403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.00.30.txt
 ## swap threshold exceeded
## server overview
2025-11-13.00.30 load[0] mem[61/63] mysql[5/8] httpd[15]
              total        used        free      shared  buff/cache   available
Mem:           2363        1387         121          67         854         741
Swap:          1999        1354         645
 00:30:02 up  4:27,  0 users,  load average: 0.33, 0.32, 0.30
## system overview
top - 00:30:02 up  4:27,  0 users,  load average: 0.33, 0.32, 0.30
Tasks: 202 total,   7 running, 194 sleeping,   0 stopped,   1 zombie
%Cpu(s): 54.3 us, 37.1 sy,  0.0 ni,  0.0 id,  5.7 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,    97008 free,  1416744 used,   906548 buff/cache
KiB Swap:  2047996 total,   661244 free,  1386752 used.   755768 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 252192   3904 S  82.4 10.4   3:48.80 /usr/sbin+
100072 root      20   0  188860  12952   5540 R  41.2  0.5   0:00.11 /usr/loca+
100078 nigeria   20   0  400652  15940  10220 S  17.6  0.7   0:00.07 /opt/cpan+
     1 root      20   0   44428   3556   1620 S   5.9  0.1   0:22.97 /usr/lib/+
   497 root      20   0   24896   1528    896 S   5.9  0.1   0:03.65 /usr/lib/+
 98761 nobody    20   0  277788  18780   3400 S   5.9  0.8   0:00.19 /usr/sbin+
100148 cloudw    20   0  352096  15232  10128 S   5.9  0.6   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.03 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.73 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:16.01 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.69 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.88 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:13.42 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.34 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:01.45 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:01.43 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.73 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39500   2916   2676 S   0.0  0.1   0:09.13 /usr/lib/+
   382 root      20   0   45360    512    368 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    556    428 S   0.0  0.0   0:01.42 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   500 root      20   0   21540    492    380 S   0.0  0.0   0:00.35 /usr/sbin+
   501 polkitd   20   0  612240   3220    744 S   0.0  0.1   0:02.16 /usr/lib/+
   503 root      20   0  152780    288    244 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   5796   1056 S   0.0  0.2   0:00.23 queueproc+
   507 root      20   0   52852    512    408 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58728   1436    712 S   0.0  0.1   0:08.23 /usr/bin/+
   519 nscd      20   0 1062080   1636    840 S   0.0  0.1   0:12.68 /usr/sbin+
   521 rpc       20   0   69256    160     56 S   0.0  0.0   0:00.01 /sbin/rpc+
   529 root      20   0    4388    156    152 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208    112    112 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    556    424 S   0.0  0.0   0:00.45 /usr/sbin+
   577 root      20   0   24208    196    172 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704    216    216 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296    216    212 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   4064   1036 S   0.0  0.2   0:00.60 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.17 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068     52      0 S   0.0  0.0   0:00.00 /usr/loca+
   929 systuser  20   0  114016  14408   2836 S   0.0  0.6   0:03.92 /usr/loca+
   930 root      20   0  153404    440    356 S   0.0  0.0   0:00.34 pure-ftpd+
   931 root      20   0   51508    632    472 S   0.0  0.0   0:00.23 /usr/sbin+
   932 root      20   0  572372   1024    436 S   0.0  0.0   0:01.44 /usr/bin/+
   933 telegraf  20   0 5654048  37124   6208 S   0.0  1.5   0:08.95 /usr/loca+
   935 memcach+  20   0  342400     76     76 S   0.0  0.0   0:00.35 /usr/bin/+
   939 root      20   0  111304    560    460 S   0.0  0.0   0:01.99 /usr/sbin+
   940 systuser  20   0   10132     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   941 systuser  20   0  112268     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028   2744   2744 S   0.0  0.1   0:00.05 sw-engine+
   950 root      20   0  386112    780    572 S   0.0  0.0   0:00.48 php-fpm: +
   961 named     20   0  637992  34452   2012 S   0.0  1.4   0:08.80 /usr/sbin+
   964 root      20   0  265552   3476   2544 S   0.0  0.1   0:04.26 /usr/sbin+
   981 root      20   0  436392  11280  11192 S   0.0  0.5   0:00.54 php-fpm: +
   984 root      20   0  385496    856    644 S   0.0  0.0   0:00.46 php-fpm: +
   985 root      20   0  261288   6988   1860 S   0.0  0.3   0:02.52 cpsrvd (S+
   989 root      20   0  392856    856    668 S   0.0  0.0   0:00.45 php-fpm: +
   992 root      20   0 1763048 261492    676 S   0.0 10.8   0:15.42 /usr/loca+
  1000 root      20   0  397344   2924    756 S   0.0  0.1   0:02.14 php-fpm: +
  1006 cpanelc+  20   0   10604   3660   2380 S   0.0  0.2   0:12.95 /usr/loca+
  1075 dovenull  20   0   46984   2748   1968 S   0.0  0.1   0:00.35 dovecot/p+
  1076 dovenull  20   0   48324   3764   1952 S   0.0  0.2   0:00.28 dovecot/i+
  1077 dovecot   20   0   10320    508    388 S   0.0  0.0   0:00.09 dovecot/a+
  1078 root      20   0   10452    540    356 S   0.0  0.0   0:00.19 dovecot/l+
  1079 dovenull  20   0   46984   2744   1932 S   0.0  0.1   0:00.24 dovecot/p+
  1080 dovenull  20   0   47824   3388   2072 S   0.0  0.1   0:00.19 dovecot/i+
  1084 root      20   0   24528   2532    588 S   0.0  0.1   0:00.11 dovecot/c+
  1088 dovecot   20   0   13568    596    392 S   0.0  0.0   0:00.03 dovecot/s+
  1121 systuser  20   0  157704   2968    960 S   0.0  0.1   0:00.07 SonarPush+
  1166 dovecot   20   0   41260   1656   1084 S   0.0  0.1   0:00.61 dovecot/a+
  1172 root      20   0  248152 118260   1848 S   0.0  4.9   0:04.75 /usr/loca+
  1173 wp-tool+  20   0  387556   3860   1772 S   0.0  0.2   0:00.20 /usr/bin/+
  1174 wp-tool+  20   0  410616  28756   1776 S   0.0  1.2   0:13.30 /usr/bin/+
  1232 root      20   0  209372  12348   2596 S   0.0  0.5   0:02.09 tailwatchd
  1234 root      20   0  167452   1476    876 S   0.0  0.1   0:00.26 dnsadmin +
  1237 root      20   0  183900   6692   3460 S   0.0  0.3   0:00.83 cpdavd - +
  1642 root      20   0  299272    952    580 S   0.0  0.0   0:00.42 php-fpm: +
  1702 root      38  18  130416   1540    808 S   0.0  0.1   0:00.03 cpanellog+
  2059 root      20   0  267036   8576    824 S   0.0  0.4   0:01.24 /usr/sbin+
  2063 root      20   0   12868    576    376 S   0.0  0.0   0:01.84 /usr/loca+
  2064 root      20   0   12732    444    364 S   0.0  0.0   0:01.56 /usr/loca+
  2065 root      20   0   12900    548    368 S   0.0  0.0   0:01.72 /usr/loca+
  2089 root      20   0   53268    264    264 S   0.0  0.0   0:00.05 /usr/loca+
  7883 root      20   0  306476 169876   2908 S   0.0  7.0   0:02.23 spamd chi+
  7886 root      20   0  248152 116856    480 S   0.0  4.8   0:00.00 spamd chi+
 36095 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 47111 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152    428      0 S   0.0  0.0   0:00.22 [kworker]
 50315 root      20   0       0      0      0 S   0.0  0.0   0:00.30 [kworker/+
 71989 worencom  20   0   38492   2860   1892 S   0.0  0.1   0:00.00 dovecot/i+
 76167 root      20   0  181164  29328   2384 S   0.0  1.2   0:01.81 lfd - sle+
 76469 root      20   0 1276100  10744    596 S   0.0  0.4   0:00.06 /usr/bin/+
 76506 root      20   0 1277312  11628    596 S   0.0  0.5   0:00.07 /usr/bin/+
 77696 nobody    20   0  277728  20824   4476 S   0.0  0.9   0:02.77 /usr/sbin+
 78808 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 81430 nobody    20   0  277720  20860   4432 S   0.0  0.9   0:02.26 /usr/sbin+
 82617 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 84803 nobody    20   0  277712  20768   4400 S   0.0  0.9   0:01.91 /usr/sbin+
 84983 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 87885 nobody    20   0  277724  20876   4480 S   0.0  0.9   0:01.33 /usr/sbin+
 89673 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 90850 nobody    20   0  277720  20456   4348 S   0.0  0.8   0:01.13 /usr/sbin+
 92086 nobody    20   0  277648  19928   4124 S   0.0  0.8   0:00.95 /usr/sbin+
 92263 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 93457 nobody    20   0  277620  19524   4140 S   0.0  0.8   0:00.74 /usr/sbin+
 94075 nobody    20   0  277636  19800   4284 S   0.0  0.8   0:00.64 /usr/sbin+
 94118 nobody    20   0  277720  19640   4156 S   0.0  0.8   0:00.84 /usr/sbin+
 94590 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 94656 nobody    20   0  277784  19488   4020 S   0.0  0.8   0:00.71 /usr/sbin+
 96275 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 96276 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 97217 nobody    20   0  277784  19312   3820 S   0.0  0.8   0:00.29 /usr/sbin+
 97235 nobody    20   0  277740  19256   3740 S   0.0  0.8   0:00.29 /usr/sbin+
 97236 nobody    20   0  277676  19896   3844 S   0.0  0.8   0:00.32 /usr/sbin+
 97247 nobody    20   0  277924  19212   3716 S   0.0  0.8   0:00.39 /usr/sbin+
 98255 nobody    20   0  277924  19404   3656 S   0.0  0.8   0:00.19 /usr/sbin+
 99406 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 99638 nobody    20   0  277676  19092   3392 S   0.0  0.8   0:00.01 /usr/sbin+
 99652 nobody    20   0  277604  18684   3420 S   0.0  0.8   0:00.02 /usr/sbin+
 99653 nobody    20   0  277924  19012   3664 S   0.0  0.8   0:00.08 /usr/sbin+
 99734 root      20   0  111304   4444   3404 S   0.0  0.2   0:00.00 sshd: [ac+
 99735 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 99984 healtho+  20   0  439588  49804   4108 S   0.0  2.1   0:00.41 php-fpm: +
 99987 nigeria   20   0  397064   5364   2356 S   0.0  0.2   0:00.00 php-fpm: +
 99988 salutem   20   0  406024  21580   4428 S   0.0  0.9   0:00.14 php-fpm: +
 99991 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
100002 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
100004 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
100005 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
100006 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
100007 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
100008 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
100009 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
100010 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
100011 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
100012 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
100013 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100014 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
100016 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
100017 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
100020 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100027 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 /usr/loca+
100028 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
100029 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
100032 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
100033 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
100035 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
100037 root      20   0   20164    808    632 R   0.0  0.0   0:00.00 /usr/loca+
100038 root      20   0  113284   1348   1164 S   0.0  0.1   0:00.00 /bin/sh -+
100039 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
100040 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
100041 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
100042 root      20   0   20164    808    632 R   0.0  0.0   0:00.00 /usr/loca+
100043 root      20   0   20164    804    632 R   0.0  0.0   0:00.00 /usr/loca+
100045 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
100048 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
100054 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
100055 root      20   0  188200  11088   5148 S   0.0  0.5   0:00.01 /usr/loca+
100064 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
100075 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
100101 root      20   0  160224   2348   1632 S   0.0  0.1   0:00.00 top -n 2 +
100145 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
100159 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
100166 root      20   0   37752   1440    876 R   0.0  0.1   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        R    Nov12   0:16  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov12   0:13  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:01  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:01  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      36095  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kworker/u200:2]
root      50315  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kworker/u200:1]
root      78808  0.0  0.0      0     0 ?        S    00:03   0:00  \_ [kworker/0:3]
root      82617  0.0  0.0      0     0 ?        S    00:08   0:00  \_ [kworker/1:3]
root      84983  0.0  0.0      0     0 ?        S    00:11   0:00  \_ [kworker/0:1]
root      89673  0.0  0.0      0     0 ?        S    00:17   0:00  \_ [kworker/0:4]
root      92263  0.0  0.0      0     0 ?        S    00:20   0:00  \_ [kworker/1:1]
root      94590  0.0  0.0      0     0 ?        S    00:23   0:00  \_ [kworker/0:2]
root      96275  0.0  0.0      0     0 ?        S    00:25   0:00  \_ [kworker/1:2]
root      96276  0.0  0.0      0     0 ?        S    00:25   0:00  \_ [kworker/u200:0]
root     100159  0.0  0.0      0     0 ?        S    00:30   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44428  3556 ?        Ss   Nov12   0:22 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  39500  2916 ?        Ss   Nov12   0:09 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360   512 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   556 ?        S<sl Nov12   0:01 /sbin/auditd
root        497  0.0  0.0  24896  1528 ?        Ss   Nov12   0:03 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   492 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.1 612240  3220 ?        Ssl  Nov12   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780   288 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.2 224148  5796 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   512 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58728  1436 ?        Ss   Nov12   0:08 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1636 ?        Ssl  Nov12   0:12 /usr/sbin/nscd
rpc         521  0.0  0.0  69256   160 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388   156 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208   112 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   556 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root     100002  0.0  0.0 183048  2136 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root     100039  0.0  0.0 113284  1212 ?        Ss   00:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root     100054  0.0  0.0 108052   356 ?        S    00:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root     100064  0.0  0.0 113288  1516 ?        S    00:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root     100167  0.0  0.0 153840  2092 ?        R    00:30   0:00  |               \_ ps auxf
root     100004  0.0  0.0 183048  2144 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root     100040  0.0  0.0  20164   808 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root     100005  0.0  0.0 183048  2144 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root     100029  0.0  0.0  20164   804 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root     100006  0.0  0.0 183048  2144 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root     100048  0.0  0.0  20164   808 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root     100007  0.0  0.0 183048  2144 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root     100042  0.0  0.0  20164   808 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root     100008  0.0  0.0 183048  2144 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root     100037  0.0  0.0  20164   808 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root     100009  0.0  0.0 183048  2144 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root     100033  0.0  0.0  20164   804 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root     100010  0.0  0.0 183048  2144 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root     100032  0.0  0.0  20164   804 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root     100011  0.0  0.0 183048  2144 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root     100027  0.0  0.0  20164   988 ?        Ss   00:30   0:00  |   \_ jailshell (cloudsms) [100168] l -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms 100168  0.0  0.0  20164   264 ?        S    00:30   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root     100012  0.0  0.0 183048  2144 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root     100043  0.0  0.0  20164   804 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root     100013  0.0  0.0 183048  2140 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root     100028  0.0  0.0  20164   804 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root     100014  0.0  0.0 183048  2144 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root     100035  0.0  0.0  20164   804 ?        Ss   00:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root     100016  0.0  0.0 183048  2136 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root     100038  0.0  0.0 113284  1348 ?        Ss   00:30   0:00  |   \_ /bin/sh -c /usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache
root     100072 14.0  0.5 188860 12952 ?        R    00:30   0:00  |       \_ /usr/local/cpanel/bin/update_db_cache
root     100017  0.0  0.0 183048  2136 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root     100041  0.0  0.0 113284  1208 ?        Ss   00:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root     100055  1.0  0.4 188200 11088 ?        S    00:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root     100101  0.0  0.0 160224  2348 ?        S    00:30   0:00  |           \_ top -n 2 -b -c
root     100020  0.0  0.0 183048  2140 ?        S    00:30   0:00  \_ /usr/sbin/CROND -n
root     100045  0.0  0.0  20164   968 ?        Ss   00:30   0:00      \_ jailshell (nigeria) [100075] ll -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria  100075  0.0  0.0  20164   260 ?        S    00:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria  100078  7.0  0.6 400652 15940 ?        R    00:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208   196 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704   216 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296   216 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  4064 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    76 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068    52 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 14408 ?        Ssl  Nov12   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   440 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   632 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.1  46984  2748 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48324  3764 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   508 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   540 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.1  46984  2744 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  47824  3388 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.1  24528  2532 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   596 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1656 ?        S    Nov12   0:00  \_ dovecot/auth
worencom  71989  0.0  0.1  38492  2860 ?        S    Nov12   0:00  \_ dovecot/imap
root      99406  0.0  0.1  60820  4512 ?        S    00:29   0:00  \_ dovecot/lmtp
root        932  0.0  0.0 572372  1024 ?        Ssl  Nov12   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.5 5654048 37124 ?       SLsl Nov12   0:08 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400    76 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   560 ?        Ss   Nov12   0:01 /usr/sbin/sshd -D
root      99734  0.0  0.1 111304  4444 ?        Ss   00:29   0:00  \_ sshd: [accepted]
sshd      99735  0.0  0.1 115644  2632 ?        S    00:29   0:00      \_ sshd: [net]
systuser    940  0.0  0.0  10132    48 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268    72 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.1 445028  2744 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   780 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.4 637992 34452 ?        Ssl  Nov12   0:08 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.1 265552  3476 ?        Ssl  Nov12   0:04 /usr/sbin/rsyslogd -n
root        981  0.0  0.4 436392 11280 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   856 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.2 261288  6988 ?        Ss   Nov12   0:02 cpsrvd (SSL) - waiting for connections                   
root      99991  0.0  0.0      0     0 ?        Z    00:30   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   856 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
salutem   99988  7.0  0.8 406024 21580 ?        S    00:29   0:00  \_ php-fpm: pool salutem_com_ng
root        992  0.0 10.8 1763048 261492 ?      Ssl  Nov12   0:15 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.1 397344  2924 ?        Ss   Nov12   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  99984 20.5  2.0 439588 49804 ?        S    00:29   0:00  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   99987  0.0  0.2 397064  5364 ?        S    00:29   0:00  \_ php-fpm: pool nigeriadecide_org
cpanelc+   1006  0.0  0.1  10604  3660 ?        Ss   Nov12   0:12 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2968 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  4.8 248152 118260 ?       Ss   Nov12   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  7.0 306476 169876 ?       S    Nov12   0:02  \_ spamd child
root       7886  0.0  4.8 248152 116856 ?       S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3860 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  1.1 410616 28756 ?        Ss   Nov12   0:13 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.5 209372 12348 ?        Ss   Nov12   0:02 tailwatchd
root       1234  0.0  0.0 167452  1476 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  0.2 183900  6692 ?        Ss   Nov12   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1642  0.0  0.0 299272   952 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1540 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.4 10.4 1457796 252192 ?      Sl   Nov12   3:48 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.3 267036  8576 ?        Ss   Nov12   0:01 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12868   576 ?        S    Nov12   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   444 ?        S    Nov12   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12900   548 ?        S    Nov12   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268   264 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    77696  0.1  0.8 277728 20824 ?        S    00:01   0:02  \_ /usr/sbin/httpd -k start
nobody    81430  0.1  0.8 277720 20860 ?        S    00:06   0:02  \_ /usr/sbin/httpd -k start
nobody    84803  0.1  0.8 277712 20768 ?        S    00:10   0:01  \_ /usr/sbin/httpd -k start
nobody    87885  0.1  0.8 277724 20876 ?        S    00:14   0:01  \_ /usr/sbin/httpd -k start
nobody    90850  0.1  0.8 277720 20456 ?        S    00:18   0:01  \_ /usr/sbin/httpd -k start
nobody    92086  0.1  0.8 277648 19928 ?        S    00:19   0:00  \_ /usr/sbin/httpd -k start
nobody    93457  0.1  0.8 277620 19524 ?        S    00:21   0:00  \_ /usr/sbin/httpd -k start
nobody    94075  0.1  0.8 277636 19800 ?        S    00:22   0:00  \_ /usr/sbin/httpd -k start
nobody    94118  0.1  0.8 277720 19640 ?        S    00:22   0:00  \_ /usr/sbin/httpd -k start
nobody    94656  0.1  0.8 277784 19488 ?        S    00:23   0:00  \_ /usr/sbin/httpd -k start
nobody    97217  0.1  0.7 277784 19312 ?        S    00:26   0:00  \_ /usr/sbin/httpd -k start
nobody    97235  0.1  0.7 277740 19256 ?        S    00:26   0:00  \_ /usr/sbin/httpd -k start
nobody    97236  0.1  0.8 277676 19896 ?        S    00:26   0:00  \_ /usr/sbin/httpd -k start
nobody    97247  0.1  0.7 277924 19212 ?        S    00:26   0:00  \_ /usr/sbin/httpd -k start
nobody    98255  0.1  0.8 277924 19404 ?        S    00:27   0:00  \_ /usr/sbin/httpd -k start
nobody    98761  0.1  0.7 277788 18780 ?        S    00:28   0:00  \_ /usr/sbin/httpd -k start
cloudw   100148  0.0  0.6 352096 15232 ?        S    00:30   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    99638  0.0  0.7 277676 19092 ?        S    00:29   0:00  \_ /usr/sbin/httpd -k start
nobody    99652  0.0  0.7 277604 18684 ?        S    00:29   0:00  \_ /usr/sbin/httpd -k start
nobody    99653  0.2  0.7 277924 19012 ?        S    00:29   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47111  0.0  0.0   3148   416 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152   428 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.1  1.2 181164 29328 ?        Ss   00:00   0:01 lfd - sleeping
root      76469  0.0  0.4 1276100 10744 ?       Ssl  00:00   0:00 /usr/bin/cspdaemon
root      76506  0.0  0.4 1277312 11628 ?       Ssl  00:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 16023  Threads: 2  Questions: 1353000  Slow queries: 0  Opens: 5376  Flush tables: 1  Open tables: 2000  Queries per second avg: 84.441
*************************** 1. row ***************************
     Id: 19096
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 19105
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 103.189.201.9 TIME_WAIT
      1 113.162.120.81 TIME_WAIT
      1 114.119.128.35 TIME_WAIT
      1 114.119.155.44 TIME_WAIT
      1 142.44.220.66 TIME_WAIT
      1 148.113.128.84 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 177.130.231.240 TIME_WAIT
      1 ::1 TIME_WAIT
      1 23.26.232.68 TIME_WAIT
      1 45.188.18.169 TIME_WAIT
      1 54.39.203.200 TIME_WAIT
      1 54.39.210.204 TIME_WAIT
      1 54.39.6.163 TIME_WAIT
      1 66.249.70.195 TIME_WAIT
      1 66.249.70.197 TIME_WAIT
      1 74.7.227.52 TIME_WAIT
      1 92.71.124.85 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 00:30:02 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 4 hours 26 minutes 58 seconds
   Server load: 0.33 0.32 0.30
   Total accesses: 81788 - Total Traffic: 2.2 GB - Total Duration: 40214933
   CPU Usage: u10.97 s5.32 cu1038.15 cs819.18 - 11.7% CPU load
   5.11 requests/sec - 143.7 kB/second - 28.1 kB/request - 491.697 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

KK_KKKWKKRW.KK___K_...K.........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req   Dur   Conn  Child  Slot      Client      Protocol           VHost                                        Request
   0-0  84803 1/333/4139  K 8.48  2     262 2017402 30.5  9.19  104.38 66.249.70.199   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3909009883 HTTP/1.1
   1-0  90850 12/205/4095 K 5.12  2     269 1887992 369.9 5.44  101.44 66.249.70.195   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2573064059 HTTP/1.1
   2-0  87885 0/244/4033  _ 5.94  0     17  2073328 0.0   6.72  120.23 52.5.242.243    http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/assets/js/blog/blog/polling
   3-0  94656 5/123/4052  K 3.21  0     350 2136399 152.0 3.31  121.78 66.249.70.198   http/1.1 schoolplus.cloudware.ng:80 GET /?p=264476874 HTTP/1.1
   4-0  81430 9/404/3884  K 10.26 0     349 1835494 279.5 11.52 99.32  66.249.70.192   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2217425242 HTTP/1.1
   5-0  97217 2/52/4096   K 1.31  0     349 2062513 60.2  1.38  132.83 66.249.70.199   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3008175003 HTTP/1.1
   6-0  97235 0/56/3796   W 1.46  0     0   1883366 0.0   1.68  101.50 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   7-0  94075 4/119/4570  K 2.64  3     269 2071260 124.5 3.26  121.53 66.249.70.196   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3695693544 HTTP/1.1
   8-0  99638 1/5/3411    K 0.02  2     424 1713029 22.3  0.28  88.66  45.145.105.110  http/1.1 health.oyostate.gov.ng:443 GET /portfolio/oyo-college-of-nursing-holds-27th-convocation-ce
   9-0  98255 0/33/3600   R 0.84  4     268 1792621 0.0   0.90  96.93  5.35.69.6       http/1.1
   10-0 98761 5/32/3843   W 0.81  0     0   1847550 151.6 0.88  108.44 66.249.70.193   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3355587566 HTTP/1.1
   11-0 -     0/0/4028    . 0.00  19    0   2015477 0.0   0.00  133.88 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-0 99652 1/6/3577    K 0.08  0     9   1681922 9.9   0.28  89.34  186.211.101.70  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?lga=Ikwo&state=Ebonyi&ward=Igbud
   13-0 77696 1/533/2761  K 11.87 3     261 1214205 29.4  12.84 63.82  66.249.70.200   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1031638613 HTTP/1.1
   14-0 99653 0/15/2957   _ 0.33  0     0   1489420 0.0   0.36  93.48  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   15-0 92086 0/168/2529  _ 4.02  0     9   1228958 0.0   4.81  64.71  14.171.89.242   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?lga=Demsa&state=Adamawa&ward=Dem
   16-0 94118 0/144/3556  _ 3.74  0     317 1761162 0.0   4.30  98.11  66.249.70.194   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3861859875 HTTP/1.1
   17-0 97236 2/60/4016   K 1.36  1     69  2036498 9.8   2.28  114.66 5.35.69.6       http/1.1 salutem.com.ng:443         GET /patient HTTP/1.1
   18-0 93457 0/134/1636  _ 3.09  0     0   895970  0.0   3.49  45.76  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   19-0 -     0/0/2222    . 0.00  216   0   1158058 0.0   0.00  60.52  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/1322    . 0.00  215   0   686468  0.0   0.00  34.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/1411    . 0.00  56    0   748959  0.0   0.00  41.21  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 97247 1/68/1401   K 1.66  0     132 759609  0.5   1.78  47.50  217.113.194.248 http/1.1 team.cloudware.ng:80       GET /var/cache/prod/pools/VV6jqwmg-R/8/3/?C=D;O=A HTTP/1.1
   23-0 -     0/0/766     . 0.00  1132  0   355186  0.0   0.00  15.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/1688    . 0.00  1672  0   614484  0.0   0.00  34.88  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/878     . 0.00  498   0   459035  0.0   0.00  24.72  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/322     . 0.00  5830  0   179048  0.0   0.00  8.56   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/132     . 0.00  5831  0   70160   0.0   0.00  3.98   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/1155    . 0.00  3080  0   475534  0.0   0.00  25.42  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/108     . 0.00  5667  0   56057   0.0   0.00  2.71   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/389     . 0.00  5585  0   179917  0.0   0.00  7.99   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/48      . 0.00  5840  0   31177   0.0   0.00  1.34   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/4       . 0.00  15467 0   2148    0.0   0.00  0.09   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/24      . 0.00  15397 0   12272   0.0   0.00  0.58   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/71      . 0.00  15192 0   43033   0.0   0.00  1.97   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/2       . 0.00  15473 305 1157    0.0   0.00  0.06   66.249.70.100   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3584359384 HTTP/1.1
   36-0 -     0/0/19      . 0.00  15403 0   12232   0.0   0.00  0.55   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/69      . 0.00  15194 0   41923   0.0   0.00  1.99   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/2       . 0.00  15476 0   993     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/3       . 0.00  15468 0   910     0.0   0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/1107    . 0.00  11501 0   644340  0.0   0.00  31.91  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/3       . 0.00  15475 0   924     0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/4       . 0.00  15461 0   1967    0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/41      . 0.00  15345 0   25843   0.0   0.00  1.19   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/18      . 0.00  15402 0   8912    0.0   0.00  0.42   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 484
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 13 seconds, (range: 2...33)
   index usage: 8%, cache usage: 11%
   total entries stored since starting: 23353
   total entries replaced since starting: 0
   total entries expired since starting: 22860
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 5 hit, 137 miss
   total removes since starting: 9 hit, 8 miss
Youez - 2016 - github.com/yon3zu
LinuXploit