403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.48
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2026-01-08.17.39.txt
 ## mem threshold exceeded
 ## swap threshold exceeded
## server overview
2026-01-08.17.39 load[6] mem[82/41] mysql[9/26] httpd[19]
              total        used        free      shared  buff/cache   available
Mem:           2363        1835          83          64         444         282
Swap:          4047        1799        2248
 17:39:03 up 45 days, 20:27,  0 users,  load average: 6.85, 5.77, 4.22
## system overview
top - 17:39:03 up 45 days, 20:27,  0 users,  load average: 6.85, 5.77, 4.22
Tasks: 218 total,   8 running, 208 sleeping,   0 stopped,   2 zombie
%Cpu(s): 80.0 us, 20.0 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    85012 free,  1875700 used,   459588 buff/cache
KiB Swap:  4145144 total,  2302228 free,  1842916 used.   292948 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 11217 cloudw    20   0  575116 108996   6788 R  50.0  4.5   0:03.05 php-fpm: +
 19908 mysql     20   0 1483940 310692   2752 S  50.0 12.8 150:13.50 /usr/sbin+
 11096 cloudw    20   0  575180 109444   6792 R  16.7  4.5   0:06.08 php-fpm: +
 11242 cloudw    20   0  570188 105972   6792 R  16.7  4.4   0:02.77 php-fpm: +
   489 root      20   0   24896   1128    792 S   5.6  0.0  17:27.07 /usr/lib/+
 11237 cloudw    20   0  570188 105952   6792 S   5.6  4.4   0:03.14 php-fpm: +
 11426 root      20   0  160220   2060   1584 R   5.6  0.1   0:00.01 top -bcn1
 64408 cpanelc+  20   0   10820   3800   2336 R   5.6  0.2   1:46.42 /usr/loca+
     1 root      20   0  192272   3384   1456 S   0.0  0.1 110:23.44 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:05.82 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   6:05.80 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   1:47.47 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0  65:29.28 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:11.21 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:11.22 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   2:00.60 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   8:38.18 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:01.44 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.33 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0  69:43.24 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:07.78 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   108 root      20   0       0      0      0 S   0.0  0.0   1:07.78 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   9:05.80 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   7:42.76 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   4:14.35 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   39500   5376   5124 S   0.0  0.2  33:19.72 /usr/lib/+
   383 root      20   0   45352      8      4 S   0.0  0.0   0:00.45 /usr/lib/+
   412 root      16  -4   55532    124      0 S   0.0  0.0   4:48.71 /sbin/aud+
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   487 root      20   0   21540    348    260 S   0.0  0.0   1:41.29 /usr/sbin+
   494 polkitd   20   0  610664   1028    520 S   0.0  0.0   9:43.57 /usr/lib/+
   496 root      20   0   52852    340    248 S   0.0  0.0   0:00.61 /usr/sbin+
   503 dbus      20   0   58748   1324    604 S   0.0  0.1  38:18.35 /usr/bin/+
   511 rpc       20   0   69256     60      0 S   0.0  0.0   0:04.14 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   530 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   557 root      20   0   24208     24      0 S   0.0  0.0   0:00.11 /usr/sbin+
   558 root      20   0  124508    428    296 S   0.0  0.0   2:23.50 /usr/sbin+
   576 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   577 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   694 root       0 -20       0      0      0 S   0.0  0.0   3:52.03 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:16.37 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   928 systuser  20   0   11540     52      0 S   0.0  0.0   0:02.26 /usr/loca+
   929 systuser  20   0   12756     60      0 S   0.0  0.0   0:02.23 /usr/loca+
   931 systuser  20   0  112524     68      0 S   0.0  0.0   0:02.17 /usr/loca+
   932 systuser  20   0  111608     68      0 S   0.0  0.0   0:02.07 /usr/loca+
   935 root      20   0  572372    872    332 S   0.0  0.0   6:09.14 /usr/bin/+
   937 root      20   0  111304    340    232 S   0.0  0.0   7:08.20 /usr/sbin+
   939 root      20   0 1350728   9596      4 S   0.0  0.4   3:03.46 /usr/bin/+
   952 root      20   0  261812   5784   1068 S   0.0  0.2  13:51.69 cpsrvd (S+
   953 root      20   0  331088   5724   5096 S   0.0  0.2  17:58.72 /usr/sbin+
   972 memcach+  20   0  342400      0      0 S   0.0  0.0   1:37.25 /usr/bin/+
   974 root      20   0 1277312   2220      0 S   0.0  0.1   0:40.42 /usr/bin/+
   980 systuser  20   0  114272   7332      0 S   0.0  0.3  20:06.18 /usr/loca+
  1144 systuser  20   0  157704   2948    956 S   0.0  0.1   0:21.19 SonarPush+
  1188 named     20   0 1185868  27480   1036 S   0.0  1.1  19:45.52 /usr/sbin+
  1239 root      20   0  167452   1188    636 S   0.0  0.0   1:06.86 dnsadmin +
  1243 root      20   0  209952   9388   1244 S   0.0  0.4   8:27.31 tailwatchd
  1244 root      20   0  262224  21700   3944 S   0.0  0.9   8:26.52 cpdavd - +
  2144 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  3792 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  4531 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
  4857 root      20   0  275828 103164   1868 S   0.0  4.3   0:16.79 spamd chi+
  4859 root      20   0  249992  12576    308 S   0.0  0.5   0:00.07 spamd chi+
  6745 nobody    20   0  277636  18284   4124 S   0.0  0.8   0:00.19 /usr/sbin+
  7175 nobody    20   0  277596  18348   4176 S   0.0  0.8   0:00.13 /usr/sbin+
  7370 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  8419 nobody    20   0  277604  18592   4316 S   0.0  0.8   0:00.13 /usr/sbin+
  9117 worencom  20   0   38468   2020   1184 S   0.0  0.1   0:00.00 dovecot/i+
  9258 nobody    20   0  277572  17544   3668 S   0.0  0.7   0:00.03 /usr/sbin+
  9328 nobody    20   0  277628  18328   4100 S   0.0  0.8   0:00.09 /usr/sbin+
  9738 nobody    20   0  277596  18136   4012 S   0.0  0.7   0:00.07 /usr/sbin+
  9756 nobody    20   0  277596  17876   3836 S   0.0  0.7   0:00.08 /usr/sbin+
  9757 nobody    20   0  277572  17784   3760 S   0.0  0.7   0:00.06 /usr/sbin+
  9896 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 10172 nobody    20   0  277588  17800   3780 S   0.0  0.7   0:00.05 /usr/sbin+
 10259 nobody    20   0  277572  17604   3608 S   0.0  0.7   0:00.04 /usr/sbin+
 10260 nobody    20   0  277624  18000   3776 S   0.0  0.7   0:00.04 /usr/sbin+
 10450 nobody    20   0  277692  17760   3636 S   0.0  0.7   0:00.03 /usr/sbin+
 10669 nobody    20   0  277568  17400   3504 S   0.0  0.7   0:00.02 /usr/sbin+
 10699 nobody    20   0  277396  16808   3180 S   0.0  0.7   0:00.02 /usr/sbin+
 10718 nobody    20   0  277516  18096   3980 S   0.0  0.7   0:00.04 /usr/sbin+
 10719 nobody    20   0  277592  17760   3876 S   0.0  0.7   0:00.03 /usr/sbin+
 10720 nobody    20   0  277584  17912   3868 S   0.0  0.7   0:00.04 /usr/sbin+
 10721 nobody    20   0  277568  17632   3720 S   0.0  0.7   0:00.03 /usr/sbin+
 10753 nobody    20   0  277584  17556   3596 S   0.0  0.7   0:00.03 /usr/sbin+
 10899 root      20   0   41052   1820   1180 S   0.0  0.1   0:00.00 dovecot/a+
 10950 nobody    20   0  277572  17612   3736 S   0.0  0.7   0:00.02 /usr/sbin+
 11038 nobody    20   0  277396  16808   3180 S   0.0  0.7   0:00.00 /usr/sbin+
 11100 cloudw    20   0  572108 108128   6796 S   0.0  4.5   0:05.35 php-fpm: +
 11104 nobody    20   0  277536  17228   3452 S   0.0  0.7   0:00.01 /usr/sbin+
 11106 workflo+  20   0  450476  56792   4188 S   0.0  2.3   0:01.37 php-fpm: +
 11109 workflo+  20   0  450476  56792   4188 S   0.0  2.3   0:01.38 php-fpm: +
 11113 nobody    20   0  277396  16816   3148 S   0.0  0.7   0:00.00 /usr/sbin+
 11114 nobody    20   0  277396  16816   3148 S   0.0  0.7   0:00.00 /usr/sbin+
 11159 wp-tool+  20   0  445028    192     60 S   0.0  0.0   0:00.00 sw-engine+
 11169 wp-tool+  20   0  445028    192     60 S   0.0  0.0   0:00.00 sw-engine+
 11181 nigeria   20   0  400668   8372   5124 S   0.0  0.3   0:00.09 php-fpm: +
 11188 workflo+  20   0  448428  54684   4192 S   0.0  2.3   0:00.92 php-fpm: +
 11203 nobody    20   0  277396  16808   3152 S   0.0  0.7   0:00.00 /usr/sbin+
 11205 workflo+  20   0  444332  50552   4188 S   0.0  2.1   0:00.70 php-fpm: +
 11218 nobody    20   0  277396  16580   2992 S   0.0  0.7   0:00.00 /usr/sbin+
 11219 nobody    20   0  277396  16816   3148 S   0.0  0.7   0:00.00 /usr/sbin+
 11257 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 11286 workflo+  20   0  438188  44372   4192 S   0.0  1.8   0:00.48 php-fpm: +
 11287 nobody    20   0  277396  16560   2952 S   0.0  0.7   0:00.00 /usr/sbin+
 11293 nobody    20   0       0      0      0 Z   0.0  0.0   0:00.01 [httpd] <+
 11294 nobody    20   0  277396  16688   3064 S   0.0  0.7   0:00.00 /usr/sbin+
 11295 nigeria   20   0  400588   8264   5104 S   0.0  0.3   0:00.02 php-fpm: +
 11306 cloudw    20   0  287616  14456   9516 S   0.0  0.6   0:00.02 /opt/cpan+
 11332 root      20   0  183076   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 11333 root      20   0  183076   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 11334 root      20   0  183076   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 11337 root      20   0  183076   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 11338 root      20   0  183076   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 11339 root      20   0  183076   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 11340 root      20   0  183076   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 11342 root      20   0  183076   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 11343 root      20   0  183076   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11345 root      20   0  183076   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 11351 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
 11352 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 11353 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11355 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11356 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 11357 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11359 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 11360 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11363 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 11364 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 11371 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 11372 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 11375 root      20   0  170044  16908   2880 S   0.0  0.7   0:00.10 /usr/loca+
 11376 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 11378 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 11381 pactpay   20   0  480124  17676  11880 S   0.0  0.7   0:00.02 /opt/cpan+
 11391 nigeria   20   0  404052  16144  10384 R   0.0  0.7   0:00.04 /opt/cpan+
 11412 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 11428 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 11429 root      20   0  113496   1428   1236 S   0.0  0.1   0:00.00 bash /usr+
 11431 root      20   0  177280   6176   2868 S   0.0  0.3   0:00.00 /usr/bin/+
 11436 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 11437 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 11438 cloudsms  20   0  113284    180      0 R   0.0  0.0   0:00.00 /usr/loca+
 12995 root      20   0 1483072  61620    356 S   0.0  2.5   2:45.06 /usr/loca+
 15361 oysipao+  20   0    3148      4      0 S   0.0  0.0   0:00.00 [kworker]
 15368 oysipao+  20   0    3156     36      0 S   0.0  0.0   1:40.24 [kworker]
 16217 root      20   0   51656    444    276 S   0.0  0.0   0:05.01 /usr/sbin+
 16226 dovecot   20   0   10320    372    252 S   0.0  0.0   0:01.51 dovecot/a+
 16283 root      20   0  153404    220    136 S   0.0  0.0   0:09.32 pure-ftpd+
 16284 root      20   0  152780     40      0 S   0.0  0.0   0:00.34 /usr/sbin+
 17778 dovenull  20   0   47120   1500    812 S   0.0  0.1   0:01.45 dovecot/p+
 17779 dovenull  20   0   48144   1856    780 S   0.0  0.1   0:00.56 dovecot/i+
 17780 root      20   0   10452    408    204 S   0.0  0.0   0:00.78 dovecot/l+
 17781 dovenull  20   0   47300   1468    716 S   0.0  0.1   0:01.02 dovecot/p+
 17782 dovenull  20   0   48344   2020    840 S   0.0  0.1   0:00.72 dovecot/i+
 17783 root      20   0   24528   1940    292 S   0.0  0.1   0:00.40 dovecot/c+
 17784 dovecot   20   0   13568    532    320 S   0.0  0.0   0:00.18 dovecot/s+
 17785 dovecot   20   0   41156   1092    612 S   0.0  0.0   0:01.78 dovecot/a+
 17786 root      20   0   12804    328    212 S   0.0  0.0   0:04.57 /usr/loca+
 17787 root      20   0   12732    284    208 S   0.0  0.0   0:03.73 /usr/loca+
 17788 root      20   0   12824    348    216 S   0.0  0.0   0:04.25 /usr/loca+
 17789 root      20   0   53252     20     20 S   0.0  0.0   0:00.05 /usr/loca+
 53264 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 63705 root      20   0  224412   3088    916 S   0.0  0.1   0:01.98 queueproc+
 64008 mailnull  20   0   89196   3412    420 S   0.0  0.1   0:02.89 /usr/sbin+
 64247 nscd      20   0 1377576   2324    460 S   0.0  0.1   0:38.01 /usr/sbin+
 64415 root      38  18  130416   1356    680 S   0.0  0.1   0:00.37 cpanellog+
 64460 root      20   0  299272    384    224 S   0.0  0.0   0:04.63 php-fpm: +
 68215 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 72712 root      20   0  445028    492    376 S   0.0  0.0   3:14.99 sw-engine+
 72887 wp-tool+  20   0  412396   3304   1196 S   0.0  0.1  16:06.55 /usr/bin/+
 72891 wp-tool+  20   0  387556   3080   1204 S   0.0  0.1   0:26.16 /usr/bin/+
 85039 root      20   0  185824  11680   1100 S   0.0  0.5   1:13.70 lfd - sle+
 85330 telegraf  20   0 5654308  22212    440 S   0.0  0.9  28:51.12 /usr/loca+
 85507 root      20   0  267196   7136    612 S   0.0  0.3   0:08.14 /usr/sbin+
 85549 root      20   0  400740   1952    620 S   0.0  0.1   0:20.85 php-fpm: +
 85554 root      20   0  388892    272    180 S   0.0  0.0   0:02.12 php-fpm: +
 85559 root      20   0  396248    296    204 S   0.0  0.0   0:02.42 php-fpm: +
 85564 root      20   0  389508    336    236 S   0.0  0.0   0:02.25 php-fpm: +
 85569 root      20   0  439788    368    276 S   0.0  0.0   0:02.43 php-fpm: +
 87595 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 90496 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 95013 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
101254 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
102014 root      20   0  248844  13884    620 S   0.0  0.6   0:08.47 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S     2025   0:05 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S     2025   6:05  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S     2025   1:47  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S     2025   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S     2025  65:29  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S     2025   0:11  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S     2025   0:11  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S     2025   2:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S     2025   8:38  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S     2025   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S     2025   0:01  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S     2025  69:43  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN    2025   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN    2025   0:07  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [deferwq]
root        108  0.0  0.0      0     0 ?        S     2025   1:07  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S     2025   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S     2025   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<    2025   9:05  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<    2025   7:42  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S     2025   4:14  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ext4-rsv-conver]
root        417  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [kvm-irqfd-clean]
root        694  0.0  0.0      0     0 ?        S<    2025   3:52  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S     2025   0:16  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<    2025   0:00  \_ [ext4-rsv-conver]
root      53264  0.0  0.0      0     0 ?        S    16:05   0:00  \_ [kworker/1:3]
root      68215  0.0  0.0      0     0 ?        S    16:31   0:00  \_ [kworker/u200:0]
root      87595  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kworker/0:5]
root      90496  0.0  0.0      0     0 ?        S    17:06   0:00  \_ [kworker/u200:1]
root      95013  0.0  0.0      0     0 ?        S    17:13   0:00  \_ [kworker/0:3]
root     101254  0.0  0.0      0     0 ?        S    17:22   0:00  \_ [kworker/0:1]
root       2144  0.0  0.0      0     0 ?        S    17:27   0:00  \_ [kworker/1:1]
root       3792  0.0  0.0      0     0 ?        S    17:29   0:00  \_ [kworker/u200:2]
root       4531  0.0  0.0      0     0 ?        S    17:30   0:00  \_ [kworker/0:2]
root       7370  0.0  0.0      0     0 ?        S    17:34   0:00  \_ [kworker/1:0]
root       9896  0.0  0.0      0     0 ?        S    17:37   0:00  \_ [kworker/0:0]
root      11412  0.0  0.0      0     0 ?        S    17:39   0:00  \_ [kworker/1:2]
root          1  0.1  0.1 192272  3384 ?        Ss    2025 110:23 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.2  39500  5376 ?        Ss    2025  33:19 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352     8 ?        Ss    2025   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   124 ?        S<sl  2025   4:48 /sbin/auditd
root        487  0.0  0.0  21540   348 ?        Ss    2025   1:41 /usr/sbin/irqbalance --foreground
root        489  0.0  0.0  24896  1128 ?        Ss    2025  17:27 /usr/lib/systemd/systemd-logind
polkitd     494  0.0  0.0 610664  1028 ?        Ssl   2025   9:43 /usr/lib/polkit-1/polkitd --no-debug
root        496  0.0  0.0  52852   340 ?        Ss    2025   0:00 /usr/sbin/smartd -n -q never
dbus        503  0.0  0.0  58748  1324 ?        Ss    2025  38:18 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         511  0.0  0.0  69256    60 ?        Ss    2025   0:04 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss    2025   0:00 /usr/sbin/acpid
root        530  0.0  0.0 195208     0 ?        Ssl   2025   0:00 /usr/sbin/gssproxy -D
root        557  0.0  0.0  24208    24 ?        Ss    2025   0:00 /usr/sbin/atd -f
root        558  0.0  0.0 124508   428 ?        Ss    2025   2:23 /usr/sbin/crond -n
root      11332  0.0  0.0 183076  2144 ?        S    17:39   0:00  \_ /usr/sbin/CROND -n
root      11363  0.0  0.0 113284  1208 ?        Ss   17:39   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      11371  0.0  0.0 108052   360 ?        S    17:39   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      11372  0.0  0.0 113288  1516 ?        S    17:39   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      11439  0.0  0.0 153672  1780 ?        R    17:39   0:00  |               \_ ps auxf
root      11333  0.0  0.0 183076  2152 ?        S    17:39   0:00  \_ /usr/sbin/CROND -n
root      11353  0.0  0.0  20164   808 ?        Ss   17:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      11334  0.0  0.0 183076  2152 ?        S    17:39   0:00  \_ /usr/sbin/CROND -n
root      11355  0.0  0.0  20164   808 ?        Ss   17:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      11337  0.0  0.0 183076  2152 ?        S    17:39   0:00  \_ /usr/sbin/CROND -n
root      11351  0.0  0.0  20164   992 ?        Ss   17:39   0:00  |   \_ jailshell (cloudsms) [11436] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  11436  0.0  0.0  20164   264 ?        S    17:39   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  11437  0.0  0.0 113284  1212 ?        S    17:39   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  11438  0.0  0.6 404052 15088 ?        R    17:39   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue.php
root      11338  0.0  0.0 183076  2152 ?        S    17:39   0:00  \_ /usr/sbin/CROND -n
root      11360  0.0  0.0  20164   808 ?        Ss   17:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      11340  0.0  0.0 183076  2148 ?        S    17:39   0:00  \_ /usr/sbin/CROND -n
root      11357  0.0  0.0  20164   808 ?        Ss   17:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      11342  0.0  0.0 183076  2140 ?        S    17:39   0:00  \_ /usr/sbin/CROND -n
root      11356  0.0  0.0 113284  1212 ?        Ss   17:39   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      11375 10.0  0.6 170044 16908 ?        S    17:39   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      11429  0.0  0.0 113496  1428 ?        S    17:39   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root      11431  0.0  0.3 185328  7764 ?        R    17:39   0:00  |               \_ /usr/bin/python2.7 -c import yum
root      11343  0.0  0.0 183076  2140 ?        S    17:39   0:00  \_ /usr/sbin/CROND -n
root      11364  0.0  0.0  20164   964 ?        Ss   17:39   0:00  |   \_ jailshell (pactpay) [11378] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   11378  0.0  0.0  20164   260 ?        S    17:39   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   11381  2.0  0.7 480124 17676 ?        S    17:39   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      11345  0.0  0.0 183076  2140 ?        S    17:39   0:00  \_ /usr/sbin/CROND -n
root      11359  0.0  0.0  20164   964 ?        Ss   17:39   0:00      \_ jailshell (nigeria) [11376] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   11376  0.0  0.0  20164   260 ?        S    17:39   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   11391  5.0  0.6 404052 16144 ?        S    17:39   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        576  0.0  0.0 108296     4 tty1     Ss+   2025   0:00 /sbin/agetty --noclear tty1 linux
root        577  0.0  0.0 114704     0 ttyS0    Ss+   2025   0:00 /bin/bash
systuser    928  0.0  0.0  11540    52 ?        Ssl   2025   0:02 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    929  0.0  0.0  12756    60 ?        Ssl   2025   0:02 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    931  0.0  0.0 112524    68 ?        Ssl   2025   0:02 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    932  0.0  0.0 111608    68 ?        Ssl   2025   0:02 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        935  0.0  0.0 572372   872 ?        Ssl   2025   6:09 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        937  0.0  0.0 111304   340 ?        Ss    2025   7:08 /usr/sbin/sshd -D
root        939  0.0  0.3 1350728 9596 ?        Ssl   2025   3:03 /usr/bin/cspdaemon
root        952  0.0  0.2 261812  5784 ?        Ss    2025  13:51 cpsrvd (SSL) - waiting for connections                   
root      11257  0.0  0.0      0     0 ?        Z    17:38   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.2 331088  5724 ?        Ssl   2025  17:58 /usr/sbin/rsyslogd -n
memcach+    972  0.0  0.0 342400     0 ?        Ssl   2025   1:37 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 1277312 2220 ?        Ssl   2025   0:40 /usr/bin/checkstatus
systuser    980  0.0  0.3 114272  7332 ?        Ssl   2025  20:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser   1144  0.0  0.1 157704  2948 ?        S     2025   0:21 SonarPush 0.6.12 [sleeping]
root       1239  0.0  0.0 167452  1188 ?        Ss    2025   1:06 dnsadmin - dormant mode
root       1243  0.0  0.3 209952  9388 ?        Ss    2025   8:27 tailwatchd
root       1244  0.0  0.8 262224 21700 ?        Ss    2025   8:26 cpdavd - accepting connections on: 2091, 2077, 2078
oysipao+  15361  0.0  0.0   3148     4 ?        Ss    2025   0:00 [kworker]
oysipao+  15368  0.0  0.0   3156    36 ?        S     2025   1:40  \_ [kworker]
telegraf  85330  0.0  0.9 5654308 22212 ?       SLsl  2025  28:51 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root      72712  0.0  0.0 445028   492 ?        Ss    2025   3:14 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  11159  0.0  0.0 445028   192 ?        S    17:38   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  11169  0.0  0.0 445028   192 ?        S    17:38   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  72887  0.0  0.1 412396  3304 ?        Ss    2025  16:06 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+  72891  0.0  0.1 387556  3080 ?        Ss    2025   0:26 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
named      1188  0.0  1.1 1185868 27480 ?       Ssl   2025  19:45 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root      12995  0.0  2.5 1483072 61620 ?       Ssl  Jan02   2:45 /usr/local/cpanel/3rdparty/bin/clamd -F
mysql     19908  1.7 12.8 1483940 310692 ?      Sl   Jan02 150:13 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root      16217  0.0  0.0  51656   444 ?        Ss   Jan04   0:05 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot   16226  0.0  0.0  10320   372 ?        S    Jan04   0:01  \_ dovecot/anvil
dovenull  17778  0.0  0.0  47120  1500 ?        S    01:29   0:01  \_ dovecot/pop3-login
dovenull  17779  0.0  0.0  48144  1856 ?        S    01:29   0:00  \_ dovecot/imap-login
root      17780  0.0  0.0  10452   408 ?        S    01:29   0:00  \_ dovecot/log
dovenull  17781  0.0  0.0  47300  1468 ?        S    01:29   0:01  \_ dovecot/pop3-login
dovenull  17782  0.0  0.0  48344  2020 ?        S    01:29   0:00  \_ dovecot/imap-login
root      17783  0.0  0.0  24528  1940 ?        S    01:29   0:00  \_ dovecot/config
dovecot   17784  0.0  0.0  13568   532 ?        S    01:29   0:00  \_ dovecot/stats
dovecot   17785  0.0  0.0  41156  1092 ?        S    01:29   0:01  \_ dovecot/auth
worencom   9117  0.0  0.0  38468  2020 ?        S    17:36   0:00  \_ dovecot/imap
root      10899  0.0  0.0  41052  1820 ?        S    17:38   0:00  \_ dovecot/auth -w
root      16283  0.0  0.0 153404   220 ?        Ss   Jan04   0:09 pure-ftpd (SERVER)
root      16284  0.0  0.0 152780    40 ?        Ss   Jan04   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root      63705  0.0  0.1 224412  3088 ?        Ss   Jan07   0:01 queueprocd - waiting up to 60s to process a task
mailnull  64008  0.0  0.1  89196  3412 ?        Ss   Jan07   0:02 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
nscd      64247  0.0  0.0 1377576 2340 ?        Ssl  Jan07   0:38 /usr/sbin/nscd
cpanelc+  64408  0.0  0.1  10820  3800 ?        Ss   Jan07   1:46 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root      64415  0.0  0.0 130416  1356 ?        SN   Jan07   0:00 cpanellogd - sleeping for logs
root      64460  0.0  0.0 299272   384 ?        Ss   Jan07   0:04 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root      85039  0.1  0.4 185824 11680 ?        Ss   00:00   1:13 lfd - sleeping
root      85507  0.0  0.2 267196  7136 ?        Ss   00:00   0:08 /usr/sbin/httpd -k start
root      17786  0.0  0.0  12804   328 ?        S    01:29   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      17787  0.0  0.0  12732   284 ?        S    01:29   0:03  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      17788  0.0  0.0  12824   348 ?        S    01:29   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      17789  0.0  0.0  53252    20 ?        S    01:29   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     6745  0.0  0.7 277636 18284 ?        S    17:33   0:00  \_ /usr/sbin/httpd -k start
nobody     7175  0.0  0.7 277596 18348 ?        S    17:33   0:00  \_ /usr/sbin/httpd -k start
nobody     8419  0.0  0.7 277604 18592 ?        S    17:35   0:00  \_ /usr/sbin/httpd -k start
nobody     9258  0.0  0.7 277572 17544 ?        S    17:36   0:00  \_ /usr/sbin/httpd -k start
nobody     9328  0.0  0.7 277628 18328 ?        S    17:36   0:00  \_ /usr/sbin/httpd -k start
nobody     9738  0.0  0.7 277596 18136 ?        S    17:36   0:00  \_ /usr/sbin/httpd -k start
nobody     9756  0.0  0.7 277596 17876 ?        S    17:36   0:00  \_ /usr/sbin/httpd -k start
nobody     9757  0.0  0.7 277572 17784 ?        S    17:36   0:00  \_ /usr/sbin/httpd -k start
nobody    10172  0.0  0.7 277588 17800 ?        S    17:37   0:00  \_ /usr/sbin/httpd -k start
nobody    10259  0.0  0.7 277572 17604 ?        S    17:37   0:00  \_ /usr/sbin/httpd -k start
nobody    10260  0.0  0.7 277624 18000 ?        S    17:37   0:00  \_ /usr/sbin/httpd -k start
nobody    10450  0.0  0.7 277692 17760 ?        S    17:37   0:00  \_ /usr/sbin/httpd -k start
nobody    10669  0.0  0.7 277568 17400 ?        S    17:38   0:00  \_ /usr/sbin/httpd -k start
nobody    10699  0.0  0.6 277396 16808 ?        S    17:38   0:00  \_ /usr/sbin/httpd -k start
nobody    10718  0.0  0.7 277516 18096 ?        S    17:38   0:00  \_ /usr/sbin/httpd -k start
nobody    10719  0.0  0.7 277592 17760 ?        S    17:38   0:00  \_ /usr/sbin/httpd -k start
nobody    10720  0.0  0.7 277584 17912 ?        S    17:38   0:00  \_ /usr/sbin/httpd -k start
nobody    10721  0.0  0.7 277568 17632 ?        S    17:38   0:00  \_ /usr/sbin/httpd -k start
nobody    10753  0.0  0.7 277584 17556 ?        S    17:38   0:00  \_ /usr/sbin/httpd -k start
nobody    10950  0.0  0.7 277572 17612 ?        S    17:38   0:00  \_ /usr/sbin/httpd -k start
nobody    11038  0.0  0.6 277396 16808 ?        S    17:38   0:00  \_ /usr/sbin/httpd -k start
nobody    11104  0.0  0.7 277536 17228 ?        S    17:38   0:00  \_ /usr/sbin/httpd -k start
nobody    11113  0.0  0.6 277396 16816 ?        S    17:38   0:00  \_ /usr/sbin/httpd -k start
nobody    11114  0.0  0.6 277396 16816 ?        S    17:38   0:00  \_ /usr/sbin/httpd -k start
nobody    11203  0.0  0.6 277396 16808 ?        S    17:38   0:00  \_ /usr/sbin/httpd -k start
nobody    11218  0.0  0.6 277396 16580 ?        S    17:38   0:00  \_ /usr/sbin/httpd -k start
nobody    11219  0.0  0.6 277396 16816 ?        S    17:38   0:00  \_ /usr/sbin/httpd -k start
nobody    11287  0.0  0.6 277396 16560 ?        S    17:38   0:00  \_ /usr/sbin/httpd -k start
nobody    11293  0.2  0.0      0     0 ?        Z    17:38   0:00  \_ [httpd] <defunct>
nobody    11294  0.0  0.6 277396 16688 ?        S    17:38   0:00  \_ /usr/sbin/httpd -k start
root      85549  0.0  0.0 400740  1952 ?        Ss   00:00   0:20 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    11096 27.7  4.5 575180 109708 ?       R    17:38   0:06  \_ php-fpm: pool cloudware_ng
cloudw    11100 24.4  4.4 572108 108128 ?       R    17:38   0:05  \_ php-fpm: pool cloudware_ng
workflo+  11106  6.5  2.3 450476 56792 ?        S    17:38   0:01  \_ php-fpm: pool blog_workflow-management-software_com
workflo+  11109  6.5  2.3 450476 56792 ?        S    17:38   0:01  \_ php-fpm: pool blog_workflow-management-software_com
nigeria   11181  0.6  0.3 400668  8372 ?        S    17:38   0:00  \_ php-fpm: pool nigeriadecide_org
workflo+  11188  6.5  2.2 448428 54684 ?        S    17:38   0:00  \_ php-fpm: pool blog_workflow-management-software_com
workflo+  11205  5.3  2.0 444332 50552 ?        S    17:38   0:00  \_ php-fpm: pool blog_workflow-management-software_com
cloudw    11217 25.8  4.5 575116 109260 ?       R    17:38   0:03  \_ php-fpm: pool cloudware_ng
cloudw    11237 28.5  4.3 570188 105952 ?       S    17:38   0:03  \_ php-fpm: pool cloudware_ng
cloudw    11242 25.4  4.3 570188 105972 ?       R    17:38   0:02  \_ php-fpm: pool cloudware_ng
workflo+  11286  8.0  1.8 438188 44372 ?        S    17:38   0:00  \_ php-fpm: pool blog_workflow-management-software_com
nigeria   11295  0.4  0.3 400588  8264 ?        S    17:38   0:00  \_ php-fpm: pool nigeriadecide_org
root      85554  0.0  0.0 388892   272 ?        Ss   00:00   0:02 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root      85559  0.0  0.0 396248   296 ?        Ss   00:00   0:02 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root      85564  0.0  0.0 389508   336 ?        Ss   00:00   0:02 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root      85569  0.0  0.0 439788   368 ?        Ss   00:00   0:02 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root     102014  0.0  0.5 248844 13884 ?        Ss   04:47   0:08 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       4857  0.0  4.2 275828 103164 ?       S    04:57   0:16  \_ spamd child
root       4859  0.0  0.5 249992 12576 ?        S    04:57   0:00  \_ spamd child
cloudw    11306  0.6  0.5 287616 14456 ?        R    17:39   0:00 /opt/cpanel/ea-php70/root/usr/bin/php -f /home/cloudw/schoolplus.cloudware.ng/wp-includes/ucdgfw.php
## mysql stats
Uptime: 501786  Threads: 7  Questions: 51749940  Slow queries: 0  Opens: 124117  Flush tables: 1  Open tables: 2000  Queries per second avg: 103.131
*************************** 1. row ***************************
     Id: 766410
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 766411
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 766414
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 766417
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 766421
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 6. row ***************************
     Id: 766425
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 7. row ***************************
     Id: 766428
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 182.48.69.166 TIME_WAIT
      1 185.228.6.171 TIME_WAIT
      1 185.242.226.123 TIME_WAIT
      1 ::1 TIME_WAIT
      1 20.253.155.235 TIME_WAIT
      1 202.76.171.161 TIME_WAIT
      1 202.76.184.119 TIME_WAIT
      1 202.76.186.211 TIME_WAIT
      1 202.76.190.10 TIME_WAIT
      1 202.76.191.36 TIME_WAIT
      1 216.73.216.37 TIME_WAIT
      1 41.226.234.102 TIME_WAIT
      1 45.170.216.119 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 51.222.95.222 TIME_WAIT
      1 54.145.186.166 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 161.115.235.110 TIME_WAIT
      2 161.115.235.111 TIME_WAIT
      2 161.115.235.112 TIME_WAIT
      2 161.115.235.117 TIME_WAIT
      2 161.115.235.121 TIME_WAIT
      2 161.115.235.124 TIME_WAIT
      2 161.115.235.126 TIME_WAIT
      2 161.115.235.147 TIME_WAIT
      2 173.199.190.172 TIME_WAIT
      3 161.115.235.102 TIME_WAIT
      3 161.115.235.107 TIME_WAIT
      3 161.115.235.108 TIME_WAIT
      3 161.115.235.113 TIME_WAIT
      3 161.115.235.114 TIME_WAIT
      3 161.115.235.119 TIME_WAIT
      3 161.115.235.120 TIME_WAIT
      3 161.115.235.122 TIME_WAIT
      3 161.115.235.127 TIME_WAIT
      3 161.115.235.128 TIME_WAIT
      3 161.115.235.129 TIME_WAIT
      3 161.115.235.130 TIME_WAIT
      3 161.115.235.134 TIME_WAIT
      3 161.115.235.136 TIME_WAIT
      3 161.115.235.137 TIME_WAIT
      3 161.115.235.141 TIME_WAIT
      3 161.115.235.143 TIME_WAIT
      3 74.7.227.27 TIME_WAIT
      4 161.115.235.138 TIME_WAIT
      5 216.73.216.182 TIME_WAIT
     11 136.243.228.180 TIME_WAIT
     12 136.243.228.195 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.66 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Dec 8 2025 14:42:54
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 08-Jan-2026 17:39:03 WAT
   Restart Time: Thursday, 08-Jan-2026 00:00:25 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 17 hours 38 minutes 38 seconds
   Server load: 6.85 5.77 4.22
   Total accesses: 187698 - Total Traffic: 1.6 GB - Total Duration: 172613195
   CPU Usage: u1.54 s7.78 cu974.6 cs553.9 - 2.42% CPU load
   2.96 requests/sec - 26.7 kB/second - 9.0 kB/request - 919.633 ms/request
   18 requests currently being processed, 0 workers gracefully restarting, 11 idle workers

____RKR_KWKK__KWW_K_KWCK_W.KC._.................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req    Dur   Conn  Child  Slot      Client      Protocol              VHost                                          Request
   0-1  10450 0/15/12348 _ 0.03 1     7    9750404 0.0   0.26  99.00  51.222.95.222   http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php?state=Benue&lga=Kwande&ward=Mbad
   1-1  9738  0/38/10804 _ 0.07 2     808  9135263 0.0   0.31  106.97 216.73.216.37   http/1.1 health.oyostate.gov.ng:443      GET /wp-sitemap.xml HTTP/1.1
   2-1  10950 0/10/11424 _ 0.02 1     1969 9483209 0.0   0.11  128.08 216.73.216.182  http/1.1 cloudware.ng:80                 GET /shop/products/67053057037.html HTTP/1.1
   3-1  9756  0/40/11191 _ 0.37 0     35   9438477 0.0   0.38  82.59  34.234.206.30   http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/images/2019elections/images/blog
   4-1  9258  0/14/10605 R 0.03 73    1349 8090064 0.0   0.24  88.40  169.224.1.117   http/1.1 cloudware.ng:443                GET /shop/products/670290273805.html HTTP/1.1
   5-1  11038 4/6/9690   K 0.00 3     1866 8941903 3.1   0.03  68.26  216.73.216.182  http/1.1 cloudware.ng:80                 GET /shop/products/67053057037.html HTTP/1.1
   6-1  7175  0/58/9484  R 0.19 72    810  8275784 0.0   1.05  87.95  136.243.228.180 http/1.1 cloudware.ng:80                 GET /shop/products/67084658350.html HTTP/1.1
   7-1  8419  0/61/9287  _ 0.42 2     1070 8183499 0.0   1.01  80.68  216.73.216.182  http/1.1 cloudware.ng:80                 GET /shop/products/675225407029.html HTTP/1.1
   8-1  10669 4/15/10111 K 0.02 3     1768 7870452 3.1   0.16  77.30  216.73.216.182  http/1.1 cloudware.ng:80                 GET /shop/products/675225407029.html HTTP/1.1
   9-1  9757  0/28/8790  W 0.09 0     0    7678667 0.0   0.52  78.18  146.174.164.91  http/1.1 cloudware.ng:443                GET /shop/products/67042510470.html HTTP/1.1
   10-1 9328  1/38/8367  K 0.71 1     1836 7202747 29.6  0.51  96.35  202.76.182.100  http/1.1 cloudware.ng:443                GET /shop/products/670390617775.html HTTP/1.1
   11-1 11104 1/4/8343   K 0.01 4     3426 7462333 29.6  0.08  73.74  202.76.161.230  http/1.1 cloudware.ng:443                GET /shop/products/670361432495.html HTTP/1.1
   12-1 11113 0/4/6893   _ 0.00 1     2833 6930194 0.0   0.06  83.35  169.224.22.153  http/1.1 cloudware.ng:443                GET /shop/products/670361255069.html HTTP/1.1
   13-1 11114 0/3/5642   _ 0.00 1     3210 5884555 0.0   0.06  48.26  170.239.141.39  http/1.1 cloudware.ng:443                GET /shop/products/670361096065.html HTTP/1.1
   14-1 10172 1/28/6889  K 0.34 1     2303 5959935 29.6  0.24  46.24  202.76.169.123  http/1.1 cloudware.ng:443                GET /shop/products/670361550699.html HTTP/1.1
   15-1 11203 0/4/6876   W 0.00 1     0    5770270 0.0   0.03  71.94  202.76.190.223  http/1.1 cloudware.ng:443                GET /shop/products/67042508277.html HTTP/1.1
   16-1 11218 0/1/3479   W 0.00 0     0    4626856 0.0   0.03  26.57  136.243.228.180 http/1.1 cloudware.ng:80                 GET /shop/products/67095473857.html HTTP/1.1
   17-1 11219 0/4/3960   _ 0.00 1     1448 4669739 0.0   0.03  29.21  136.243.228.195 http/1.1 cloudware.ng:80                 GET /shop/products/67063993245.html HTTP/1.1
   18-1 10699 1/14/3630  K 0.02 2     2265 3743691 29.6  0.10  31.13  202.76.161.174  http/1.1 cloudware.ng:443                GET /shop/products/670361499432.html HTTP/1.1
   19-1 6745  0/88/2681  _ 0.23 1     3314 3466848 0.0   3.90  25.40  146.174.179.29  http/1.1 cloudware.ng:443                GET /shop/products/670361104409.html HTTP/1.1
   20-1 10718 1/16/1733  K 0.39 3     16   2361154 10.5  0.26  11.69  66.249.70.99    http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php?state=Bayelsa&lga=Brass&ward=Bra
   21-1 10719 3/12/1707  W 0.03 1     0    2633559 2.3   0.19  18.94  216.73.216.182  http/1.1 cloudware.ng:80                 GET /shop/products/67147531921.html HTTP/1.1
   22-1 10259 1/20/3286  C 0.04 5     3219 3108718 29.6  0.29  19.39  202.76.142.43   http/1.1 cloudware.ng:443                GET /shop/products/670361256140.html HTTP/1.1
   23-1 10720 5/20/2907  K 0.04 2     700  2820839 104.3 0.28  21.54  74.7.227.27     http/1.1 nigeriadecide.org:443           GET /Alliance_For_Democracy.php/images/about_nigerian_political
   24-1 11287 0/2/2680   _ 0.00 0     1881 2775739 0.0   0.03  37.61  216.73.216.182  http/1.1 cloudware.ng:80                 GET /shop/products/67042923989.html HTTP/1.1
   25-1 10260 0/25/2780  W 0.04 0     0    2981722 0.0   0.21  19.15  ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   26-1 -     0/0/1320   . 0.00 0     0    2402571 0.0   0.00  8.52   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-1 10721 1/16/1502  K 0.03 3     1334 1520068 29.6  0.24  13.85  146.174.178.215 http/1.1 cloudware.ng:443                GET /shop/products/670361480455.html HTTP/1.1
   28-1 11294 1/2/1286   C 0.01 0     0    1248161 0.2   0.01  9.82   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-1 -     0/0/819    . 0.00 34    0    1090698 0.0   0.00  10.86  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-1 10753 0/15/881   _ 0.05 0     1    1055604 0.0   0.28  5.69   ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   31-1 -     0/0/634    . 0.00 890   757  735010  0.0   0.00  4.61   161.115.235.129 http/1.1 blog.workflow-management-softwa POST /xmlrpc.php HTTP/1.1
   32-1 -     0/0/373    . 0.00 826   0    639885  0.0   0.00  4.20   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-1 -     0/0/274    . 0.00 873   0    380194  0.0   0.00  1.15   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-1 -     0/0/1711   . 0.00 903   0    944115  0.0   0.00  14.24  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-1 -     0/0/79     . 0.00 904   0    309039  0.0   0.00  0.46   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-1 -     0/0/809    . 0.00 878   0    444694  0.0   0.00  7.60   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-1 -     0/0/142    . 0.00 900   0    103548  0.0   0.00  0.93   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-1 -     0/0/476    . 0.00 894   0    289959  0.0   0.00  3.03   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-1 -     0/0/245    . 0.00 884   0    237372  0.0   0.00  1.55   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-1 -     0/0/127    . 0.00 893   0    225085  0.0   0.00  1.05   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-1 -     0/0/662    . 0.00 881   0    188804  0.0   0.00  6.78   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-1 -     0/0/124    . 0.00 886   0    342161  0.0   0.00  0.42   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-1 -     0/0/368    . 0.00 3457  0    680444  0.0   0.00  1.79   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-1 -     0/0/24     . 0.00 3915  0    32227   0.0   0.00  0.51   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-1 -     0/0/11     . 0.00 3925  0    4277    0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-1 -     0/0/38     . 0.00 3943  0    121946  0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-1 -     0/0/4      . 0.00 17683 0    58      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-1 -     0/0/4      . 0.00 17679 0    731     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-1 -     0/0/1      . 0.00 17703 0    0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-1 -     0/0/184    . 0.00 16866 0    367567  0.0   0.00  1.65   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-1 -     0/0/1      . 0.00 17701 0    0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-1 -     0/0/1      . 0.00 17700 0    0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-1 -     0/0/2      . 0.00 17692 0    52      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-1 -     0/0/3      . 0.00 17670 0    755     0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-1 -     0/0/1      . 0.00 17702 0    0       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-1 -     0/0/3      . 0.00 17675 0    1510    0.0   0.00  1.26   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-1 -     0/0/2      . 0.00 17690 0    12      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1280
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 5 seconds, (range: 0...24)
   index usage: 22%, cache usage: 30%
   total entries stored since starting: 106440
   total entries replaced since starting: 0
   total entries expired since starting: 105097
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 19 hit, 1494 miss
   total removes since starting: 64 hit, 140 miss
Youez - 2016 - github.com/yon3zu
LinuXploit