403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.11.54.txt
 ## swap threshold exceeded
## server overview
2025-11-20.11.54 load[1] mem[72/54] mysql[5/9] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1642          96          37         624         524
Swap:          1999        1487         512
 11:54:02 up  2:13,  0 users,  load average: 1.06, 0.73, 0.63
## system overview
top - 11:54:02 up  2:13,  0 users,  load average: 1.06, 0.73, 0.63
Tasks: 205 total,   5 running, 199 sleeping,   0 stopped,   1 zombie
%Cpu(s): 81.2 us, 18.8 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    83536 free,  1697104 used,   639660 buff/cache
KiB Swap:  2047996 total,   524796 free,  1523200 used.   521720 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  6045 healtho+  20   0  457292  64944   4124 R  68.8  2.7   0:01.33 php-fpm: +
  1793 mysql     20   0 1463376 223824   3372 S  62.5  9.2   1:49.95 /usr/sbin+
  6138 nigeria   20   0  404052  16140  10384 R   6.2  0.7   0:00.04 /opt/cpan+
  6150 cloudw    20   0  353712  15976  10492 S   6.2  0.7   0:00.01 /opt/cpan+
  6162 cloudw    20   0  353712  15972  10492 S   6.2  0.7   0:00.01 /opt/cpan+
  6164 cloudsms  20   0       0      0      0 R   6.2  0.0   0:00.01 [php-cgi]
     1 root      20   0   44268   3316   1476 S   0.0  0.1   0:12.25 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.45 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.39 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:07.91 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.37 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.54 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:16.80 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.46 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:01.66 [kworker/+
   276 root      20   0       0      0      0 D   0.0  0.0   0:00.48 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   4644   4432 S   0.0  0.2   0:04.85 /usr/lib/+
   387 root      20   0   45352    252    248 S   0.0  0.0   0:00.38 /usr/lib/+
   410 root      16  -4   55532    304    176 S   0.0  0.0   0:00.79 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0   24712   1156    836 S   0.0  0.0   0:01.94 /usr/lib/+
   471 root      20   0   52852    320    224 S   0.0  0.0   0:00.01 /usr/sbin+
   474 dbus      20   0   58736   1356    680 S   0.0  0.1   0:04.39 /usr/bin/+
   476 rpc       20   0   69256     72     12 S   0.0  0.0   0:00.01 /sbin/rpc+
   486 polkitd   20   0  612240   1124    776 S   0.0  0.0   0:01.20 /usr/lib/+
   487 root      20   0   21540    408    320 S   0.0  0.0   0:00.18 /usr/sbin+
   492 root      20   0  152780    240    196 S   0.0  0.0   0:00.00 /usr/sbin+
   493 root      20   0  224280   5452   1040 S   0.0  0.2   0:00.25 queueproc+
   507 nscd      20   0  928956   1392    720 S   0.0  0.1   0:06.62 /usr/sbin+
   515 root      20   0  195208     68     68 S   0.0  0.0   0:00.00 /usr/sbin+
   516 root      20   0    4388    156    152 S   0.0  0.0   0:00.00 /usr/sbin+
   543 root      20   0   24208    180    156 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0  124480    524    392 S   0.0  0.0   0:00.24 /usr/sbin+
   562 root      20   0  108296    180    176 S   0.0  0.0   0:00.00 /sbin/age+
   563 root      20   0  114704    180    180 S   0.0  0.0   0:00.02 /bin/bash
   613 mailnull  20   0   89120   1412    492 S   0.0  0.1   0:00.21 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   675 root       0 -20       0      0      0 S   0.0  0.0   0:02.50 [loop0]
   735 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   736 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   931 root      20   0  153404    396    316 S   0.0  0.0   0:00.16 pure-ftpd+
   932 root      20   0  572372   1052    480 S   0.0  0.0   0:00.78 /usr/bin/+
   933 systuser  20   0  112268     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   935 systuser  20   0  114016  15464   2780 S   0.0  0.6   0:02.20 /usr/loca+
   936 root      20   0 1277056   6144    164 S   0.0  0.3   0:21.12 /usr/bin/+
   937 root      20   0  445028   1384   1272 S   0.0  0.1   0:00.34 sw-engine+
   938 systuser  20   0   11796     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   942 root      20   0  111304    544    436 S   0.0  0.0   0:01.10 /usr/sbin+
   943 systuser  20   0   11348     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   944 root      20   0 1349832   8488    128 S   0.0  0.4   0:28.08 /usr/bin/+
   945 root      20   0   51508    612    432 S   0.0  0.0   0:00.13 /usr/sbin+
   946 telegraf  20   0 5654304  35000   5920 S   0.0  1.4   0:04.84 /usr/loca+
   947 memcach+  20   0  342400    232    232 S   0.0  0.0   0:00.18 /usr/bin/+
   948 root      20   0 1763312 517316    196 S   0.0 21.4   0:14.87 /usr/loca+
   949 root      20   0  389508    584    492 S   0.0  0.0   0:00.30 php-fpm: +
   950 root      20   0  261160   6252   1748 S   0.0  0.3   0:01.78 cpsrvd (S+
   953 root      20   0  388892    348    264 S   0.0  0.0   0:00.26 php-fpm: +
   958 root      20   0  240976   4296   3656 S   0.0  0.2   0:02.38 /usr/sbin+
   986 root      20   0  396248    564    472 S   0.0  0.0   0:00.27 php-fpm: +
   990 root      20   0  439788   1176   1084 S   0.0  0.0   0:00.35 php-fpm: +
   994 root      20   0  400740   3096    716 S   0.0  0.1   0:01.18 php-fpm: +
   996 named     20   0  924724  33196   1908 S   0.0  1.4   0:05.64 /usr/sbin+
  1013 cpanelc+  20   0   10232   3172   2412 S   0.0  0.1   0:06.39 /usr/loca+
  1093 dovenull  20   0   46912   2036   1516 S   0.0  0.1   0:00.14 dovecot/p+
  1094 dovenull  20   0   47888   2952   1744 S   0.0  0.1   0:00.14 dovecot/i+
  1095 dovecot   20   0   10320    292    176 S   0.0  0.0   0:00.03 dovecot/a+
  1096 root      20   0   10452    492    312 S   0.0  0.0   0:00.10 dovecot/l+
  1097 dovenull  20   0   46916   2284   1696 S   0.0  0.1   0:00.13 dovecot/p+
  1098 dovenull  20   0   47868   2804   1744 S   0.0  0.1   0:00.12 dovecot/i+
  1104 root      20   0   24396   2048    540 S   0.0  0.1   0:00.07 dovecot/c+
  1110 dovecot   20   0   13568    644    444 S   0.0  0.0   0:00.02 dovecot/s+
  1145 systuser  20   0  157704   3072   1096 S   0.0  0.1   0:00.06 SonarPush+
  1170 dovecot   20   0   41192   1540   1044 S   0.0  0.1   0:00.33 dovecot/a+
  1175 wp-tool+  20   0  412368  26820   1440 S   0.0  1.1   0:02.75 /usr/bin/+
  1176 wp-tool+  20   0  387528   8392   1500 S   0.0  0.3   0:00.16 /usr/bin/+
  1234 root      20   0  167452   1320    776 S   0.0  0.1   0:00.16 dnsadmin +
  1235 root      20   0  262228  19276   1356 S   0.0  0.8   0:00.59 cpdavd - +
  1237 root      20   0  209308  19496   2136 S   0.0  0.8   0:01.24 tailwatchd
  1669 root      20   0  299272    604    440 S   0.0  0.0   0:00.21 php-fpm: +
  1701 root      38  18  130416   1392    728 S   0.0  0.1   0:00.02 cpanellog+
  1718 nobody    20   0  277696  18912   4352 S   0.0  0.8   0:00.53 /usr/sbin+
  1959 root      20   0  266992   7380    740 S   0.0  0.3   0:00.75 /usr/sbin+
  1962 root      20   0   12832    400    296 S   0.0  0.0   0:00.94 /usr/loca+
  1963 root      20   0   12732    368    292 S   0.0  0.0   0:00.80 /usr/loca+
  1964 root      20   0   12876    416    296 S   0.0  0.0   0:00.88 /usr/loca+
  1968 root      20   0   53340    216    216 S   0.0  0.0   0:00.05 /usr/loca+
  2014 root      20   0  182100   9096   1168 S   0.0  0.4   0:07.51 lfd - sle+
  3549 nobody    20   0  277896  18552   4060 S   0.0  0.8   0:00.22 /usr/sbin+
  3561 nobody    20   0  277692  18824   4300 S   0.0  0.8   0:00.19 /usr/sbin+
  3911 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  4093 nobody    20   0  277760  18344   3944 S   0.0  0.8   0:00.25 /usr/sbin+
  4434 nobody    20   0  277760  18608   4048 S   0.0  0.8   0:00.19 /usr/sbin+
  4647 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  5104 nobody    20   0  277900  17828   3408 S   0.0  0.7   0:00.11 /usr/sbin+
  5159 nobody    20   0  277568  18176   3888 S   0.0  0.8   0:00.09 /usr/sbin+
  5350 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  5366 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  5570 nobody    20   0  277868  18328   3824 S   0.0  0.8   0:00.07 /usr/sbin+
  5859 nobody    20   0  277760  17572   3196 S   0.0  0.7   0:00.03 /usr/sbin+
  5892 wp-tool+  20   0  445028    324    196 S   0.0  0.0   0:00.00 sw-engine+
  6011 healtho+  20   0  463996  71608   4204 S   0.0  3.0   0:03.10 php-fpm: +
  6016 nigeria   20   0  400460   5572   2328 S   0.0  0.2   0:00.00 php-fpm: +
  6019 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  6025 healtho+  20   0  461388  67776   4128 S   0.0  2.8   0:01.97 php-fpm: +
  6053 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  6056 root      20   0  157100   5084   3792 S   0.0  0.2   0:00.00 sshd: unk+
  6057 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: unk+
  6058 root      20   0  162436   5832   4340 S   0.0  0.2   0:00.01 sshd: roo+
  6059 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
  6083 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  6085 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  6086 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  6087 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  6088 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  6089 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  6090 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  6091 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  6092 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  6093 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  6094 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  6095 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  6097 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  6099 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  6100 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
  6101 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  6102 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  6103 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  6104 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  6107 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  6108 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
  6109 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  6111 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  6112 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  6113 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
  6114 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  6115 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  6116 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  6129 nigeria   20   0   20164    440    164 S   0.0  0.0   0:00.00 jailshell+
  6133 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  6136 pactpay   20   0  480124  17692  11892 S   0.0  0.7   0:00.01 /opt/cpan+
  6159 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
  6161 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  6163 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 18294 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 18303 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.13 [kworker]
 41201 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 56404 root      20   0  248036 117540   1084 S   0.0  4.9   0:03.22 /usr/loca+
 64340 root      20   0  249300 118760   1080 S   0.0  4.9   0:00.28 spamd chi+
 64341 root      20   0  248036 116836    416 S   0.0  4.8   0:00.00 spamd chi+
 67652 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 83918 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 92025 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 95180 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 95863 nobody    20   0  277700  19764   4852 S   0.0  0.8   0:01.35 /usr/sbin+
 97817 nobody    20   0  277896  20048   4772 S   0.0  0.8   0:01.04 /usr/sbin+
 97838 nobody    20   0  277760  19584   4536 S   0.0  0.8   0:01.28 /usr/sbin+
 98183 nobody    20   0  277760  19804   4648 S   0.0  0.8   0:01.30 /usr/sbin+
 98199 nobody    20   0  277888  19748   4728 S   0.0  0.8   0:00.96 /usr/sbin+
 98202 nobody    20   0  277760  20044   4832 S   0.0  0.8   0:01.10 /usr/sbin+
 98596 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 98701 nobody    20   0  277696  19640   4648 S   0.0  0.8   0:01.05 /usr/sbin+
 98715 nobody    20   0  277672  19664   4800 S   0.0  0.8   0:00.88 /usr/sbin+
100665 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
100685 worencom  20   0   38480   4056   3036 S   0.0  0.2   0:00.00 dovecot/i+
100955 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
101713 nobody    20   0  277916  19252   4344 S   0.0  0.8   0:00.58 /usr/sbin+
101732 nobody    20   0  277772  19428   4412 S   0.0  0.8   0:00.88 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:40   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    09:40   0:07  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    09:40   0:16  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   09:40   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   09:40   0:01  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kvm-irqfd-clean]
root        675  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [loop0]
root        735  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/loop0-8]
root        736  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root      41201  0.0  0.0      0     0 ?        S    10:31   0:00  \_ [kworker/u200:1]
root      67652  0.0  0.0      0     0 ?        S    11:04   0:00  \_ [kworker/1:1]
root      83918  0.0  0.0      0     0 ?        S    11:24   0:00  \_ [kworker/0:0]
root      92025  0.0  0.0      0     0 ?        S    11:34   0:00  \_ [kworker/0:2]
root      95180  0.0  0.0      0     0 ?        S    11:38   0:00  \_ [kworker/1:4]
root      98596  0.0  0.0      0     0 ?        S    11:42   0:00  \_ [kworker/0:4]
root     100665  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/u200:2]
root     100955  0.0  0.0      0     0 ?        S    11:45   0:00  \_ [kworker/1:0]
root       3911  0.0  0.0      0     0 ?        S    11:51   0:00  \_ [kworker/1:2]
root       4647  0.0  0.0      0     0 ?        S    11:52   0:00  \_ [kworker/1:3]
root       5350  0.0  0.0      0     0 ?        S    11:53   0:00  \_ [kworker/1:5]
root       5366  0.0  0.0      0     0 ?        S    11:53   0:00  \_ [kworker/0:1]
root          1  0.1  0.1  44268  3316 ?        Ss   09:40   0:12 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.1  40244  4644 ?        Ss   09:40   0:04 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   252 ?        Ss   09:40   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   304 ?        S<sl 09:40   0:00 /sbin/auditd
root        470  0.0  0.0  24712  1156 ?        Ss   09:40   0:01 /usr/lib/systemd/systemd-logind
root        471  0.0  0.0  52852   320 ?        Ss   09:40   0:00 /usr/sbin/smartd -n -q never
dbus        474  0.0  0.0  58736  1356 ?        Ss   09:40   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         476  0.0  0.0  69256    72 ?        Ss   09:40   0:00 /sbin/rpcbind -w
polkitd     486  0.0  0.0 612240  1124 ?        Ssl  09:40   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        487  0.0  0.0  21540   408 ?        Ss   09:40   0:00 /usr/sbin/irqbalance --foreground
root        492  0.0  0.0 152780   240 ?        Ss   09:40   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        493  0.0  0.2 224280  5452 ?        Ss   09:40   0:00 queueprocd - waiting up to 60s to process a task
nscd        507  0.0  0.0 928956  1392 ?        Ssl  09:40   0:06 /usr/sbin/nscd
root        515  0.0  0.0 195208    68 ?        Ssl  09:40   0:00 /usr/sbin/gssproxy -D
root        516  0.0  0.0   4388   156 ?        Ss   09:40   0:00 /usr/sbin/acpid
root        543  0.0  0.0  24208   180 ?        Ss   09:40   0:00 /usr/sbin/atd -f
root        545  0.0  0.0 124480   524 ?        Ss   09:40   0:00 /usr/sbin/crond -n
root       6083  0.0  0.0 183048  2152 ?        S    11:54   0:00  \_ /usr/sbin/CROND -n
root       6099  0.0  0.0 113284  1212 ?        Ss   11:54   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       6100  0.0  0.0 108052   356 ?        S    11:54   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       6113  0.0  0.0 113288  1516 ?        S    11:54   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       6168  0.0  0.0 153840  2092 ?        R    11:54   0:00  |               \_ ps auxf
root       6085  0.0  0.0 183048  2156 ?        S    11:54   0:00  \_ /usr/sbin/CROND -n
root       6104  0.0  0.0  20164   808 ?        Ss   11:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root       6086  0.0  0.0 183048  2156 ?        S    11:54   0:00  \_ /usr/sbin/CROND -n
root       6111  0.0  0.0  20164   808 ?        Ss   11:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root       6087  0.0  0.0 183048  2156 ?        S    11:54   0:00  \_ /usr/sbin/CROND -n
root       6101  0.0  0.0  20164   804 ?        Ss   11:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       6088  0.0  0.0 183048  2156 ?        S    11:54   0:00  \_ /usr/sbin/CROND -n
root       6112  0.0  0.0  20164   808 ?        Ss   11:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       6089  0.0  0.0 183048  2152 ?        S    11:54   0:00  \_ /usr/sbin/CROND -n
root       6107  0.0  0.0  20164   804 ?        Ss   11:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root       6090  0.0  0.0 183048  2152 ?        S    11:54   0:00  \_ /usr/sbin/CROND -n
root       6108  0.0  0.0  20164   984 ?        Ss   11:54   0:00  |   \_ jailshell (cloudsms) [6161] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms   6161  0.0  0.0      0     0 ?        D    11:54   0:00  |       \_ [jailshell]
root       6091  0.0  0.0 183048  2152 ?        S    11:54   0:00  \_ /usr/sbin/CROND -n
root       6116  0.0  0.0  20164   808 ?        Ss   11:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       6092  0.0  0.0 183048  2148 ?        S    11:54   0:00  \_ /usr/sbin/CROND -n
root       6114  0.0  0.0  20164   808 ?        Ss   11:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       6093  0.0  0.0 183048  2148 ?        S    11:54   0:00  \_ /usr/sbin/CROND -n
root       6103  0.0  0.0  20164   808 ?        Ss   11:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       6094  0.0  0.0 183048  2148 ?        S    11:54   0:00  \_ /usr/sbin/CROND -n
root       6102  0.0  0.0  20164   804 ?        Ss   11:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       6095  0.0  0.0 183048  2148 ?        S    11:54   0:00  \_ /usr/sbin/CROND -n
root       6115  0.0  0.0  20164   968 ?        Ss   11:54   0:00  |   \_ jailshell (pactpay) [6133] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    6133  0.0  0.0  20164   260 ?        S    11:54   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    6136  1.0  0.7 480124 17692 ?        S    11:54   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       6097  0.0  0.0 183048  2148 ?        S    11:54   0:00  \_ /usr/sbin/CROND -n
root       6109  0.0  0.0  20164   968 ?        Ss   11:54   0:00      \_ jailshell (nigeria) [6129] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    6129  0.0  0.0  20164   440 ?        S    11:54   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    6138  4.0  0.6 404052 16140 ?        S    11:54   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        562  0.0  0.0 108296   180 tty1     Ss+  09:40   0:00 /sbin/agetty --noclear tty1 linux
root        563  0.0  0.0 114704   180 ttyS0    Ss+  09:40   0:00 /bin/bash
mailnull    613  0.0  0.0  89120  1412 ?        Ss   09:40   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        931  0.0  0.0 153404   396 ?        Ss   09:40   0:00 pure-ftpd (SERVER)
root        932  0.0  0.0 572372  1052 ?        Ssl  09:40   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    933  0.0  0.0 112268    56 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.6 114016 15464 ?        Ssl  09:40   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        936  0.2  0.2 1277056 6144 ?        Ssl  09:40   0:21 /usr/bin/checkstatus
root        937  0.0  0.0 445028  1384 ?        Ss   09:40   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+   5892  0.0  0.0 445028   324 ?        S    11:53   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    938  0.0  0.0  11796    32 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    939  0.0  0.0 111608    60 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        942  0.0  0.0 111304   544 ?        Ss   09:40   0:01 /usr/sbin/sshd -D
root       6053  0.0  0.1 111304  4264 ?        Ss   11:53   0:00  \_ sshd: [accepted]
root       6056  0.0  0.2 157100  5084 ?        Ss   11:53   0:00  \_ sshd: unknown [priv]
sshd       6057  0.0  0.1 115644  2632 ?        S    11:53   0:00  |   \_ sshd: unknown [net]
root       6058  0.3  0.2 162436  5832 ?        Ss   11:53   0:00  \_ sshd: root [priv]
sshd       6059  0.0  0.1 115644  2628 ?        S    11:54   0:00      \_ sshd: root [net]
systuser    943  0.0  0.0  11348    24 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        944  0.3  0.3 1349832 8488 ?        Ssl  09:40   0:28 /usr/bin/cspdaemon
root        945  0.0  0.0  51508   612 ?        Ss   09:40   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1093  0.0  0.0  46912  2036 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1094  0.0  0.1  47888  2952 ?        S    09:40   0:00  \_ dovecot/imap-login
dovecot    1095  0.0  0.0  10320   292 ?        S    09:40   0:00  \_ dovecot/anvil
root       1096  0.0  0.0  10452   492 ?        S    09:40   0:00  \_ dovecot/log
dovenull   1097  0.0  0.0  46916  2284 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47868  2804 ?        S    09:40   0:00  \_ dovecot/imap-login
root       1104  0.0  0.0  24396  2048 ?        S    09:40   0:00  \_ dovecot/config
dovecot    1110  0.0  0.0  13568   644 ?        S    09:40   0:00  \_ dovecot/stats
dovecot    1170  0.0  0.0  41192  1540 ?        S    09:40   0:00  \_ dovecot/auth
worencom 100685  0.0  0.1  38480  4056 ?        S    11:44   0:00  \_ dovecot/imap
telegraf    946  0.0  1.4 5654304 35000 ?       SLsl 09:40   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    947  0.0  0.0 342400   232 ?        Ssl  09:40   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        948  0.1 21.3 1763312 517316 ?      Ssl  09:40   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        949  0.0  0.0 389508   584 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        950  0.0  0.2 261160  6252 ?        Ss   09:40   0:01 cpsrvd (SSL) - waiting for connections                   
root       6019  0.0  0.0      0     0 ?        Z    11:53   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.0 388892   348 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        958  0.0  0.1 240976  4296 ?        Ssl  09:40   0:02 /usr/sbin/rsyslogd -n
root        986  0.0  0.0 396248   564 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        990  0.0  0.0 439788  1176 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        994  0.0  0.1 400740  3096 ?        Ss   09:40   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+   6011 38.7  2.9 463996 71608 ?        S    11:53   0:03  \_ php-fpm: pool health_oyostate_gov_ng
nigeria    6016  0.0  0.2 400460  5572 ?        S    11:53   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+   6025 32.8  2.8 461388 67776 ?        S    11:53   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+   6045 26.8  2.6 457292 65208 ?        R    11:53   0:01  \_ php-fpm: pool health_oyostate_gov_ng
named       996  0.0  1.3 924724 33196 ?        Ssl  09:40   0:05 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
cpanelc+   1013  0.0  0.1  10232  3172 ?        Ss   09:40   0:06 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1145  0.0  0.1 157704  3072 ?        S    09:40   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1175  0.0  1.1 412368 26820 ?        Ss   09:40   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1176  0.0  0.3 387528  8392 ?        Ss   09:40   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1234  0.0  0.0 167452  1320 ?        Ss   09:40   0:00 dnsadmin - dormant mode
root       1235  0.0  0.7 262228 19276 ?        Ss   09:40   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1237  0.0  0.8 209308 19496 ?        Ss   09:40   0:01 tailwatchd
root       1669  0.0  0.0 299272   604 ?        Ss   09:40   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1701  0.0  0.0 130416  1392 ?        SN   09:40   0:00 cpanellogd - sleeping for logs
mysql      1793  1.3  9.2 1463376 223824 ?      Sl   09:40   1:49 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1959  0.0  0.3 266992  7380 ?        Ss   09:40   0:00 /usr/sbin/httpd -k start
root       1962  0.0  0.0  12832   400 ?        S    09:40   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1963  0.0  0.0  12732   368 ?        S    09:40   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1964  0.0  0.0  12876   416 ?        S    09:40   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1968  0.0  0.0  53340   216 ?        S    09:40   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    95863  0.1  0.8 277700 19764 ?        S    11:39   0:01  \_ /usr/sbin/httpd -k start
nobody    97817  0.1  0.8 277896 20048 ?        S    11:41   0:01  \_ /usr/sbin/httpd -k start
nobody    97838  0.1  0.8 277760 19584 ?        S    11:41   0:01  \_ /usr/sbin/httpd -k start
nobody    98183  0.1  0.8 277760 19804 ?        S    11:41   0:01  \_ /usr/sbin/httpd -k start
cloudw     6162  0.0  0.6 353712 15972 ?        S    11:54   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    98199  0.1  0.8 277888 19748 ?        S    11:41   0:00  \_ /usr/sbin/httpd -k start
nobody    98202  0.1  0.8 277760 20044 ?        S    11:41   0:01  \_ /usr/sbin/httpd -k start
nobody    98701  0.1  0.8 277696 19640 ?        S    11:42   0:01  \_ /usr/sbin/httpd -k start
nobody    98715  0.1  0.8 277672 19664 ?        S    11:42   0:00  \_ /usr/sbin/httpd -k start
cloudw     6150  0.0  0.6 353712 15976 ?        S    11:54   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody   101713  0.1  0.7 277916 19252 ?        S    11:46   0:00  \_ /usr/sbin/httpd -k start
nobody   101732  0.1  0.8 277772 19428 ?        S    11:46   0:00  \_ /usr/sbin/httpd -k start
nobody     1718  0.1  0.7 277696 18912 ?        S    11:48   0:00  \_ /usr/sbin/httpd -k start
nobody     3549  0.1  0.7 277896 18552 ?        S    11:50   0:00  \_ /usr/sbin/httpd -k start
nobody     3561  0.0  0.7 277692 18824 ?        S    11:50   0:00  \_ /usr/sbin/httpd -k start
nobody     4093  0.1  0.7 277760 18344 ?        S    11:51   0:00  \_ /usr/sbin/httpd -k start
nobody     4434  0.1  0.7 277760 18608 ?        S    11:51   0:00  \_ /usr/sbin/httpd -k start
nobody     5104  0.1  0.7 277900 17828 ?        S    11:52   0:00  \_ /usr/sbin/httpd -k start
nobody     5159  0.1  0.7 277568 18176 ?        S    11:52   0:00  \_ /usr/sbin/httpd -k start
nobody     5570  0.1  0.7 277868 18328 ?        S    11:53   0:00  \_ /usr/sbin/httpd -k start
nobody     5859  0.1  0.7 277760 17572 ?        S    11:53   0:00  \_ /usr/sbin/httpd -k start
root       2014  0.0  0.3 182100  9096 ?        Ss   09:40   0:07 lfd - sleeping
oysipao+  18294  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+  18303  0.0  0.0   3152    36 ?        S    10:01   0:00  \_ [kworker]
root      56404  0.0  4.8 248036 117540 ?       Ss   10:49   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      64340  0.0  4.9 249300 118760 ?       S    11:00   0:00  \_ spamd child
root      64341  0.0  4.8 248036 116836 ?       S    11:00   0:00  \_ spamd child
## mysql stats
Uptime: 29726  Threads: 4  Questions: 560205  Slow queries: 0  Opens: 4128  Flush tables: 1  Open tables: 2000  Queries per second avg: 18.845
*************************** 1. row ***************************
     Id: 9347
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 9350
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-20' LIMIT 1
*************************** 3. row ***************************
     Id: 9353
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 9357
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.28.208.84 TIME_WAIT
      1 110.249.201.106 TIME_WAIT
      1 142.44.228.239 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 ::1 TIME_WAIT
      1 74.7.228.23 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 192.178.4.101 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 11:54:02 WAT
   Restart Time: Thursday, 20-Nov-2025 03:38:40 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 15 minutes 21 seconds
   Server load: 1.06 0.73 0.63
   Total accesses: 40486 - Total Traffic: 1.0 GB - Total Duration: 63085803
   CPU Usage: u9.02 s3.84 cu526.12 cs414.21 - 3.21% CPU load
   1.36 requests/sec - 36.2 kB/second - 26.5 kB/request - 1558.21 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

WKK_K___KK.KW___K.W..K..K.......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID       Acc     M CPU   SS   Req   Dur    Conn  Child  Slot     Client      Protocol           VHost                                        Request
   0-0  98701  0/192/2103  W 5.07 0     0   1044212  0.0   5.84  64.72 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   1-0  3549   1/40/1960   K 0.94 3     398 44359843 29.4  1.55  52.97 66.249.70.193   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1019512822 HTTP/1.1
   2-0  3561   4/42/1978   K 0.96 3     411 1008140  124.0 1.43  52.39 192.178.4.103   http/1.1 team.cloudware.ng:443      GET /?l=3518159165 HTTP/1.1
   3-0  97817  0/195/2324  _ 5.09 1     23  1057381  0.0   7.45  56.53 116.203.129.16  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue5.php HTTP/1.1
   4-0  98715  2/166/2014  K 3.70 0     331 1029959  65.2  4.24  50.76 192.178.4.102   http/1.1 team.cloudware.ng:443      GET /?l=704737549 HTTP/1.1
   5-0  95863  0/246/1804  _ 6.26 1     33  871685   0.0   6.92  48.06 116.203.129.16  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue2.php HTTP/1.1
   6-0  4434   0/34/1840   _ 1.02 0     367 934386   0.0   0.88  46.54 192.178.4.98    http/1.1 team.cloudware.ng:443      GET /?l=1508449721 HTTP/1.1
   7-0  101713 0/97/1952   _ 2.88 0     0   920034   0.0   2.52  54.98 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   8-0  5570   1/14/1725   K 0.54 0     346 894490   35.1  0.34  59.11 192.178.4.101   http/1.1 team.cloudware.ng:443      GET /?l=802227136 HTTP/1.1
   9-0  5859   1/5/2118    K 0.12 2     6   944487   8.6   0.14  48.34 105.112.219.109 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Akwa%20ibom&lga=Ibesikpo%2
   10-0 -      0/0/1802    . 0.00 1     0   951308   0.0   0.00  46.77 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   11-0 97838  1/238/1920  K 5.48 1     341 866562   34.6  6.72  42.81 192.178.4.96    http/1.1 team.cloudware.ng:443      GET /?l=363660550 HTTP/1.1
   12-0 101732 71/204/1581 W 3.87 0     0   872170   197.0 3.64  41.88 150.136.137.38  http/1.1 health.oyostate.gov.ng:443 GET /wp-admin/index.php HTTP/1.1
   13-0 1718   0/93/1436   _ 2.77 1     27  755790   0.0   2.62  35.98 116.203.134.67  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue4.php HTTP/1.1
   14-0 5104   0/20/1280   _ 0.52 1     26  663070   0.0   0.70  33.86 128.140.8.200   http/1.1 cloudsms.com.ng:443        GET /cron/process_queue3.php HTTP/1.1
   15-0 4093   0/42/1225   _ 1.06 0     428 557808   0.0   1.14  29.26 192.178.4.99    http/1.1 team.cloudware.ng:443      GET /?l=1408418183 HTTP/1.1
   16-0 5159   5/19/962    K 0.33 4     377 482665   155.6 0.61  28.31 192.178.4.104   http/1.1 team.cloudware.ng:443      GET /?l=1685786718 HTTP/1.1
   17-0 -      0/0/1091    . 0.00 9     0   566069   0.0   0.00  28.15 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 98183  5/307/1380  W 5.36 0     0   607224   153.4 5.43  27.08 192.178.4.97    http/1.1 team.cloudware.ng:443      GET /?l=1647726657 HTTP/1.1
   19-0 -      0/0/1298    . 0.00 58    0   565052   0.0   0.00  36.12 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -      0/0/1178    . 0.00 581   0   567414   0.0   0.00  30.61 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 98199  1/172/978   K 4.26 1     366 389061   33.7  4.13  20.06 192.178.4.100   http/1.1 team.cloudware.ng:443      GET /?l=1136856842 HTTP/1.1
   22-0 -      0/0/1016    . 0.00 690   0   425033   0.0   0.00  25.78 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -      0/0/447     . 0.00 441   0   208661   0.0   0.00  10.72 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 98202  1/207/650   K 5.02 2     312 323526   36.5  4.86  15.91 192.178.4.105   http/1.1 team.cloudware.ng:443      GET /?l=3681197466 HTTP/1.1
   25-0 -      0/0/543     . 0.00 1076  0   276383   0.0   0.00  13.91 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -      0/0/14      . 0.00 1618  0   7758     0.0   0.00  0.26  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -      0/0/475     . 0.00 1460  0   233214   0.0   0.00  13.25 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -      0/0/231     . 0.00 862   0   127638   0.0   0.00  5.41  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -      0/0/483     . 0.00 982   0   242729   0.0   0.00  13.15 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -      0/0/150     . 0.00 1601  0   68176    0.0   0.00  2.88  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -      0/0/49      . 0.00 1616  0   18776    0.0   0.00  0.89  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -      0/0/23      . 0.00 1619  0   15181    0.0   0.00  0.31  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -      0/0/5       . 0.00 1981  0   879      0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -      0/0/19      . 0.00 29437 0   9074     0.0   0.00  0.45  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -      0/0/4       . 0.00 29487 0   2048     0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -      0/0/2       . 0.00 29504 0   738      0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -      0/0/8       . 0.00 29494 0   3463     0.0   0.00  0.19  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -      0/0/4       . 0.00 29488 0   1877     0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -      0/0/2       . 0.00 29499 0   599      0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -      0/0/6       . 0.00 29493 0   3057     0.0   0.00  0.15  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -      0/0/3       . 0.00 29489 0   840      0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -      0/0/227     . 0.00 28595 0   110452   0.0   0.00  5.70  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -      0/0/9       . 0.00 29492 0   4927     0.0   0.00  0.24  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -      0/0/154     . 0.00 28970 0   84969    0.0   0.00  4.58  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -      0/0/13      . 0.00 29459 0   6975     0.0   0.00  0.32  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1054
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 14 seconds, (range: 2...57)
   index usage: 18%, cache usage: 25%
   total entries stored since starting: 26270
   total entries replaced since starting: 0
   total entries expired since starting: 25203
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 16 hit, 41 miss
   total removes since starting: 13 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit