403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-16.17.36.txt
 ## swap threshold exceeded
## server overview
2025-11-16.17.36 load[1] mem[77/45] mysql[4/11] httpd[25]
              total        used        free      shared  buff/cache   available
Mem:           2363        1772          73          40         518         394
Swap:          1999        1008         991
 17:36:01 up 33 min,  0 users,  load average: 1.75, 0.81, 0.60
## system overview
top - 17:36:02 up 33 min,  0 users,  load average: 1.75, 0.81, 0.60
Tasks: 213 total,   3 running, 208 sleeping,   0 stopped,   2 zombie
%Cpu(s): 74.2 us, 25.8 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    80592 free,  1809156 used,   530552 buff/cache
KiB Swap:  2047996 total,  1015804 free,  1032192 used.   409736 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1750 mysql     20   0 1458592 230220   3108 S 112.5  9.5   0:30.26 /usr/sbin+
 35576 nigeria   20   0  404052  16136  10380 R  12.5  0.7   0:00.06 /opt/cpan+
    36 root      20   0       0      0      0 S   6.2  0.0   0:07.83 [kswapd0]
 35390 nobody    20   0  277744  24788   3168 S   6.2  1.0   0:00.04 /usr/sbin+
 35627 cloudw    20   0  353712  15980  10496 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44140   3316   1596 S   0.0  0.1   0:03.33 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     3 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.17 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.13 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:02.21 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.14 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.49 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:00.60 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:00.50 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   39496   8100   7804 S   0.0  0.3   0:01.34 /usr/lib/+
   389 root      20   0   45352    520    372 S   0.0  0.0   0:00.36 /usr/lib/+
   411 root      16  -4   55532    576    444 S   0.0  0.0   0:00.19 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 dbus      20   0   58404   1388    776 S   0.0  0.1   0:01.10 /usr/bin/+
   493 rpc       20   0   69256    268    168 S   0.0  0.0   0:00.01 /sbin/rpc+
   524 root      20   0   24604   1192    904 S   0.0  0.0   0:00.50 /usr/lib/+
   525 root      20   0  152780    316    272 S   0.0  0.0   0:00.00 /usr/sbin+
   529 root      20   0   21540    520    408 S   0.0  0.0   0:00.05 /usr/sbin+
   530 polkitd   20   0  612240   1108    664 S   0.0  0.0   0:00.30 /usr/lib/+
   531 root      20   0  224144   5812   1060 S   0.0  0.2   0:00.10 queueproc+
   538 root      20   0   52852    456    392 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0  195208    128    128 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0    4388    148    144 S   0.0  0.0   0:00.00 /usr/sbin+
   550 nscd      20   0 1131720   1668    732 S   0.0  0.1   0:02.21 /usr/sbin+
   578 root      20   0   24208     76     76 S   0.0  0.0   0:00.00 /usr/sbin+
   579 root      20   0  124480    592    460 S   0.0  0.0   0:00.06 /usr/sbin+
   585 root      20   0  114704    236    236 S   0.0  0.0   0:00.02 /bin/bash
   586 root      20   0  108296    236    232 S   0.0  0.0   0:00.00 /sbin/age+
   588 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   626 mailnull  20   0   88988   3468    524 S   0.0  0.1   0:00.04 /usr/sbin+
   685 root       0 -20       0      0      0 S   0.0  0.0   0:02.05 [loop0]
   743 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   744 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   933 root      20   0  281936   7112   6612 S   0.0  0.3   0:00.63 /usr/sbin+
   935 root      20   0  388892   1956    624 S   0.0  0.1   0:00.15 php-fpm: +
   937 named     20   0  924724  26540   1284 S   0.0  1.1   0:01.25 /usr/sbin+
   939 root      20   0 1689392 594392    360 S   0.0 24.6   0:13.31 /usr/loca+
   941 systuser  20   0  112268     72      0 S   0.0  0.0   0:00.00 /usr/loca+
   942 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.00 /usr/loca+
   943 systuser  20   0  111864     80      0 S   0.0  0.0   0:00.00 /usr/loca+
   944 cpanelc+  20   0    9944   2812   2372 S   0.0  0.1   0:01.71 /usr/loca+
   945 root      20   0  572372    896    432 S   0.0  0.0   0:00.28 /usr/bin/+
   946 root      20   0  261164   6116   1676 S   0.0  0.3   0:00.49 cpsrvd (S+
   947 root      20   0  400740   3500    828 S   0.0  0.1   0:00.46 php-fpm: +
   952 root      20   0  396248    756    592 S   0.0  0.0   0:00.12 php-fpm: +
   953 root      20   0  445028   4772   3284 S   0.0  0.2   0:00.19 sw-engine+
   954 root      20   0 1277312  12128    244 S   0.0  0.5   0:26.49 /usr/bin/+
   955 root      20   0   51508    704    544 S   0.0  0.0   0:00.06 /usr/sbin+
   957 root      20   0 1341892   7632    244 S   0.0  0.3   0:25.29 /usr/bin/+
   959 systuser  20   0   12756     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   960 root      20   0  111304    616    516 S   0.0  0.0   0:00.27 /usr/sbin+
   962 root      20   0  153404    512    432 S   0.0  0.0   0:00.04 pure-ftpd+
   980 systuser  20   0  114016  11816   2260 S   0.0  0.5   0:00.58 /usr/loca+
   981 memcach+  20   0  342400    204    204 S   0.0  0.0   0:00.04 /usr/bin/+
   987 root      20   0  389508    784    576 S   0.0  0.0   0:00.13 php-fpm: +
   989 telegraf  20   0 5654048  32124   1740 S   0.0  1.3   0:01.36 /usr/loca+
   992 root      20   0  439788  11360  11268 S   0.0  0.5   0:00.18 php-fpm: +
  1097 dovenull  20   0   47284   3356   2460 S   0.0  0.1   0:00.03 dovecot/p+
  1098 dovenull  20   0   47324   3100   2212 S   0.0  0.1   0:00.02 dovecot/i+
  1099 dovecot   20   0   10320    388    276 S   0.0  0.0   0:00.00 dovecot/a+
  1100 root      20   0   10452    592    420 S   0.0  0.0   0:00.01 dovecot/l+
  1101 dovenull  20   0   47452   3588   2460 S   0.0  0.1   0:00.08 dovecot/p+
  1102 dovenull  20   0   46924   3056   2372 S   0.0  0.1   0:00.00 dovecot/i+
  1110 root      20   0   24528   2624    616 S   0.0  0.1   0:00.04 dovecot/c+
  1117 dovecot   20   0   13568    660    444 S   0.0  0.0   0:00.00 dovecot/s+
  1136 systuser  20   0  157708   3148   1160 S   0.0  0.1   0:00.02 SonarPush+
  1147 root      20   0  248052 119496   2852 S   0.0  4.9   0:03.04 /usr/loca+
  1176 wp-tool+  20   0  412368  30544   1336 S   0.0  1.3   0:00.87 /usr/bin/+
  1177 wp-tool+  20   0  387528  12320   1476 S   0.0  0.5   0:00.09 /usr/bin/+
  1181 dovecot   20   0   41056   1528   1108 S   0.0  0.1   0:00.06 dovecot/a+
  1229 root      20   0  167452   1484    884 S   0.0  0.1   0:00.08 dnsadmin +
  1231 root      20   0  183900   6024   2796 S   0.0  0.2   0:00.18 cpdavd - +
  1233 root      20   0  209700  11596   1780 S   0.0  0.5   0:00.55 tailwatchd
  1607 root      20   0  299272    960    580 S   0.0  0.0   0:00.05 php-fpm: +
  1637 root      38  18  130416   1524    804 S   0.0  0.1   0:00.00 cpanellog+
  1985 root      20   0  266984  15548    820 S   0.0  0.6   0:00.61 /usr/sbin+
  1988 root      20   0   12856    588    380 S   0.0  0.0   0:00.29 /usr/loca+
  1989 root      20   0   12732    532    348 S   0.0  0.0   0:00.26 /usr/loca+
  1992 root      20   0   12916    584    368 S   0.0  0.0   0:00.28 /usr/loca+
  1995 root      20   0   53340   9580    276 S   0.0  0.4   0:00.04 /usr/loca+
  2081 root      20   0  181300  28248   1244 S   0.0  1.2   0:02.40 lfd - sle+
  2549 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  7498 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  8203 root      20   0  249328 118992   1160 S   0.0  4.9   0:00.16 spamd chi+
  8204 root      20   0  248052 117408    804 S   0.0  4.9   0:00.00 spamd chi+
 13563 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 18402 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 24552 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 24631 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 29622 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 29726 nobody    20   0  277744  26048   4392 S   0.0  1.1   0:00.66 /usr/sbin+
 30579 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 30587 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 32385 nobody    20   0  277744  25928   4248 S   0.0  1.1   0:00.26 /usr/sbin+
 32401 nobody    20   0  277744  25652   4000 S   0.0  1.1   0:00.35 /usr/sbin+
 32414 nobody    20   0  277476  25652   4236 S   0.0  1.1   0:00.30 /usr/sbin+
 32416 nobody    20   0  277744  25824   4148 S   0.0  1.1   0:00.39 /usr/sbin+
 32568 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 33389 nobody    20   0  277744  25644   3988 S   0.0  1.1   0:00.18 /usr/sbin+
 33400 nobody    20   0  277744  25412   3756 S   0.0  1.0   0:00.24 /usr/sbin+
 33417 nobody    20   0  277744  25472   3840 S   0.0  1.1   0:00.17 /usr/sbin+
 33418 nobody    20   0  277744  25660   3996 S   0.0  1.1   0:00.20 /usr/sbin+
 33419 nobody    20   0  277744  25364   3712 S   0.0  1.0   0:00.22 /usr/sbin+
 33758 root      20   0   41052   2808   2136 S   0.0  0.1   0:00.02 dovecot/a+
 33760 worencom  20   0   38492   3924   3048 S   0.0  0.2   0:00.00 dovecot/i+
 33844 root      20   0   60820   4504   3520 S   0.0  0.2   0:00.00 dovecot/l+
 34328 nobody    20   0       0      0      0 Z   0.0  0.0   0:00.07 [httpd] <+
 34486 nobody    20   0  277744  25368   3672 S   0.0  1.0   0:00.04 /usr/sbin+
 34520 nobody    20   0  277744  25484   3852 S   0.0  1.1   0:00.11 /usr/sbin+
 34605 nobody    20   0  277744  25216   3592 S   0.0  1.0   0:00.08 /usr/sbin+
 34607 nobody    20   0  277740  25324   3680 S   0.0  1.0   0:00.09 /usr/sbin+
 34610 nobody    20   0  277744  24936   3316 S   0.0  1.0   0:00.12 /usr/sbin+
 34685 nobody    20   0  277744  25144   3516 S   0.0  1.0   0:00.09 /usr/sbin+
 34686 nobody    20   0  277744  25116   3484 S   0.0  1.0   0:00.07 /usr/sbin+
 34687 nobody    20   0  277744  25400   3776 S   0.0  1.0   0:00.07 /usr/sbin+
 34688 nobody    20   0  277744  25532   3876 S   0.0  1.1   0:00.08 /usr/sbin+
 34925 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 35088 nigeria   20   0  400460   5868   2408 S   0.0  0.2   0:00.01 php-fpm: +
 35118 nobody    20   0  277884  25396   3796 S   0.0  1.0   0:00.03 /usr/sbin+
 35137 root      20   0  157100   5080   3788 S   0.0  0.2   0:00.00 sshd: unk+
 35138 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: unk+
 35351 healtho+  20   0  459496  67872   4056 S   0.0  2.8   0:04.85 php-fpm: +
 35361 wp-tool+  20   0  445028   1696    192 S   0.0  0.1   0:00.00 sw-engine+
 35373 nobody    20   0  277744  25108   3596 S   0.0  1.0   0:00.01 /usr/sbin+
 35380 wp-tool+  20   0  445028   1696    192 S   0.0  0.1   0:00.00 sw-engine+
 35391 nobody    20   0  277312  24204   3116 S   0.0  1.0   0:00.00 /usr/sbin+
 35409 nobody    20   0  277744  24792   3172 S   0.0  1.0   0:00.02 /usr/sbin+
 35410 nobody    20   0  277176  22696   1764 S   0.0  0.9   0:00.00 /usr/sbin+
 35411 nobody    20   0  277600  24560   3172 S   0.0  1.0   0:00.00 /usr/sbin+
 35412 nobody    20   0  277312  24204   3116 S   0.0  1.0   0:00.00 /usr/sbin+
 35424 nobody    20   0  277440  24732   3388 S   0.0  1.0   0:00.00 /usr/sbin+
 35425 nobody    20   0  277732  25120   3628 S   0.0  1.0   0:00.01 /usr/sbin+
 35426 nobody    20   0  277744  24784   3168 S   0.0  1.0   0:00.01 /usr/sbin+
 35427 nobody    20   0  277600  24560   3172 S   0.0  1.0   0:00.00 /usr/sbin+
 35428 nobody    20   0  277744  24780   3164 S   0.0  1.0   0:00.02 /usr/sbin+
 35429 nobody    20   0  277600  24556   3168 S   0.0  1.0   0:00.00 /usr/sbin+
 35430 nobody    20   0  277600  24560   3172 S   0.0  1.0   0:00.00 /usr/sbin+
 35431 nobody    20   0  277176  24216   3200 S   0.0  1.0   0:00.00 /usr/sbin+
 35512 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 35515 oysipao+  20   0  440164   4380   2876 S   0.0  0.2   0:00.00 php-fpm: +
 35522 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 35524 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35525 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35526 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35528 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35530 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35531 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35533 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35534 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35536 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35539 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 35540 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 35541 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 35542 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 35545 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 35546 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 35549 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 35552 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 35554 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 35555 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 35556 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 35560 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 35570 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 35581 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 35582 pactpay   20   0  480124  17692  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 35610 cloudw    20   0  353712  15976  10496 S   0.0  0.7   0:00.00 /opt/cpan+
 35613 cloudw    20   0  353712  15976  10496 S   0.0  0.7   0:00.01 /opt/cpan+
 35617 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 35629 root      20   0    6728    416    336 S   0.0  0.0   0:00.00 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    17:02   0:00 [kthreadd]
root          3  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kworker/0:0]
root          4  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    17:02   0:02  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [watchdogd]
root         36  0.3  0.0      0     0 ?        S    17:02   0:07  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   17:02   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   17:02   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/1:1H]
root        269  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/0:1H]
root        278  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [xprtiod]
root        588  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kvm-irqfd-clean]
root        685  0.1  0.0      0     0 ?        S<   17:02   0:02  \_ [loop0]
root        743  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [jbd2/loop0-8]
root        744  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ext4-rsv-conver]
root       2549  0.0  0.0      0     0 ?        S    17:03   0:00  \_ [kworker/1:3]
root       7498  0.0  0.0      0     0 ?        S    17:07   0:00  \_ [kworker/u200:0]
root      13563  0.0  0.0      0     0 ?        S    17:14   0:00  \_ [kworker/0:2]
root      18402  0.0  0.0      0     0 ?        S    17:19   0:00  \_ [kworker/1:1]
root      24552  0.0  0.0      0     0 ?        S    17:25   0:00  \_ [kworker/0:1]
root      24631  0.0  0.0      0     0 ?        S    17:25   0:00  \_ [kworker/1:2]
root      29622  0.0  0.0      0     0 ?        S    17:30   0:00  \_ [kworker/0:3]
root      30579  0.0  0.0      0     0 ?        S    17:31   0:00  \_ [kworker/0:4]
root      30587  0.0  0.0      0     0 ?        S    17:31   0:00  \_ [kworker/1:0]
root      32568  0.0  0.0      0     0 ?        S    17:33   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44140  3316 ?        Ss   17:02   0:03 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.3  39496  8100 ?        Ss   17:02   0:01 /usr/lib/systemd/systemd-journald
root        389  0.0  0.0  45352   520 ?        Ss   17:02   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   576 ?        S<sl 17:02   0:00 /sbin/auditd
dbus        489  0.0  0.0  58404  1388 ?        Ss   17:02   0:01 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         493  0.0  0.0  69256   268 ?        Ss   17:02   0:00 /sbin/rpcbind -w
root        524  0.0  0.0  24604  1192 ?        Ss   17:02   0:00 /usr/lib/systemd/systemd-logind
root        525  0.0  0.0 152780   316 ?        Ss   17:02   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        529  0.0  0.0  21540   520 ?        Ss   17:02   0:00 /usr/sbin/irqbalance --foreground
polkitd     530  0.0  0.0 612240  1108 ?        Ssl  17:02   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        531  0.0  0.2 224144  5812 ?        Ss   17:02   0:00 queueprocd - waiting up to 60s to process a task
root        538  0.0  0.0  52852   456 ?        Ss   17:02   0:00 /usr/sbin/smartd -n -q never
root        542  0.0  0.0 195208   128 ?        Ssl  17:02   0:00 /usr/sbin/gssproxy -D
root        545  0.0  0.0   4388   148 ?        Ss   17:02   0:00 /usr/sbin/acpid
nscd        550  0.1  0.0 1131720 1668 ?        Ssl  17:02   0:02 /usr/sbin/nscd
root        578  0.0  0.0  24208    76 ?        Ss   17:02   0:00 /usr/sbin/atd -f
root        579  0.0  0.0 124480   592 ?        Ss   17:02   0:00 /usr/sbin/crond -n
root      35522  0.0  0.0 183048  2144 ?        S    17:36   0:00  \_ /usr/sbin/CROND -n
root      35542  0.0  0.0 113284  1212 ?        Ss   17:36   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      35556  0.0  0.0 108052   356 ?        S    17:36   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      35560  0.0  0.0 113288  1516 ?        S    17:36   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      35632  0.0  0.0 153840  2092 ?        R    17:36   0:00  |               \_ ps auxf
root      35524  0.0  0.0 183048  2148 ?        S    17:36   0:00  \_ /usr/sbin/CROND -n
root      35554  0.0  0.0  20164   808 ?        Ss   17:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      35525  0.0  0.0 183048  2148 ?        S    17:36   0:00  \_ /usr/sbin/CROND -n
root      35549  0.0  0.0  20164   804 ?        Ss   17:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      35526  0.0  0.0 183048  2148 ?        S    17:36   0:00  \_ /usr/sbin/CROND -n
root      35540  0.0  0.0  20164   808 ?        Ss   17:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      35528  0.0  0.0 183048  2144 ?        S    17:36   0:00  \_ /usr/sbin/CROND -n
root      35539  0.0  0.0  20164   808 ?        Ss   17:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      35530  0.0  0.0 183048  2140 ?        S    17:36   0:00  \_ /usr/sbin/CROND -n
root      35541  0.0  0.0  20164   808 ?        Ss   17:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      35531  0.0  0.0 183048  2140 ?        S    17:36   0:00  \_ /usr/sbin/CROND -n
root      35545  0.0  0.0  20164   808 ?        Ss   17:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      35533  0.0  0.0 183048  2140 ?        S    17:36   0:00  \_ /usr/sbin/CROND -n
root      35546  0.0  0.0  20164   808 ?        Ss   17:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      35534  0.0  0.0 183048  2140 ?        S    17:36   0:00  \_ /usr/sbin/CROND -n
root      35555  0.0  0.0  20164   972 ?        Ss   17:36   0:00  |   \_ jailshell (pactpay) [35581] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   35581  0.0  0.0  20164   264 ?        S    17:36   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   35582  1.0  0.7 480124 17692 ?        S    17:36   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      35536  0.0  0.0 183048  2140 ?        S    17:36   0:00  \_ /usr/sbin/CROND -n
root      35552  0.0  0.0  20164   968 ?        Ss   17:36   0:00      \_ jailshell (nigeria) [35570] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   35570  0.0  0.0  20164   260 ?        S    17:36   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   35576  6.0  0.6 404052 16136 ?        S    17:36   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        585  0.0  0.0 114704   236 ttyS0    Ss+  17:02   0:00 /bin/bash
root        586  0.0  0.0 108296   236 tty1     Ss+  17:02   0:00 /sbin/agetty --noclear tty1 linux
mailnull    626  0.0  0.1  88988  3468 ?        Ss   17:02   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        933  0.0  0.2 281936  7112 ?        Ssl  17:02   0:00 /usr/sbin/rsyslogd -n
root        935  0.0  0.0 388892  1956 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
named       937  0.0  1.0 924724 26540 ?        Ssl  17:02   0:01 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        939  0.6 24.5 1689392 594392 ?      Ssl  17:02   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    941  0.0  0.0 112268    72 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    942  0.0  0.0  10132    28 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    943  0.0  0.0 111864    80 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
cpanelc+    944  0.0  0.1   9944  2812 ?        Ss   17:02   0:01 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        945  0.0  0.0 572372   896 ?        Ssl  17:02   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        946  0.0  0.2 261164  6116 ?        Ss   17:02   0:00 cpsrvd (SSL) - waiting for connections                   
root      35512  0.0  0.0      0     0 ?        Z    17:35   0:00  \_ [cpaneld - servi] <defunct>
root        947  0.0  0.1 400740  3500 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   35088  0.0  0.2 400460  5868 ?        S    17:35   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  35351 48.5  2.8 459496 67872 ?        S    17:35   0:04  \_ php-fpm: pool health_oyostate_gov_ng
root        952  0.0  0.0 396248   756 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        953  0.0  0.1 445028  4772 ?        Ss   17:02   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  35361  0.0  0.0 445028  1696 ?        S    17:35   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  35380  0.0  0.0 445028  1696 ?        S    17:35   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        954  1.3  0.5 1277312 12128 ?       Ssl  17:02   0:26 /usr/bin/checkstatus
root        955  0.0  0.0  51508   704 ?        Ss   17:02   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1097  0.0  0.1  47284  3356 ?        S    17:02   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47324  3100 ?        S    17:02   0:00  \_ dovecot/imap-login
dovecot    1099  0.0  0.0  10320   388 ?        S    17:02   0:00  \_ dovecot/anvil
root       1100  0.0  0.0  10452   592 ?        S    17:02   0:00  \_ dovecot/log
dovenull   1101  0.0  0.1  47452  3588 ?        S    17:02   0:00  \_ dovecot/pop3-login
dovenull   1102  0.0  0.1  46924  3056 ?        S    17:02   0:00  \_ dovecot/imap-login
root       1110  0.0  0.1  24528  2624 ?        S    17:02   0:00  \_ dovecot/config
dovecot    1117  0.0  0.0  13568   660 ?        S    17:02   0:00  \_ dovecot/stats
dovecot    1181  0.0  0.0  41056  1528 ?        S    17:02   0:00  \_ dovecot/auth
root      33758  0.0  0.1  41052  2808 ?        S    17:34   0:00  \_ dovecot/auth -w
worencom  33760  0.0  0.1  38492  3924 ?        S    17:34   0:00  \_ dovecot/imap
root      33844  0.0  0.1  60820  4504 ?        S    17:34   0:00  \_ dovecot/lmtp
root        957  1.2  0.3 1341892 7632 ?        Ssl  17:02   0:25 /usr/bin/cspdaemon
systuser    959  0.0  0.0  12756    60 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        960  0.0  0.0 111304   616 ?        Ss   17:02   0:00 /usr/sbin/sshd -D
root      34925  0.0  0.1 111304  4268 ?        Ss   17:35   0:00  \_ sshd: [accepted]
root      35137  0.0  0.2 157100  5080 ?        Ss   17:35   0:00  \_ sshd: unknown [priv]
sshd      35138  0.0  0.1 115644  2632 ?        S    17:35   0:00      \_ sshd: unknown [net]
root        962  0.0  0.0 153404   512 ?        Ss   17:02   0:00 pure-ftpd (SERVER)
systuser    980  0.0  0.4 114016 11816 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+    981  0.0  0.0 342400   204 ?        Ssl  17:02   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        987  0.0  0.0 389508   784 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
telegraf    989  0.0  1.3 5654048 32124 ?       SLsl 17:02   0:01 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        992  0.0  0.4 439788 11360 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
oysipao+  35515  0.0  0.1 440164  4380 ?        S    17:36   0:00  \_ php-fpm: pool oysipa_oyostate_gov_ng
systuser   1136  0.0  0.1 157708  3148 ?        S    17:02   0:00 SonarPush 0.6.12 [sleeping]
root       1147  0.1  4.9 248052 119496 ?       Ss   17:02   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8203  0.0  4.9 249328 118992 ?       S    17:08   0:00  \_ spamd child
root       8204  0.0  4.8 248052 117408 ?       S    17:08   0:00  \_ spamd child
wp-tool+   1176  0.0  1.2 412368 30544 ?        Ss   17:02   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1177  0.0  0.5 387528 12320 ?        Ss   17:02   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1229  0.0  0.0 167452  1484 ?        Ss   17:02   0:00 dnsadmin - dormant mode
root       1231  0.0  0.2 183900  6024 ?        Ss   17:02   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1233  0.0  0.4 209700 11596 ?        Ss   17:02   0:00 tailwatchd
root       1607  0.0  0.0 299272   960 ?        Ss   17:02   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1637  0.0  0.0 130416  1524 ?        SN   17:02   0:00 cpanellogd - sleeping for logs
mysql      1750  1.5  9.5 1458592 230220 ?      Sl   17:02   0:30 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1985  0.0  0.6 266984 15548 ?        Ss   17:02   0:00 /usr/sbin/httpd -k start
root       1988  0.0  0.0  12856   588 ?        S    17:02   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1989  0.0  0.0  12732   532 ?        S    17:02   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1992  0.0  0.0  12916   584 ?        S    17:02   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1995  0.0  0.3  53340  9580 ?        S    17:02   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    29726  0.1  1.0 277744 26048 ?        S    17:30   0:00  \_ /usr/sbin/httpd -k start
nobody    32385  0.1  1.0 277744 25928 ?        S    17:32   0:00  \_ /usr/sbin/httpd -k start
nobody    32401  0.1  1.0 277744 25652 ?        S    17:32   0:00  \_ /usr/sbin/httpd -k start
nobody    32414  0.1  1.0 277476 25652 ?        S    17:32   0:00  \_ /usr/sbin/httpd -k start
nobody    32416  0.2  1.0 277744 25824 ?        S    17:32   0:00  \_ /usr/sbin/httpd -k start
nobody    33389  0.1  1.0 277744 25644 ?        S    17:33   0:00  \_ /usr/sbin/httpd -k start
nobody    33400  0.1  1.0 277744 25412 ?        S    17:33   0:00  \_ /usr/sbin/httpd -k start
nobody    33417  0.1  1.0 277744 25472 ?        S    17:33   0:00  \_ /usr/sbin/httpd -k start
nobody    33418  0.1  1.0 277744 25660 ?        S    17:33   0:00  \_ /usr/sbin/httpd -k start
nobody    33419  0.1  1.0 277744 25364 ?        S    17:33   0:00  \_ /usr/sbin/httpd -k start
nobody    34328  0.0  0.0      0     0 ?        Z    17:34   0:00  \_ [httpd] <defunct>
nobody    34486  0.0  1.0 277744 25368 ?        S    17:34   0:00  \_ /usr/sbin/httpd -k start
nobody    34520  0.1  1.0 277744 25484 ?        S    17:34   0:00  \_ /usr/sbin/httpd -k start
nobody    34605  0.1  1.0 277744 25216 ?        S    17:35   0:00  \_ /usr/sbin/httpd -k start
nobody    34607  0.1  1.0 277740 25324 ?        S    17:35   0:00  \_ /usr/sbin/httpd -k start
nobody    34610  0.1  1.0 277744 24936 ?        S    17:35   0:00  \_ /usr/sbin/httpd -k start
nobody    34685  0.1  1.0 277744 25144 ?        S    17:35   0:00  \_ /usr/sbin/httpd -k start
nobody    34686  0.1  1.0 277744 25116 ?        S    17:35   0:00  \_ /usr/sbin/httpd -k start
cloudw    35627  0.0  0.6 353712 15980 ?        S    17:36   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    34687  0.1  1.0 277744 25400 ?        S    17:35   0:00  \_ /usr/sbin/httpd -k start
nobody    34688  0.1  1.0 277744 25532 ?        S    17:35   0:00  \_ /usr/sbin/httpd -k start
nobody    35118  0.0  1.0 277884 25396 ?        S    17:35   0:00  \_ /usr/sbin/httpd -k start
nobody    35373  0.1  1.0 277744 25108 ?        S    17:35   0:00  \_ /usr/sbin/httpd -k start
nobody    35390  0.5  1.0 277744 24788 ?        S    17:35   0:00  \_ /usr/sbin/httpd -k start
cloudw    35629  0.0  0.6 288176 15952 ?        Rl   17:36   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    35391  0.0  1.0 277312 24204 ?        S    17:35   0:00  \_ /usr/sbin/httpd -k start
cloudw    35610  1.0  0.6 353712 16240 ?        R    17:36   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    35409  0.2  1.0 277744 24792 ?        S    17:35   0:00  \_ /usr/sbin/httpd -k start
nobody    35410  0.0  0.9 277176 22696 ?        S    17:35   0:00  \_ /usr/sbin/httpd -k start
nobody    35411  0.0  1.0 277600 24560 ?        S    17:35   0:00  \_ /usr/sbin/httpd -k start
nobody    35412  0.0  1.0 277312 24204 ?        S    17:35   0:00  \_ /usr/sbin/httpd -k start
cloudw    35613  1.0  0.6 353712 15976 ?        R    17:36   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    35424  0.0  1.0 277440 24732 ?        S    17:35   0:00  \_ /usr/sbin/httpd -k start
nobody    35425  0.1  1.0 277732 25120 ?        S    17:35   0:00  \_ /usr/sbin/httpd -k start
nobody    35426  0.1  1.0 277744 24784 ?        S    17:35   0:00  \_ /usr/sbin/httpd -k start
nobody    35427  0.0  1.0 277600 24560 ?        S    17:35   0:00  \_ /usr/sbin/httpd -k start
nobody    35428  0.3  1.0 277744 24780 ?        S    17:35   0:00  \_ /usr/sbin/httpd -k start
nobody    35429  0.0  1.0 277600 24556 ?        S    17:35   0:00  \_ /usr/sbin/httpd -k start
nobody    35430  0.0  1.0 277600 24560 ?        S    17:35   0:00  \_ /usr/sbin/httpd -k start
nobody    35431  0.0  1.0 277176 24216 ?        S    17:35   0:00  \_ /usr/sbin/httpd -k start
root       2081  0.1  1.1 181300 28248 ?        Ss   17:02   0:02 lfd - sleeping
## mysql stats
Uptime: 2016  Threads: 3  Questions: 168094  Slow queries: 0  Opens: 2077  Flush tables: 1  Open tables: 1853  Queries per second avg: 83.379
*************************** 1. row ***************************
     Id: 2722
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 2732
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 2733
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.138.170 TIME_WAIT
      1 148.113.128.118 TIME_WAIT
      1 15.235.218.124 TIME_WAIT
      1 157.55.39.56 TIME_WAIT
      1 192.178.4.105 TIME_WAIT
      1 ::1 TIME_WAIT
      1 45.124.84.162 TIME_WAIT
      1 54.39.0.43 TIME_WAIT
      1 54.39.136.254 TIME_WAIT
      1 54.39.6.15 TIME_WAIT
      1 74.7.228.57 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 69.48.205.45 TIME_WAIT
      2 74.208.183.129 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 16-Nov-2025 17:36:02 WAT
   Restart Time: Sunday, 16-Nov-2025 17:02:33 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 33 minutes 28 seconds
   Server load: 1.75 0.81 0.60
   Total accesses: 13998 - Total Traffic: 330.9 MB - Total Duration: 6981436
   CPU Usage: u2.89 s1.63 cu183.3 cs149.91 - 16.8% CPU load
   6.97 requests/sec - 168.7 kB/second - 24.2 kB/request - 498.745 ms/request
   26 requests currently being processed, 0 workers gracefully restarting, 10 idle workers

K_W_CW_K_C_KKRK_KKKKWKKWKKK_KKW_.K_K_...........................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req  Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  32385 1/46/479   K 1.09 0    357 227961 34.3  1.09  11.57 192.178.4.99   http/1.1 team.cloudware.ng:443      GET /?l=608483754 HTTP/1.1
   1-0  35118 0/8/634    _ 0.15 1    2   309687 0.0   0.14  13.23 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   2-0  32401 58/101/476 W 1.25 0    0   230882 255.8 1.51  12.27 103.253.27.125 http/1.1 health.oyostate.gov.ng:443 POST //wp-login.php HTTP/1.1
   3-0  35373 0/2/438    _ 0.01 1    6   278712 0.0   0.04  11.14 3.224.215.150  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/2019elections/blog/images/blog/b
   4-0  34328 1/17/457   C 0.19 0    0   236770 0.2   0.28  11.13 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   5-0  35390 6/6/443    W 0.14 0    0   203784 188.4 0.18  9.88  192.178.4.97   http/1.1 team.cloudware.ng:443      GET /?l=1306776129 HTTP/1.1
   6-0  29726 0/101/479  _ 2.82 0    0   250299 0.0   3.03  11.24 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   7-0  35391 1/2/514    K 0.00 0    337 225204 37.4  0.04  11.05 66.249.64.234  http/1.1 team.cloudware.ng:443      GET /?l=3690582562 HTTP/1.1
   8-0  34486 0/10/426   _ 0.12 1    3   228692 0.0   0.16  11.02 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   9-0  33389 1/31/391   C 0.73 1    7   208510 5.7   1.08  10.45 43.130.116.87  http/1.1 oysipa.oyostate.gov.ng:80  GET /project-page?sectorid=6&catid=7 HTTP/1.1
   10-0 33400 0/37/496   _ 1.01 0    269 255166 0.0   1.07  12.47 192.178.4.105  http/1.1 team.cloudware.ng:443      GET /?l=3627984739 HTTP/1.1
   11-0 35409 4/4/451    K 0.08 1    362 231651 127.8 0.12  10.64 192.178.4.96   http/1.1 team.cloudware.ng:443      GET /?l=1805335904 HTTP/1.1
   12-0 32414 4/52/405   K 1.13 2    260 215553 123.9 1.47  12.26 192.178.4.98   http/1.1 team.cloudware.ng:443      GET /?l=2507849511 HTTP/1.1
   13-0 35410 0/1/438    R 0.00 2    0   234021 0.0   0.00  11.06 200.80.10.159  http/1.1 cloudware.ng:443
   14-0 34520 8/18/583   K 0.44 1    347 321232 246.1 0.51  12.41 192.178.4.101  http/1.1 team.cloudware.ng:443      GET /?l=538468256 HTTP/1.1
   15-0 34605 0/14/436   _ 0.35 2    0   167659 0.0   0.40  8.70  66.249.66.41   http/1.1 nescrow.com.ng:443         GET /robots.txt HTTP/1.1
   16-0 32416 10/69/355  K 1.82 1    20  176904 12.2  1.65  8.49  66.249.70.7    http/1.1 test.cloudware.ng:443      GET /3006760951?goodscode=3002821006 HTTP/1.1
   17-0 34607 21/25/321  K 0.61 0    99  152398 143.8 0.25  7.62  209.9.200.163  http/1.1 cloudsms.com.ng:443        GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   18-0 33417 6/29/405   K 0.71 3    286 188057 189.2 0.75  8.29  192.178.4.102  http/1.1 team.cloudware.ng:443      GET /?l=2888587731 HTTP/1.1
   19-0 33418 1/32/329   K 0.84 1    27  175495 11.3  0.85  8.37  52.167.144.211 http/1.1 cloudsms.com.ng:443        GET /buy_bulkemail.php HTTP/1.1
   20-0 35411 0/1/379    W 0.00 0    0   193563 0.0   0.03  9.33  ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   21-0 33419 1/37/397   K 0.92 3    314 223642 35.6  1.02  10.03 192.178.4.104  http/1.1 team.cloudware.ng:443      GET /?l=492837222 HTTP/1.1
   22-0 34610 7/19/479   K 0.52 3    269 201064 216.6 0.58  9.33  192.178.4.103  http/1.1 team.cloudware.ng:443      GET /?l=858463946 HTTP/1.1
   23-0 35412 0/1/315    W 0.00 0    0   136757 0.0   0.00  6.59  66.249.64.65   http/1.1 team.cloudware.ng:443      GET /?l=3297788443 HTTP/1.1
   24-0 35424 1/2/247    K 0.00 3    309 147641 38.2  0.05  6.51  192.178.4.105  http/1.1 team.cloudware.ng:443      GET /?l=1343698137 HTTP/1.1
   25-0 35425 1/2/326    K 0.01 3    268 131298 34.1  0.04  6.36  192.178.4.104  http/1.1 team.cloudware.ng:443      GET /?l=128249586 HTTP/1.1
   26-0 35426 2/2/346    K 0.02 0    275 189465 64.8  0.06  9.35  192.178.4.105  http/1.1 team.cloudware.ng:443      GET /?l=3147226603 HTTP/1.1
   27-0 35427 0/1/207    _ 0.00 1    353 99572  0.0   0.03  4.91  192.178.4.101  http/1.1 team.cloudware.ng:443      GET /?l=440449654 HTTP/1.1
   28-0 34685 3/15/272   K 0.35 1    354 142080 93.3  0.42  7.00  192.178.4.104  http/1.1 team.cloudware.ng:443      GET /?l=2920627348 HTTP/1.1
   29-0 35428 4/4/242    K 0.08 0    363 132713 127.6 0.12  5.58  192.178.4.102  http/1.1 team.cloudware.ng:443      GET /?l=3017141057 HTTP/1.1
   30-0 34686 0/11/173   W 0.26 0    0   96042  0.0   0.28  4.17  66.249.70.173  http/1.1 team.cloudware.ng:443      GET /?l=1406061545 HTTP/1.1
   31-0 34687 0/13/233   _ 0.26 2    10  120307 0.0   0.35  5.54  45.124.84.162  http/1.1
   32-0 -     0/0/225    . 0.00 0    0   119216 0.0   0.00  5.79  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 34688 9/19/100   K 0.40 0    86  67579  58.1  0.30  2.51  81.167.26.57   http/1.1 cloudsms.com.ng:443        GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   34-0 35429 0/1/78     _ 0.00 0    345 40441  0.0   0.04  1.90  192.178.4.98   http/1.1 team.cloudware.ng:443      GET /?l=1172643364 HTTP/1.1
   35-0 35430 1/1/161    K 0.00 3    284 71188  35.1  0.03  3.72  192.178.4.100  http/1.1 team.cloudware.ng:443      GET /?l=52175251 HTTP/1.1
   36-0 35431 0/1/128    _ 0.00 0    1   62609  0.0   0.01  4.66  66.249.66.203  http/1.1 nescrow.com.ng:443         GET /https:/www.nescrow.com.ng/robots.txt HTTP/1.1
   37-0 -     0/0/186    . 0.00 25   0   57888  0.0   0.00  3.27  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/49     . 0.00 1666 0   9438   0.0   0.00  0.38  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/127    . 0.00 1324 0   57209  0.0   0.00  2.90  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/96     . 0.00 1489 0   38412  0.0   0.00  1.79  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/7      . 0.00 1781 0   1435   0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/17     . 0.00 1730 0   11034  0.0   0.00  0.48  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/5      . 0.00 1786 0   1769   0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/13     . 0.00 1754 0   7314   0.0   0.00  0.35  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/5      . 0.00 1776 0   2116   0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/29     . 0.00 1670 0   15427  0.0   0.00  0.77  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/46     . 0.00 1677 0   31137  0.0   0.00  1.31  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/5      . 0.00 1777 0   2706   0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/146    . 0.00 1256 0   50309  0.0   0.00  2.57  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/3      . 0.00 1792 0   1402   0.0   0.00  0.06  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1727
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 3 seconds, (range: 0...13)
   index usage: 30%, cache usage: 41%
   total entries stored since starting: 10720
   total entries replaced since starting: 0
   total entries expired since starting: 8992
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 16 miss
   total removes since starting: 1 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit