403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-15.23.36.txt
 ## swap threshold exceeded
## server overview
2025-11-15.23.36 load[0] mem[62/77] mysql[2/10] httpd[17]
              total        used        free      shared  buff/cache   available
Mem:           2363        1411         118          76         833         711
Swap:          1999        1626         373
 23:36:01 up  9:11,  0 users,  load average: 0.42, 0.33, 0.31
## system overview
top - 23:36:02 up  9:11,  0 users,  load average: 0.42, 0.33, 0.31
Tasks: 207 total,   4 running, 202 sleeping,   0 stopped,   1 zombie
%Cpu(s): 68.8 us, 18.8 sy,  0.0 ni, 12.5 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   109300 free,  1457292 used,   853708 buff/cache
KiB Swap:  2047996 total,   382460 free,  1665536 used.   715908 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1785 mysql     20   0 1458332 264544   4000 S  75.0 10.9   8:10.09 /usr/sbin+
 31591 healtho+  20   0  459500  67496   4052 R  25.0  2.8   0:04.59 php-fpm: +
 32263 nigeria   20   0  404052  16136  10380 S  18.8  0.7   0:00.04 /opt/cpan+
 32220 cloudw    20   0  366220  16592  10884 S   6.2  0.7   0:00.01 /opt/cpan+
 32253 pactpay   20   0  480124  17688  11892 S   6.2  0.7   0:00.02 /opt/cpan+
 32284 cloudw    20   0  366220  16592  10880 S   6.2  0.7   0:00.01 /opt/cpan+
 32288 cloudw    20   0  298500  16036  10368 R   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44280   3448   1616 S   0.0  0.1   0:46.05 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.11 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.63 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:34.39 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.51 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:06.40 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:20.29 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.56 [kauditd]
   234 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:02.60 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:02.18 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   343 root       0 -20       0      0      0 S   0.0  0.0   0:02.17 [kworker/+
   358 root      20   0   40244   5724   5416 S   0.0  0.2   0:16.23 /usr/lib/+
   385 root      20   0   45444    412    392 S   0.0  0.0   0:00.36 /usr/lib/+
   408 root      16  -4   55532    600    472 S   0.0  0.0   0:02.38 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   512 root      20   0   21540    516    428 S   0.0  0.0   0:00.73 /usr/sbin+
   516 root      20   0  152780    336    292 S   0.0  0.0   0:00.02 /usr/sbin+
   521 root      20   0   24708   1328    956 S   0.0  0.1   0:07.66 /usr/lib/+
   523 nscd      20   0 1264844   1952    912 S   0.0  0.1   0:27.62 /usr/sbin+
   524 root      20   0   52852    628    516 S   0.0  0.0   0:00.01 /usr/sbin+
   527 polkitd   20   0  612240   1304    908 S   0.0  0.1   0:04.50 /usr/lib/+
   529 root      20   0  224148   5424   1116 S   0.0  0.2   0:00.39 queueproc+
   531 dbus      20   0   58740   1504    788 S   0.0  0.1   0:17.36 /usr/bin/+
   539 rpc       20   0   69256    148     88 S   0.0  0.0   0:00.03 /sbin/rpc+
   541 root      20   0    4388     92     88 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208    120    120 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    588    452 S   0.0  0.0   0:00.93 /usr/sbin+
   577 root      20   0   24208    140    112 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296    192    188 S   0.0  0.0   0:00.00 /sbin/age+
   591 root      20   0  114704    196    196 S   0.0  0.0   0:00.02 /bin/bash
   622 mailnull  20   0   89108   4116   1076 S   0.0  0.2   0:00.62 /usr/sbin+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.56 [loop0]
   721 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [jbd2/loo+
   722 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  111304    616    516 S   0.0  0.0   0:03.26 /usr/sbin+
   919 root      20   0 1350088   7996    200 S   0.0  0.3   0:20.01 /usr/bin/+
   920 systuser  20   0  111864     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   921 telegraf  20   0 5654304  35752   6044 S   0.0  1.5   0:18.22 /usr/loca+
   922 memcach+  20   0  342400    264    264 S   0.0  0.0   0:00.72 /usr/bin/+
   924 root      20   0  153404    504    420 S   0.0  0.0   0:00.68 pure-ftpd+
   926 root      20   0  572372   1080    504 S   0.0  0.0   0:02.87 /usr/bin/+
   927 systuser  20   0  114016  15916   2888 S   0.0  0.7   0:07.84 /usr/loca+
   928 systuser  20   0   12756     56      0 S   0.0  0.0   0:00.02 /usr/loca+
   929 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   930 root      20   0   51508    688    524 S   0.0  0.0   0:00.39 /usr/sbin+
   932 systuser  20   0  113932     72      0 S   0.0  0.0   0:00.02 /usr/loca+
   933 root      20   0  445028    164    164 S   0.0  0.0   0:00.05 sw-engine+
   935 root      20   0 1277312   7444    220 S   0.0  0.3   0:24.28 /usr/bin/+
   946 root      20   0  396248    680    496 S   0.0  0.0   0:00.85 php-fpm: +
   954 named     20   0 1055796  38992   2132 S   0.0  1.6   0:16.83 /usr/sbin+
   957 root      20   0  306512   6416   5220 S   0.0  0.3   0:08.27 /usr/sbin+
   973 root      20   0  400740   3000    888 S   0.0  0.1   0:05.11 php-fpm: +
   975 root      20   0  439788   1784   1576 S   0.0  0.1   0:00.99 php-fpm: +
   978 cpanelc+  20   0   10456   3500   2248 S   0.0  0.1   0:26.82 /usr/loca+
   980 root      20   0  388892    916    700 S   0.0  0.0   0:01.00 php-fpm: +
   991 root      20   0  389508    692    600 S   0.0  0.0   0:00.91 php-fpm: +
   992 root      20   0 1763124  72668    472 S   0.0  3.0   0:14.11 /usr/loca+
   993 root      20   0  261288   7036   1940 S   0.0  0.3   0:06.78 cpsrvd (S+
  1065 dovenull  20   0   47524   3180   1808 S   0.0  0.1   0:00.61 dovecot/p+
  1066 dovenull  20   0   47828   3524   1904 S   0.0  0.1   0:00.37 dovecot/i+
  1067 dovecot   20   0   10320    556    440 S   0.0  0.0   0:00.10 dovecot/a+
  1068 root      20   0   10452    636    440 S   0.0  0.0   0:00.37 dovecot/l+
  1069 dovenull  20   0   47600   3244   1844 S   0.0  0.1   0:00.50 dovecot/p+
  1070 dovenull  20   0   47680   3360   1872 S   0.0  0.1   0:00.30 dovecot/i+
  1077 root      20   0   24528   2624    524 S   0.0  0.1   0:00.20 dovecot/c+
  1078 dovecot   20   0   13568    620    372 S   0.0  0.0   0:00.07 dovecot/s+
  1150 root      20   0  248140 113940   1128 S   0.0  4.7   0:06.74 /usr/loca+
  1151 systuser  20   0  157704   3132   1088 S   0.0  0.1   0:00.16 SonarPush+
  1152 dovecot   20   0   41180   1624   1128 S   0.0  0.1   0:00.79 dovecot/a+
  1153 wp-tool+  20   0  387528   5144   1868 S   0.0  0.2   0:00.32 /usr/bin/+
  1154 wp-tool+  20   0  410452  30876   1932 S   0.0  1.3   0:27.89 /usr/bin/+
  1229 root      20   0  262228  24616   6760 S   0.0  1.0   0:02.18 cpdavd - +
  1231 root      20   0  209768  12160   2164 S   0.0  0.5   0:04.11 tailwatchd
  1232 root      20   0  167452   1484    884 S   0.0  0.1   0:00.49 dnsadmin +
  1638 root      20   0  299272    880    500 S   0.0  0.0   0:00.88 php-fpm: +
  1681 root      38  18  130416   1516    808 S   0.0  0.1   0:00.08 cpanellog+
  1909 root      20   0  266984   8868    804 S   0.0  0.4   0:03.22 /usr/sbin+
  1911 root      20   0   12752    508    364 S   0.0  0.0   0:03.96 /usr/loca+
  1912 root      20   0   12732    464    356 S   0.0  0.0   0:03.47 /usr/loca+
  1913 root      20   0   12760    516    360 S   0.0  0.0   0:03.78 /usr/loca+
  1918 root      20   0   53344    268    268 S   0.0  0.0   0:00.04 /usr/loca+
  2012 root      20   0  184028  13288   1248 S   0.0  0.5   0:31.76 lfd - sle+
  5421 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  8198 root      20   0  265880 128424   1276 S   0.0  5.3   0:03.84 spamd chi+
  8199 root      20   0  249268 115008    700 S   0.0  4.8   0:00.05 spamd chi+
  8683 nobody    20   0  277564  21036   4968 S   0.0  0.9   0:02.81 /usr/sbin+
 12439 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 12755 nobody    20   0  277844  21396   5036 S   0.0  0.9   0:02.15 /usr/sbin+
 14818 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 16327 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 17267 nobody    20   0  277552  21096   4984 S   0.0  0.9   0:01.91 /usr/sbin+
 20578 nobody    20   0  277556  20500   4552 S   0.0  0.8   0:01.07 /usr/sbin+
 22629 nobody    20   0  277532  20692   4788 S   0.0  0.9   0:01.00 /usr/sbin+
 23251 nobody    20   0  277512  20544   4700 S   0.0  0.8   0:01.00 /usr/sbin+
 24319 nobody    20   0  277516  20272   4492 S   0.0  0.8   0:00.99 /usr/sbin+
 25966 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 25996 nobody    20   0  277524  20060   4336 S   0.0  0.8   0:00.77 /usr/sbin+
 27758 nobody    20   0  277584  20180   4260 S   0.0  0.8   0:00.52 /usr/sbin+
 29712 nobody    20   0  277520  19876   4140 S   0.0  0.8   0:00.37 /usr/sbin+
 29728 nobody    20   0  277508  19592   3956 S   0.0  0.8   0:00.16 /usr/sbin+
 30186 nobody    20   0  277524  19520   3760 S   0.0  0.8   0:00.20 /usr/sbin+
 30563 nobody    20   0  277716  19768   3956 S   0.0  0.8   0:00.22 /usr/sbin+
 30669 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 30697 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 30860 nobody    20   0  277852  19924   4072 S   0.0  0.8   0:00.13 /usr/sbin+
 30894 nobody    20   0  277724  20040   4168 S   0.0  0.8   0:00.15 /usr/sbin+
 30937 nobody    20   0  277448  19412   3852 S   0.0  0.8   0:00.16 /usr/sbin+
 30950 nobody    20   0  277508  19136   3504 S   0.0  0.8   0:00.08 /usr/sbin+
 30951 nobody    20   0  277860  19808   3952 S   0.0  0.8   0:00.13 /usr/sbin+
 31033 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 31042 oysipao+  20   0    3152    496      4 S   0.0  0.0   0:00.58 [kworker]
 31302 nobody    20   0  277844  19548   3828 S   0.0  0.8   0:00.12 /usr/sbin+
 31509 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 31525 healtho+  20   0  459500  67512   4056 S   0.0  2.8   0:05.06 php-fpm: +
 31617 healtho+  20   0  458724  66672   4012 S   0.0  2.8   0:04.52 php-fpm: +
 31865 nobody    20   0  277592  19088   3404 S   0.0  0.8   0:00.06 /usr/sbin+
 31962 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 31969 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 32016 nigeria   20   0  400460   5304   2344 S   0.0  0.2   0:00.00 php-fpm: +
 32106 nobody    20   0  277352  18824   3536 S   0.0  0.8   0:00.00 /usr/sbin+
 32123 healtho+  20   0  445164  52900   4048 S   0.0  2.2   0:00.56 php-fpm: +
 32136 cloudw    20   0  508704  44336   6816 S   0.0  1.8   0:00.51 php-fpm: +
 32177 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 32198 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32199 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 32200 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 32201 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 32202 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 32203 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 32204 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 32206 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 32207 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 32208 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32209 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 32210 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 32212 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 32215 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 32216 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 32217 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 32223 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32224 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32226 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 32227 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 32228 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 32231 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32232 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32233 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32234 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32235 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 32237 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 32238 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 32241 cloudw    20   0  366220  16596  10884 S   0.0  0.7   0:00.01 /opt/cpan+
 32250 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 32258 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 32283 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 32285 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 32287 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 32290 root      20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
 74773 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 78851 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 86395 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 95819 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
101905 nobody    20   0  277616  21364   5132 S   0.0  0.9   0:03.79 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    14:24   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    14:24   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    14:24   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    14:24   0:34  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    14:24   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    14:24   0:06  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    14:24   0:20  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   14:24   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   14:24   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [kauditd]
root        234  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   14:24   0:02  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    14:24   0:02  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ext4-rsv-conver]
root        343  0.0  0.0      0     0 ?        S<   14:24   0:02  \_ [kworker/0:1H]
root        413  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   14:24   0:02  \_ [loop0]
root        721  0.0  0.0      0     0 ?        S    14:24   0:00  \_ [jbd2/loop0-8]
root        722  0.0  0.0      0     0 ?        S<   14:24   0:00  \_ [ext4-rsv-conver]
root      74773  0.0  0.0      0     0 ?        S    22:22   0:00  \_ [kworker/u200:1]
root      78851  0.0  0.0      0     0 ?        S    22:27   0:00  \_ [kworker/1:2]
root      86395  0.0  0.0      0     0 ?        S    22:36   0:00  \_ [kworker/u200:2]
root      95819  0.0  0.0      0     0 ?        S    22:48   0:00  \_ [kworker/0:1]
root       5421  0.0  0.0      0     0 ?        S    23:02   0:00  \_ [kworker/0:3]
root      12439  0.0  0.0      0     0 ?        S    23:11   0:00  \_ [kworker/1:3]
root      14818  0.0  0.0      0     0 ?        S    23:14   0:00  \_ [kworker/0:2]
root      16327  0.0  0.0      0     0 ?        S    23:16   0:00  \_ [kworker/0:4]
root      25966  0.0  0.0      0     0 ?        S    23:28   0:00  \_ [kworker/1:4]
root      30669  0.0  0.0      0     0 ?        S    23:34   0:00  \_ [kworker/0:0]
root      30697  0.0  0.0      0     0 ?        S    23:34   0:00  \_ [kworker/1:0]
root      31509  0.0  0.0      0     0 ?        S    23:35   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44280  3448 ?        Ss   14:24   0:46 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  40244  5724 ?        Ss   14:24   0:16 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45444   412 ?        Ss   14:24   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   600 ?        S<sl 14:24   0:02 /sbin/auditd
root        512  0.0  0.0  21540   516 ?        Ss   14:24   0:00 /usr/sbin/irqbalance --foreground
root        516  0.0  0.0 152780   336 ?        Ss   14:24   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        521  0.0  0.0  24708  1328 ?        Ss   14:24   0:07 /usr/lib/systemd/systemd-logind
nscd        523  0.0  0.0 1264844 1952 ?        Ssl  14:24   0:27 /usr/sbin/nscd
root        524  0.0  0.0  52852   628 ?        Ss   14:24   0:00 /usr/sbin/smartd -n -q never
polkitd     527  0.0  0.0 612240  1304 ?        Ssl  14:24   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        529  0.0  0.2 224148  5424 ?        Ss   14:24   0:00 queueprocd - waiting up to 60s to process a task
dbus        531  0.0  0.0  58740  1504 ?        Ss   14:24   0:17 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         539  0.0  0.0  69256   148 ?        Ss   14:24   0:00 /sbin/rpcbind -w
root        541  0.0  0.0   4388    92 ?        Ss   14:24   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208   120 ?        Ssl  14:24   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   588 ?        Ss   14:24   0:00 /usr/sbin/crond -n
root      32198  0.0  0.0 183048  2156 ?        S    23:36   0:00  \_ /usr/sbin/CROND -n
root      32215  0.0  0.0 113284  1212 ?        Ss   23:36   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      32216  0.0  0.0 108052   360 ?        S    23:36   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      32217  0.0  0.0 113288  1516 ?        S    23:36   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      32292  0.0  0.0 153840  2092 ?        R    23:36   0:00  |               \_ ps auxf
root      32199  0.0  0.0 183048  2160 ?        S    23:36   0:00  \_ /usr/sbin/CROND -n
root      32228  0.0  0.0  20164   808 ?        Ss   23:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      32200  0.0  0.0 183048  2160 ?        S    23:36   0:00  \_ /usr/sbin/CROND -n
root      32224  0.0  0.0  20164   804 ?        Ss   23:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      32201  0.0  0.0 183048  2160 ?        S    23:36   0:00  \_ /usr/sbin/CROND -n
root      32233  0.0  0.0  20164   804 ?        Ss   23:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      32202  0.0  0.0 183048  2160 ?        S    23:36   0:00  \_ /usr/sbin/CROND -n
root      32238  0.0  0.0  20164   808 ?        Ss   23:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      32203  0.0  0.0 183048  2160 ?        S    23:36   0:00  \_ /usr/sbin/CROND -n
root      32232  0.0  0.0  20164   804 ?        Ss   23:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      32204  0.0  0.0 183048  2156 ?        S    23:36   0:00  \_ /usr/sbin/CROND -n
root      32237  0.0  0.0  20164   808 ?        Ss   23:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      32206  0.0  0.0 183048  2156 ?        S    23:36   0:00  \_ /usr/sbin/CROND -n
root      32231  0.0  0.0  20164   804 ?        Ss   23:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      32207  0.0  0.0 183048  2152 ?        S    23:36   0:00  \_ /usr/sbin/CROND -n
root      32234  0.0  0.0  20164   804 ?        Ss   23:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      32208  0.0  0.0 183048  2148 ?        S    23:36   0:00  \_ /usr/sbin/CROND -n
root      32223  0.0  0.0  20164   804 ?        Ss   23:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      32209  0.0  0.0 183048  2152 ?        S    23:36   0:00  \_ /usr/sbin/CROND -n
root      32235  0.0  0.0  20164   984 ?        Ss   23:36   0:00  |   \_ jailshell (cloudsms) [32290] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  32290  0.0  0.0  20164   260 ?        S    23:36   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  32293  0.0  0.0  20164   260 ?        R    23:36   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      32210  0.0  0.0 183048  2152 ?        S    23:36   0:00  \_ /usr/sbin/CROND -n
root      32226  0.0  0.0  20164   960 ?        Ss   23:36   0:00  |   \_ jailshell (pactpay) [32250] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   32250  0.0  0.0  20164   256 ?        S    23:36   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   32253  2.0  0.7 480124 17688 ?        S    23:36   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      32212  0.0  0.0 183048  2152 ?        S    23:36   0:00  \_ /usr/sbin/CROND -n
root      32227  0.0  0.0  20164   968 ?        Ss   23:36   0:00      \_ jailshell (nigeria) [32258] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   32258  0.0  0.0  20164   260 ?        S    23:36   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   32263  4.0  0.6 404052 16136 ?        S    23:36   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208   140 ?        Ss   14:24   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296   192 tty1     Ss+  14:24   0:00 /sbin/agetty --noclear tty1 linux
root        591  0.0  0.0 114704   196 ttyS0    Ss+  14:24   0:00 /bin/bash
mailnull    622  0.0  0.1  89108  4116 ?        Ss   14:24   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 111304   616 ?        Ss   14:24   0:03 /usr/sbin/sshd -D
root      31962  0.0  0.1 111304  4268 ?        Ss   23:35   0:00  \_ sshd: [accepted]
sshd      31969  0.0  0.1 115644  2632 ?        S    23:35   0:00  |   \_ sshd: [net]
root      32285  0.0  0.1 111304  4272 ?        Ss   23:36   0:00  \_ sshd: [accepted]
sshd      32287  0.0  0.1 115644  2632 ?        S    23:36   0:00      \_ sshd: [net]
root        919  0.0  0.3 1350088 7996 ?        Ssl  14:24   0:20 /usr/bin/cspdaemon
systuser    920  0.0  0.0 111864    72 ?        Ssl  14:24   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    921  0.0  1.4 5654304 35752 ?       SLsl 14:24   0:18 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    922  0.0  0.0 342400   264 ?        Ssl  14:24   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        924  0.0  0.0 153404   504 ?        Ss   14:24   0:00 pure-ftpd (SERVER)
root        926  0.0  0.0 572372  1080 ?        Ssl  14:24   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    927  0.0  0.6 114016 15916 ?        Ssl  14:24   0:07 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    928  0.0  0.0  12756    56 ?        Ssl  14:24   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.0  10132    44 ?        Ssl  14:24   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        930  0.0  0.0  51508   688 ?        Ss   14:24   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1065  0.0  0.1  47524  3180 ?        S    14:24   0:00  \_ dovecot/pop3-login
dovenull   1066  0.0  0.1  47828  3524 ?        S    14:24   0:00  \_ dovecot/imap-login
dovecot    1067  0.0  0.0  10320   556 ?        S    14:24   0:00  \_ dovecot/anvil
root       1068  0.0  0.0  10452   636 ?        S    14:24   0:00  \_ dovecot/log
dovenull   1069  0.0  0.1  47600  3244 ?        S    14:24   0:00  \_ dovecot/pop3-login
dovenull   1070  0.0  0.1  47680  3360 ?        S    14:24   0:00  \_ dovecot/imap-login
root       1077  0.0  0.1  24528  2624 ?        S    14:24   0:00  \_ dovecot/config
dovecot    1078  0.0  0.0  13568   620 ?        S    14:24   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180  1624 ?        S    14:24   0:00  \_ dovecot/auth
systuser    932  0.0  0.0 113932    72 ?        Ssl  14:24   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        933  0.0  0.0 445028   164 ?        Ss   14:24   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        935  0.0  0.3 1277312 7444 ?        Ssl  14:24   0:24 /usr/bin/checkstatus
root        946  0.0  0.0 396248   680 ?        Ss   14:24   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
named       954  0.0  1.6 1055796 38992 ?       Ssl  14:24   0:16 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        957  0.0  0.2 306512  6416 ?        Ssl  14:24   0:08 /usr/sbin/rsyslogd -n
root        973  0.0  0.1 400740  3000 ?        Ss   14:24   0:05 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  31525  8.2  2.7 459500 67512 ?        S    23:35   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  31591  8.0  2.7 459500 67496 ?        R    23:35   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  31617  8.2  2.7 458724 66672 ?        S    23:35   0:04  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   32016  0.0  0.2 400460  5304 ?        S    23:35   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  32123  7.0  2.1 445164 52900 ?        S    23:35   0:00  \_ php-fpm: pool health_oyostate_gov_ng
cloudw    32136  7.2  1.8 508704 44336 ?        S    23:35   0:00  \_ php-fpm: pool cloudware_ng
root        975  0.0  0.0 439788  1784 ?        Ss   14:24   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
cpanelc+    978  0.0  0.1  10456  3500 ?        Rs   14:24   0:26 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        980  0.0  0.0 388892   916 ?        Ss   14:24   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        991  0.0  0.0 389508   692 ?        Ss   14:24   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  3.0 1763124 72668 ?       Ssl  14:24   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        993  0.0  0.2 261288  7036 ?        Ss   14:24   0:06 cpsrvd (SSL) - waiting for connections                   
root      32177  0.0  0.0      0     0 ?        Z    23:35   0:00  \_ [cpaneld - servi] <defunct>
root       1150  0.0  4.7 248140 113940 ?       Ss   14:24   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8198  0.0  5.3 265880 128424 ?       S    14:30   0:03  \_ spamd child
root       8199  0.0  4.7 249268 115008 ?       S    14:30   0:00  \_ spamd child
systuser   1151  0.0  0.1 157704  3132 ?        S    14:24   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1153  0.0  0.2 387528  5144 ?        Ss   14:24   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1154  0.0  1.2 410452 30876 ?        Ss   14:24   0:27 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1229  0.0  1.0 262228 24616 ?        Ss   14:24   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1231  0.0  0.5 209768 12160 ?        Ss   14:24   0:04 tailwatchd
root       1232  0.0  0.0 167452  1484 ?        Ss   14:24   0:00 dnsadmin - dormant mode
root       1638  0.0  0.0 299272   880 ?        Ss   14:24   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1681  0.0  0.0 130416  1516 ?        SN   14:24   0:00 cpanellogd - sleeping for logs
mysql      1785  1.4 10.9 1458332 264544 ?      Sl   14:24   8:10 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1909  0.0  0.3 266984  8868 ?        Ss   14:24   0:03 /usr/sbin/httpd -k start
root       1911  0.0  0.0  12752   508 ?        S    14:24   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1912  0.0  0.0  12732   464 ?        S    14:24   0:03  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1913  0.0  0.0  12760   516 ?        S    14:24   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1918  0.0  0.0  53344   268 ?        S    14:24   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody   101905  0.1  0.8 277616 21364 ?        S    22:55   0:03  \_ /usr/sbin/httpd -k start
nobody     8683  0.1  0.8 277564 21036 ?        S    23:06   0:02  \_ /usr/sbin/httpd -k start
cloudw    32284  0.0  0.6 366220 16592 ?        S    23:36   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    12755  0.1  0.8 277844 21396 ?        S    23:11   0:02  \_ /usr/sbin/httpd -k start
nobody    17267  0.1  0.8 277552 21096 ?        S    23:17   0:01  \_ /usr/sbin/httpd -k start
nobody    20578  0.1  0.8 277556 20500 ?        S    23:21   0:01  \_ /usr/sbin/httpd -k start
nobody    22629  0.1  0.8 277532 20692 ?        S    23:23   0:01  \_ /usr/sbin/httpd -k start
cloudw    32241  1.0  0.6 366220 16596 ?        S    23:36   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    23251  0.1  0.8 277512 20544 ?        S    23:24   0:01  \_ /usr/sbin/httpd -k start
nobody    24319  0.1  0.8 277516 20272 ?        S    23:26   0:00  \_ /usr/sbin/httpd -k start
nobody    25996  0.1  0.8 277524 20060 ?        S    23:28   0:00  \_ /usr/sbin/httpd -k start
nobody    27758  0.1  0.8 277584 20180 ?        S    23:30   0:00  \_ /usr/sbin/httpd -k start
nobody    29712  0.1  0.8 277520 19876 ?        S    23:32   0:00  \_ /usr/sbin/httpd -k start
nobody    29728  0.0  0.8 277508 19592 ?        S    23:32   0:00  \_ /usr/sbin/httpd -k start
nobody    30186  0.1  0.8 277524 19520 ?        S    23:33   0:00  \_ /usr/sbin/httpd -k start
nobody    30563  0.1  0.8 277716 19768 ?        S    23:33   0:00  \_ /usr/sbin/httpd -k start
cloudw    32220  1.0  0.6 366220 16592 ?        S    23:36   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    30860  0.1  0.8 277852 19924 ?        S    23:34   0:00  \_ /usr/sbin/httpd -k start
nobody    30894  0.1  0.8 277724 20040 ?        S    23:34   0:00  \_ /usr/sbin/httpd -k start
cloudw    32288  0.0  0.6 366088 16592 ?        R    23:36   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    30937  0.1  0.8 277448 19412 ?        S    23:34   0:00  \_ /usr/sbin/httpd -k start
nobody    30950  0.0  0.7 277508 19136 ?        S    23:34   0:00  \_ /usr/sbin/httpd -k start
nobody    30951  0.1  0.8 277860 19808 ?        S    23:34   0:00  \_ /usr/sbin/httpd -k start
nobody    31302  0.1  0.8 277844 19548 ?        S    23:34   0:00  \_ /usr/sbin/httpd -k start
nobody    31865  0.1  0.7 277592 19088 ?        S    23:35   0:00  \_ /usr/sbin/httpd -k start
nobody    32106  0.0  0.7 277352 18824 ?        S    23:35   0:00  \_ /usr/sbin/httpd -k start
root       2012  0.0  0.5 184028 13288 ?        Ss   14:24   0:31 lfd - sleeping
oysipao+  31033  0.0  0.0   3148   416 ?        Ss   15:00   0:00 [kworker]
oysipao+  31042  0.0  0.0   3152   496 ?        S    15:00   0:00  \_ [kworker]
## mysql stats
Uptime: 33096  Threads: 4  Questions: 3089552  Slow queries: 0  Opens: 9587  Flush tables: 1  Open tables: 2000  Queries per second avg: 93.351
*************************** 1. row ***************************
     Id: 43473
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 43479
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 43480
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 43482
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.134.212 TIME_WAIT
      1 137.135.190.255 TIME_WAIT
      1 142.44.233.94 TIME_WAIT
      1 178.128.60.47 TIME_WAIT
      1 ::1 TIME_WAIT
      1 216.73.216.115 TIME_WAIT
      1 45.8.25.26 TIME_WAIT
      1 45.8.25.31 TIME_WAIT
      1 45.8.25.41 TIME_WAIT
      1 47.128.99.160 TIME_WAIT
      1 51.161.37.79 TIME_WAIT
      1 54.39.0.118 TIME_WAIT
      1 54.39.0.233 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 107.190.140.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 47.128.20.110 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 15-Nov-2025 23:36:02 WAT
   Restart Time: Saturday, 15-Nov-2025 14:24:30 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 9 hours 11 minutes 31 seconds
   Server load: 0.42 0.33 0.31
   Total accesses: 182096 - Total Traffic: 4.1 GB - Total Duration: 102342264
   CPU Usage: u12.75 s8.26 cu2236.21 cs1896.42 - 12.6% CPU load
   5.5 requests/sec - 130.0 kB/second - 23.6 kB/request - 562.024 ms/request
   19 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

KKK_WK_WRKKRKWR_RKW..KRK........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID       Acc     M CPU    SS   Req   Dur   Conn  Child  Slot      Client     Protocol           VHost                               Request
   0-0  30563  4/43/8738   K 1.02  0     477 4917032 110.8 1.03  195.48 66.249.70.3    http/1.1 test.cloudware.ng:443      GET /873306597?goodscode=0872162790 HTTP/1.1
   1-0  31302  6/23/8723   K 0.54  0     233 5114877 160.8 0.57  202.46 66.249.70.4    http/1.1 test.cloudware.ng:443      GET /873379000?goodscode=0872235098 HTTP/1.1
   2-0  29712  3/71/8452   K 1.67  0     255 4773385 86.8  1.83  198.08 66.249.70.6    http/1.1 test.cloudware.ng:443      GET /1587572133?goodscode=1585492198 HTTP/1.1
   3-0  30860  0/29/8467   _ 0.57  0     0   4676689 0.0   0.79  194.32 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   4-0  24319  41/212/8948 W 4.40  0     0   5190815 189.5 6.98  204.29 178.128.60.47  http/1.1 health.oyostate.gov.ng:443 POST //wp-login.php HTTP/1.1
   5-0  31865  6/11/8468   K 0.25  0     360 4817275 162.0 2.79  191.71 66.249.70.7    http/1.1 test.cloudware.ng:443      GET /873812432?goodscode=0872667962 HTTP/1.1
   6-0  17267  0/356/8802  _ 8.92  0     295 4784745 0.0   8.80  200.61 66.249.70.1    http/1.1 test.cloudware.ng:443      GET /1445124666?goodscode=1443231426 HTTP/1.1
   7-0  32106  0/2/7934    W 0.00  0     0   4398332 0.0   0.03  178.30 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   8-0  101905 0/686/8218  R 17.52 55    310 4501379 0.0   16.63 183.67 47.128.20.110  http/1.1
   9-0  20578  8/198/7632  K 5.42  1     357 4205052 214.9 5.12  198.75 66.249.70.5    http/1.1 test.cloudware.ng:443      GET /2990345410?goodscode=2986426978 HTTP/1.1
   10-0 22629  1/180/7725  K 4.47  0     403 4292875 30.7  4.53  190.79 66.249.70.7    http/1.1 test.cloudware.ng:443      GET /885085539?goodscode=0883926294 HTTP/1.1
   11-0 12755  0/401/8017  R 9.80  109   346 4308259 0.0   9.42  185.60 47.128.18.92   http/1.1
   12-0 25996  1/140/7513  K 3.69  2     279 4464123 25.8  3.56  170.41 66.249.70.2    http/1.1 test.cloudware.ng:80       GET /2363830594?goodscode=2360733282 HTTP/1.1
   13-0 8683   0/533/7798  W 13.15 0     0   4388620 0.0   12.39 179.80 66.249.70.2    http/1.1 test.cloudware.ng:443      GET /1449052878?goodscode=1447154490 HTTP/1.1
   14-0 29728  0/29/6710   R 0.72  56    434 3676980 0.0   0.75  154.85 47.128.20.110  http/1.1
   15-0 23251  0/185/7006  _ 4.37  0     264 3995096 0.0   4.51  155.66 66.249.70.2    http/1.1 test.cloudware.ng:443      GET /873664779?goodscode=0872520502 HTTP/1.1
   16-0 27758  0/91/6723   R 2.62  31    242 3513597 0.0   2.45  149.50 110.249.201.79 http/1.1
   17-0 30186  3/38/5607   K 0.92  2     288 3056664 84.5  0.90  127.72 66.249.70.8    http/1.1 test.cloudware.ng:443      GET /1251105987?goodscode=1249467030 HTTP/1.1
   18-0 30894  0/31/5656   W 0.66  0     0   3148248 0.0   0.77  134.78 66.249.70.2    http/1.1 test.cloudware.ng:443      GET /873731004?goodscode=0872586642 HTTP/1.1
   19-0 -      0/0/6046    . 0.00  76    0   3105117 0.0   0.00  127.50 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -      0/0/3848    . 0.00  85    0   2209627 0.0   0.00  89.52  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 30937  1/107/3860  K 0.24  1     353 2169318 30.4  0.59  89.74  66.249.70.5    http/1.1 test.cloudware.ng:443      GET /2978430661?goodscode=2974527846 HTTP/1.1
   22-0 30950  0/13/3792   R 0.33  55    8   2226477 0.0   0.34  94.95  47.128.20.110  http/1.1
   23-0 30951  1/25/3896   K 0.53  0     296 2151101 35.8  0.65  91.25  66.249.70.6    http/1.1 test.cloudware.ng:443      GET /1572427755?goodscode=1570367670 HTTP/1.1
   24-0 -      0/0/2051    . 0.00  1744  0   1407189 0.0   0.00  53.64  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -      0/0/1226    . 0.00  2266  0   661088  0.0   0.00  28.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -      0/0/999     . 0.00  1854  0   568026  0.0   0.00  23.87  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -      0/0/607     . 0.00  1005  0   348567  0.0   0.00  13.23  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -      0/0/504     . 0.00  3237  4   281545  0.0   0.00  11.70  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -      0/0/454     . 0.00  3247  0   254392  0.0   0.00  10.28  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -      0/0/1082    . 0.00  2482  0   643654  0.0   0.00  26.27  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -      0/0/414     . 0.00  3246  0   182253  0.0   0.00  6.95   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -      0/0/194     . 0.00  3558  0   127823  0.0   0.00  4.04   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -      0/0/139     . 0.00  3577  0   83183   0.0   0.00  2.67   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -      0/0/580     . 0.00  3579  0   351973  0.0   0.00  11.12  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -      0/0/217     . 0.00  3556  0   115196  0.0   0.00  2.52   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -      0/0/98      . 0.00  3249  0   125071  0.0   0.00  2.23   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -      0/0/16      . 0.00  3539  0   6572    0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -      0/0/26      . 0.00  3544  0   15132   0.0   0.00  0.46   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -      0/0/328     . 0.00  3591  0   207302  0.0   0.00  7.57   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -      0/0/96      . 0.00  3221  0   108764  0.0   0.00  1.96   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -      0/0/55      . 0.00  3446  0   40950   0.0   0.00  0.99   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -      0/0/116     . 0.00  3590  4   69988   0.0   0.00  2.98   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -      0/0/103     . 0.00  3554  0   64981   0.0   0.00  2.44   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -      0/0/36      . 0.00  3543  0   9203    0.0   0.00  0.51   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -      0/0/342     . 0.00  3488  0   195433  0.0   0.00  8.43   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -      0/0/18      . 0.00  3552  0   14837   0.0   0.00  0.19   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -      0/0/14      . 0.00  3576  4   2942    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -      0/0/14      . 0.00  3565  0   18099   0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -      0/0/44      . 0.00  3489  0   53145   0.0   0.00  2.25   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -      0/0/442     . 0.00  3589  2   253167  0.0   0.00  9.85   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -      0/0/29      . 0.00  3574  0   12168   0.0   0.00  0.52   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -      0/0/23      . 0.00  3549  0   8738    0.0   0.00  0.35   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -      0/0/87      . 0.00  3546  0   53024   0.0   0.00  1.72   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -      0/0/260     . 0.00  3584  0   132345  0.0   0.00  5.83   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -      0/0/407     . 0.00  3171  0   301017  0.0   0.00  13.68  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -      0/0/31      . 0.00  3551  0   30801   0.0   0.00  0.66   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -      0/0/23      . 0.00  3491  0   8119    0.0   0.00  0.32   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -      0/0/198     . 0.00  3511  0   155907  0.0   0.00  4.53   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -      0/0/14      . 0.00  3569  0   14882   0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -      0/0/139     . 0.00  3548  0   85769   0.0   0.00  3.09   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -      0/0/15      . 0.00  3566  0   16376   0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -      0/0/114     . 0.00  3587  10  68683   0.0   0.00  2.82   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -      0/0/15      . 0.00  3550  0   10302   0.0   0.00  0.09   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -      0/0/7       . 0.00  3573  0   2367    0.0   0.00  0.07   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -      0/0/6       . 0.00  3586  0   601     0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -      0/0/14      . 0.00  3582  0   1401    0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -      0/0/8       . 0.00  3588  1   54      0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -      0/0/15      . 0.00  3567  0   16257   0.0   0.00  0.07   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -      0/0/83      . 0.00  3585  0   33103   0.0   0.00  1.78   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -      0/0/57      . 0.00  3568  0   64542   0.0   0.00  1.17   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -      0/0/874     . 0.00  3512  0   488023  0.0   0.00  20.31  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -      0/0/68      . 0.00  3532  0   49615   0.0   0.00  1.58   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -      0/0/136     . 0.00  3515  0   92358   0.0   0.00  3.17   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -      0/0/54      . 0.00  3480  0   42053   0.0   0.00  1.34   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -      0/0/13      . 0.00  3562  0   12308   0.0   0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -      0/0/149     . 0.00  3563  0   87089   0.0   0.00  3.26   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -      0/0/13      . 0.00  3583  0   1935    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -      0/0/16      . 0.00  3560  0   16052   0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -      0/0/41      . 0.00  3447  0   30094   0.0   0.00  0.73   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -      0/0/19      . 0.00  8186  0   6786    0.0   0.00  0.30   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -      0/0/359     . 0.00  6912  0   198767  0.0   0.00  8.30   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   82-0 -      0/0/3       . 0.00  22105 0   23      0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   83-0 -      0/0/3       . 0.00  22079 0   644     0.0   0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   84-0 -      0/0/2       . 0.00  22097 0   3       0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   85-0 -      0/0/7       . 0.00  22064 0   3861    0.0   0.00  0.17   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 918
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 11 seconds, (range: 0...49)
   index usage: 16%, cache usage: 22%
   total entries stored since starting: 98951
   total entries replaced since starting: 0
   total entries expired since starting: 97991
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 362 miss
   total removes since starting: 42 hit, 51 miss
Youez - 2016 - github.com/yon3zu
LinuXploit