403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-05.17.33.txt
 ## swap threshold exceeded
## server overview
2025-11-05.17.33 load[0] mem[62/64] mysql[1/10] httpd[23]
              total        used        free      shared  buff/cache   available
Mem:           2363        1397         100          86         865         704
Swap:          1999        1362         637
 17:33:01 up  7:43,  0 users,  load average: 0.03, 0.06, 0.23
## system overview
top - 17:33:01 up  7:43,  0 users,  load average: 0.03, 0.06, 0.23
Tasks: 216 total,  12 running, 203 sleeping,   0 stopped,   1 zombie
%Cpu(s): 54.5 us, 45.5 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    89664 free,  1474096 used,   856540 buff/cache
KiB Swap:  2047996 total,   653308 free,  1394688 used.   677780 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 73200 nobody    20   0   84364  13652   4852 S  18.8  0.6   0:00.03 /usr/loca+
    36 root      20   0       0      0      0 S  12.5  0.0   0:16.19 [kswapd0]
 73203 nobody    20   0   83236  12452   4572 S  12.5  0.5   0:00.02 /usr/loca+
  3198 cpanelc+  20   0   10212   3448   2444 R   6.2  0.1   0:19.37 /usr/loca+
 55961 nobody    20   0  277532  21916   5156 S   6.2  0.9   0:01.05 /usr/sbin+
 70704 nobody    20   0  277784  20100   4036 S   6.2  0.8   0:00.16 /usr/sbin+
 72717 nobody    20   0  277384  19096   3556 S   6.2  0.8   0:00.06 /usr/sbin+
 73204 nobody    20   0   81524  10092   4044 R   6.2  0.4   0:00.01 /usr/loca+
 73210 pactpay   20   0  400652  15408   9980 S   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44420   3508   1568 S   0.0  0.1   0:40.14 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 R   0.0  0.0   0:01.20 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.22 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:23.05 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.18 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.35 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   103 root      20   0       0      0      0 S   0.0  0.0   0:00.50 [kauditd]
   239 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   260 root       0 -20       0      0      0 S   0.0  0.0   0:01.89 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:01.67 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.57 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39500   6160   5848 S   0.0  0.3   0:13.49 /usr/lib/+
   378 root      20   0   45356    284    124 S   0.0  0.0   0:00.38 /usr/lib/+
   408 root      16  -4   55532    516    388 S   0.0  0.0   0:02.07 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   477 rpc       20   0   69256    140     40 S   0.0  0.0   0:00.03 /sbin/rpc+
   489 polkitd   20   0  612240    928    532 S   0.0  0.0   0:03.82 /usr/lib/+
   491 root      20   0  152780    164    120 S   0.0  0.0   0:00.01 /usr/sbin+
   493 dbus      20   0   58716   1460    720 S   0.0  0.1   0:14.42 /usr/bin/+
   510 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   528 root      20   0   24896   1436    836 S   0.0  0.1   0:06.42 /usr/lib/+
   532 root      20   0   21540    456    344 S   0.0  0.0   0:00.65 /usr/sbin+
   533 root      20   0  224268   6476   1200 S   0.0  0.3   0:00.42 queueproc+
   535 root      20   0   52852    340    228 S   0.0  0.0   0:00.01 /usr/sbin+
   552 nscd      20   0 1342692   2192    824 R   0.0  0.1   0:05.02 /usr/sbin+
   558 root      20   0   25908    112     88 S   0.0  0.0   0:00.00 /usr/sbin+
   560 root      20   0  124480    464    332 S   0.0  0.0   0:00.80 /usr/sbin+
   565 root      20   0    4388     44     40 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root      20   0  114704     60     60 S   0.0  0.0   0:00.02 /bin/bash
   582 root      20   0  108296     80     76 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   90820   4064   1028 S   0.0  0.2   0:00.36 /usr/sbin+
   618 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:02.32 [loop0]
   665 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   666 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  3173 telegraf  20   0 5654048  35872   5984 S   0.0  1.5   0:14.80 /usr/loca+
  3175 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.62 /usr/bin/+
  3176 root      20   0  111304    436    332 S   0.0  0.0   0:03.07 /usr/sbin+
  3177 named     20   0  711724  43452   1848 S   0.0  1.8   0:17.17 /usr/sbin+
  3179 root      20   0 1763068 228312   1000 S   0.0  9.4   0:15.70 /usr/loca+
  3188 systuser  20   0   10388     52      0 S   0.0  0.0   0:00.01 /usr/loca+
  3189 root      20   0  153404    332    248 S   0.0  0.0   0:00.65 pure-ftpd+
  3190 root      20   0  397344   3360    668 S   0.0  0.1   0:05.02 php-fpm: +
  3192 root      20   0  572372    976    408 S   0.0  0.0   0:02.45 /usr/bin/+
  3196 root      20   0  392856    744    564 S   0.0  0.0   0:00.75 php-fpm: +
  3199 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.01 /usr/loca+
  3200 systuser  20   0  113932   2036      0 S   0.0  0.1   0:00.01 /usr/loca+
  3204 root      20   0   51508    680    492 S   0.0  0.0   0:00.33 /usr/sbin+
  3205 root      20   0  445028   2604   2604 S   0.0  0.1   0:00.05 sw-engine+
  3210 systuser  20   0  113016   1616      0 S   0.0  0.1   0:00.01 /usr/loca+
  3211 root      20   0  261280  27496   4796 S   0.0  1.1   0:06.94 cpsrvd (S+
  3222 root      20   0  436392  11180  11092 S   0.0  0.5   0:00.85 php-fpm: +
  3224 root      20   0  290128   7380   5336 S   0.0  0.3   0:07.11 /usr/sbin+
  3226 root      20   0  386112    724    508 S   0.0  0.0   0:00.78 php-fpm: +
  3237 root      20   0  385496    720    504 S   0.0  0.0   0:00.83 php-fpm: +
  3238 systuser  20   0  114016  13640   2808 S   0.0  0.6   0:06.85 /usr/loca+
  3338 dovenull  20   0   47048   2780   1988 S   0.0  0.1   0:00.35 dovecot/p+
  3339 dovenull  20   0   47900   3416   1936 S   0.0  0.1   0:00.39 dovecot/i+
  3340 dovecot   20   0   10320    496    380 S   0.0  0.0   0:00.04 dovecot/a+
  3341 root      20   0   10452    472    284 S   0.0  0.0   0:00.33 dovecot/l+
  3342 dovenull  20   0   47048   2732   1912 S   0.0  0.1   0:00.53 dovecot/p+
  3343 dovenull  20   0   47480   3260   2088 S   0.0  0.1   0:00.18 dovecot/i+
  3347 root      20   0   24564   2400    388 S   0.0  0.1   0:00.16 dovecot/c+
  3355 dovecot   20   0   13568    600    384 S   0.0  0.0   0:00.06 dovecot/s+
  3399 wp-tool+  20   0  410452  35532   1580 S   0.0  1.5   0:22.75 /usr/bin/+
  3400 wp-tool+  20   0  387528  13092   1468 S   0.0  0.5   0:00.29 /usr/bin/+
  3408 dovecot   20   0   41056   1472   1036 S   0.0  0.1   0:00.37 dovecot/a+
  3421 systuser  20   0  157700   3080   1024 S   0.0  0.1   0:00.13 SonarPush+
  3467 root      20   0  209700  21432   3500 S   0.0  0.9   0:04.02 tailwatchd
  3469 root      20   0  262224  24452   6592 S   0.0  1.0   0:01.50 cpdavd - +
  3472 root      20   0  167452   1316    712 S   0.0  0.1   0:00.45 dnsadmin +
  3902 root      20   0  299272    756    376 S   0.0  0.0   0:00.76 php-fpm: +
  3924 root      38  18  130416   1472    736 S   0.0  0.1   0:00.07 cpanellog+
  3987 mysql     20   0 1458316 282136   3532 S   0.0 11.7   7:30.12 /usr/sbin+
  4182 root      20   0  266984   8908    684 S   0.0  0.4   0:01.14 /usr/sbin+
  4185 root      20   0   12888    396    252 S   0.0  0.0   0:01.43 /usr/loca+
  4186 root      20   0   12732    324    248 S   0.0  0.0   0:01.15 /usr/loca+
  4187 root      20   0   12920    372    252 S   0.0  0.0   0:01.29 /usr/loca+
  4191 root      20   0   53256    112    112 S   0.0  0.0   0:00.04 /usr/loca+
  4241 root      20   0  183340  12028   1148 S   0.0  0.5   0:26.48 lfd - sle+
  9590 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  9594 oysipao+  20   0    3152    516     24 S   0.0  0.0   0:00.52 [kworker]
 27149 root      20   0  248148 120772   4116 S   0.0  5.0   0:05.67 /usr/loca+
 32286 root      20   0  275128 142464   3728 S   0.0  5.9   0:08.17 spamd chi+
 32288 root      20   0  261360 128884   3840 S   0.0  5.3   0:00.28 spamd chi+
 38927 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 52286 nobody    20   0  277580  21588   5020 S   0.0  0.9   0:01.15 /usr/sbin+
 52298 nobody    20   0  277584  21516   4988 S   0.0  0.9   0:01.09 /usr/sbin+
 55962 nobody    20   0  277524  21552   5052 S   0.0  0.9   0:01.06 /usr/sbin+
 56963 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 57055 nobody    20   0  277524  21368   4848 S   0.0  0.9   0:01.11 /usr/sbin+
 57772 nobody    20   0  277800  21340   4888 S   0.0  0.9   0:00.77 /usr/sbin+
 57858 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 60345 root      20   0 1415368  10968    564 S   0.0  0.5   0:00.07 /usr/bin/+
 60380 root      20   0 1277312  12048    596 S   0.0  0.5   0:00.07 /usr/bin/+
 61791 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 64218 nobody    20   0  277452  20796   4656 S   0.0  0.9   0:00.53 /usr/sbin+
 66190 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 66864 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66879 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 68292 nobody    20   0  277660  20652   4348 S   0.0  0.9   0:00.32 /usr/sbin+
 68800 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 70464 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 70776 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 70987 nobody    20   0  277580  20316   4232 R   0.0  0.8   0:00.22 /usr/sbin+
 72019 root      20   0   60820   4504   3520 S   0.0  0.2   0:00.00 dovecot/l+
 72534 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 72681 nobody    20   0  277336  19120   3616 S   0.0  0.8   0:00.07 /usr/sbin+
 72690 nobody    20   0  277056  18308   3064 S   0.0  0.8   0:00.05 /usr/sbin+
 72691 nobody    20   0  277188  18876   3464 S   0.0  0.8   0:00.04 /usr/sbin+
 72704 nobody    20   0  277060  16776   1696 S   0.0  0.7   0:00.03 /usr/sbin+
 72705 nobody    20   0  277252  18840   3444 S   0.0  0.8   0:00.05 /usr/sbin+
 72706 nobody    20   0  277196  17040   1896 S   0.0  0.7   0:00.05 /usr/sbin+
 72707 nobody    20   0  277196  18844   3388 S   0.0  0.8   0:00.05 /usr/sbin+
 72714 nobody    20   0  277228  19124   3668 S   0.0  0.8   0:00.07 /usr/sbin+
 72715 nobody    20   0  277196  18592   3272 S   0.0  0.8   0:00.05 /usr/sbin+
 72716 nobody    20   0  277060  17032   1852 S   0.0  0.7   0:00.04 /usr/sbin+
 72718 nobody    20   0  277060  17032   1848 S   0.0  0.7   0:00.05 /usr/sbin+
 72719 nobody    20   0  277352  19308   3652 S   0.0  0.8   0:00.08 /usr/sbin+
 72720 nobody    20   0  277332  19152   3532 S   0.0  0.8   0:00.09 /usr/sbin+
 72783 nobody    20   0  277160  18536   3196 S   0.0  0.8   0:00.06 /usr/sbin+
 72785 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 72848 root      20   0  157100   4976   3684 S   0.0  0.2   0:00.00 sshd: unk+
 72881 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: unk+
 73067 pactpay   20   0  397064   4104   1180 S   0.0  0.2   0:00.00 php-fpm: +
 73138 nobody    20   0  277192  18832   3592 S   0.0  0.8   0:00.00 /usr/sbin+
 73140 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 73141 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73142 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73143 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73144 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73145 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73146 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73147 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73148 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73149 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73150 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73151 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73152 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 73153 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 73155 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 73156 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 73157 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 73177 nigeria   20   0  397064   5632   2164 S   0.0  0.2   0:00.00 php-fpm: +
 73180 root      20   0  160248   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 73181 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 73182 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 73183 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 73184 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 73185 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 73186 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 73187 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 73188 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 73189 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 73190 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 73191 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 73192 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 73193 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 73205 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 73206 saboakin  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 73207 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 73208 robocal+  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 73209 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 73211 saboakin  20   0  396592  11428   7992 R   0.0  0.5   0:00.00 /opt/cpan+
 73212 nigeria   20   0  131864   3312   2384 R   0.0  0.1   0:00.00 /usr/loca+
 73213 robocal+  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 73214 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 73215 root      20   0  261436  24132   1408 S   0.0  1.0   0:00.00 cpsrvd (S+
 73216 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 73217 root      20   0  261280  24100   1380 R   0.0  1.0   0:00.00 cpaneld -+
 73218 robocal+  20   0  113284    184      0 R   0.0  0.0   0:00.00 /usr/loca+
 73219 cloudsms  20   0  113284    180      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:49   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:49   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:49   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:49   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    09:49   0:23  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:49   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:49   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:49   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:49   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:49   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:49   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    09:49   0:16  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:49   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:49   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [deferwq]
root        103  0.0  0.0      0     0 ?        S    09:49   0:00  \_ [kauditd]
root        239  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    09:49   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [scsi_tmf_0]
root        247  0.0  0.0      0     0 ?        S    09:49   0:00  \_ [scsi_eh_1]
root        248  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [scsi_tmf_1]
root        251  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [ttm_swap]
root        260  0.0  0.0      0     0 ?        S<   09:49   0:01  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   09:49   0:01  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    09:49   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [ext4-rsv-conver]
root        413  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [xprtiod]
root        618  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [kvm-irqfd-clean]
root        660  0.0  0.0      0     0 ?        S<   09:49   0:02  \_ [loop0]
root        665  0.0  0.0      0     0 ?        S    09:49   0:00  \_ [jbd2/loop0-8]
root        666  0.0  0.0      0     0 ?        S<   09:49   0:00  \_ [ext4-rsv-conver]
root      38927  0.0  0.0      0     0 ?        S    15:59   0:00  \_ [kworker/u200:2]
root      56963  0.0  0.0      0     0 ?        S    16:51   0:00  \_ [kworker/0:1]
root      57858  0.0  0.0      0     0 ?        S    16:54   0:00  \_ [kworker/0:4]
root      61791  0.0  0.0      0     0 ?        S    17:04   0:00  \_ [kworker/1:1]
root      66190  0.0  0.0      0     0 ?        S    17:15   0:00  \_ [kworker/u200:0]
root      66864  0.0  0.0      0     0 ?        S    17:17   0:00  \_ [kworker/1:3]
root      66879  0.0  0.0      0     0 ?        S    17:17   0:00  \_ [kworker/0:2]
root      68800  0.0  0.0      0     0 ?        S    17:22   0:00  \_ [kworker/1:2]
root      70464  0.0  0.0      0     0 ?        S    17:27   0:00  \_ [kworker/1:5]
root      70776  0.0  0.0      0     0 ?        S    17:28   0:00  \_ [kworker/0:0]
root          1  0.1  0.1  44420  3508 ?        Ss   09:49   0:40 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  39500  6160 ?        Ss   09:49   0:13 /usr/lib/systemd/systemd-journald
root        378  0.0  0.0  45356   284 ?        Ss   09:49   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   516 ?        S<sl 09:49   0:02 /sbin/auditd
rpc         477  0.0  0.0  69256   140 ?        Ss   09:49   0:00 /sbin/rpcbind -w
polkitd     489  0.0  0.0 612240   928 ?        Ssl  09:49   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        491  0.0  0.0 152780   164 ?        Ss   09:49   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        493  0.0  0.0  58716  1460 ?        Ss   09:49   0:14 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        510  0.0  0.0 195208     0 ?        Ssl  09:49   0:00 /usr/sbin/gssproxy -D
root        528  0.0  0.0  24896  1436 ?        Ss   09:49   0:06 /usr/lib/systemd/systemd-logind
root        532  0.0  0.0  21540   456 ?        Ss   09:49   0:00 /usr/sbin/irqbalance --foreground
root        533  0.0  0.2 224268  6476 ?        Ss   09:49   0:00 queueprocd - waiting up to 60s to process a task
root        535  0.0  0.0  52852   340 ?        Ss   09:49   0:00 /usr/sbin/smartd -n -q never
nscd        552  0.0  0.0 1342692 2192 ?        Ssl  09:49   0:05 /usr/sbin/nscd
root        558  0.0  0.0  25908   112 ?        Ss   09:49   0:00 /usr/sbin/atd -f
root        560  0.0  0.0 124480   464 ?        Ss   09:49   0:00 /usr/sbin/crond -n
root      73140  0.0  0.0 183048  2140 ?        S    17:33   0:00  \_ /usr/sbin/CROND -n
root      73155  0.0  0.0 113284  1212 ?        Ss   17:33   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      73156  0.0  0.0 108052   356 ?        S    17:33   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      73157  0.0  0.0 113288  1516 ?        S    17:33   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      73220  0.0  0.0 153840  2092 ?        R    17:33   0:00  |               \_ ps auxf
root      73141  0.0  0.0 183048  2144 ?        S    17:33   0:00  \_ /usr/sbin/CROND -n
root      73191  0.0  0.0  20164   808 ?        Ss   17:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      73142  0.0  0.0 183048  2144 ?        S    17:33   0:00  \_ /usr/sbin/CROND -n
root      73188  0.0  0.0  20164   808 ?        Ss   17:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      73143  0.0  0.0 183048  2144 ?        S    17:33   0:00  \_ /usr/sbin/CROND -n
root      73185  0.0  0.0  20164   808 ?        Ss   17:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      73144  0.0  0.0 183048  2144 ?        S    17:33   0:00  \_ /usr/sbin/CROND -n
root      73187  0.0  0.0  20164   804 ?        Ss   17:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      73145  0.0  0.0 183048  2144 ?        S    17:33   0:00  \_ /usr/sbin/CROND -n
root      73193  0.0  0.0  20164   804 ?        Ss   17:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      73146  0.0  0.0 183048  2144 ?        S    17:33   0:00  \_ /usr/sbin/CROND -n
root      73190  0.0  0.0  20164   804 ?        Ss   17:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      73147  0.0  0.0 183048  2144 ?        S    17:33   0:00  \_ /usr/sbin/CROND -n
root      73182  0.0  0.0  20164   964 ?        Ss   17:33   0:00  |   \_ jailshell (cloudsms) [73209] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  73209  0.0  0.0  20164   256 ?        S    17:33   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  73214  0.0  0.0 113284  1212 ?        S    17:33   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  73219  0.0  0.5 338508 14296 ?        R    17:33   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue4.php
root      73148  0.0  0.0 183048  2144 ?        S    17:33   0:00  \_ /usr/sbin/CROND -n
root      73184  0.0  0.0  20164   804 ?        Ss   17:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      73149  0.0  0.0 183048  2144 ?        S    17:33   0:00  \_ /usr/sbin/CROND -n
root      73189  0.0  0.0  20164   804 ?        Ss   17:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      73150  0.0  0.0 183048  2144 ?        S    17:33   0:00  \_ /usr/sbin/CROND -n
root      73181  0.0  0.0  20164   964 ?        Ss   17:33   0:00  |   \_ jailshell (pactpay) [73205] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   73205  0.0  0.0  20164   256 ?        S    17:33   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   73210  0.0  0.6 476460 16056 ?        S    17:33   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      73151  0.0  0.0 183048  2144 ?        S    17:33   0:00  \_ /usr/sbin/CROND -n
root      73192  0.0  0.0  20164   968 ?        Ss   17:33   0:00  |   \_ jailshell (robocallscloudsm) [73208]  /home/robocallscloudsm/public_html && /usr/local/bin/php artisan schedule:run >> /dev/null 2>&1
robocal+  73208  0.0  0.0  20164   264 ?        S    17:33   0:00  |       \_ jailshell (robocallscloudsm) [init] d /home/robocallscloudsm/public_html && /usr/local/bin/php artisan schedule:run >> /dev/null 2>&1
robocal+  73213  0.0  0.0 113284  1212 ?        S    17:33   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/robocallscloudsm/public_html && /usr/local/bin/php artisan schedule:run >> /dev/null 2>&1
robocal+  73218  0.0  0.0      0     0 ?        R    17:33   0:00  |               \_ [php]
root      73152  0.0  0.0 183048  2144 ?        S    17:33   0:00  \_ /usr/sbin/CROND -n
root      73183  0.0  0.0  20164   972 ?        Ss   17:33   0:00  |   \_ jailshell (nigeria) [73207] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   73207  0.0  0.0  20164   264 ?        S    17:33   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   73212  0.0  0.4 396184 10476 ?        R    17:33   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      73153  0.0  0.0 183048  2148 ?        S    17:33   0:00  \_ /usr/sbin/CROND -n
root      73186  0.0  0.0  20164   972 ?        Ss   17:33   0:00      \_ jailshell (saboakin) [73206] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  73206  0.0  0.0      0     0 ?        D    17:33   0:00          \_ [jailshell]
root        565  0.0  0.0   4388    44 ?        Ss   09:49   0:00 /usr/sbin/acpid
root        581  0.0  0.0 114704    60 ttyS0    Ss+  09:49   0:00 /bin/bash
root        582  0.0  0.0 108296    80 tty1     Ss+  09:49   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  90820  4064 ?        Ss   09:49   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
telegraf   3173  0.0  1.4 5654048 35872 ?       SLsl 09:49   0:14 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+   3175  0.0  0.0 342400     0 ?        Ssl  09:49   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       3176  0.0  0.0 111304   436 ?        Ss   09:49   0:03 /usr/sbin/sshd -D
root      72534  0.0  0.1 111304  4264 ?        Ss   17:32   0:00  \_ sshd: [accepted]
root      72785  0.0  0.1 111304  4268 ?        Ss   17:32   0:00  \_ sshd: [accepted]
root      72848  0.0  0.2 157100  4976 ?        Ss   17:32   0:00  \_ sshd: unknown [priv]
sshd      72881  0.0  0.1 115644  2632 ?        S    17:32   0:00      \_ sshd: unknown [net]
named      3177  0.0  1.7 711724 43452 ?        Ssl  09:49   0:17 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       3179  0.0  9.4 1763068 228312 ?      Ssl  09:49   0:15 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser   3188  0.0  0.0  10388    52 ?        Ssl  09:49   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root       3189  0.0  0.0 153404   332 ?        Ss   09:49   0:00 pure-ftpd (SERVER)
root       3190  0.0  0.1 397344  3360 ?        Ss   09:49   0:05 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
pactpay   73067  0.0  0.1 397064  4104 ?        S    17:32   0:00  \_ php-fpm: pool secure_pactpay_com
nigeria   73177  0.0  0.2 397064  5632 ?        S    17:33   0:00  \_ php-fpm: pool nigeriadecide_org
root       3192  0.0  0.0 572372   976 ?        Ssl  09:49   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       3196  0.0  0.0 392856   744 ?        Ss   09:49   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
cpanelc+   3198  0.0  0.1  10212  3448 ?        Ss   09:49   0:19 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   3199  0.0  0.0  12660    60 ?        Ssl  09:49   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser   3200  0.0  0.0 113932  2036 ?        Ssl  09:49   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       3204  0.0  0.0  51508   680 ?        Ss   09:49   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   3338  0.0  0.1  47048  2780 ?        S    09:49   0:00  \_ dovecot/pop3-login
dovenull   3339  0.0  0.1  47900  3416 ?        S    09:49   0:00  \_ dovecot/imap-login
dovecot    3340  0.0  0.0  10320   496 ?        S    09:49   0:00  \_ dovecot/anvil
root       3341  0.0  0.0  10452   472 ?        S    09:49   0:00  \_ dovecot/log
dovenull   3342  0.0  0.1  47048  2732 ?        S    09:49   0:00  \_ dovecot/pop3-login
dovenull   3343  0.0  0.1  47480  3260 ?        S    09:49   0:00  \_ dovecot/imap-login
root       3347  0.0  0.0  24564  2400 ?        S    09:49   0:00  \_ dovecot/config
dovecot    3355  0.0  0.0  13568   600 ?        S    09:49   0:00  \_ dovecot/stats
dovecot    3408  0.0  0.0  41056  1472 ?        S    09:49   0:00  \_ dovecot/auth
root      72019  0.0  0.1  60820  4504 ?        S    17:31   0:00  \_ dovecot/lmtp
root       3205  0.0  0.1 445028  2604 ?        Ss   09:49   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser   3210  0.0  0.0 113016  1616 ?        Ssl  09:49   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       3211  0.0  1.1 261280 27496 ?        Ss   09:49   0:06 cpsrvd (SSL) - waiting for connections                   
root      73215  0.0  1.0 261436 25052 ?        S    17:33   0:00  \_ cpsrvd (SSL) - waiting for connections                   
root      73222  0.0  0.0      0     0 ?        Z    17:33   0:00  \_ [cpaneld - servi] <defunct>
root       3222  0.0  0.4 436392 11180 ?        Ss   09:49   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       3224  0.0  0.3 290128  7380 ?        Ssl  09:49   0:07 /usr/sbin/rsyslogd -n
root       3226  0.0  0.0 386112   724 ?        Ss   09:49   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       3237  0.0  0.0 385496   720 ?        Ss   09:49   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser   3238  0.0  0.5 114016 13640 ?        Ssl  09:49   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
wp-tool+   3399  0.0  1.4 410452 35532 ?        Ss   09:49   0:22 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   3400  0.0  0.5 387528 13092 ?        Ss   09:49   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
systuser   3421  0.0  0.1 157700  3080 ?        S    09:49   0:00 SonarPush 0.6.12 [sleeping]
root       3467  0.0  0.8 209700 21432 ?        Ss   09:49   0:04 tailwatchd
root       3469  0.0  1.0 262224 24452 ?        Ss   09:49   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       3472  0.0  0.0 167452  1316 ?        Ss   09:49   0:00 dnsadmin - dormant mode
root       3902  0.0  0.0 299272   756 ?        Ss   09:49   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       3924  0.0  0.0 130416  1472 ?        SN   09:49   0:00 cpanellogd - sleeping for logs
mysql      3987  1.6 11.6 1458316 282136 ?      Sl   09:49   7:30 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       4182  0.0  0.3 266984  8908 ?        Ss   09:49   0:01 /usr/sbin/httpd -k start
root       4185  0.0  0.0  12888   396 ?        S    09:49   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       4186  0.0  0.0  12732   324 ?        S    09:49   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       4187  0.0  0.0  12920   372 ?        S    09:49   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       4191  0.0  0.0  53256   112 ?        S    09:49   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    52286  0.0  0.8 277580 21588 ?        S    16:42   0:01  \_ /usr/sbin/httpd -k start
nobody    52298  0.0  0.8 277584 21516 ?        S    16:42   0:01  \_ /usr/sbin/httpd -k start
nobody    55961  0.0  0.9 277532 21916 ?        S    16:48   0:01  \_ /usr/sbin/httpd -k start
nobody    55962  0.0  0.8 277524 21552 ?        S    16:48   0:01  \_ /usr/sbin/httpd -k start
nobody    57055  0.0  0.8 277524 21408 ?        S    16:51   0:01  \_ /usr/sbin/httpd -k start
nobody    57772  0.0  0.8 277800 21340 ?        S    16:53   0:00  \_ /usr/sbin/httpd -k start
nobody    64218  0.0  0.8 277452 20796 ?        S    17:09   0:00  \_ /usr/sbin/httpd -k start
nobody    68292  0.0  0.8 277660 20652 ?        S    17:20   0:00  \_ /usr/sbin/httpd -k start
nobody    70704  0.0  0.8 277784 20100 ?        S    17:27   0:00  \_ /usr/sbin/httpd -k start
nobody    70987  0.0  0.8 277580 20316 ?        S    17:29   0:00  \_ /usr/sbin/httpd -k start
nobody    72681  0.3  0.7 277336 19120 ?        S    17:32   0:00  \_ /usr/sbin/httpd -k start
nobody    72690  0.2  0.7 277056 18308 ?        S    17:32   0:00  \_ /usr/sbin/httpd -k start
nobody    72691  0.2  0.7 277188 18876 ?        S    17:32   0:00  \_ /usr/sbin/httpd -k start
nobody    72704  0.2  0.6 277060 16776 ?        S    17:32   0:00  \_ /usr/sbin/httpd -k start
nobody    72705  0.2  0.7 277252 18840 ?        S    17:32   0:00  \_ /usr/sbin/httpd -k start
nobody    72706  0.2  0.7 277196 17040 ?        S    17:32   0:00  \_ /usr/sbin/httpd -k start
nobody    72707  0.2  0.7 277196 18844 ?        S    17:32   0:00  \_ /usr/sbin/httpd -k start
nobody    72714  0.4  0.7 277228 19124 ?        S    17:32   0:00  \_ /usr/sbin/httpd -k start
nobody    72715  0.2  0.7 277196 18592 ?        S    17:32   0:00  \_ /usr/sbin/httpd -k start
nobody    72716  0.2  0.7 277060 17032 ?        S    17:32   0:00  \_ /usr/sbin/httpd -k start
nobody    72717  0.3  0.7 277384 19096 ?        S    17:32   0:00  \_ /usr/sbin/httpd -k start
nobody    72718  0.2  0.7 277060 17032 ?        S    17:32   0:00  \_ /usr/sbin/httpd -k start
nobody    72719  0.4  0.7 277352 19308 ?        S    17:32   0:00  \_ /usr/sbin/httpd -k start
nobody    72720  0.5  0.7 277332 19152 ?        S    17:32   0:00  \_ /usr/sbin/httpd -k start
nobody    72783  0.4  0.7 277160 18536 ?        S    17:32   0:00  \_ /usr/sbin/httpd -k start
nobody    73138  0.0  0.7 277192 18832 ?        S    17:33   0:00  \_ /usr/sbin/httpd -k start
root       4241  0.0  0.4 183340 12028 ?        Ss   09:49   0:26 lfd - sleeping
oysipao+   9590  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+   9594  0.0  0.0   3152   516 ?        S    10:01   0:00  \_ [kworker]
root      27149  0.0  4.9 248148 120772 ?       Ss   10:49   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      32286  0.0  5.8 275128 142464 ?       S    11:00   0:08  \_ spamd child
root      32288  0.0  5.3 261360 128884 ?       S    11:00   0:00  \_ spamd child
root      60345  0.0  0.4 1415368 10968 ?       Ssl  17:00   0:00 /usr/bin/cspdaemon
root      60380  0.0  0.4 1277312 12048 ?       Ssl  17:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 49520  Threads: 3  Questions: 2764742  Slow queries: 0  Opens: 10152  Flush tables: 1  Open tables: 2000  Queries per second avg: 55.830
*************************** 1. row ***************************
     Id: 37830
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 37834
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 37836
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.248.90.230 TIME_WAIT
      1 114.119.134.51 TIME_WAIT
      1 114.119.143.119 TIME_WAIT
      1 142.44.225.137 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 ::1 TIME_WAIT
      1 45.156.128.78 TIME_WAIT
      1 45.156.128.79 TIME_WAIT
      1 47.79.194.100 TIME_WAIT
      1 47.79.218.150 TIME_WAIT
      1 54.39.210.33 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 4.216.52.45 TIME_WAIT
      4 45.156.128.77 TIME_WAIT
      7 45.156.128.76 TIME_WAIT
     17 138.199.19.205 TIME_WAIT
    221 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Wednesday, 05-Nov-2025 17:33:01 WAT
   Restart Time: Wednesday, 05-Nov-2025 03:47:47 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 13 hours 45 minutes 14 seconds
   Server load: 0.03 0.06 0.23
   Total accesses: 67575 - Total Traffic: 579.2 MB - Total Duration: 15734495
   CPU Usage: u6.63 s2.85 cu328.57 cs132.45 - .95% CPU load
   1.36 requests/sec - 12.0 kB/second - 8.8 kB/request - 232.845 ms/request
   21 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

KKK_WKKC_KKK_KKKK_KKKKKK_K......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS  Req   Dur   Conn Child  Slot     Client      Protocol              VHost                                   Request
   0-0  68292 12/191/4963 K 1.25 0    108 1136812 5.8  0.61  46.48 138.199.19.205  http/1.1 developers.cloudsms.com.ng:80   GET /wp-content/plugins/bypass.php HTTP/1.1
   1-0  57772 27/319/4726 K 2.27 0    14  1213094 15.6 2.43  46.69 138.199.19.205  http/1.1 proxy-subdomains-vhost.localhos GET /wp-admin/images/bootstrap.php HTTP/1.1
   2-0  52286 7/558/4730  K 3.51 0    0   1014331 4.6  3.02  29.46 138.199.19.205  http/1.1 robocall.cloudsms.com.ng:80     GET /dropdown.php HTTP/1.1
   3-0  70704 0/135/4633  _ 0.48 0    202 1186458 0.0  0.31  46.32 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80          GET /cgi-sys/autodiscover.cgi HTTP/1.1
   4-0  55961 0/457/4536  W 2.92 0    0   898504  0.0  4.83  29.44 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   5-0  52298 24/518/4339 K 4.24 0    36  1086140 13.4 6.65  44.62 138.199.19.205  http/1.1 proxy-subdomains-vhost.localhos GET /themes/zMousse/otuz1.php HTTP/1.1
   6-0  55962 4/459/3770  K 3.62 0    0   1094727 2.6  4.89  33.16 138.199.19.205  http/1.1 2way.cloudsms.com.ng:80         GET /wp-includes/fonts/index.php HTTP/1.1
   7-0  70987 1/222/3364  C 0.68 0    0   1198290 0.8  3.89  39.37 138.199.19.205  http/1.1 proxy-subdomains-vhost.localhos GET /manager.php HTTP/1.1
   8-0  64218 0/322/4099  _ 0.85 0    58  865650  0.0  1.33  42.03 138.199.19.205  http/1.1 proxy-subdomains-vhost.localhos GET /.well-known/pki-validation/admin.php HTTP/1.1
   9-0  72681 1/105/2769  K 0.13 0    0   656537  0.7  0.07  24.26 138.199.19.205  http/1.1 appstore.cloudsms.com.ng:80     GET /default.php HTTP/1.1
   10-0 72690 97/97/3609  K 0.05 0    0   647922  64.3 0.06  19.06 138.199.19.205  http/1.1 bankverify.staging.cloudware.ng GET /wp-includes/Requests/index.php HTTP/1.1
   11-0 72691 22/73/3935  K 0.21 0    0   1092883 13.5 0.04  42.26 138.199.19.205  http/1.1 secure.pactpay.com:80           GET /templates/beez/index.php HTTP/1.1
   12-0 57055 0/471/4378  _ 5.56 0    0   840110  0.0  3.73  39.70 173.199.190.172 http/1.1
   13-0 72704 93/93/2280  K 0.04 0    0   170007  61.8 0.06  17.78 138.199.19.205  http/1.1 bookingapp.staging.cloudware.ng GET /wp-includes/SimplePie/index.php HTTP/1.1
   14-0 72705 19/31/3051  K 0.50 0    204 437481  8.0  0.01  14.76 138.199.19.205  http/1.1 proxy-subdomains-vhost.localhos GET /wp-content/index.php HTTP/1.1
   15-0 72706 92/92/3110  K 0.05 0    0   678114  59.7 0.06  32.34 138.199.19.205  http/1.1 beta.cloudsms.com.ng:80         GET /function/function.php HTTP/1.1
   16-0 72707 19/30/1923  K 0.77 0    0   474491  12.4 0.04  13.15 138.199.19.205  http/1.1 voice.cloudsms.com.ng:80        GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1
   17-0 72714 0/30/1284   _ 1.20 0    172 414865  0.0  0.03  4.01  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80          GET /cgi-sys/autodiscover.cgi HTTP/1.1
   18-0 72715 30/42/44    K 0.50 0    167 7850    12.3 0.02  0.09  138.199.19.205  http/1.1 proxy-subdomains-vhost.localhos GET /wp-content/themes/pridmag/db.php?u HTTP/1.1
   19-0 72716 92/92/95    K 0.04 0    0   154     60.3 0.06  0.08  138.199.19.205  http/1.1 bayewu.staging.cloudware.ng:80  GET /function/function.php HTTP/1.1
   20-0 72717 25/41/479   K 0.60 0    36  156370  14.0 0.04  3.46  138.199.19.205  http/1.1 proxy-subdomains-vhost.localhos GET /wp-content/edit-wolf.php HTTP/1.1
   21-0 72718 92/92/94    K 0.05 0    0   134     61.0 0.06  0.07  138.199.19.205  http/1.1 pacesetter.staging.cloudware.ng GET /function/function.php HTTP/1.1
   22-0 72719 7/38/41     K 1.23 0    0   3855    4.6  0.04  0.05  138.199.19.205  http/1.1 cloudsms.com.ng:80              GET /dropdown.php HTTP/1.1
   23-0 72720 19/51/53    K 1.33 0    175 7711    7.6  0.04  0.06  138.199.19.205  http/1.1 proxy-subdomains-vhost.localhos GET /wp-content/index.php HTTP/1.1
   24-0 73138 0/2/35      _ 0.00 0    0   4200    0.0  0.02  0.06  173.199.190.172 http/1.1
   25-0 72783 23/42/44    K 0.87 0    0   2450    15.1 0.03  0.03  138.199.19.205  http/1.1 callertunes.cloudsms.com.ng:80  GET /bypass.php HTTP/1.1
   26-0 -     0/0/635     . 0.00 156  0   380772  0.0  0.00  7.14  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/3       . 0.00 4961 0   39      0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -     0/0/3       . 0.00 4967 0   16      0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/2       . 0.00 4969 0   4       0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/184     . 0.00 4639 0   2696    0.0  0.00  0.33  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/2       . 0.00 4965 0   5       0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/2       . 0.00 4968 0   12      0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -     0/0/20      . 0.00 4693 0   3020    0.0  0.00  0.17  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -     0/0/2       . 0.00 4966 0   8       0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/3       . 0.00 4971 0   24      0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/2       . 0.00 4980 0   10      0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/324     . 0.00 3023 0   58542   0.0  0.00  2.66  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/3       . 0.00 4963 0   59      0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/3       . 0.00 4959 0   62      0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/3       . 0.00 4962 0   63      0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 323
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 32 seconds, (range: 1...136)
   index usage: 5%, cache usage: 7%
   total entries stored since starting: 35422
   total entries replaced since starting: 0
   total entries expired since starting: 35031
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 333 miss
   total removes since starting: 68 hit, 223 miss
Youez - 2016 - github.com/yon3zu
LinuXploit