403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.13.51.txt
 ## swap threshold exceeded
## server overview
2025-11-07.13.51 load[0] mem[55/71] mysql[1/25] httpd[15]
              total        used        free      shared  buff/cache   available
Mem:           2363        1221         251          37         890         929
Swap:          1999        1504         495
 13:51:02 up  4:04,  0 users,  load average: 0.25, 0.24, 0.26
## system overview
top - 13:51:02 up  4:04,  0 users,  load average: 0.25, 0.24, 0.26
Tasks: 210 total,   6 running, 202 sleeping,   0 stopped,   2 zombie
%Cpu(s): 58.3 us, 41.7 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   223816 free,  1284204 used,   912280 buff/cache
KiB Swap:  2047996 total,   507132 free,  1540864 used.   917556 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1782 mysql     20   0 1469608 261592   4084 S  50.0 10.8   4:58.06 /usr/sbin+
  9289 nigeria   20   0  400652  15936  10220 R  11.1  0.7   0:00.02 /opt/cpan+
  1014 root      20   0  261032  27884   5512 S   5.6  1.2   0:04.71 cpsrvd (S+
  9014 nobody    20   0  277448  17584   3756 S   5.6  0.7   0:00.05 /usr/sbin+
  9206 nobody    20   0  277340  16532   3208 S   5.6  0.7   0:00.01 /usr/sbin+
  9281 cloudsms  20   0  400652  15408  10000 S   5.6  0.6   0:00.01 /opt/cpan+
  9285 pactpay   20   0  476460  16056  10480 S   5.6  0.7   0:00.01 /opt/cpan+
  9288 saboakin  20   0       0      0      0 Z   5.6  0.0   0:00.01 [php-cgi]+
  9292 cloudsms  20   0  295036  15568  10056 S   5.6  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44424   3496   1540 S   0.0  0.1   0:21.19 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.25 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.22 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:16.06 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.19 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.82 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:22.83 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.26 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:02.32 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:02.58 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:00.94 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   39500   3272   3028 S   0.0  0.1   0:07.16 /usr/lib/+
   382 root      20   0   45352      8      4 S   0.0  0.0   0:00.36 /usr/lib/+
   409 root      16  -4   55532    452    332 S   0.0  0.0   0:01.11 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0   24720   1224    788 S   0.0  0.1   0:03.33 /usr/lib/+
   493 root      20   0  224268   4700   1116 S   0.0  0.2   0:00.32 queueproc+
   494 root      20   0  152780     76     36 S   0.0  0.0   0:00.01 /usr/sbin+
   499 nscd      20   0 1334484   1944    736 S   0.0  0.1   0:04.91 /usr/sbin+
   500 rpc       20   0   69256     24      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   503 dbus      20   0   57032   1328    616 S   0.0  0.1   0:07.65 /usr/bin/+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0   52852    220    124 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  610540    992    608 S   0.0  0.0   0:01.97 /usr/lib/+
   541 root      20   0   21540    388    280 S   0.0  0.0   0:00.34 /usr/sbin+
   551 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  124480    428    296 S   0.0  0.0   0:00.41 /usr/sbin+
   558 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   570 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   622 mailnull  20   0   89116   3772    856 S   0.0  0.2   0:00.22 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:03.19 [loop0]
   677 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   767 nobody    20   0  277512  19064   4496 S   0.0  0.8   0:00.50 /usr/sbin+
   959 systuser  20   0  114016  10284   2592 S   0.0  0.4   0:03.56 /usr/loca+
   960 systuser  20   0   11604     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   961 root      20   0  572372    624    164 S   0.0  0.0   0:01.34 /usr/bin/+
   963 telegraf  20   0 5654048  35176   6004 S   0.0  1.5   0:08.26 /usr/loca+
   964 root      20   0   51508    460    296 S   0.0  0.0   0:00.21 /usr/sbin+
   966 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   968 systuser  20   0  111608      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 systuser  20   0   10388     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   970 systuser  20   0  113932      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   981 named     20   0  785392  30384   2092 S   0.0  1.3   0:10.01 /usr/sbin+
   982 root      20   0 1828076 212428    508 S   0.0  8.8   0:33.92 /usr/loca+
   984 root      20   0  386112    432    336 S   0.0  0.0   0:00.47 php-fpm: +
   992 root      20   0  397344   2416    612 S   0.0  0.1   0:03.21 php-fpm: +
   994 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.32 /usr/bin/+
  1007 root      20   0  392856    344    260 S   0.0  0.0   0:00.45 php-fpm: +
  1012 root      20   0  385496    472    372 S   0.0  0.0   0:00.47 php-fpm: +
  1013 root      20   0  257360   3464   2764 S   0.0  0.1   0:03.78 /usr/sbin+
  1017 root      20   0  436392    404    316 S   0.0  0.0   0:00.57 php-fpm: +
  1018 root      20   0  153404    224    140 S   0.0  0.0   0:00.31 pure-ftpd+
  1020 root      20   0  111304    356    260 S   0.0  0.0   0:01.55 /usr/sbin+
  1026 cpanelc+  20   0   10540   3572   2312 S   0.0  0.1   0:11.11 /usr/loca+
  1096 dovenull  20   0   46912   1328    792 S   0.0  0.1   0:00.21 dovecot/p+
  1097 dovenull  20   0   47720   2952   1840 S   0.0  0.1   0:00.12 dovecot/i+
  1098 dovecot   20   0   10320    316    200 S   0.0  0.0   0:00.04 dovecot/a+
  1099 root      20   0   10452    568    368 S   0.0  0.0   0:00.19 dovecot/l+
  1100 dovenull  20   0   46912   2164   1596 S   0.0  0.1   0:00.31 dovecot/p+
  1101 dovenull  20   0   47596   2944   1752 S   0.0  0.1   0:00.18 dovecot/i+
  1108 root      20   0   24564   2500    500 S   0.0  0.1   0:00.11 dovecot/c+
  1113 dovecot   20   0   13568    436    220 S   0.0  0.0   0:00.03 dovecot/s+
  1171 nobody    20   0  277840  20040   4620 S   0.0  0.8   0:00.91 /usr/sbin+
  1182 dovecot   20   0   41136   1468   1012 S   0.0  0.1   0:00.34 dovecot/a+
  1218 systuser  20   0  157708   2864    816 S   0.0  0.1   0:00.09 SonarPush+
  1233 wp-tool+  20   0  410452  25752   1404 S   0.0  1.1   0:12.11 /usr/bin/+
  1234 wp-tool+  20   0  387528   3256   1400 S   0.0  0.1   0:00.20 /usr/bin/+
  1264 root      20   0  183900   6104   2872 S   0.0  0.3   0:00.77 cpdavd - +
  1265 root      20   0  209320  10864   2392 S   0.0  0.4   0:01.71 tailwatchd
  1267 root      20   0  167452   1200    652 S   0.0  0.0   0:00.25 dnsadmin +
  1377 nobody    20   0  277852  19180   4460 S   0.0  0.8   0:00.92 /usr/sbin+
  1437 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  1679 nobody    20   0  277844  19704   4480 S   0.0  0.8   0:00.44 /usr/sbin+
  1680 nobody    20   0  277536  18784   4316 S   0.0  0.8   0:00.29 /usr/sbin+
  1713 root      20   0  299272    632    448 S   0.0  0.0   0:00.40 php-fpm: +
  1728 root      38  18  130416   1364    692 S   0.0  0.1   0:00.04 cpanellog+
  1968 root      20   0  266984   5096    600 S   0.0  0.2   0:00.87 /usr/sbin+
  1970 root      20   0   12848    328    212 S   0.0  0.0   0:01.14 /usr/loca+
  1971 root      20   0   12732    288    212 S   0.0  0.0   0:00.97 /usr/loca+
  1972 root      20   0   12884    340    216 S   0.0  0.0   0:01.06 /usr/loca+
  1977 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  2041 root      20   0  182128   9892   1104 S   0.0  0.4   0:12.73 lfd - sle+
  3024 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  3038 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  3304 nobody    20   0  277852  19940   4672 S   0.0  0.8   0:00.51 /usr/sbin+
  4822 cloudw    20   0  471840   9788   5336 S   0.0  0.4   0:00.71 php-fpm: +
  5235 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  5686 nobody    20   0  277484  19016   4296 S   0.0  0.8   0:00.44 /usr/sbin+
  5694 nobody    20   0  277552  19128   4312 S   0.0  0.8   0:00.50 /usr/sbin+
  6776 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6887 nobody    20   0  277512  19372   4400 S   0.0  0.8   0:00.23 /usr/sbin+
  7129 nobody    20   0  277536  19004   4312 S   0.0  0.8   0:00.26 /usr/sbin+
  7838 nobody    20   0  277508  17972   3800 S   0.0  0.7   0:00.17 /usr/sbin+
  8241 nobody    20   0  277464  18276   3940 S   0.0  0.8   0:00.12 /usr/sbin+
  8329 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  8398 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
  8716 cloudw    20   0  471784   9264   4980 S   0.0  0.4   0:00.22 php-fpm: +
  9008 cloudw    20   0  471784   9264   4980 S   0.0  0.4   0:00.22 php-fpm: +
  9018 nobody    20   0  277448  17580   3660 S   0.0  0.7   0:00.02 /usr/sbin+
  9019 nobody    20   0  277836  17508   3644 S   0.0  0.7   0:00.01 /usr/sbin+
  9063 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  9089 oysipao+  20   0    3152     56     16 S   0.0  0.0   0:00.27 [kworker]
  9107 cloudw    20   0  471784   9268   4980 S   0.0  0.4   0:00.23 php-fpm: +
  9136 root      20   0  111304   4440   3408 S   0.0  0.2   0:00.00 sshd: [ac+
  9137 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
  9142 nigeria   20   0  398104   9584   4072 S   0.0  0.4   0:00.39 php-fpm: +
  9171 mailnull  20   0   89496   5680   2456 S   0.0  0.2   0:00.00 /usr/sbin+
  9214 pactpay   20   0  397064   5008   2200 S   0.0  0.2   0:00.00 php-fpm: +
  9217 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  9219 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9220 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9221 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9222 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9223 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9224 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9225 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9226 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9227 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
  9228 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
  9229 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9230 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
  9231 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  9233 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
  9234 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
  9260 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  9261 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
  9263 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
  9264 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  9265 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  9266 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
  9267 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
  9268 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
  9269 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
  9270 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  9271 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  9272 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  9273 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
  9274 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  9278 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
  9282 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  9283 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
  9284 saboakin  20   0   20164    264      0 R   0.0  0.0   0:00.00 jailshell+
  9286 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  9287 robocal+  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
  9295 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
  9298 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpsrvd (+
  9299 nobody    20   0  277340  13324      0 R   0.0  0.6   0:00.00 /usr/sbin+
  9300 root      20   0  397344   1808      4 R   0.0  0.1   0:00.00 php-fpm: +
 24354 root      30  10  132964      4      0 S   0.0  0.0   0:00.00 ConfigSer+
 24364 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 116+
 28537 root      20   0  248100 118080   1388 S   0.0  4.9   0:03.98 /usr/loca+
 32709 root      20   0  266976 133492   2804 S   0.0  5.5   0:04.29 spamd chi+
 32710 root      20   0  249228 118356    624 S   0.0  4.9   0:00.04 spamd chi+
 81789 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 87186 root      20   0 1341636  10460    600 S   0.0  0.4   0:00.08 /usr/bin/+
 87220 root      20   0 1277312  11700    596 S   0.0  0.5   0:00.07 /usr/bin/+
 89546 cloudw    20   0  471840   9528   5256 S   0.0  0.4   0:02.54 php-fpm: +
 90803 root      20   0       0      0      0 S   0.0  0.0   0:00.21 [kworker/+
 92988 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 95232 nobody    20   0  277844  20736   4988 S   0.0  0.9   0:02.08 /usr/sbin+
 96813 nobody    20   0  277512  20176   4900 S   0.0  0.8   0:01.07 /usr/sbin+
 96977 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:46   0:16  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    09:46   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:46   0:22  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        R    09:46   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        R    09:46   0:00  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        660  0.0  0.0      0     0 ?        D<   09:46   0:03  \_ [loop0]
root        677  0.0  0.0      0     0 ?        D    09:46   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      81789  0.0  0.0      0     0 ?        S    12:49   0:00  \_ [kworker/u200:1]
root      90803  0.0  0.0      0     0 ?        D    13:08   0:00  \_ [kworker/1:1]
root      92988  0.0  0.0      0     0 ?        S    13:12   0:00  \_ [kworker/0:0]
root      96977  0.0  0.0      0     0 ?        D    13:20   0:00  \_ [kworker/u200:2]
root       9302  0.0  0.0      0     0 ?        R    13:51   0:00  |   \_ [kworker/u200:2]
root       1437  0.0  0.0      0     0 ?        S    13:34   0:00  \_ [kworker/0:5]
root       3024  0.0  0.0      0     0 ?        R    13:37   0:00  \_ [kworker/1:2]
root       3038  0.0  0.0      0     0 ?        R    13:37   0:00  \_ [kworker/1:3]
root       5235  0.0  0.0      0     0 ?        D    13:42   0:00  \_ [kworker/0:3]
root       6776  0.0  0.0      0     0 ?        D    13:45   0:00  \_ [kworker/1:4]
root       8329  0.0  0.0      0     0 ?        S    13:49   0:00  \_ [kworker/0:1]
root          1  0.1  0.1  44424  3496 ?        Rs   09:46   0:21 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  39500  3276 ?        Ss   09:46   0:07 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45352     8 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   452 ?        S<sl 09:46   0:01 /sbin/auditd
root        489  0.0  0.0  24720  1224 ?        Rs   09:46   0:03 /usr/lib/systemd/systemd-logind
root        493  0.0  0.1 224268  4700 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
root        494  0.0  0.0 152780    76 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        499  0.0  0.0 1334484 1944 ?        Ssl  09:46   0:04 /usr/sbin/nscd
rpc         500  0.0  0.0  69256    24 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        503  0.0  0.0  57032  1328 ?        Ss   09:46   0:07 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        523  0.0  0.0 195208     0 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0  52852   220 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.0 610540   992 ?        Ssl  09:46   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        541  0.0  0.0  21540   388 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        551  0.0  0.0  24208     4 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        552  0.0  0.0 124480   428 ?        Rs   09:46   0:00 /usr/sbin/crond -n
root       9217  0.0  0.0 183048  2140 ?        S    13:51   0:00  \_ /usr/sbin/CROND -n
root       9231  0.0  0.0 113284  1212 ?        Ss   13:51   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       9233  0.0  0.0 108052   356 ?        S    13:51   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       9234  0.0  0.0 113288  1516 ?        S    13:51   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       9301  0.0  0.0 153840  2092 ?        R    13:51   0:00  |               \_ ps auxf
root       9219  0.0  0.0 183048  2144 ?        S    13:51   0:00  \_ /usr/sbin/CROND -n
root       9260  0.0  0.0  20164   988 ?        Ss   13:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       9220  0.0  0.0 183048  2144 ?        S    13:51   0:00  \_ /usr/sbin/CROND -n
root       9271  0.0  0.0  20164   808 ?        Ss   13:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       9221  0.0  0.0 183044  2204 ?        S    13:51   0:00  \_ /usr/sbin/CROND -n
root       9222  0.0  0.0 183048  2144 ?        S    13:51   0:00  \_ /usr/sbin/CROND -n
root       9270  0.0  0.0  20164   808 ?        Ss   13:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       9223  0.0  0.0 183048  2144 ?        S    13:51   0:00  \_ /usr/sbin/CROND -n
root       9264  0.0  0.0  20164   808 ?        Ss   13:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       9225  0.0  0.0 183048  2144 ?        S    13:51   0:00  \_ /usr/sbin/CROND -n
root       9265  0.0  0.0  20164   804 ?        Ss   13:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       9226  0.0  0.0 183048  2144 ?        S    13:51   0:00  \_ /usr/sbin/CROND -n
root       9272  0.0  0.0  20164   804 ?        Ss   13:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       9227  0.0  0.0 183048  2148 ?        S    13:51   0:00  \_ /usr/sbin/CROND -n
root       9266  0.0  0.0  20164   968 ?        Ss   13:51   0:00  |   \_ jailshell (pactpay) [9282] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    9282  0.0  0.0  20164   260 ?        S    13:51   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    9285  0.0  0.7 476724 17112 ?        S    13:51   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       9229  0.0  0.0 183048  2144 ?        S    13:51   0:00  \_ /usr/sbin/CROND -n
root       9267  0.0  0.0  20164   972 ?        Ss   13:51   0:00  |   \_ jailshell (nigeria) [9286] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    9286  0.0  0.0  20164   264 ?        S    13:51   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    9289  0.0  0.6 400652 15936 ?        S    13:51   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root       9230  0.0  0.0      0     0 ?        Z    13:51   0:00  \_ [crond] <defunct>
root        558  0.0  0.0   4388     4 ?        Ss   09:46   0:00 /usr/sbin/acpid
root        569  0.0  0.0 114704     0 ttyS0    Ss+  09:46   0:00 /bin/bash
root        570  0.0  0.0 108296     8 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    622  0.0  0.1  89116  3772 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   9171  0.0  0.2  89496  5680 ?        S    13:50   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    959  0.0  0.4 114016 10284 ?        Ssl  09:46   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    960  0.0  0.0  11604    24 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        961  0.0  0.0 572372   624 ?        Ssl  09:46   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    963  0.0  1.4 5654048 35176 ?       SLsl 09:46   0:08 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0  51508   460 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1096  0.0  0.0  46912  1328 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1097  0.0  0.1  47720  2952 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1098  0.0  0.0  10320   316 ?        S    09:46   0:00  \_ dovecot/anvil
root       1099  0.0  0.0  10452   568 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1100  0.0  0.0  46912  2164 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1101  0.0  0.1  47596  2944 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1108  0.0  0.1  24564  2500 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1113  0.0  0.0  13568   436 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1182  0.0  0.0  41136  1468 ?        S    09:46   0:00  \_ dovecot/auth
root       8398  0.0  0.1  60820  4512 ?        S    13:49   0:00  \_ dovecot/lmtp
root       9295  0.0  0.1  41052  2728 ?        S    13:51   0:00  \_ dovecot/auth -w
root        966  0.0  0.0 445028     0 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    968  0.0  0.0 111608     4 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    969  0.0  0.0  10388    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    970  0.0  0.0 113932     8 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
named       981  0.0  1.2 785392 30384 ?        Ssl  09:46   0:10 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        982  0.2  8.7 1828076 212428 ?      Ssl  09:46   0:33 /usr/local/cpanel/3rdparty/bin/clamd -F
root        984  0.0  0.0 386112   432 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  0.0 397344  2416 ?        Ss   09:46   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    89546  0.0  0.3 471840  9528 ?        S    13:05   0:02  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw     4822  0.1  0.4 471840  9788 ?        S    13:41   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw     8716  0.3  0.3 471784  9264 ?        S    13:49   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw     9008  0.4  0.3 471784  9264 ?        S    13:50   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw     9107  0.9  0.3 471784  9268 ?        S    13:50   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
nigeria    9142  2.2  0.3 398104  9584 ?        S    13:50   0:00  \_ php-fpm: pool nigeriadecide_org
pactpay    9214  0.0  0.2 397064  5008 ?        S    13:51   0:00  \_ php-fpm: pool secure_pactpay_com
cloudw     9300  0.0  0.5 405320 13136 ?        R    13:51   0:00  \_ php-fpm: pool cloudware_ng
memcach+    994  0.0  0.0 342400     0 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1007  0.0  0.0 392856   344 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root       1012  0.0  0.0 385496   472 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1013  0.0  0.1 257360  3480 ?        Ssl  09:46   0:03 /usr/sbin/rsyslogd -n
root       1014  0.0  1.1 261032 27884 ?        Ss   09:46   0:04 cpsrvd (SSL) - waiting for connections                   
root       9298  0.0  0.0      0     0 ?        Z    13:51   0:00  \_ [cpsrvd (SSL) - ] <defunct>
root       1017  0.0  0.0 436392   404 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1018  0.0  0.0 153404   224 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
root       1020  0.0  0.0 111304   356 ?        Ss   09:46   0:01 /usr/sbin/sshd -D
root       9136  0.0  0.1 111304  4440 ?        Ss   13:50   0:00  \_ sshd: [accepted]
sshd       9137  0.0  0.1 115644  2624 ?        S    13:50   0:00      \_ sshd: [net]
cpanelc+   1026  0.0  0.1  10540  3572 ?        Ss   09:46   0:11 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1218  0.0  0.1 157708  2864 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1233  0.0  1.0 410452 25752 ?        Ss   09:46   0:12 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1234  0.0  0.1 387528  3256 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.2 183900  6104 ?        Ss   09:46   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1265  0.0  0.4 209320 10864 ?        Ss   09:46   0:01 tailwatchd
root       1267  0.0  0.0 167452  1200 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1713  0.0  0.0 299272   632 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1728  0.0  0.0 130416  1364 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1782  2.0 10.8 1469608 261592 ?      Sl   09:46   4:58 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1968  0.0  0.2 266984  5096 ?        Ss   09:46   0:00 /usr/sbin/httpd -k start
root       1970  0.0  0.0  12848   328 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1971  0.0  0.0  12732   288 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1972  0.0  0.0  12884   340 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1977  0.0  0.0  53340     4 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    95232  0.1  0.8 277844 20736 ?        S    13:16   0:02  \_ /usr/sbin/httpd -k start
nobody    96813  0.0  0.8 277512 20176 ?        S    13:19   0:01  \_ /usr/sbin/httpd -k start
nobody      767  0.0  0.7 277512 19064 ?        S    13:32   0:00  \_ /usr/sbin/httpd -k start
nobody     1171  0.0  0.8 277840 20040 ?        S    13:33   0:00  \_ /usr/sbin/httpd -k start
nobody     1377  0.0  0.7 277852 19180 ?        S    13:33   0:00  \_ /usr/sbin/httpd -k start
nobody     1679  0.0  0.8 277844 19704 ?        S    13:34   0:00  \_ /usr/sbin/httpd -k start
nobody     1680  0.0  0.7 277536 18784 ?        S    13:34   0:00  \_ /usr/sbin/httpd -k start
nobody     3304  0.0  0.8 277852 19940 ?        S    13:37   0:00  \_ /usr/sbin/httpd -k start
nobody     5686  0.0  0.7 277484 19016 ?        S    13:43   0:00  \_ /usr/sbin/httpd -k start
nobody     5694  0.1  0.7 277552 19128 ?        S    13:43   0:00  \_ /usr/sbin/httpd -k start
nobody     6887  0.0  0.8 277512 19372 ?        S    13:45   0:00  \_ /usr/sbin/httpd -k start
nobody     7129  0.0  0.7 277536 19004 ?        S    13:45   0:00  \_ /usr/sbin/httpd -k start
nobody     7838  0.0  0.7 277508 17972 ?        S    13:47   0:00  \_ /usr/sbin/httpd -k start
nobody     8241  0.0  0.7 277464 18276 ?        S    13:48   0:00  \_ /usr/sbin/httpd -k start
nobody     9014  0.1  0.7 277448 17696 ?        S    13:50   0:00  \_ /usr/sbin/httpd -k start
nobody     9018  0.0  0.7 277448 17580 ?        S    13:50   0:00  \_ /usr/sbin/httpd -k start
nobody     9019  0.0  0.7 277836 17508 ?        S    13:50   0:00  \_ /usr/sbin/httpd -k start
nobody     9206  0.5  0.6 277340 16532 ?        S    13:50   0:00  \_ /usr/sbin/httpd -k start
cloudw     9299  0.0  0.5 293580 12448 ?        R    13:51   0:00      \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
root       2041  0.0  0.4 182128  9892 ?        Ss   09:46   0:12 lfd - sleeping
oysipao+   9063  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+   9089  0.0  0.0   3152    56 ?        S    10:01   0:00  \_ [kworker]
root      24354  0.0  0.0 132964     4 ?        SN   10:42   0:00 ConfigServer Version Check
root      24364  0.0  0.0 108056     0 ?        SN   10:42   0:00  \_ sleep 11664
root      28537  0.0  4.8 248100 118080 ?       Ss   10:50   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      32709  0.0  5.5 266976 133492 ?       S    11:00   0:04  \_ spamd child
root      32710  0.0  4.8 249228 118356 ?       S    11:00   0:00  \_ spamd child
root      87186  0.0  0.4 1341636 10460 ?       Ssl  13:00   0:00 /usr/bin/cspdaemon
root      87220  0.0  0.4 1277312 11700 ?       Ssl  13:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 36387  Threads: 3  Questions: 2005367  Slow queries: 0  Opens: 6949  Flush tables: 1  Open tables: 2000  Queries per second avg: 55.112
*************************** 1. row ***************************
     Id: 30471
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 30473
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 30478
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 15.235.27.97 TIME_WAIT
      1 172.213.11.144 TIME_WAIT
      1 172.213.11.146 TIME_WAIT
      1 172.213.11.149 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 185.180.141.35 TIME_WAIT
      1 ::1 TIME_WAIT
      1 68.167.134.95 TIME_WAIT
      1 74.7.229.73 TIME_WAIT
      1 74.7.230.62 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 185.180.141.33 TIME_WAIT
      2 185.180.141.34 TIME_WAIT
      8 185.180.141.32 TIME_WAIT
     13 45.43.63.181 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 13:51:02 WAT
   Restart Time: Friday, 07-Nov-2025 03:44:42 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 10 hours 6 minutes 20 seconds
   Server load: 0.25 0.24 0.26
   Total accesses: 48927 - Total Traffic: 732.3 MB - Total Duration: 89306978
   CPU Usage: u6.33 s3.06 cu369.35 cs246.54 - 1.72% CPU load
   1.34 requests/sec - 20.6 kB/second - 15.3 kB/request - 1825.31 ms/request
   16 requests currently being processed, 0 workers gracefully restarting, 2 idle workers

_WWKKWW_KWKKWWWKK.K.............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur    Conn Child  Slot     Client      Protocol             VHost                                         Request
   0-0  767   0/119/3361 _ 2.57 0    0   2873991  0.0  1.90  43.34 ::1             http/1.1 chs1.nescrow.com.ng:80        GET //whm-server-status HTTP/1.0
   1-0  96813 0/206/3253 W 4.80 65   0   2874620  0.0  4.36  46.96 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443      GET /postnews.php?ARRAY=7o2230223n313736323532333339372p2231223
   2-0  6887  0/53/3241  W 1.05 45   0   1898193  0.0  0.85  43.15 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443      GET /postnews.php?ARRAY=7o2230223n313736323532333431372p2231223
   3-0  1171  1/187/3195 K 3.75 2    28  1849354  8.8  4.82  53.22 172.213.11.147  http/1.1 appstore.cloudsms.com.ng:443  GET /contact_us.php HTTP/1.1
   4-0  95232 1/456/3278 K 9.87 1    397 1874835  37.0 8.26  47.15 66.249.70.35    http/1.1 support.cloudware.ng:443      GET /?c=1030888173 HTTP/1.1
   5-0  1377  0/242/3536 W 5.30 95   0   2339365  0.0  2.97  50.56 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443      GET /postnews.php?ARRAY=7o2230223n313736323532333336372p2231223
   6-0  3304  0/113/2670 W 2.54 0    0   3146548  0.0  2.31  48.55 147.135.22.97   http/1.1 cloudware.ng:443              POST /xmlrpc.php HTTP/1.1
   7-0  9014  0/7/2530   _ 0.09 0    134 45843722 0.0  0.19  37.60 147.135.223.200 http/1.1 developers.cloudsms.com.ng:80 GET /api.php?userid=55021093&password=josh%40cloudware123%23&ty
   8-0  7129  1/55/2638  K 1.14 0    317 2387969  36.3 1.20  35.30 66.249.70.39    http/1.1 support.cloudware.ng:443      GET /?c=2025550162 HTTP/1.1
   9-0  9206  1/2/2670   W 0.00 0    0   2473526  35.3 0.04  53.11 66.249.70.33    http/1.1 support.cloudware.ng:443      GET /?c=3344294364 HTTP/1.1
   10-0 7838  1/35/2189  K 0.71 0    6   3067789  7.7  0.75  26.83 172.213.11.147  http/1.1 secure.pactpay.com:443        GET /contact_us.php HTTP/1.1
   11-0 5686  1/131/2106 K 1.82 2    27  2156650  12.5 1.76  33.42 172.213.11.158  http/1.1 cloudsms.com.ng:443           GET /contact_us.php HTTP/1.1
   12-0 8241  0/25/2192  W 0.49 0    0   1256101  0.0  0.48  31.30 ::1             http/1.1 chs1.nescrow.com.ng:80        GET //whm-server-status HTTP/1.0
   13-0 9018  0/5/2014   W 0.28 5    0   2721282  0.0  0.04  38.82 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443      GET /postnews.php?ARRAY=7o2230223n313736323532333435372p2231223
   14-0 9019  0/3/2293   W 0.03 25   0   2767504  0.0  0.05  32.30 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443      GET /postnews.php?ARRAY=7o2230223n313736323532333433372p2231223
   15-0 1679  1/153/1656 K 1.69 2    27  1567562  8.0  1.70  19.47 172.213.11.145  http/1.1 m.cloudsms.com.ng:443         GET /contact_us.php HTTP/1.1
   16-0 1680  2/63/421   K 1.02 2    342 1494090  65.0 1.40  6.36  66.249.70.38    http/1.1 support.cloudware.ng:443      GET /?c=2838268454 HTTP/1.1
   17-0 -     0/0/1424   . 0.00 80   0   3023328  0.0  0.00  22.17 ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   18-0 5694  1/143/1004 K 2.10 3    1   324635   48.3 2.34  12.23 197.211.57.40   http/1.1 health.oyostate.gov.ng:443    GET /wp-content/uploads/2020/08/org-health.png HTTP/1.1
   19-0 -     0/0/156    . 0.00 82   0   82375    0.0  0.00  2.70  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   20-0 -     0/0/98     . 0.00 331  0   71682    0.0  0.00  1.39  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   21-0 -     0/0/194    . 0.00 5869 0   225947   0.0  0.00  1.79  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   22-0 -     0/0/765    . 0.00 4135 0   380252   0.0  0.00  8.43  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   23-0 -     0/0/13     . 0.00 6689 0   32567    0.0  0.00  0.18  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   24-0 -     0/0/9      . 0.00 6695 0   29442    0.0  0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   25-0 -     0/0/8      . 0.00 6712 0   29769    0.0  0.00  0.23  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   26-0 -     0/0/12     . 0.00 6672 0   24649    0.0  0.00  0.26  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   27-0 -     0/0/31     . 0.00 6708 0   34716    0.0  0.00  0.61  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   28-0 -     0/0/259    . 0.00 6721 0   143065   0.0  0.00  3.62  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   29-0 -     0/0/96     . 0.00 6737 0   59764    0.0  0.00  2.78  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   30-0 -     0/0/13     . 0.00 6662 0   22779    0.0  0.00  9.52  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   31-0 -     0/0/103    . 0.00 6463 0   179005   0.0  0.00  0.84  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   32-0 -     0/0/2      . 0.00 6738 0   9851     0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   33-0 -     0/0/7      . 0.00 6687 0   21858    0.0  0.00  0.36  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   34-0 -     0/0/2      . 0.00 6733 0   17699    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   35-0 -     0/0/5      . 0.00 6702 0   19399    0.0  0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   36-0 -     0/0/4      . 0.00 6711 0   14235    0.0  0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   37-0 -     0/0/2      . 0.00 6734 0   15595    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   38-0 -     0/0/156    . 0.00 6467 0   148319   0.0  0.00  0.63  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   39-0 -     0/0/2      . 0.00 6735 0   15338    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   40-0 -     0/0/6      . 0.00 6690 0   21858    0.0  0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   41-0 -     0/0/208    . 0.00 5866 0   243070   0.0  0.00  2.95  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   42-0 -     0/0/2      . 0.00 6730 0   19835    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00 6731 0   19620    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   44-0 -     0/0/6      . 0.00 6688 0   24371    0.0  0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   45-0 -     0/0/5      . 0.00 6697 0   19070    0.0  0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   46-0 -     0/0/6      . 0.00 6692 0   20569    0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   47-0 -     0/0/4      . 0.00 6707 0   17777    0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   48-0 -     0/0/4      . 0.00 6704 0   16933    0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   49-0 -     0/0/2      . 0.00 6732 0   17743    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   50-0 -     0/0/3      . 0.00 6714 0   22693    0.0  0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   51-0 -     0/0/4      . 0.00 6701 0   22016    0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   52-0 -     0/0/4      . 0.00 6710 0   22448    0.0  0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   53-0 -     0/0/3      . 0.00 6718 0   9096     0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   54-0 -     0/0/6      . 0.00 6706 0   23840    0.0  0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   55-0 -     0/0/17     . 0.00 6679 0   16331    0.0  0.00  0.47  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   56-0 -     0/0/184    . 0.00 6499 0   130360   0.0  0.00  0.50  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   57-0 -     0/0/3      . 0.00 6715 0   22445    0.0  0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   58-0 -     0/0/3      . 0.00 6719 0   7899     0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   59-0 -     0/0/5      . 0.00 6694 0   23139    0.0  0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   60-0 -     0/0/139    . 0.00 6363 0   237404   0.0  0.00  1.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   61-0 -     0/0/2      . 0.00 6728 0   2361     0.0  0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   62-0 -     0/0/11     . 0.00 6677 0   9214     0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   63-0 -     0/0/4      . 0.00 6703 0   8490     0.0  0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   64-0 -     0/0/1      . 0.00 6744 0   0        0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   65-0 -     0/0/1      . 0.00 6742 0   0        0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   66-0 -     0/0/2      . 0.00 6726 0   8680     0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   67-0 -     0/0/1      . 0.00 6741 0   0        0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   68-0 -     0/0/3      . 0.00 6717 0   742      0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   69-0 -     0/0/1      . 0.00 6743 11  22       0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00 6724 0   10366    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   71-0 -     0/0/65     . 0.00 6536 0   105003   0.0  0.00  1.01  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   72-0 -     0/0/151    . 0.00 6364 0   218700   0.0  0.00  1.26  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   73-0 -     0/0/2      . 0.00 6723 0   8818     0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   74-0 -     0/0/4      . 0.00 6713 0   1447     0.0  0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   75-0 -     0/0/2      . 0.00 6729 0   463      0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   76-0 -     0/0/101    . 0.00 6449 0   159456   0.0  0.00  0.87  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   77-0 -     0/0/6      . 0.00 6698 0   4997     0.0  0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   78-0 -     0/0/338    . 0.00 4941 0   272159   0.0  0.00  5.63  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00 6740 0   0        0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   80-0 -     0/0/2      . 0.00 6722 0   7766     0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   81-0 -     0/0/3      . 0.00 6705 0   10368    0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 700
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 13 seconds, (range: 0...54)
   index usage: 12%, cache usage: 17%
   total entries stored since starting: 29267
   total entries replaced since starting: 0
   total entries expired since starting: 28538
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 94 miss
   total removes since starting: 29 hit, 25 miss
Youez - 2016 - github.com/yon3zu
LinuXploit