.K_W_._RW.........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client      Protocol           VHost                                        Request
   0-0  34644 5/7/3526   K 0.12 0    309 5414703 155.5 0.18  56.08 66.249.70.197   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1296358350 HTTP/1.1
   1-0  11876 0/393/3550 W 6.58 169  0   4968602 0.0   6.69  60.92 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630383631322p2231223
   2-0  28840 1/182/3470 K 2.47 0    302 5076576 31.4  2.17  55.48 66.249.70.194   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1627207280 HTTP/1.1
   3-0  24232 0/156/3241 W 2.92 83   0   6951808 0.0   2.86  55.17 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630383639382p2231223
   4-0  34231 1/21/3343  K 0.09 2    286 4538173 31.5  0.21  56.12 66.249.70.193   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1734944102 HTTP/1.1
   5-0  33960 0/28/3367  W 0.31 0    0   4623661 0.0   0.41  44.90 103.253.27.28   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   6-0  33980 1/28/3779  K 0.64 3    271 2686989 30.0  0.67  51.46 66.249.70.192   http/1.1 schoolplus.cloudware.ng:80 GET /?p=475589178 HTTP/1.1
   7-0  18620 0/476/3359 W 5.38 63   0   4617240 0.0   5.33  43.08 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630383731382p2231223
   8-0  34667 0/1/3428   R 0.00 0    345 3665072 0.0   0.03  45.93 167.172.86.76   http/1.1 health.oyostate.gov.ng:443
   9-0  16284 0/318/3288 _ 5.43 0    30  6165805 0.0   6.04  49.65 128.140.8.200   http/1.1 cloudsms.com.ng:443        GET /cron/process_queue3.php HTTP/1.1
   10-0 22182 0/425/3055 W 5.54 0    0   3519284 0.0   5.95  47.39 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   11-0 28850 1/118/3039 C 2.00 5    400 3960873 106.5 1.98  47.69 167.172.86.76   http/1.1 health.oyostate.gov.ng:443 GET /wp-content/plugins/fix/up.php HTTP/1.1
   12-0 34696 1/1/3010   K 0.00 0    363 2881865 31.3  0.03  44.95 66.249.70.199   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2565632874 HTTP/1.1
   13-0 29057 0/170/2662 _ 2.84 0    0   2403372 0.0   9.60  49.75 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   14-0 -     0/0/2856   . 0.00 96   0   3120476 0.0   0.00  48.16 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 27555 4/175/2414 K 2.86 4    293 1768715 123.0 2.91  34.54 66.249.70.200   http/1.1 schoolplus.cloudware.ng:80 GET /?p=467627414 HTTP/1.1
   16-0 27049 0/355/2689 _ 3.27 0    347 3918088 0.0   3.02  42.45 103.253.27.139  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   17-0 31199 0/71/1789  W 1.05 103  0   3165183 0.0   0.81  22.00 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630383637382p2231223
   18-0 33991 0/29/2355  _ 0.44 0    23  4270481 0.0   0.52  31.03 116.203.129.16  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue2.php HTTP/1.1
   19-0 -     0/0/2236   . 0.00 95   0   2585596 0.0   0.00  32.67 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 33993 0/29/1372  _ 0.36 0    344 734450  0.0   0.47  22.57 66.249.70.198   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2260276457 HTTP/1.1
   21-0 31260 0/108/1031 R 1.75 0    35  1526637 0.0   1.36  17.73 103.253.27.139  http/1.1 health.oyostate.gov.ng:443
   22-0 31327 0/60/2105  W 1.10 123  0   1397800 0.0   1.04  29.02 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630383635382p2231223
   23-0 -     0/0/1214   . 0.00 89   0   2003566 0.0   0.00  16.81 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/400    . 0.00 1229 0   1279984 0.0   0.00  7.92  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/1442   . 0.00 1183 0   2034228 0.0   0.00  18.97 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/585    . 0.00 135  0   1651926 0.0   0.00  6.84  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/756    . 0.00 1228 0   2036721 0.0   0.00  10.73 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/367    . 0.00 1185 0   682793  0.0   0.00  5.75  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/343    . 0.00 1233 0   169670  0.0   0.00  8.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/79     . 0.00 1193 0   36081   0.0   0.00  0.96  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/188    . 0.00 664  0   100235  0.0   0.00  3.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/34     . 0.00 1187 0   12694   0.0   0.00  0.49  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/48     . 0.00 1182 0   38351   0.0   0.00  0.88  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/17     . 0.00 4058 0   4967    0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/28     . 0.00 4060 0   14042   0.0   0.00  0.43  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/78     . 0.00 9141 0   121446  0.0   0.00  0.71  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/4      . 0.00 9402 0   2767    0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/193    . 0.00 8943 0   241489  0.0   0.00  1.67  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/3      . 0.00 9411 0   50      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/5      . 0.00 9401 0   2478    0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/21     . 0.00 9348 0   11757   0.0   0.00  0.53  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/8      . 0.00 9391 0   3645    0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/3      . 0.00 9408 0   709     0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/3      . 0.00 9413 0   703     0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/2      . 0.00 9419 0   2       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/9      . 0.00 9379 0   2869    0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/172    . 0.00 8966 0   242408  0.0   0.00  3.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/8      . 0.00 9390 0   2838    0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/10     . 0.00 9393 0   5104    0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/160    . 0.00 9051 0   174079  0.0   0.00  1.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/7      . 0.00 9394 0   2028    0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/175    . 0.00 9183 0   89852   0.0   0.00  1.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 449
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 17 seconds, (range: 1...87)
   index usage: 7%, cache usage: 10%
   total entries stored since starting: 18013
   total entries replaced since starting: 0
   total entries expired since starting: 17544
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 80 miss
   total removes since starting: 20 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit