403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.48
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /proc/15361/root/var/log/loadwatch/
Upload File :
[ Back ]
Current File : /proc/15361/root/var/log/loadwatch/2026-01-08.18.39.txt
 ## swap threshold exceeded
## server overview
2026-01-08.18.39 load[8] mem[73/45] mysql[11/26] httpd[20]
              total        used        free      shared  buff/cache   available
Mem:           2363        1615          88          25         659         543
Swap:          4047        1915        2132
 18:39:02 up 45 days, 21:27,  0 users,  load average: 8.67, 4.29, 3.02
## system overview
top - 18:39:03 up 45 days, 21:27,  0 users,  load average: 8.67, 4.29, 3.02
Tasks: 215 total,  13 running, 200 sleeping,   0 stopped,   2 zombie
%Cpu(s): 81.2 us, 18.8 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    80844 free,  1656668 used,   682788 buff/cache
KiB Swap:  4145144 total,  2183788 free,  1961356 used.   554120 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 58897 cloudw    20   0  570508 105436   6816 R  33.3  4.4   0:02.43 php-fpm: +
 59109 workflo+  20   0  438188  44384   4196 S  26.7  1.8   0:00.49 php-fpm: +
 19908 mysql     20   0 1483940 262772   2656 S  20.0 10.9 153:04.00 /usr/sbin+
 59017 workflo+  20   0  446892  51892   4192 R  20.0  2.1   0:00.85 php-fpm: +
 59018 workflo+  20   0  444332  50564   4196 R  20.0  2.1   0:00.82 php-fpm: +
 59002 cloudw    20   0  549384  84328   6796 R  13.3  3.5   0:00.96 php-fpm: +
 59016 workflo+  20   0  446892  51884   4192 R  13.3  2.1   0:00.84 php-fpm: +
 58473 healtho+  20   0  465248  70184   3288 R   6.7  2.9   0:04.38 php-fpm: +
 59110 workflo+  20   0  425768  32088   4188 R   6.7  1.3   0:00.34 php-fpm: +
 59235 root      20   0  160220   2064   1584 R   6.7  0.1   0:00.01 top -bcn1
     1 root      20   0  192272   3404   1488 S   0.0  0.1 110:29.92 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:05.82 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   6:06.11 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   1:47.52 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0  65:33.35 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:11.22 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:11.24 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   2:00.65 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   8:38.59 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:01.44 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.33 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0  69:53.71 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:07.78 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   108 root      20   0       0      0      0 S   0.0  0.0   1:07.85 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   9:06.66 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   7:43.60 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   4:14.60 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   39500   7276   7052 S   0.0  0.3  33:21.69 /usr/lib/+
   383 root      20   0   45352      8      4 S   0.0  0.0   0:00.45 /usr/lib/+
   412 root      16  -4   55532    120      0 S   0.0  0.0   4:49.03 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   487 root      20   0   21540    348    260 S   0.0  0.0   1:41.37 /usr/sbin+
   489 root      20   0   24896   1112    788 S   0.0  0.0  17:28.06 /usr/lib/+
   494 polkitd   20   0  610664   1108    612 S   0.0  0.0   9:44.12 /usr/lib/+
   496 root      20   0   52852      4      0 S   0.0  0.0   0:00.61 /usr/sbin+
   503 dbus      20   0   58748   1292    600 S   0.0  0.1  38:20.51 /usr/bin/+
   511 rpc       20   0   69256     76     16 S   0.0  0.0   0:04.14 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   557 root      20   0   24208      4      0 S   0.0  0.0   0:00.11 /usr/sbin+
   558 root      20   0  124508    416    284 S   0.0  0.0   2:23.61 /usr/sbin+
   576 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   577 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   694 root       0 -20       0      0      0 S   0.0  0.0   3:52.15 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:16.38 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   928 systuser  20   0   11540     48      0 S   0.0  0.0   0:02.26 /usr/loca+
   929 systuser  20   0   12756     60      0 S   0.0  0.0   0:02.23 /usr/loca+
   931 systuser  20   0  112524     68      0 S   0.0  0.0   0:02.17 /usr/loca+
   932 systuser  20   0  111608     68      0 S   0.0  0.0   0:02.07 /usr/loca+
   935 root      20   0  572372    836    296 S   0.0  0.0   6:09.46 /usr/bin/+
   937 root      20   0  111304    364    256 S   0.0  0.0   7:08.67 /usr/sbin+
   939 root      20   0 1350728   9760      0 S   0.0  0.4   3:03.68 /usr/bin/+
   952 root      20   0  261812   5392    888 S   0.0  0.2  13:52.13 cpsrvd (S+
   953 root      20   0  331088   6492   5944 S   0.0  0.3  17:59.81 /usr/sbin+
   972 memcach+  20   0  342400      0      0 S   0.0  0.0   1:37.34 /usr/bin/+
   974 root      20   0 1277312   2284      4 S   0.0  0.1   0:40.43 /usr/bin/+
   980 systuser  20   0  114272  11336   2640 S   0.0  0.5  20:07.33 /usr/loca+
  1144 systuser  20   0  157704   2884    896 S   0.0  0.1   0:21.24 SonarPush+
  1188 named     20   0 1185868  24716    460 S   0.0  1.0  19:48.91 /usr/sbin+
  1239 root      20   0  167452   1204    652 S   0.0  0.0   1:06.91 dnsadmin +
  1243 root      20   0  209952   7956    892 S   0.0  0.3   8:27.73 tailwatchd
  1244 root      20   0  183900   3272     44 S   0.0  0.1   8:27.24 cpdavd - +
  4859 root      20   0  249992  12520    328 S   0.0  0.5   0:00.08 spamd chi+
  7370 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 12995 root      20   0 1483072  22092      0 S   0.0  0.9   2:45.13 /usr/loca+
 15361 oysipao+  20   0    3148      4      0 S   0.0  0.0   0:00.00 [kworker]
 15368 oysipao+  20   0    3156     36      0 S   0.0  0.0   1:40.34 [kworker]
 16217 root      20   0   51656    316    152 S   0.0  0.0   0:05.07 /usr/sbin+
 16226 dovecot   20   0   10320    192     80 S   0.0  0.0   0:01.53 dovecot/a+
 16283 root      20   0  153404    212    128 S   0.0  0.0   0:09.40 pure-ftpd+
 16284 root      20   0  152780     36      0 S   0.0  0.0   0:00.34 /usr/sbin+
 17778 dovenull  20   0   47120    932    364 S   0.0  0.0   0:01.54 dovecot/p+
 17779 dovenull  20   0   48144   1028    152 S   0.0  0.0   0:00.59 dovecot/i+
 17780 root      20   0   10452    580    384 S   0.0  0.0   0:00.83 dovecot/l+
 17781 dovenull  20   0   47300   1172    524 S   0.0  0.0   0:01.10 dovecot/p+
 17782 dovenull  20   0   48488   2572   1444 S   0.0  0.1   0:00.78 dovecot/i+
 17783 root      20   0   24528   1976    260 S   0.0  0.1   0:00.43 dovecot/c+
 17784 dovecot   20   0   13568    308    120 S   0.0  0.0   0:00.20 dovecot/s+
 17785 dovecot   20   0   41156   1108    620 S   0.0  0.0   0:01.91 dovecot/a+
 17786 root      20   0   12872    260      0 S   0.0  0.0   0:05.16 /usr/loca+
 17787 root      20   0   12732    160     80 S   0.0  0.0   0:04.21 /usr/loca+
 17788 root      20   0   12916    464    148 S   0.0  0.0   0:04.80 /usr/loca+
 17789 root      20   0   53252     20     20 S   0.0  0.0   0:00.05 /usr/loca+
 20014 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kworker/+
 27389 root      20   0       0      0      0 S   0.0  0.0   0:00.23 [kworker/+
 40786 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 43112 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 51998 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 52623 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 53427 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 56859 nobody    20   0  277512  16408   2440 S   0.0  0.7   0:00.42 /usr/sbin+
 57070 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 57259 nobody    20   0  277524  14120    224 S   0.0  0.6   0:00.03 /usr/sbin+
 57514 nobody    20   0  277512  14052    228 S   0.0  0.6   0:00.03 /usr/sbin+
 57634 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 57666 nobody    20   0  277628  17040   2992 S   0.0  0.7   0:00.04 /usr/sbin+
 57849 nobody    20   0  277596  16916   3016 S   0.0  0.7   0:00.05 /usr/sbin+
 57857 nobody    20   0  277580  17460   3516 S   0.0  0.7   0:00.05 /usr/sbin+
 57880 nobody    20   0  277776  17732   3612 S   0.0  0.7   0:00.03 /usr/sbin+
 57885 nobody    20   0  277584  17048   3356 S   0.0  0.7   0:00.03 /usr/sbin+
 57946 nobody    20   0  277612  16828   2964 S   0.0  0.7   0:00.05 /usr/sbin+
 58159 nobody    20   0  277584  16988   3096 S   0.0  0.7   0:00.06 /usr/sbin+
 58212 nobody    20   0  277616  17188   3360 S   0.0  0.7   0:00.03 /usr/sbin+
 58240 nobody    20   0  277528  16936   3296 S   0.0  0.7   0:00.04 /usr/sbin+
 58258 nobody    20   0  277716  17176   3124 S   0.0  0.7   0:00.05 /usr/sbin+
 58259 nobody    20   0  277584  17140   3276 S   0.0  0.7   0:00.03 /usr/sbin+
 58260 nobody    20   0       0      0      0 Z   0.0  0.0   0:00.02 [httpd] <+
 58287 cloudw    20   0  572044 106792   5600 S   0.0  4.4   0:06.93 php-fpm: +
 58308 nobody    20   0  277396  13400      8 S   0.0  0.6   0:00.00 /usr/sbin+
 58309 nobody    20   0  277508  17204   3444 S   0.0  0.7   0:00.03 /usr/sbin+
 58359 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 58375 nobody    20   0  277396  16284   2784 S   0.0  0.7   0:00.02 /usr/sbin+
 58377 nobody    20   0  277540  17228   3364 S   0.0  0.7   0:00.04 /usr/sbin+
 58424 nobody    20   0  277520  16968   3172 S   0.0  0.7   0:00.02 /usr/sbin+
 58425 nobody    20   0  277396  16476   2936 S   0.0  0.7   0:00.01 /usr/sbin+
 58428 nobody    20   0  277508  16788   3220 S   0.0  0.7   0:00.03 /usr/sbin+
 58439 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 58470 cloudw    20   0  572044 107020   5756 S   0.0  4.4   0:06.37 php-fpm: +
 58512 nobody    20   0  277396  16600   2980 S   0.0  0.7   0:00.03 /usr/sbin+
 58523 nobody    20   0  277396  16400   2860 S   0.0  0.7   0:00.01 /usr/sbin+
 58541 nobody    20   0  277492  17144   3408 S   0.0  0.7   0:00.02 /usr/sbin+
 58561 nobody    20   0  277396  16540   3000 S   0.0  0.7   0:00.00 /usr/sbin+
 58581 nobody    20   0  277580  17296   3532 S   0.0  0.7   0:00.01 /usr/sbin+
 58583 nobody    20   0  277508  17060   3388 S   0.0  0.7   0:00.02 /usr/sbin+
 58584 nobody    20   0  277396  16460   2940 S   0.0  0.7   0:00.00 /usr/sbin+
 58678 root      20   0   60820   2560   1572 S   0.0  0.1   0:00.00 dovecot/l+
 58746 root      20   0  248844  18140   1432 S   0.0  0.7   0:00.00 spamd chi+
 58902 healtho+  20   0  460640  67448   4192 S   0.0  2.8   0:02.01 php-fpm: +
 58906 root      20   0  111304   4448   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 59006 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 59032 root      20   0       0      0      0 Z   0.0  0.0   0:00.01 [cpaneld +
 59036 nigeria   20   0  400460   4524   2388 S   0.0  0.2   0:00.00 php-fpm: +
 59055 wp-tool+  20   0  445028    324    192 S   0.0  0.0   0:00.00 sw-engine+
 59083 wp-tool+  20   0  445028    324    192 S   0.0  0.0   0:00.00 sw-engine+
 59113 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 59114 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 59115 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 59117 root      20   0  183076   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 59120 root      20   0  183076   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 59123 root      20   0  183076   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 59124 root      20   0  183076   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 59126 root      20   0  183076   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 59131 cloudw    20   0  287616  14568   9624 S   0.0  0.6   0:00.02 /opt/cpan+
 59132 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 59133 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 59135 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 59138 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 59139 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 59140 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 59142 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 59144 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 /usr/loca+
 59148 root      20   0  170040  16904   2880 S   0.0  0.7   0:00.10 /usr/loca+
 59151 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 59154 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 59163 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 59168 nigeria   20   0  404052  16140  10388 S   0.0  0.7   0:00.06 /opt/cpan+
 59176 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 59180 pactpay   20   0  480124  17672  11880 S   0.0  0.7   0:00.02 /opt/cpan+
 59207 root      20   0  113496   1428   1236 S   0.0  0.1   0:00.00 bash /usr+
 59210 root      20   0  185492   7844   4180 R   0.0  0.3   0:00.02 /usr/bin/+
 59237 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 59238 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 59239 root      20   0   38648   6504   3052 R   0.0  0.3   0:00.00 /usr/loca+
 59240 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 59241 cloudsms  20   0  210048   5444   3820 R   0.0  0.2   0:00.00 /opt/cpan+
 63705 root      20   0  224412   3944    752 S   0.0  0.2   0:02.07 queueproc+
 64008 mailnull  20   0   89196   2388     12 S   0.0  0.1   0:02.99 /usr/sbin+
 64247 nscd      20   0 1377576   1632      0 S   0.0  0.1   0:39.93 /usr/sbin+
 64408 cpanelc+  20   0   10820   3708   2172 S   0.0  0.2   1:49.78 /usr/loca+
 64415 root      38  18  130416    688     48 S   0.0  0.0   0:00.38 cpanellog+
 64460 root      20   0  299272    332    172 S   0.0  0.0   0:04.80 php-fpm: +
 72712 root      20   0  445028    468    352 S   0.0  0.0   3:15.28 sw-engine+
 72887 wp-tool+  20   0  412396   2476   1084 S   0.0  0.1  16:07.85 /usr/bin/+
 72891 wp-tool+  20   0  387556   2628   1280 S   0.0  0.1   0:26.20 /usr/bin/+
 85039 root      20   0  186132  10208    840 S   0.0  0.4   1:17.97 lfd - sle+
 85330 telegraf  20   0 5654308  25712   2176 S   0.0  1.1  28:53.42 /usr/loca+
 85507 root      20   0  267196   6768    392 S   0.0  0.3   0:09.62 /usr/sbin+
 85549 root      20   0  400740   1940    608 S   0.0  0.1   0:23.51 php-fpm: +
 85554 root      20   0  388892    320    236 S   0.0  0.0   0:02.24 php-fpm: +
 85559 root      20   0  396248    224    132 S   0.0  0.0   0:02.59 php-fpm: +
 85564 root      20   0  389508    292    208 S   0.0  0.0   0:02.41 php-fpm: +
 85569 root      20   0  439788    348    260 S   0.0  0.0   0:02.59 php-fpm: +
102014 root      20   0  248844  15608   1092 S   0.0  0.6   0:08.95 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S     2025   0:05 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S     2025   6:06  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S     2025   1:47  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S     2025   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        R     2025  65:33  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S     2025   0:11  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S     2025   0:11  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S     2025   2:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S     2025   8:38  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S     2025   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S     2025   0:01  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S     2025  69:53  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN    2025   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN    2025   0:07  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [deferwq]
root        108  0.0  0.0      0     0 ?        S     2025   1:07  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S     2025   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S     2025   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<    2025   9:06  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<    2025   7:43  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S     2025   4:14  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kvm-irqfd-clean]
root        694  0.0  0.0      0     0 ?        S<    2025   3:52  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S     2025   0:16  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ext4-rsv-conver]
root       7370  0.0  0.0      0     0 ?        S    17:34   0:00  \_ [kworker/1:0]
root      20014  0.0  0.0      0     0 ?        S    17:49   0:00  \_ [kworker/u200:2]
root      27389  0.0  0.0      0     0 ?        S    17:58   0:00  \_ [kworker/0:4]
root      40786  0.0  0.0      0     0 ?        S    18:14   0:00  \_ [kworker/1:2]
root      43112  0.0  0.0      0     0 ?        S    18:17   0:00  \_ [kworker/0:2]
root      51998  0.0  0.0      0     0 ?        S    18:28   0:00  \_ [kworker/u200:0]
root      52623  0.0  0.0      0     0 ?        S    18:29   0:00  \_ [kworker/1:4]
root      53427  0.0  0.0      0     0 ?        S    18:30   0:00  \_ [kworker/0:0]
root      57070  0.0  0.0      0     0 ?        S    18:36   0:00  \_ [kworker/0:1]
root      57634  0.0  0.0      0     0 ?        S    18:37   0:00  \_ [kworker/1:1]
root      58359  0.0  0.0      0     0 ?        S    18:38   0:00  \_ [kworker/0:3]
root      58439  0.0  0.0      0     0 ?        S    18:38   0:00  \_ [kworker/u200:1]
root          1  0.1  0.1 192272  3404 ?        Ss    2025 110:29 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.3  39500  7276 ?        Ss    2025  33:21 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352     8 ?        Ss    2025   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   120 ?        S<sl  2025   4:49 /sbin/auditd
root        487  0.0  0.0  21540   348 ?        Ss    2025   1:41 /usr/sbin/irqbalance --foreground
root        489  0.0  0.0  24896  1112 ?        Ss    2025  17:28 /usr/lib/systemd/systemd-logind
polkitd     494  0.0  0.0 610664  1108 ?        Ssl   2025   9:44 /usr/lib/polkit-1/polkitd --no-debug
root        496  0.0  0.0  52852     4 ?        Ss    2025   0:00 /usr/sbin/smartd -n -q never
dbus        503  0.0  0.0  58748  1292 ?        Ss    2025  38:20 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         511  0.0  0.0  69256    76 ?        Ss    2025   0:04 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss    2025   0:00 /usr/sbin/acpid
root        530  0.0  0.0 195208     0 ?        Ssl   2025   0:00 /usr/sbin/gssproxy -D
root        557  0.0  0.0  24208     4 ?        Ss    2025   0:00 /usr/sbin/atd -f
root        558  0.0  0.0 124508   416 ?        Ss    2025   2:23 /usr/sbin/crond -n
root      59113  0.0  0.0 183076  2144 ?        S    18:39   0:00  \_ /usr/sbin/CROND -n
root      59138  0.0  0.0 113284  1208 ?        Ss   18:39   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      59151  0.0  0.0 108052   360 ?        S    18:39   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      59154  0.0  0.0 113288  1516 ?        S    18:39   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      59242  0.0  0.0 153840  2092 ?        R    18:39   0:00  |               \_ ps auxf
root      59114  0.0  0.0 183076  2148 ?        S    18:39   0:00  \_ /usr/sbin/CROND -n
root      59144  0.0  0.0  20164   988 ?        Ss   18:39   0:00  |   \_ jailshell (cloudsms) [59243] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  59243  0.0  0.0  20164   264 ?        S    18:39   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  59244  0.0  0.0 113284  1212 ?        R    18:39   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      59115  0.0  0.0 183076  2148 ?        S    18:39   0:00  \_ /usr/sbin/CROND -n
root      59140  0.0  0.0  20164   808 ?        Ss   18:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      59117  0.0  0.0 183076  2148 ?        S    18:39   0:00  \_ /usr/sbin/CROND -n
root      59133  0.0  0.0  20164   804 ?        Ss   18:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      59120  0.0  0.0 183076  2144 ?        S    18:39   0:00  \_ /usr/sbin/CROND -n
root      59135  0.0  0.0  20164   988 ?        Ss   18:39   0:00  |   \_ jailshell (cloudsms) [59238] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  59238  0.0  0.0  20164   264 ?        S    18:39   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  59240  0.0  0.0 113284  1212 ?        S    18:39   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  59241  0.0  0.6 404052 15616 ?        R    18:39   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue4.php
root      59123  0.0  0.0 183076  2140 ?        S    18:39   0:00  \_ /usr/sbin/CROND -n
root      59139  0.0  0.0 113284  1208 ?        Ss   18:39   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      59148 10.0  0.6 170040 16904 ?        S    18:39   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      59207  0.0  0.0 113496  1428 ?        S    18:39   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root      59210  3.0  0.3 201556  9380 ?        R    18:39   0:00  |               \_ /usr/bin/python2.7 -c import yum
root      59124  0.0  0.0 183076  2140 ?        S    18:39   0:00  \_ /usr/sbin/CROND -n
root      59132  0.0  0.0  20164   964 ?        Ss   18:39   0:00  |   \_ jailshell (pactpay) [59176] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   59176  0.0  0.0  20164   260 ?        S    18:39   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   59180  2.0  0.7 480124 17672 ?        S    18:39   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      59126  0.0  0.0 183076  2140 ?        S    18:39   0:00  \_ /usr/sbin/CROND -n
root      59142  0.0  0.0  20164   968 ?        Ss   18:39   0:00      \_ jailshell (nigeria) [59163] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   59163  0.0  0.0  20164   264 ?        S    18:39   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   59168  6.0  0.6 404052 16140 ?        S    18:39   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        576  0.0  0.0 108296     4 tty1     Ss+   2025   0:00 /sbin/agetty --noclear tty1 linux
root        577  0.0  0.0 114704     0 ttyS0    Ss+   2025   0:00 /bin/bash
systuser    928  0.0  0.0  11540    48 ?        Ssl   2025   0:02 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    929  0.0  0.0  12756    60 ?        Ssl   2025   0:02 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    931  0.0  0.0 112524    68 ?        Ssl   2025   0:02 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    932  0.0  0.0 111608    68 ?        Ssl   2025   0:02 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        935  0.0  0.0 572372   836 ?        Ssl   2025   6:09 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        937  0.0  0.0 111304   364 ?        Ss    2025   7:08 /usr/sbin/sshd -D
root      58906  0.0  0.1 111304  4448 ?        Ss   18:38   0:00  \_ sshd: [accepted]
sshd      59006  0.0  0.1 115644  2632 ?        S    18:38   0:00      \_ sshd: [net]
root        939  0.0  0.4 1350728 9760 ?        Ssl   2025   3:03 /usr/bin/cspdaemon
root        952  0.0  0.2 261812  5392 ?        Ss    2025  13:52 cpsrvd (SSL) - waiting for connections                   
root      59032  0.1  0.0      0     0 ?        Z    18:38   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.2 331088  6492 ?        Ssl   2025  17:59 /usr/sbin/rsyslogd -n
memcach+    972  0.0  0.0 342400     0 ?        Ssl   2025   1:37 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 1277312 2284 ?        Ssl   2025   0:40 /usr/bin/checkstatus
systuser    980  0.0  0.4 114272 11336 ?        Ssl   2025  20:07 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser   1144  0.0  0.1 157704  2884 ?        S     2025   0:21 SonarPush 0.6.12 [sleeping]
root       1239  0.0  0.0 167452  1204 ?        Ss    2025   1:06 dnsadmin - dormant mode
root       1243  0.0  0.3 209952  7956 ?        Ss    2025   8:27 tailwatchd
root       1244  0.0  0.1 183900  3272 ?        Ss    2025   8:27 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
oysipao+  15361  0.0  0.0   3148     4 ?        Ss    2025   0:00 [kworker]
oysipao+  15368  0.0  0.0   3156    36 ?        S     2025   1:40  \_ [kworker]
telegraf  85330  0.0  1.0 5654308 25712 ?       SLsl  2025  28:53 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root      72712  0.0  0.0 445028   468 ?        Ss    2025   3:15 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  59055  0.0  0.0 445028   324 ?        S    18:38   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  59083  0.0  0.0 445028   324 ?        S    18:38   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  72887  0.0  0.1 412396  2476 ?        Ss    2025  16:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+  72891  0.0  0.1 387556  2628 ?        Ss    2025   0:26 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
named      1188  0.0  1.0 1185868 24716 ?       Ssl   2025  19:48 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root      12995  0.0  0.9 1483072 22092 ?       Ssl  Jan02   2:45 /usr/local/cpanel/3rdparty/bin/clamd -F
mysql     19908  1.8 10.8 1483940 263036 ?      Sl   Jan02 153:04 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root      16217  0.0  0.0  51656   316 ?        Ss   Jan04   0:05 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot   16226  0.0  0.0  10320   192 ?        S    Jan04   0:01  \_ dovecot/anvil
dovenull  17778  0.0  0.0  47120   932 ?        S    01:29   0:01  \_ dovecot/pop3-login
dovenull  17779  0.0  0.0  48144  1028 ?        S    01:29   0:00  \_ dovecot/imap-login
root      17780  0.0  0.0  10452   580 ?        S    01:29   0:00  \_ dovecot/log
dovenull  17781  0.0  0.0  47300  1172 ?        S    01:29   0:01  \_ dovecot/pop3-login
dovenull  17782  0.0  0.1  48488  2572 ?        S    01:29   0:00  \_ dovecot/imap-login
root      17783  0.0  0.0  24528  1976 ?        S    01:29   0:00  \_ dovecot/config
dovecot   17784  0.0  0.0  13568   308 ?        S    01:29   0:00  \_ dovecot/stats
dovecot   17785  0.0  0.0  41156  1108 ?        S    01:29   0:01  \_ dovecot/auth
root      58678  0.0  0.1  60820  2560 ?        S    18:38   0:00  \_ dovecot/lmtp
root      16283  0.0  0.0 153404   212 ?        Ss   Jan04   0:09 pure-ftpd (SERVER)
root      16284  0.0  0.0 152780    36 ?        Ss   Jan04   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root      63705  0.0  0.1 224412  3944 ?        Ss   Jan07   0:02 queueprocd - waiting up to 60s to process a task
mailnull  64008  0.0  0.0  89196  2388 ?        Ss   Jan07   0:02 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
nscd      64247  0.0  0.0 1377576 1632 ?        Ssl  Jan07   0:39 /usr/sbin/nscd
cpanelc+  64408  0.0  0.1  10820  3708 ?        Ss   Jan07   1:49 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root      64415  0.0  0.0 130416   688 ?        SN   Jan07   0:00 cpanellogd - sleeping for logs
root      64460  0.0  0.0 299272   332 ?        Ss   Jan07   0:04 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root      85039  0.1  0.4 186132 10208 ?        Ss   00:00   1:17 lfd - sleeping
root      85507  0.0  0.2 267196  6768 ?        Ss   00:00   0:09 /usr/sbin/httpd -k start
root      17786  0.0  0.0  12872   260 ?        S    01:29   0:05  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      17787  0.0  0.0  12732   160 ?        S    01:29   0:04  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      17788  0.0  0.0  12916   464 ?        S    01:29   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      17789  0.0  0.0  53252    20 ?        S    01:29   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    56859  0.2  0.6 277512 16408 ?        S    18:35   0:00  \_ /usr/sbin/httpd -k start
nobody    59245  0.0  0.5 277512 13968 ?        R    18:39   0:00  |   \_ /usr/sbin/httpd -k start
nobody    57259  0.0  0.5 277524 14120 ?        S    18:36   0:00  \_ /usr/sbin/httpd -k start
nobody    57514  0.0  0.5 277512 14052 ?        S    18:36   0:00  \_ /usr/sbin/httpd -k start
nobody    57666  0.0  0.7 277628 17040 ?        S    18:37   0:00  \_ /usr/sbin/httpd -k start
nobody    57849  0.0  0.6 277596 16916 ?        S    18:37   0:00  \_ /usr/sbin/httpd -k start
nobody    57857  0.0  0.7 277580 17460 ?        S    18:37   0:00  \_ /usr/sbin/httpd -k start
nobody    57880  0.0  0.7 277776 17732 ?        S    18:37   0:00  \_ /usr/sbin/httpd -k start
nobody    57885  0.0  0.7 277584 17048 ?        S    18:37   0:00  \_ /usr/sbin/httpd -k start
nobody    57946  0.0  0.6 277612 16828 ?        S    18:37   0:00  \_ /usr/sbin/httpd -k start
nobody    58159  0.0  0.7 277584 16988 ?        S    18:37   0:00  \_ /usr/sbin/httpd -k start
nobody    58212  0.0  0.7 277616 17188 ?        S    18:37   0:00  \_ /usr/sbin/httpd -k start
nobody    58240  0.0  0.6 277528 16936 ?        S    18:37   0:00  \_ /usr/sbin/httpd -k start
nobody    58258  0.0  0.7 277716 17176 ?        S    18:37   0:00  \_ /usr/sbin/httpd -k start
nobody    58259  0.0  0.7 277584 17140 ?        S    18:37   0:00  \_ /usr/sbin/httpd -k start
nobody    58260  0.0  0.0      0     0 ?        Z    18:37   0:00  \_ [httpd] <defunct>
nobody    58308  0.0  0.5 277396 13400 ?        S    18:38   0:00  \_ /usr/sbin/httpd -k start
nobody    58309  0.0  0.7 277508 17204 ?        S    18:38   0:00  \_ /usr/sbin/httpd -k start
nobody    58375  0.0  0.6 277396 16284 ?        S    18:38   0:00  \_ /usr/sbin/httpd -k start
nobody    58377  0.0  0.7 277540 17228 ?        S    18:38   0:00  \_ /usr/sbin/httpd -k start
nobody    58424  0.0  0.7 277520 16968 ?        S    18:38   0:00  \_ /usr/sbin/httpd -k start
nobody    58425  0.0  0.6 277396 16476 ?        S    18:38   0:00  \_ /usr/sbin/httpd -k start
nobody    58428  0.0  0.6 277508 16788 ?        S    18:38   0:00  \_ /usr/sbin/httpd -k start
nobody    58512  0.0  0.6 277396 16600 ?        S    18:38   0:00  \_ /usr/sbin/httpd -k start
nobody    58523  0.0  0.6 277396 16400 ?        S    18:38   0:00  \_ /usr/sbin/httpd -k start
nobody    58541  0.0  0.7 277492 17144 ?        S    18:38   0:00  \_ /usr/sbin/httpd -k start
nobody    58561  0.0  0.6 277396 16540 ?        S    18:38   0:00  \_ /usr/sbin/httpd -k start
nobody    58581  0.0  0.7 277580 17296 ?        S    18:38   0:00  \_ /usr/sbin/httpd -k start
nobody    58583  0.0  0.7 277508 17060 ?        S    18:38   0:00  \_ /usr/sbin/httpd -k start
nobody    58584  0.0  0.6 277396 16460 ?        S    18:38   0:00  \_ /usr/sbin/httpd -k start
root      85549  0.0  0.0 400740  1940 ?        Ss   00:00   0:23 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    58287 11.0  4.4 572044 106792 ?       S    18:37   0:06  \_ php-fpm: pool cloudware_ng
cloudw    58470 11.7  4.4 572044 107020 ?       S    18:38   0:06  \_ php-fpm: pool cloudware_ng
healtho+  58473  8.1  2.8 465248 70184 ?        R    18:38   0:04  \_ php-fpm: pool health_oyostate_gov_ng
cloudw    58897 12.8  4.3 570508 105700 ?       R    18:38   0:02  \_ php-fpm: pool cloudware_ng
healtho+  58902 10.5  2.7 460640 67448 ?        S    18:38   0:02  \_ php-fpm: pool health_oyostate_gov_ng
cloudw    59002  8.8  3.4 547336 82752 ?        R    18:38   0:00  \_ php-fpm: pool cloudware_ng
workflo+  59016  9.6  2.1 446892 52148 ?        R    18:38   0:00  \_ php-fpm: pool blog_workflow-management-software_com
workflo+  59017  9.5  2.1 446892 52156 ?        R    18:38   0:00  \_ php-fpm: pool blog_workflow-management-software_com
workflo+  59018  9.3  2.1 446892 51896 ?        R    18:38   0:00  \_ php-fpm: pool blog_workflow-management-software_com
nigeria   59036  0.0  0.1 400460  4524 ?        S    18:38   0:00  \_ php-fpm: pool nigeriadecide_org
workflo+  59109 24.5  1.8 438188 44384 ?        S    18:39   0:00  \_ php-fpm: pool blog_workflow-management-software_com
workflo+  59110 17.5  1.3 425768 32088 ?        R    18:39   0:00  \_ php-fpm: pool blog_workflow-management-software_com
root      85554  0.0  0.0 388892   320 ?        Ss   00:00   0:02 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root      85559  0.0  0.0 396248   224 ?        Ss   00:00   0:02 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root      85564  0.0  0.0 389508   292 ?        Ss   00:00   0:02 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root      85569  0.0  0.0 439788   348 ?        Rs   00:00   0:02 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root     102014  0.0  0.6 248844 15608 ?        Ss   04:47   0:08 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       4859  0.0  0.5 249992 12520 ?        S    04:57   0:00  \_ spamd child
root      58746  0.0  0.7 248844 18140 ?        S    18:38   0:00  \_ spamd child
cloudw    59131  2.0  0.6 287616 14568 ?        S    18:39   0:00 /opt/cpanel/ea-php70/root/usr/bin/php -f /home/cloudw/schoolplus.cloudware.ng/wp-includes/vrytxc.php
## mysql stats
Uptime: 505386  Threads: 9  Questions: 52766665  Slow queries: 0  Opens: 125157  Flush tables: 1  Open tables: 2000  Queries per second avg: 104.408
*************************** 1. row ***************************
     Id: 780245
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 780248
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 780249
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2026-01-08' LIMIT 1
*************************** 4. row ***************************
     Id: 780250
   User: workflow_wp673
   Host: localhost
     db: workflow_wp673
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 780251
   User: workflow_wp673
   Host: localhost
     db: workflow_wp673
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 6. row ***************************
     Id: 780252
   User: workflow_wp673
   Host: localhost
     db: workflow_wp673
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 7. row ***************************
     Id: 780255
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 8. row ***************************
     Id: 780257
   User: workflow_wp673
   Host: localhost
     db: workflow_wp673
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 9. row ***************************
     Id: 780263
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 202.76.163.217 TIME_WAIT
      1 202.76.168.176 TIME_WAIT
      1 202.76.168.57 TIME_WAIT
      1 202.76.171.76 TIME_WAIT
      1 202.76.173.25 TIME_WAIT
      1 202.76.173.82 TIME_WAIT
      1 202.76.179.155 TIME_WAIT
      1 202.76.180.133 TIME_WAIT
      1 202.76.184.26 TIME_WAIT
      1 202.76.186.189 TIME_WAIT
      1 202.76.186.72 TIME_WAIT
      1 202.76.190.177 TIME_WAIT
      1 27.115.124.104 TIME_WAIT
      1 27.115.124.114 TIME_WAIT
      1 27.115.124.118 TIME_WAIT
      1 27.115.124.53 TIME_WAIT
      1 27.115.124.67 TIME_WAIT
      1 27.115.124.70 TIME_WAIT
      1 27.115.124.97 TIME_WAIT
      1 40.77.167.243 TIME_WAIT
      1 45.190.28.147 TIME_WAIT
      1 51.161.65.25 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 161.115.235.107 TIME_WAIT
      2 161.115.235.108 TIME_WAIT
      2 161.115.235.113 TIME_WAIT
      2 161.115.235.119 TIME_WAIT
      2 161.115.235.122 TIME_WAIT
      2 161.115.235.124 TIME_WAIT
      2 161.115.235.126 TIME_WAIT
      2 161.115.235.127 TIME_WAIT
      2 161.115.235.128 TIME_WAIT
      2 161.115.235.129 TIME_WAIT
      2 161.115.235.131 TIME_WAIT
      2 161.115.235.138 TIME_WAIT
      2 161.115.235.141 TIME_WAIT
      2 161.115.235.143 TIME_WAIT
      3 161.115.235.102 TIME_WAIT
      3 161.115.235.110 TIME_WAIT
      3 161.115.235.114 TIME_WAIT
      3 161.115.235.120 TIME_WAIT
      3 161.115.235.130 TIME_WAIT
      3 161.115.235.134 TIME_WAIT
      3 161.115.235.136 TIME_WAIT
      3 161.115.235.137 TIME_WAIT
      3 23.98.151.80 TIME_WAIT
      5 216.73.216.182 TIME_WAIT
      8 136.243.228.180 TIME_WAIT
     19 175.100.113.239 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.66 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Dec 8 2025 14:42:54
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 08-Jan-2026 18:39:03 WAT
   Restart Time: Thursday, 08-Jan-2026 00:00:25 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 18 hours 38 minutes 38 seconds
   Server load: 8.67 4.29 3.02
   Total accesses: 211612 - Total Traffic: 1.8 GB - Total Duration: 205651190
   CPU Usage: u1.29 s9.51 cu1091.19 cs641.43 - 2.6% CPU load
   3.15 requests/sec - 28.5 kB/second - 9.0 kB/request - 971.831 ms/request
   18 requests currently being processed, 0 workers gracefully restarting, 11 idle workers

_.WRW.W_..C..C.._R...WW.._C.K_._..W_....R_K.W....__..W_.WR......
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc      M CPU  SS  Req    Dur    Conn Child  Slot      Client      Protocol              VHost                                          Request
   0-1  57849 0/18/13254   _ 0.05 2   289  11067799 0.0  0.34  107.13 175.100.113.239 http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   1-1  -     0/0/11652    . 0.00 26  0    10413282 0.0  0.00  114.74 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   2-1  58159 0/15/12378   W 0.07 1   0    10759380 0.0  0.36  135.59 175.100.113.239 http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   3-1  57259 0/16/12085   R 0.04 104 286  10601154 0.0  0.22  90.20  47.128.20.207   http/1.1
   4-1  58212 0/7/11451    W 0.04 1   0    9383084  0.0  0.41  97.71  202.76.174.203  http/1.1 cloudware.ng:443                GET /shop/products/670189836967.html HTTP/1.1
   5-1  -     0/0/10445    . 0.00 23  0    10093238 0.0  0.00  75.49  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   6-1  56859 83/145/10405 W 3.42 0   0    9466674  38.2 0.46  96.64  216.73.216.182  http/1.1 ourprojects.cloudware.ng:443    GET /3937805339.shtml HTTP/1.1
   7-1  57857 0/16/10282   _ 0.06 0   794  9376708  0.0  0.19  88.28  103.167.232.168 http/1.1 cloudware.ng:443                GET /shop/products/670160490709.html HTTP/1.1
   8-1  -     0/0/10803    . 0.00 27  0    8866908  0.0  0.00  84.06  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   9-1  -     0/0/9686     . 0.00 4   0    8866191  0.0  0.00  85.34  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   10-1 58512 1/5/9126     C 0.06 5   810  8424476  29.6 0.07  103.99 5.8.62.35       http/1.1 cloudware.ng:443                GET /shop/products/670160354832.html HTTP/1.1
   11-1 -     0/0/9053     . 0.00 14  0    8693252  0.0  0.00  80.89  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   12-1 -     0/0/7677     . 0.00 8   0    7911295  0.0  0.00  88.74  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   13-1 58240 32/38/6391   C 0.04 6   0    6960183  16.9 0.09  54.58  13.75.69.16     http/1.1 oysipa.oyostate.gov.ng:80       GET /str HTTP/1.1
   14-1 -     0/0/7611     . 0.00 2   0    7006343  0.0  0.00  53.52  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   15-1 -     0/0/7671     . 0.00 7   0    6852171  0.0  0.00  79.98  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   16-1 57880 0/11/3966    _ 0.03 0   2    5534147  0.0  0.23  32.72  ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   17-1 57514 0/11/4646    R 0.04 87  0    5539391  0.0  0.12  34.38  27.115.124.70   http/1.1 nigeriadecide.org:443           GET /assets/img/sms.png HTTP/1.1
   18-1 -     0/0/4618     . 0.00 15  0    4583519  0.0  0.00  38.22  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   19-1 -     0/0/3173     . 0.00 28  0    4171842  0.0  0.00  29.89  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   20-1 -     0/0/2429     . 0.00 6   0    3214498  0.0  0.00  18.48  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-1 57666 0/15/2409    W 0.54 0   0    3504321  0.0  0.32  23.31  202.76.174.251  http/1.1 cloudware.ng:443                GET /shop/products/670190051097.html HTTP/1.1
   22-1 58258 0/16/3788    W 0.05 2   0    3897128  0.0  0.31  23.85  161.115.235.126 http/1.1 blog.workflow-management-softwa POST /xmlrpc.php HTTP/1.1
   23-1 -     0/0/3224     . 0.00 5   0    3395181  0.0  0.00  25.55  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-1 -     0/0/3185     . 0.00 29  0    3424959  0.0  0.00  42.31  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-1 58259 0/7/3111     _ 0.03 1   7    3560551  0.0  0.26  22.01  142.44.225.12   http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/polling_unit_category.php?state=
   26-1 58260 1/7/2198     C 0.04 0   0    3312237  0.2  0.40  13.72  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-1 -     0/0/1812     . 0.00 16  4    2068999  0.0  0.00  16.49  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-1 58523 1/4/1579     K 0.01 2   905  1597112  29.6 0.06  12.25  167.60.190.87   http/1.1 cloudware.ng:443                GET /shop/products/670160478807.html HTTP/1.1
   29-1 57885 0/10/1031    _ 0.03 1   1108 1492335  0.0  0.17  13.19  161.115.235.114 http/1.1 blog.workflow-management-softwa POST /xmlrpc.php HTTP/1.1
   30-1 -     0/0/1216     . 0.00 3   0    1352659  0.0  0.00  7.94   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-1 58541 0/6/950      _ 0.04 1   547  1311427  0.0  0.05  7.98   161.115.235.130 http/1.1 blog.workflow-management-softwa POST /xmlrpc.php HTTP/1.1
   32-1 -     0/0/732      . 0.00 11  0    1071151  0.0  0.00  7.03   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-1 -     0/0/464      . 0.00 20  0    665644   0.0  0.00  2.89   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-1 57946 0/15/1993    W 0.05 2   0    1320578  0.0  0.18  16.17  161.115.235.138 http/1.1 blog.workflow-management-softwa POST /xmlrpc.php HTTP/1.1
   35-1 58561 0/4/312      _ 0.00 1   1109 622169   0.0  0.06  2.49   161.115.235.120 http/1.1 blog.workflow-management-softwa POST /xmlrpc.php HTTP/1.1
   36-1 -     0/0/1155     . 0.00 13  0    611933   0.0  0.00  8.81   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-1 -     0/0/216      . 0.00 25  0    201683   0.0  0.00  2.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-1 -     0/0/645      . 0.00 21  0    422851   0.0  0.00  3.83   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-1 -     0/0/455      . 0.00 19  0    503179   0.0  0.00  2.71   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-1 58308 0/1/244      R 0.00 60  879  359072   0.0  0.02  1.78   136.243.228.180 http/1.1 cloudware.ng:80                 GET /shop/products/67105873525.html HTTP/1.1
   41-1 58309 0/6/685      _ 0.04 2   6    244381   0.0  0.08  7.08   3.211.105.134   http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/images/images/images/blog/blog/i
   42-1 58375 1/5/174      K 0.02 2   823  444675   29.6 0.09  0.91   202.76.188.60   http/1.1 cloudware.ng:443                GET /shop/products/670189815752.html HTTP/1.1
   43-1 -     0/0/453      . 0.00 32  0    834371   0.0  0.00  2.57   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-1 58377 0/10/91      W 0.04 2   0    115011   0.0  0.17  1.27   161.115.235.107 http/1.1 blog.workflow-management-softwa POST /xmlrpc.php HTTP/1.1
   45-1 -     0/0/91       . 0.00 24  0    151229   0.0  0.00  0.50   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-1 -     0/0/112      . 0.00 1   0    226440   0.0  0.00  0.71   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-1 -     0/0/65       . 0.00 12  0    116080   0.0  0.00  0.49   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-1 -     0/0/29       . 0.00 9   0    59291    0.0  0.00  0.31   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-1 58424 0/7/37       _ 0.09 0   1867 96255    0.0  0.05  0.40   161.115.235.134 http/1.1 blog.workflow-management-softwa POST /xmlrpc.php HTTP/1.1
   50-1 58425 0/5/195      _ 0.01 1   1118 425648   0.0  0.07  1.76   161.115.235.110 http/1.1 blog.workflow-management-softwa POST /xmlrpc.php HTTP/1.1
   51-1 -     0/0/41       . 0.00 10  0    120905   0.0  0.00  0.47   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-1 -     0/0/43       . 0.00 18  0    108476   0.0  0.00  0.34   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-1 58428 0/4/20       W 0.02 0   0    84337    0.0  0.09  0.32   ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   54-1 58581 0/6/14       _ 0.01 0   1400 37125    0.0  0.05  0.08   161.115.235.124 http/1.1 blog.workflow-management-softwa POST /xmlrpc.php HTTP/1.1
   55-1 -     0/0/19       . 0.00 22  0    42130    0.0  0.00  0.25   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-1 58583 0/4/14       W 0.02 2   0    38336    0.0  0.04  1.33   161.115.235.112 http/1.1 blog.workflow-management-softwa POST /xmlrpc.php HTTP/1.1
   57-1 58584 0/2/7        R 0.00 16  764  25767    0.0  0.03  0.07   123.6.49.18     http/1.1
   58-1 -     0/0/1        . 0.00 818 0    0        0.0  0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1162
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 13 seconds, (range: 1...50)
   index usage: 20%, cache usage: 28%
   total entries stored since starting: 122567
   total entries replaced since starting: 0
   total entries expired since starting: 121337
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 19 hit, 1535 miss
   total removes since starting: 68 hit, 140 miss
Youez - 2016 - github.com/yon3zu
LinuXploit