403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-23.00.45.txt
 ## swap threshold exceeded
## server overview
2025-11-23.00.45 load[4] mem[67/78] mysql[8/11] httpd[16]
              total        used        free      shared  buff/cache   available
Mem:           2363        1457         128         113         777         607
Swap:          1999        1665         334
 00:45:02 up 13:42,  0 users,  load average: 4.70, 1.53, 0.79
## system overview
top - 00:45:02 up 13:42,  0 users,  load average: 4.70, 1.53, 0.79
Tasks: 203 total,   9 running, 193 sleeping,   0 stopped,   1 zombie
%Cpu(s): 86.5 us, 13.5 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   141484 free,  1482480 used,   796336 buff/cache
KiB Swap:  2047996 total,   343036 free,  1704960 used.   632104 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 73752 healtho+  20   0  465380  72220   4192 R  44.4  3.0   0:03.74 php-fpm: +
 73750 healtho+  20   0  465244  71104   4192 R  33.3  2.9   0:04.14 php-fpm: +
  1916 mysql     20   0 1478280 298560   4040 S  27.8 12.3  10:58.79 /usr/sbin+
 73778 healtho+  20   0  460772  67736   4196 R  22.2  2.8   0:02.40 php-fpm: +
 73763 healtho+  20   0  465248  71096   4192 R  16.7  2.9   0:03.04 php-fpm: +
 73771 healtho+  20   0  462688  69784   4196 R  11.1  2.9   0:03.21 php-fpm: +
     1 root      20   0   44508   3456   1576 S   5.6  0.1   1:07.33 /usr/lib/+
   502 dbus      20   0   58592   1468    776 S   5.6  0.1   0:25.54 /usr/bin/+
  1175 systuser  20   0  157708   3108   1060 S   5.6  0.1   0:00.22 SonarPush+
 73974 cloudw    20   0  353712  15972  10484 S   5.6  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.66 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.96 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:48.05 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.12 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.13 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.93 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:07.51 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:21.53 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   150 root      20   0       0      0      0 S   0.0  0.0   0:01.14 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:02.31 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:02.87 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:02.53 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   39500   6044   5744 S   0.0  0.2   0:28.71 /usr/lib/+
   384 root      20   0   45352    312    296 S   0.0  0.0   0:00.39 /usr/lib/+
   412 root      16  -4   55532    552    424 S   0.0  0.0   0:04.70 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   499 root      20   0   21540    456    368 S   0.0  0.0   0:01.12 /usr/sbin+
   501 root      20   0   24704   1268    888 S   0.0  0.1   0:11.17 /usr/lib/+
   504 rpc       20   0   69256    184    124 S   0.0  0.0   0:00.04 /sbin/rpc+
   514 root      20   0  224148   4984   1064 S   0.0  0.2   0:00.53 queueproc+
   515 polkitd   20   0  610540    860    460 S   0.0  0.0   0:06.46 /usr/lib/+
   521 root      20   0  152780    228    184 S   0.0  0.0   0:00.03 /usr/sbin+
   523 root      20   0   52852    420    304 S   0.0  0.0   0:00.01 /usr/sbin+
   524 nscd      20   0 1336536   2020    884 S   0.0  0.1   0:34.60 /usr/sbin+
   544 root      20   0  195208     24     24 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388     52     48 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0   24208     20      0 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124476    504    376 S   0.0  0.0   0:01.36 /usr/sbin+
   591 root      20   0  108296    136    132 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704    108    108 S   0.0  0.0   0:00.02 /bin/bash
   617 mailnull  20   0   90820   4000    976 S   0.0  0.2   0:00.96 /usr/sbin+
   631 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.52 [loop0]
   707 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [jbd2/loo+
   708 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 memcach+  20   0  342400     28     28 S   0.0  0.0   0:01.05 /usr/bin/+
   912 root      20   0 1277312   5996    140 S   0.0  0.2   0:24.74 /usr/bin/+
   913 systuser  20   0  111864     80      0 S   0.0  0.0   0:00.01 /usr/loca+
   914 root      20   0  572372   1096    512 S   0.0  0.0   0:04.20 /usr/bin/+
   915 root      20   0   51508    720    540 S   0.0  0.0   0:00.73 /usr/sbin+
   916 telegraf  20   0 5654304  36696   5616 S   0.0  1.5   0:26.12 /usr/loca+
   917 systuser  20   0   12756     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   925 systuser  20   0  114016  14520   2544 S   0.0  0.6   0:11.45 /usr/loca+
   926 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   927 root      20   0  111304    492    392 S   0.0  0.0   0:07.14 /usr/sbin+
   928 root      20   0 1276100   8520    104 S   0.0  0.4   0:25.63 /usr/bin/+
   930 root      20   0  445028   1408   1296 S   0.0  0.1   0:01.90 sw-engine+
   931 root      20   0  153404    392    308 S   0.0  0.0   0:01.07 pure-ftpd+
   932 systuser  20   0   10132     40      0 S   0.0  0.0   0:00.02 /usr/loca+
   934 root      20   0  439788   1204    996 S   0.0  0.0   0:01.26 php-fpm: +
   938 root      20   0  388892    716    504 S   0.0  0.0   0:01.14 php-fpm: +
   939 root      20   0 1763124  77336    648 S   0.0  3.2   0:13.85 /usr/loca+
   940 root      20   0  331088   6852   5580 S   0.0  0.3   0:14.18 /usr/sbin+
   949 named     20   0 1055800  43892   2148 S   0.0  1.8   0:21.81 /usr/sbin+
   958 root      20   0  400740   3028    724 S   0.0  0.1   0:05.89 php-fpm: +
   962 root      20   0  261692   9252   2092 S   0.0  0.4   0:07.45 cpsrvd (S+
   969 cpanelc+  20   0   10564   3772   2368 R   0.0  0.2   0:39.15 /usr/loca+
   979 root      20   0  396248    628    452 S   0.0  0.0   0:01.20 php-fpm: +
   985 root      20   0  389508    848    636 S   0.0  0.0   0:01.27 php-fpm: +
  1083 dovenull  20   0   47116   3252   2316 S   0.0  0.1   0:01.55 dovecot/p+
  1084 dovenull  20   0   48232   4368   2532 S   0.0  0.2   0:00.54 dovecot/i+
  1085 dovecot   20   0   10320    548    428 S   0.0  0.0   0:00.37 dovecot/a+
  1086 root      20   0   10452    504    296 S   0.0  0.0   0:00.94 dovecot/l+
  1087 dovenull  20   0   47264   3408   2356 S   0.0  0.1   0:01.78 dovecot/p+
  1088 dovenull  20   0   48324   4180   2296 S   0.0  0.2   0:00.53 dovecot/i+
  1093 root      20   0   24528   2500    484 S   0.0  0.1   0:00.32 dovecot/c+
  1101 dovecot   20   0   13568    556    312 S   0.0  0.0   0:00.13 dovecot/s+
  1142 root      20   0  247932  44664   1124 S   0.0  1.8   0:08.66 /usr/loca+
  1161 dovecot   20   0   41320   1756   1104 S   0.0  0.1   0:02.39 dovecot/a+
  1177 wp-tool+  20   0  387556   5052   1700 S   0.0  0.2   0:00.43 /usr/bin/+
  1178 wp-tool+  20   0  412396  28756   1896 S   0.0  1.2   0:15.50 /usr/bin/+
  1260 root      20   0  262224  23300   5488 S   0.0  1.0   0:05.12 cpdavd - +
  1263 root      20   0  167452   1404    804 S   0.0  0.1   0:00.70 dnsadmin +
  1264 root      20   0  209648  12124   2184 S   0.0  0.5   0:05.80 tailwatchd
  1800 root      20   0  299272    872    496 S   0.0  0.0   0:01.29 php-fpm: +
  1834 root      38  18  130416   1460    776 S   0.0  0.1   0:00.12 cpanellog+
  2048 root      20   0  267052   9076    748 S   0.0  0.4   0:03.39 /usr/sbin+
  2050 root      20   0   12812    440    320 S   0.0  0.0   0:05.10 /usr/loca+
  2051 root      20   0   12732    380    304 S   0.0  0.0   0:04.51 /usr/loca+
  2052 root      20   0   12836    440    308 S   0.0  0.0   0:04.78 /usr/loca+
  2059 root      20   0   53340    180    180 S   0.0  0.0   0:00.05 /usr/loca+
  5633 root      20   0  271996 104344   2780 S   0.0  4.3   0:05.83 spamd chi+
  5634 root      20   0  247932  44156    452 S   0.0  1.8   0:00.03 spamd chi+
  6423 root      20   0       0      0      0 S   0.0  0.0   0:00.32 [kworker/+
 33683 nobody    20   0  277792  21700   5160 S   0.0  0.9   0:05.21 /usr/sbin+
 44973 root      20   0  181268  29244   2344 S   0.0  1.2   0:02.34 lfd - sle+
 46362 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 46761 nobody    20   0  277684  21420   4964 S   0.0  0.9   0:03.49 /usr/sbin+
 47035 nobody    20   0  277652  21412   5088 S   0.0  0.9   0:03.83 /usr/sbin+
 47566 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 47579 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.86 [kworker]
 49361 nobody    20   0  277660  21448   5128 S   0.0  0.9   0:03.13 /usr/sbin+
 51603 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 52077 nobody    20   0  277576  21376   5144 S   0.0  0.9   0:02.99 /usr/sbin+
 54322 nobody    20   0  277636  21332   5060 S   0.0  0.9   0:02.76 /usr/sbin+
 56747 nobody    20   0  277652  21380   5080 S   0.0  0.9   0:02.47 /usr/sbin+
 60844 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 60856 nobody    20   0  277596  21276   5076 S   0.0  0.9   0:01.69 /usr/sbin+
 61970 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 64356 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64998 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 68019 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 69664 nobody    20   0  277916  20820   4436 S   0.0  0.9   0:00.41 /usr/sbin+
 69675 nobody    20   0  277584  20112   4128 S   0.0  0.8   0:00.35 /usr/sbin+
 69676 nobody    20   0  277908  20532   4188 S   0.0  0.8   0:00.60 /usr/sbin+
 70746 nobody    20   0  277584  20396   4348 S   0.0  0.8   0:00.47 /usr/sbin+
 71897 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72001 nobody    20   0  277584  19940   3912 S   0.0  0.8   0:00.30 /usr/sbin+
 72173 nobody    20   0  277584  20108   4096 S   0.0  0.8   0:00.11 /usr/sbin+
 72689 nobody    20   0  277920  20368   4188 S   0.0  0.8   0:00.18 /usr/sbin+
 72700 nobody    20   0  277796  19956   3772 S   0.0  0.8   0:00.17 /usr/sbin+
 72766 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 73259 nobody    20   0  277520  20020   4040 S   0.0  0.8   0:00.05 /usr/sbin+
 73383 nobody    20   0  277520  19380   3484 S   0.0  0.8   0:00.08 /usr/sbin+
 73406 nobody    20   0  277528  19808   3880 S   0.0  0.8   0:00.06 /usr/sbin+
 73574 nobody    20   0  277920  19736   3628 S   0.0  0.8   0:00.05 /usr/sbin+
 73581 nobody    20   0  277528  19436   3528 S   0.0  0.8   0:00.03 /usr/sbin+
 73582 nobody    20   0  277528  19424   3516 S   0.0  0.8   0:00.05 /usr/sbin+
 73648 worencom  20   0   38488   3980   3044 S   0.0  0.2   0:00.00 dovecot/i+
 73730 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 73794 nobody    20   0  277528  18732   3008 S   0.0  0.8   0:00.00 /usr/sbin+
 73795 mailnull  20   0   91208   5684   2456 S   0.0  0.2   0:00.00 /usr/sbin+
 73810 wp-tool+  20   0  445028    324    196 S   0.0  0.0   0:00.00 sw-engine+
 73813 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 73814 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 73816 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: unk+
 73840 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 73841 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 73842 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73844 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73846 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73847 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73848 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73850 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73852 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 73855 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73862 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 73864 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 73866 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 73867 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 73868 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 73873 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 73874 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 73876 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 73877 root      20   0   20164    984    788 S   0.0  0.0   0:00.00 jailshell+
 73878 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 73880 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 73882 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 73886 root      20   0  188220  11100   5148 S   0.0  0.5   0:00.01 /usr/loca+
 73891 root      20   0  113284   1464   1256 S   0.0  0.1   0:00.00 bash /usr+
 73908 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 73913 nigeria   20   0  404052  16136  10380 S   0.0  0.7   0:00.05 /opt/cpan+
 73934 root      20   0  160224   2344   1636 S   0.0  0.1   0:00.00 top -n 2 +
 73951 root      20   0  111304   4264   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 73962 cloudw    20   0  353712  15968  10484 S   0.0  0.7   0:00.01 /opt/cpan+
 73976 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 73988 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 73989 cloudsms  20   0   20164    256      0 R   0.0  0.0   0:00.00 /usr/loca+
 73990 root      20   0  113284    208      0 R   0.0  0.0   0:00.00 bash /usr+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov22   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov22   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov22   0:48  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov22   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov22   0:07  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov22   0:21  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov22   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [deferwq]
root        150  0.0  0.0      0     0 ?        S    Nov22   0:01  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [scsi_eh_1]
root        252  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov22   0:02  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   Nov22   0:02  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov22   0:02  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [xprtiod]
root        631  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov22   0:02  \_ [loop0]
root        707  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [jbd2/loop0-8]
root        708  0.0  0.0      0     0 ?        S<   Nov22   0:00  \_ [ext4-rsv-conver]
root       6423  0.0  0.0      0     0 ?        S    Nov22   0:00  \_ [kworker/u200:1]
root      46362  0.0  0.0      0     0 ?        S    00:02   0:00  \_ [kworker/0:0]
root      51603  0.0  0.0      0     0 ?        S    00:10   0:00  \_ [kworker/1:0]
root      60844  0.0  0.0      0     0 ?        S    00:24   0:00  \_ [kworker/0:1]
root      61970  0.0  0.0      0     0 ?        S    00:26   0:00  \_ [kworker/u200:0]
root      64356  0.0  0.0      0     0 ?        S    00:30   0:00  \_ [kworker/1:4]
root      64998  0.0  0.0      0     0 ?        S    00:31   0:00  \_ [kworker/0:2]
root      68019  0.0  0.0      0     0 ?        S    00:36   0:00  \_ [kworker/1:3]
root      71897  0.0  0.0      0     0 ?        S    00:42   0:00  \_ [kworker/1:1]
root      72766  0.0  0.0      0     0 ?        S    00:43   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44508  3456 ?        Ss   Nov22   1:07 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.2  39500  6044 ?        Ss   Nov22   0:28 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   312 ?        Ss   Nov22   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   552 ?        S<sl Nov22   0:04 /sbin/auditd
root        499  0.0  0.0  21540   456 ?        Ss   Nov22   0:01 /usr/sbin/irqbalance --foreground
root        501  0.0  0.0  24704  1268 ?        Ss   Nov22   0:11 /usr/lib/systemd/systemd-logind
dbus        502  0.0  0.0  58592  1468 ?        Ss   Nov22   0:25 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         504  0.0  0.0  69256   184 ?        Ss   Nov22   0:00 /sbin/rpcbind -w
root        514  0.0  0.2 224148  4984 ?        Ss   Nov22   0:00 queueprocd - waiting up to 60s to process a task
polkitd     515  0.0  0.0 610540   860 ?        Ssl  Nov22   0:06 /usr/lib/polkit-1/polkitd --no-debug
root        521  0.0  0.0 152780   228 ?        Ss   Nov22   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        523  0.0  0.0  52852   420 ?        Ss   Nov22   0:00 /usr/sbin/smartd -n -q never
nscd        524  0.0  0.0 1336536 2020 ?        Ssl  Nov22   0:34 /usr/sbin/nscd
root        544  0.0  0.0 195208    24 ?        Ssl  Nov22   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388    52 ?        Ss   Nov22   0:00 /usr/sbin/acpid
root        569  0.0  0.0  24208    20 ?        Ss   Nov22   0:00 /usr/sbin/atd -f
root        571  0.0  0.0 124476   504 ?        Ss   Nov22   0:01 /usr/sbin/crond -n
root      73840  0.0  0.0 183044  2140 ?        S    00:45   0:00  \_ /usr/sbin/CROND -n
root      73874  0.0  0.0 113284  1212 ?        Ss   00:45   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      73891  0.0  0.0 113284  1464 ?        S    00:45   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      73994  0.0  0.0 113284   208 ?        R    00:45   0:00  |           \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      73841  0.0  0.0 183044  2140 ?        S    00:45   0:00  \_ /usr/sbin/CROND -n
root      73862  0.0  0.0 113284  1212 ?        Ss   00:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      73864  0.0  0.0 108052   356 ?        S    00:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      73866  0.0  0.0 113288  1520 ?        S    00:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      73991  0.0  0.0 153840  2096 ?        R    00:45   0:00  |               \_ ps auxf
root      73842  0.0  0.0 183044  2144 ?        S    00:45   0:00  \_ /usr/sbin/CROND -n
root      73880  0.0  0.0  20164   808 ?        Ss   00:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      73844  0.0  0.0 183044  2144 ?        S    00:45   0:00  \_ /usr/sbin/CROND -n
root      73882  0.0  0.0  20164   808 ?        Ss   00:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      73846  0.0  0.0 183044  2144 ?        S    00:45   0:00  \_ /usr/sbin/CROND -n
root      73876  0.0  0.0  20164   804 ?        Ss   00:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      73847  0.0  0.0 183044  2144 ?        S    00:45   0:00  \_ /usr/sbin/CROND -n
root      73873  0.0  0.0  20164   808 ?        Ss   00:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      73848  0.0  0.0 183044  2144 ?        S    00:45   0:00  \_ /usr/sbin/CROND -n
root      73877  0.0  0.0  20164   984 ?        Ss   00:45   0:00  |   \_ jailshell (cloudsms) [73988] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  73988  0.0  0.0  20164   256 ?        S    00:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  73989  0.0  0.0 113284  1208 ?        S    00:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  73992  1.0  0.6 403464 14572 ?        R    00:45   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue5.php
root      73850  0.0  0.0 183044  2144 ?        S    00:45   0:00  \_ /usr/sbin/CROND -n
root      73867  0.0  0.0  20164   808 ?        Ss   00:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      73852  0.0  0.0 183044  2140 ?        S    00:45   0:00  \_ /usr/sbin/CROND -n
root      73868  0.0  0.0 113284  1212 ?        Ss   00:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      73886  0.5  0.4 188220 11100 ?        S    00:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      73934  0.0  0.0 160224  2344 ?        S    00:45   0:00  |           \_ top -n 2 -b -c
root      73855  0.0  0.0 183044  2144 ?        S    00:45   0:00  \_ /usr/sbin/CROND -n
root      73878  0.0  0.0  20164   964 ?        Ss   00:45   0:00      \_ jailshell (nigeria) [73908] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   73908  0.0  0.0  20164   260 ?        S    00:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   73913  2.5  0.6 404052 16136 ?        S    00:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        591  0.0  0.0 108296   136 tty1     Ss+  Nov22   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704   108 ttyS0    Ss+  Nov22   0:00 /bin/bash
mailnull    617  0.0  0.1  90820  4000 ?        Ss   Nov22   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  73795  0.0  0.2  91208  5684 ?        S    00:44   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
memcach+    911  0.0  0.0 342400    28 ?        Ssl  Nov22   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        912  0.0  0.2 1277312 5996 ?        Ssl  Nov22   0:24 /usr/bin/checkstatus
systuser    913  0.0  0.0 111864    80 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        914  0.0  0.0 572372  1096 ?        Ssl  Nov22   0:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        915  0.0  0.0  51508   720 ?        Ss   Nov22   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1083  0.0  0.1  47116  3252 ?        S    Nov22   0:01  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  48232  4368 ?        S    Nov22   0:00  \_ dovecot/imap-login
dovecot    1085  0.0  0.0  10320   548 ?        S    Nov22   0:00  \_ dovecot/anvil
root       1086  0.0  0.0  10452   504 ?        S    Nov22   0:00  \_ dovecot/log
dovenull   1087  0.0  0.1  47264  3408 ?        S    Nov22   0:01  \_ dovecot/pop3-login
dovenull   1088  0.0  0.1  48324  4180 ?        S    Nov22   0:00  \_ dovecot/imap-login
root       1093  0.0  0.1  24528  2500 ?        S    Nov22   0:00  \_ dovecot/config
dovecot    1101  0.0  0.0  13568   556 ?        S    Nov22   0:00  \_ dovecot/stats
dovecot    1161  0.0  0.0  41320  1756 ?        S    Nov22   0:02  \_ dovecot/auth
worencom  73648  0.0  0.1  38488  3980 ?        S    00:44   0:00  \_ dovecot/imap
root      73730  0.0  0.1  41052  2728 ?        S    00:44   0:00  \_ dovecot/auth -w
telegraf    916  0.0  1.5 5654304 36696 ?       SLsl Nov22   0:26 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    917  0.0  0.0  12756    56 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    925  0.0  0.5 114016 14520 ?        Ssl  Nov22   0:11 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    926  0.0  0.0 112524    72 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        927  0.0  0.0 111304   492 ?        Ss   Nov22   0:07 /usr/sbin/sshd -D
root      73814  0.0  0.2 157100  5076 ?        Ss   00:44   0:00  \_ sshd: unknown [priv]
sshd      73816  0.0  0.1 115644  2632 ?        S    00:44   0:00  |   \_ sshd: unknown [net]
root      73951  0.0  0.1 111304  4264 ?        Ss   00:45   0:00  \_ sshd: [accepted]
root        928  0.0  0.3 1276100 8520 ?        Ssl  Nov22   0:25 /usr/bin/cspdaemon
root        930  0.0  0.0 445028  1408 ?        Ss   Nov22   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  73810  0.0  0.0 445028   324 ?        S    00:44   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        931  0.0  0.0 153404   392 ?        Ss   Nov22   0:01 pure-ftpd (SERVER)
systuser    932  0.0  0.0  10132    40 ?        Ssl  Nov22   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.0 439788  1204 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        938  0.0  0.0 388892   716 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        939  0.0  3.1 1763124 77336 ?       Ssl  Nov22   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        940  0.0  0.2 331088  6852 ?        Ssl  Nov22   0:14 /usr/sbin/rsyslogd -n
named       949  0.0  1.8 1055800 43892 ?       Ssl  Nov22   0:21 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        958  0.0  0.1 400740  3028 ?        Ss   Nov22   0:05 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  73750 34.6  2.9 465244 71368 ?        R    00:44   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  73752 31.3  2.8 462820 69848 ?        R    00:44   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  73763 30.6  2.9 465248 71360 ?        R    00:44   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  73771 36.0  2.8 462688 69784 ?        R    00:44   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  73778 30.0  2.7 460772 67736 ?        R    00:44   0:02  \_ php-fpm: pool health_oyostate_gov_ng
root        962  0.0  0.3 261692  9252 ?        Ss   Nov22   0:07 cpsrvd (SSL) - waiting for connections                   
root      73813  0.0  0.0      0     0 ?        Z    00:44   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+    969  0.0  0.1  10564  3772 ?        Rs   Nov22   0:39 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        979  0.0  0.0 396248   628 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        985  0.0  0.0 389508   848 ?        Ss   Nov22   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1142  0.0  1.8 247932 44664 ?        Ss   Nov22   0:08 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5633  0.0  4.3 271996 104344 ?       S    Nov22   0:05  \_ spamd child
root       5634  0.0  1.8 247932 44156 ?        S    Nov22   0:00  \_ spamd child
systuser   1175  0.0  0.1 157708  3108 ?        S    Nov22   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.2 387556  5052 ?        Ss   Nov22   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  1.1 412396 28756 ?        Ss   Nov22   0:15 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1260  0.0  0.9 262224 23300 ?        Ss   Nov22   0:05 cpdavd - accepting connections on: 2091, 2077, 2078
root       1263  0.0  0.0 167452  1404 ?        Ss   Nov22   0:00 dnsadmin - dormant mode
root       1264  0.0  0.5 209648 12124 ?        Ss   Nov22   0:05 tailwatchd
root       1800  0.0  0.0 299272   872 ?        Ss   Nov22   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1834  0.0  0.0 130416  1460 ?        SN   Nov22   0:00 cpanellogd - sleeping for logs
mysql      1916  1.3 12.3 1478280 298560 ?      Sl   Nov22  10:58 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2048  0.0  0.3 267052  9076 ?        Ss   Nov22   0:03 /usr/sbin/httpd -k start
root       2050  0.0  0.0  12812   440 ?        S    Nov22   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2051  0.0  0.0  12732   380 ?        S    Nov22   0:04  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2052  0.0  0.0  12836   440 ?        S    Nov22   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2059  0.0  0.0  53340   180 ?        S    Nov22   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    33683  0.1  0.8 277792 21700 ?        S    Nov22   0:05  \_ /usr/sbin/httpd -k start
nobody    46761  0.1  0.8 277684 21420 ?        S    00:02   0:03  \_ /usr/sbin/httpd -k start
nobody    47035  0.1  0.8 277652 21412 ?        S    00:03   0:03  \_ /usr/sbin/httpd -k start
nobody    49361  0.1  0.8 277660 21448 ?        S    00:06   0:03  \_ /usr/sbin/httpd -k start
nobody    52077  0.1  0.8 277576 21376 ?        S    00:10   0:02  \_ /usr/sbin/httpd -k start
nobody    54322  0.1  0.8 277636 21332 ?        S    00:14   0:02  \_ /usr/sbin/httpd -k start
nobody    56747  0.1  0.8 277652 21380 ?        S    00:17   0:02  \_ /usr/sbin/httpd -k start
nobody    60856  0.1  0.8 277596 21276 ?        S    00:24   0:01  \_ /usr/sbin/httpd -k start
nobody    69664  0.1  0.8 277916 20820 ?        S    00:38   0:00  \_ /usr/sbin/httpd -k start
nobody    69675  0.0  0.8 277584 20112 ?        S    00:38   0:00  \_ /usr/sbin/httpd -k start
cloudw    73962  1.0  0.6 353712 15968 ?        S    00:45   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    69676  0.1  0.8 277908 20532 ?        S    00:38   0:00  \_ /usr/sbin/httpd -k start
nobody    70746  0.1  0.8 277584 20396 ?        S    00:40   0:00  \_ /usr/sbin/httpd -k start
nobody    72001  0.1  0.8 277584 19940 ?        S    00:42   0:00  \_ /usr/sbin/httpd -k start
nobody    72173  0.0  0.8 277584 20108 ?        S    00:42   0:00  \_ /usr/sbin/httpd -k start
nobody    72689  0.1  0.8 277920 20368 ?        S    00:42   0:00  \_ /usr/sbin/httpd -k start
nobody    72700  0.1  0.8 277796 19956 ?        S    00:42   0:00  \_ /usr/sbin/httpd -k start
nobody    73259  0.0  0.8 277520 20020 ?        S    00:43   0:00  \_ /usr/sbin/httpd -k start
nobody    73383  0.1  0.8 277520 19380 ?        S    00:44   0:00  \_ /usr/sbin/httpd -k start
nobody    73406  0.1  0.8 277528 19808 ?        S    00:44   0:00  \_ /usr/sbin/httpd -k start
cloudw    73974  1.0  0.6 353712 15972 ?        S    00:45   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    73574  0.1  0.8 277920 19736 ?        S    00:44   0:00  \_ /usr/sbin/httpd -k start
nobody    73581  0.0  0.8 277528 19436 ?        S    00:44   0:00  \_ /usr/sbin/httpd -k start
nobody    73582  0.1  0.8 277528 19424 ?        S    00:44   0:00  \_ /usr/sbin/httpd -k start
nobody    73794  0.0  0.7 277528 18732 ?        S    00:44   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47566  0.0  0.0   3148   416 ?        Ss   Nov22   0:00 [kworker]
oysipao+  47579  0.0  0.0   3152   424 ?        S    Nov22   0:00  \_ [kworker]
root      44973  0.0  1.2 181268 29244 ?        Ss   00:00   0:02 lfd - sleeping
## mysql stats
Uptime: 49317  Threads: 7  Questions: 4196969  Slow queries: 0  Opens: 9967  Flush tables: 1  Open tables: 2000  Queries per second avg: 85.101
*************************** 1. row ***************************
     Id: 65790
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 65792
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 65797
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 65799
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 65800
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 6. row ***************************
     Id: 65802
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 7. row ***************************
     Id: 65805
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 101.198.0.155 TIME_WAIT
      1 101.198.0.172 TIME_WAIT
      1 101.198.0.181 TIME_WAIT
      1 101.198.0.183 TIME_WAIT
      1 104.210.140.132 TIME_WAIT
      1 104.210.140.140 TIME_WAIT
      1 114.119.157.111 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 52.167.144.141 TIME_WAIT
      1 52.167.144.169 TIME_WAIT
      1 54.39.136.76 TIME_WAIT
      1 74.7.244.61 TIME_WAIT
      2 101.198.0.156 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     11 48.210.12.181 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 23-Nov-2025 00:45:03 WAT
   Restart Time: Saturday, 22-Nov-2025 11:03:10 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 13 hours 41 minutes 52 seconds
   Server load: 4.70 1.53 0.79
   Total accesses: 226795 - Total Traffic: 5.4 GB - Total Duration: 121379543
   CPU Usage: u20.91 s10.95 cu2781.06 cs2180.35 - 10.1% CPU load
   4.6 requests/sec - 113.9 kB/second - 24.8 kB/request - 535.195 ms/request
   18 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

WKW__WW_WWWWK.K_WW_WKKKK........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc      M CPU    SS   Req    Dur   Conn  Child  Slot      Client      Protocol           VHost                        Request
   0-0  56747 0/457/12053  W 10.16 1    0     6178379 0.0   10.80 289.47 158.173.155.135 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   1-0  54322 7/508/11866  K 11.38 0    667   6180640 213.5 13.12 290.19 192.178.4.101   http/1.1 team.cloudware.ng:443      GET /?l=2856667759 HTTP/1.1
   2-0  52077 7/549/11678  W 12.72 0    0     6348827 217.0 14.96 280.32 192.178.4.98    http/1.1 team.cloudware.ng:443      GET /?l=2897677723 HTTP/1.1
   3-0  73259 0/27/11357   _ 0.09  0    0     5927180 0.0   0.13  281.35 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   4-0  46761 0/818/11431  _ 13.57 0    1433  5964963 0.0   16.75 283.25 158.173.155.135 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   5-0  70746 0/91/11617   W 1.97  0    0     6055356 0.0   2.06  307.82 158.173.155.135 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   6-0  73794 0/2/10890    W 0.00  1    0     5505871 0.0   0.00  272.44 158.173.155.135 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   7-0  47035 0/714/11215  _ 14.96 0    1454  5809613 0.0   18.53 273.52 158.173.155.135 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   8-0  72689 0/43/10908   W 0.66  0    0     5503859 0.0   0.73  260.39 158.173.155.135 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   9-0  72001 0/57/9775    W 1.21  1    0     5132477 0.0   1.27  244.03 158.173.155.135 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   10-0 69664 0/97/10202   W 1.51  0    0     5263244 0.0   2.47  242.08 158.173.155.135 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   11-0 33683 0/1006/10149 W 19.85 0    0     5189412 0.0   22.71 245.37 158.173.155.135 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   12-0 69675 5/65/10052   K 1.39  0    527   5257115 157.3 1.66  254.81 192.178.4.99    http/1.1 team.cloudware.ng:443      GET /?l=3556929311 HTTP/1.1
   13-0 -     0/0/9355     . 0.00  27   0     4797984 0.0   0.00  225.03 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-0 49361 4/633/8632   K 12.73 3    487   4433063 123.6 12.92 206.71 192.178.4.100   http/1.1 team.cloudware.ng:443      GET /?l=440183995 HTTP/1.1
   15-0 60856 0/381/6789   _ 6.44  0    1564  3461103 0.0   7.25  174.54 158.173.155.135 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   16-0 69676 0/111/7327   W 2.48  0    0     3735016 0.0   2.53  171.41 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   17-0 72173 0/34/6677    W 0.25  1    0     3453290 0.0   0.42  165.96 158.173.155.135 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   18-0 72700 0/46/5596    _ 0.58  0    1523  3036432 0.0   0.63  134.66 158.173.155.135 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   19-0 73383 0/20/6111    W 0.32  0    0     3013078 0.0   0.34  141.25 158.173.155.135 http/1.1 health.oyostate.gov.ng:443 POST /xmlrpc.php HTTP/1.1
   20-0 73406 1/26/5070    K 0.09  0    524   2750999 35.8  0.16  119.23 192.178.4.97    http/1.1 team.cloudware.ng:443      GET /?l=1580052994 HTTP/1.1
   21-0 73574 3/20/3779    K 0.09  0    505   2246471 94.6  0.14  91.40  192.178.4.103   http/1.1 team.cloudware.ng:443      GET /?l=3762140981 HTTP/1.1
   22-0 73581 1/18/3047    K 0.03  3    450   1771058 33.9  0.07  81.81  192.178.4.96    http/1.1 team.cloudware.ng:443      GET /?l=3976619132 HTTP/1.1
   23-0 73582 3/16/2379    K 0.11  2    468   1244372 95.3  0.16  48.08  192.178.4.104   http/1.1 team.cloudware.ng:443      GET /?l=4104747636 HTTP/1.1
   24-0 -     0/0/1411     . 0.00  3759 0     1067698 0.0   0.00  32.76  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/2419     . 0.00  3771 0     1072704 0.0   0.00  54.16  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/1551     . 0.00  4122 0     994271  0.0   0.00  36.51  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/1178     . 0.00  4577 0     781587  0.0   0.00  33.93  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/1507     . 0.00  4354 0     732468  0.0   0.00  31.91  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/1468     . 0.00  3315 0     896900  0.0   0.00  31.64  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/1287     . 0.00  4583 0     794356  0.0   0.00  30.29  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/528      . 0.00  4573 0     402740  0.0   0.00  9.57   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/518      . 0.00  6257 0     501315  0.0   0.00  10.45  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/208      . 0.00  5668 0     237017  0.0   0.00  4.05   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/585      . 0.00  6256 0     401414  0.0   0.00  8.75   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/643      . 0.00  5635 0     507088  0.0   0.00  14.62  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/74       . 0.00  6228 0     128926  0.0   0.00  0.43   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/181      . 0.00  6224 0     172759  0.0   0.00  4.15   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/655      . 0.00  6252 0     329138  0.0   0.00  12.59  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/543      . 0.00  5336 0     484400  0.0   0.00  12.38  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/224      . 0.00  6212 0     279837  0.0   0.00  4.33   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/409      . 0.00  6247 0     303799  0.0   0.00  9.44   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/118      . 0.00  6097 0     273924  0.0   0.00  1.34   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/73       . 0.00  6250 0     237945  0.0   0.00  0.86   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/289      . 0.00  6241 0     301814  0.0   0.00  6.09   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/180      . 0.00  6244 0     137352  0.0   0.00  1.38   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/60       . 0.00  6240 0     180509  0.0   0.00  0.80   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/67       . 0.00  6262 0     226531  0.0   0.00  1.33   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/203      . 0.00  6253 0     142085  0.0   0.00  4.09   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/284      . 0.00  5904 0     181603  0.0   0.00  4.73   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/82       . 0.00  6266 0     44788   0.0   0.00  1.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/8        . 0.00  6226 0     43835   0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/9        . 0.00  6235 0     45747   0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/29       . 0.00  6233 0     44492   0.0   0.00  0.32   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/536      . 0.00  4350 0     268842  0.0   0.00  11.18  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/4        . 0.00  6270 0     23627   0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/9        . 0.00  6229 0     47344   0.0   0.00  0.17   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/7        . 0.00  6231 0     44159   0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/43       . 0.00  6272 11655 23366   0.0   0.00  0.07   45.94.58.4      http/1.1 cloudware.ng:80            GET /requirements.txt HTTP/1.1
   59-0 -     0/0/141      . 0.00  5633 0     113874  0.0   0.00  3.52   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/132      . 0.00  6263 0     76946   0.0   0.00  2.87   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/6        . 0.00  6261 0     3701    0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/204      . 0.00  5820 0     97395   0.0   0.00  2.67   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/66       . 0.00  6245 0     27806   0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/11       . 0.00  6238 0     25454   0.0   0.00  0.16   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/9        . 0.00  6258 0     28822   0.0   0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/27       . 0.00  7784 0     28      0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/42       . 0.00  7789 0     46      0.0   0.00  0.05   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/3        . 0.00  7827 0     1240    0.0   0.00  0.06   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/2        . 0.00  7826 0     703     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/5        . 0.00  7819 0     1790    0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/47       . 0.00  7767 0     737     0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/1        . 0.00  7838 0     0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/458      . 0.00  6373 0     263682  0.0   0.00  8.36   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/9        . 0.00  7815 0     4803    0.0   0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/1        . 0.00  7837 0     0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/23       . 0.00  7779 0     2942    0.0   0.00  0.21   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/200      . 0.00  7135 0     87870   0.0   0.00  4.44   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/63       . 0.00  7639 0     25484   0.0   0.00  1.24   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1263
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 8 seconds, (range: 1...30)
   index usage: 22%, cache usage: 30%
   total entries stored since starting: 162972
   total entries replaced since starting: 0
   total entries expired since starting: 161649
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 435 miss
   total removes since starting: 60 hit, 189 miss
Youez - 2016 - github.com/yon3zu
LinuXploit