403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.15.18.txt
 ## swap threshold exceeded
## server overview
2025-11-07.15.18 load[0] mem[66/73] mysql[1/25] httpd[17]
              total        used        free      shared  buff/cache   available
Mem:           2363        1500          82          53         781         638
Swap:          1999        1542         457
 15:18:01 up  5:31,  0 users,  load average: 0.89, 0.71, 0.52
## system overview
top - 15:18:01 up  5:31,  0 users,  load average: 0.89, 0.71, 0.52
Tasks: 210 total,   2 running, 207 sleeping,   0 stopped,   1 zombie
%Cpu(s): 51.5 us, 42.4 sy,  0.0 ni,  6.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    86096 free,  1551772 used,   782432 buff/cache
KiB Swap:  2047996 total,   468344 free,  1579652 used.   638376 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1782 mysql     20   0 1469608 264152   4008 S  25.0 10.9   6:16.35 /usr/sbin+
 51550 nigeria   20   0  400652  15936  10220 S  12.5  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44424   3660   1692 S   6.2  0.2   0:28.78 /usr/lib/+
    36 root      20   0       0      0      0 S   6.2  0.0   0:23.75 [kswapd0]
   360 root      20   0   40244   3324   3076 S   6.2  0.1   0:10.01 /usr/lib/+
 47965 nobody    20   0  277844  18376   4132 S   6.2  0.8   0:00.47 /usr/sbin+
 51553 pactpay   20   0  476460  15968  10408 R   6.2  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.51 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.32 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:22.02 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.29 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.38 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.37 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:02.45 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:02.76 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.31 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   382 root      20   0   45352      8      4 S   0.0  0.0   0:00.36 /usr/lib/+
   409 root      16  -4   55532    456    336 S   0.0  0.0   0:01.55 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0   24720   1224    788 S   0.0  0.1   0:04.51 /usr/lib/+
   493 root      20   0  224268   4680   1096 S   0.0  0.2   0:00.37 queueproc+
   494 root      20   0  152780     76     36 S   0.0  0.0   0:00.01 /usr/sbin+
   499 nscd      20   0 1334484   1932    760 S   0.0  0.1   0:06.85 /usr/sbin+
   500 rpc       20   0   69256     24      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   503 dbus      20   0   57032   1328    616 S   0.0  0.1   0:10.36 /usr/bin/+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0   52852    336    228 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  610540    984    608 S   0.0  0.0   0:02.66 /usr/lib/+
   541 root      20   0   21540    388    280 S   0.0  0.0   0:00.46 /usr/sbin+
   551 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  124480    428    296 S   0.0  0.0   0:00.55 /usr/sbin+
   558 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   570 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   622 mailnull  20   0   89116   3808    888 S   0.0  0.2   0:00.31 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:03.25 [loop0]
   677 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   959 systuser  20   0  114016  10260   2456 S   0.0  0.4   0:04.76 /usr/loca+
   960 systuser  20   0   11604     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   961 root      20   0  572372    624    164 S   0.0  0.0   0:01.77 /usr/bin/+
   963 telegraf  20   0 5654048  35244   5956 S   0.0  1.5   0:10.97 /usr/loca+
   964 root      20   0   51508    460    296 S   0.0  0.0   0:00.27 /usr/sbin+
   966 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   968 systuser  20   0  111608      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 systuser  20   0   10388     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   970 systuser  20   0  113932      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   981 named     20   0  785392  31476   1932 S   0.0  1.3   0:13.23 /usr/sbin+
   982 root      20   0 1828076 167264    824 S   0.0  6.9   0:35.49 /usr/loca+
   984 root      20   0  386112    468    372 S   0.0  0.0   0:00.60 php-fpm: +
   992 root      20   0  397344   2416    612 S   0.0  0.1   0:04.21 php-fpm: +
   994 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.43 /usr/bin/+
  1007 root      20   0  392856    432    348 S   0.0  0.0   0:00.58 php-fpm: +
  1012 root      20   0  385496    552    452 S   0.0  0.0   0:00.60 php-fpm: +
  1013 root      20   0  273744   3708   2880 S   0.0  0.2   0:05.19 /usr/sbin+
  1014 root      20   0  261032  27960   5508 S   0.0  1.2   0:06.67 cpsrvd (S+
  1017 root      20   0  436392    404    316 S   0.0  0.0   0:00.70 php-fpm: +
  1018 root      20   0  153404    224    140 S   0.0  0.0   0:00.43 pure-ftpd+
  1020 root      20   0  111304    356    260 S   0.0  0.0   0:02.17 /usr/sbin+
  1026 cpanelc+  20   0   10540   3568   2308 S   0.0  0.1   0:15.04 /usr/loca+
  1096 dovenull  20   0   46912   1328    792 S   0.0  0.1   0:00.28 dovecot/p+
  1097 dovenull  20   0   47720   2948   1836 S   0.0  0.1   0:00.14 dovecot/i+
  1098 dovecot   20   0   10320    316    200 S   0.0  0.0   0:00.05 dovecot/a+
  1099 root      20   0   10452    568    368 S   0.0  0.0   0:00.24 dovecot/l+
  1100 dovenull  20   0   46912   2164   1596 S   0.0  0.1   0:00.41 dovecot/p+
  1101 dovenull  20   0   47940   3116   1812 S   0.0  0.1   0:00.24 dovecot/i+
  1108 root      20   0   24568   2524    512 S   0.0  0.1   0:00.17 dovecot/c+
  1113 dovecot   20   0   13568    436    220 S   0.0  0.0   0:00.05 dovecot/s+
  1182 dovecot   20   0   41136   1468   1012 S   0.0  0.1   0:00.44 dovecot/a+
  1218 systuser  20   0  157708   2864    816 S   0.0  0.1   0:00.11 SonarPush+
  1233 wp-tool+  20   0  410452  26032   1684 S   0.0  1.1   0:16.35 /usr/bin/+
  1234 wp-tool+  20   0  387528   3520   1664 S   0.0  0.1   0:00.24 /usr/bin/+
  1264 root      20   0  183900   6464   3228 S   0.0  0.3   0:01.36 cpdavd - +
  1265 root      20   0  209480  11140   2404 S   0.0  0.5   0:02.19 tailwatchd
  1267 root      20   0  167452   1200    652 S   0.0  0.0   0:00.32 dnsadmin +
  1713 root      20   0  299272    632    448 S   0.0  0.0   0:00.53 php-fpm: +
  1728 root      38  18  130416   1376    692 S   0.0  0.1   0:00.04 cpanellog+
  1968 root      20   0  266984   5096    600 S   0.0  0.2   0:01.16 /usr/sbin+
  1970 root      20   0   12824    328    212 S   0.0  0.0   0:01.47 /usr/loca+
  1971 root      20   0   12732    288    212 S   0.0  0.0   0:01.25 /usr/loca+
  1972 root      20   0   12872    340    216 S   0.0  0.0   0:01.36 /usr/loca+
  1977 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  2041 root      20   0  182532  10692   1104 S   0.0  0.4   0:17.36 lfd - sle+
  9063 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  9089 oysipao+  20   0    3152     56     16 S   0.0  0.0   0:00.36 [kworker]
 19376 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 28537 root      20   0  248100 118080   1388 S   0.0  4.9   0:04.63 /usr/loca+
 28691 cloudw    20   0  471856   9496   5236 S   0.0  0.4   0:02.49 php-fpm: +
 30743 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 32709 root      20   0  269720 136500   3008 S   0.0  5.6   0:20.78 spamd chi+
 32710 root      20   0  258916 125556   2956 S   0.0  5.2   0:00.73 spamd chi+
 33012 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 38196 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 40212 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 40234 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 42747 root      20   0 1341636  10476    600 S   0.0  0.4   0:00.06 /usr/bin/+
 42789 root      20   0 1277312  11744    596 S   0.0  0.5   0:00.06 /usr/bin/+
 43163 nobody    20   0  277844  19180   4412 S   0.0  0.8   0:01.00 /usr/sbin+
 43178 nobody    20   0  277536  19140   4416 S   0.0  0.8   0:00.74 /usr/sbin+
 43609 nobody    20   0  277520  18632   4384 S   0.0  0.8   0:00.88 /usr/sbin+
 44285 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 46086 nobody    20   0  277508  18228   4040 S   0.0  0.8   0:00.20 /usr/sbin+
 46141 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 46926 cloudw    20   0  471808   9784   5332 S   0.0  0.4   0:00.66 php-fpm: +
 46952 nobody    20   0  277860  18036   4068 S   0.0  0.7   0:00.16 /usr/sbin+
 47358 nobody    20   0  277512  18100   4164 S   0.0  0.7   0:00.41 /usr/sbin+
 47369 nobody    20   0  277720  18056   4008 S   0.0  0.7   0:00.28 /usr/sbin+
 47378 nobody    20   0  277852  18504   4212 S   0.0  0.8   0:00.28 /usr/sbin+
 47380 nobody    20   0  277852  18768   4284 S   0.0  0.8   0:00.57 /usr/sbin+
 47381 nobody    20   0  277856  18388   4204 S   0.0  0.8   0:00.57 /usr/sbin+
 47607 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 47955 nobody    20   0  277732  18172   4028 S   0.0  0.8   0:00.55 /usr/sbin+
 48532 nobody    20   0  277472  18136   4252 S   0.0  0.7   0:00.40 /usr/sbin+
 49002 nobody    20   0  277516  17976   4040 S   0.0  0.7   0:00.21 /usr/sbin+
 49031 nobody    20   0  277512  17424   3744 S   0.0  0.7   0:00.13 /usr/sbin+
 49078 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 49359 worencom  20   0   38468   3832   3000 S   0.0  0.2   0:00.00 dovecot/i+
 49447 nobody    20   0  277852  18064   3972 S   0.0  0.7   0:00.27 /usr/sbin+
 49936 nobody    20   0  277716  18196   4172 S   0.0  0.8   0:00.20 /usr/sbin+
 50117 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 50130 nobody    20   0  277836  17868   3836 S   0.0  0.7   0:00.21 /usr/sbin+
 50627 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 50711 nobody    20   0  277476  17280   3644 S   0.0  0.7   0:00.05 /usr/sbin+
 51001 cloudw    20   0  471784   9264   4980 S   0.0  0.4   0:00.21 php-fpm: +
 51105 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 51198 cloudw    20   0  471784   9260   4976 S   0.0  0.4   0:00.22 php-fpm: +
 51228 cloudw    20   0  571628 111808   6784 S   0.0  4.6   0:07.51 php-fpm: +
 51252 healtho+  20   0  459424  69476   4184 S   0.0  2.9   0:04.77 php-fpm: +
 51302 root      20   0   41052   2780   2128 S   0.0  0.1   0:00.00 dovecot/a+
 51338 cloudw    20   0  471784   9260   4976 S   0.0  0.4   0:00.21 php-fpm: +
 51379 healtho+  20   0  457240  67428   4188 S   0.0  2.8   0:01.99 php-fpm: +
 51388 nigeria   20   0  397064   5272   2268 S   0.0  0.2   0:00.00 php-fpm: +
 51429 mailnull  20   0   89256   4008    944 S   0.0  0.2   0:00.00 /usr/sbin+
 51432 mailnull  20   0   89256   4008    944 S   0.0  0.2   0:00.00 /usr/sbin+
 51433 healtho+  20   0  442904  52940   4184 S   0.0  2.2   0:00.59 php-fpm: +
 51434 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 51457 mailnull  20   0   89256   4008    944 S   0.0  0.2   0:00.00 /usr/sbin+
 51458 mailnull  20   0   89256   4008    944 S   0.0  0.2   0:00.00 /usr/sbin+
 51462 root      20   0  162436   5832   4340 S   0.0  0.2   0:00.01 sshd: roo+
 51463 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: roo+
 51464 nobody    20   0  277504  16064   2712 S   0.0  0.7   0:00.00 /usr/sbin+
 51474 oysipao+  20   0  436392   4040   2436 S   0.0  0.2   0:00.00 php-fpm: +
 51481 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 51482 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 51483 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 51484 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 51485 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 51486 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 51487 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 51488 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 51489 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 51491 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 51492 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 51493 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 51495 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 51497 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 51498 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 51499 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 51521 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 51522 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 51523 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 51524 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 51525 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 51526 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 51527 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 51528 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 51531 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 51532 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 51533 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 51534 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 51536 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 51548 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 51552 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:46   0:22  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:46   0:23  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        660  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [loop0]
root        677  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      19376  0.0  0.0      0     0 ?        S    14:12   0:00  \_ [kworker/u200:0]
root      30743  0.0  0.0      0     0 ?        S    14:37   0:00  \_ [kworker/u200:1]
root      33012  0.0  0.0      0     0 ?        S    14:42   0:00  \_ [kworker/1:4]
root      38196  0.0  0.0      0     0 ?        S    14:52   0:00  \_ [kworker/1:1]
root      40212  0.0  0.0      0     0 ?        S    14:56   0:00  \_ [kworker/0:1]
root      40234  0.0  0.0      0     0 ?        S    14:56   0:00  \_ [kworker/1:3]
root      44285  0.0  0.0      0     0 ?        S    15:03   0:00  \_ [kworker/0:2]
root      46141  0.0  0.0      0     0 ?        S    15:07   0:00  \_ [kworker/1:2]
root      47607  0.0  0.0      0     0 ?        S    15:10   0:00  \_ [kworker/0:3]
root      49078  0.0  0.0      0     0 ?        S    15:13   0:00  \_ [kworker/1:0]
root      50117  0.0  0.0      0     0 ?        S    15:15   0:00  \_ [kworker/u200:2]
root      51105  0.0  0.0      0     0 ?        S    15:17   0:00  \_ [kworker/0:0]
root          1  0.1  0.1  44424  3660 ?        Ss   09:46   0:28 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  40244  3324 ?        Ss   09:46   0:10 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45352     8 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   456 ?        S<sl 09:46   0:01 /sbin/auditd
root        489  0.0  0.0  24720  1224 ?        Ss   09:46   0:04 /usr/lib/systemd/systemd-logind
root        493  0.0  0.1 224268  4680 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
root        494  0.0  0.0 152780    76 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        499  0.0  0.0 1334484 1932 ?        Rsl  09:46   0:06 /usr/sbin/nscd
rpc         500  0.0  0.0  69256    24 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        503  0.0  0.0  57032  1328 ?        Ss   09:46   0:10 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        523  0.0  0.0 195208     0 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0  52852   336 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.0 610540   984 ?        Ssl  09:46   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        541  0.0  0.0  21540   388 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        551  0.0  0.0  24208     4 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        552  0.0  0.0 124480   428 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      51481  0.0  0.0 183048  2140 ?        S    15:18   0:00  \_ /usr/sbin/CROND -n
root      51497  0.0  0.0 113284  1208 ?        Ss   15:18   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      51498  0.0  0.0 108052   356 ?        S    15:18   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      51499  0.0  0.0 113288  1520 ?        S    15:18   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      51559  0.0  0.0 153840  2096 ?        R    15:18   0:00  |               \_ ps auxf
root      51482  0.0  0.0 183048  2144 ?        S    15:18   0:00  \_ /usr/sbin/CROND -n
root      51526  0.0  0.0  20164   804 ?        Ss   15:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      51483  0.0  0.0 183048  2144 ?        S    15:18   0:00  \_ /usr/sbin/CROND -n
root      51534  0.0  0.0  20164   804 ?        Ss   15:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      51484  0.0  0.0 183048  2144 ?        S    15:18   0:00  \_ /usr/sbin/CROND -n
root      51524  0.0  0.0  20164   808 ?        Ss   15:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      51485  0.0  0.0 183048  2144 ?        S    15:18   0:00  \_ /usr/sbin/CROND -n
root      51522  0.0  0.0  20164   804 ?        Ss   15:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      51486  0.0  0.0 183048  2144 ?        S    15:18   0:00  \_ /usr/sbin/CROND -n
root      51523  0.0  0.0  20164   808 ?        Ss   15:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      51487  0.0  0.0 183048  2144 ?        S    15:18   0:00  \_ /usr/sbin/CROND -n
root      51525  0.0  0.0  20164   808 ?        Ss   15:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      51488  0.0  0.0 183048  2144 ?        S    15:18   0:00  \_ /usr/sbin/CROND -n
root      51527  0.0  0.0  20164   808 ?        Ss   15:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      51489  0.0  0.0 183048  2144 ?        S    15:18   0:00  \_ /usr/sbin/CROND -n
root      51533  0.0  0.0  20164   808 ?        Ss   15:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      51491  0.0  0.0 183048  2144 ?        S    15:18   0:00  \_ /usr/sbin/CROND -n
root      51528  0.0  0.0  20164   804 ?        Ss   15:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      51492  0.0  0.0 183048  2144 ?        S    15:18   0:00  \_ /usr/sbin/CROND -n
root      51532  0.0  0.0  20164   808 ?        Ss   15:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      51493  0.0  0.0 183048  2144 ?        S    15:18   0:00  \_ /usr/sbin/CROND -n
root      51536  0.0  0.0  20164   968 ?        Ss   15:18   0:00  |   \_ jailshell (pactpay) [51552] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   51552  0.0  0.0  20164   264 ?        S    15:18   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   51553  0.0  0.6 476460 15968 ?        Sl   15:18   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      51495  0.0  0.0 183048  2144 ?        S    15:18   0:00  \_ /usr/sbin/CROND -n
root      51531  0.0  0.0  20164   968 ?        Ss   15:18   0:00      \_ jailshell (nigeria) [51548] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   51548  0.0  0.0  20164   264 ?        S    15:18   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   51550  0.0  0.6 400652 15936 ?        S    15:18   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0   4388     4 ?        Ss   09:46   0:00 /usr/sbin/acpid
root        569  0.0  0.0 114704     0 ttyS0    Ss+  09:46   0:00 /bin/bash
root        570  0.0  0.0 108296     8 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    622  0.0  0.1  89116  3808 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  51429  0.0  0.1  89256  4008 ?        S    15:17   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  51432  0.0  0.1  89256  4008 ?        S    15:17   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  51457  0.0  0.1  89256  4008 ?        S    15:17   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  51458  0.0  0.1  89256  4008 ?        S    15:17   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    959  0.0  0.4 114016 10260 ?        Ssl  09:46   0:04 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    960  0.0  0.0  11604    24 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        961  0.0  0.0 572372   624 ?        Ssl  09:46   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    963  0.0  1.4 5654048 35244 ?       SLsl 09:46   0:10 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0  51508   460 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1096  0.0  0.0  46912  1328 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1097  0.0  0.1  47720  2948 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1098  0.0  0.0  10320   316 ?        S    09:46   0:00  \_ dovecot/anvil
root       1099  0.0  0.0  10452   568 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1100  0.0  0.0  46912  2164 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1101  0.0  0.1  47940  3116 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1108  0.0  0.1  24568  2524 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1113  0.0  0.0  13568   436 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1182  0.0  0.0  41136  1468 ?        S    09:46   0:00  \_ dovecot/auth
worencom  49359  0.0  0.1  38468  3832 ?        S    15:13   0:00  \_ dovecot/imap
root      50627  0.0  0.1  60820  4512 ?        S    15:16   0:00  \_ dovecot/lmtp
root      51302  0.0  0.1  41052  2780 ?        S    15:17   0:00  \_ dovecot/auth -w
root        966  0.0  0.0 445028     0 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    968  0.0  0.0 111608     4 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    969  0.0  0.0  10388    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    970  0.0  0.0 113932     8 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
named       981  0.0  1.3 785392 31476 ?        Ssl  09:46   0:13 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        982  0.1  6.9 1828076 167264 ?      Ssl  09:46   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
root        984  0.0  0.0 386112   468 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  0.0 397344  2416 ?        Ss   09:46   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    28691  0.0  0.3 471856  9496 ?        S    14:32   0:02  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    46926  0.1  0.4 471808  9784 ?        S    15:08   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    51001  0.3  0.3 471784  9264 ?        S    15:16   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    51198  0.5  0.3 471784  9260 ?        S    15:17   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    51228 18.7  4.6 571628 111808 ?       S    15:17   0:07  \_ php-fpm: pool cloudware_ng
healtho+  51252 12.5  2.8 459424 69476 ?        S    15:17   0:04  \_ php-fpm: pool health_oyostate_gov_ng
cloudw    51338  0.8  0.3 471784  9260 ?        S    15:17   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
healtho+  51379 12.4  2.7 457240 67428 ?        S    15:17   0:01  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   51388  0.0  0.2 397064  5272 ?        S    15:17   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  51433  9.8  2.1 442904 52940 ?        S    15:17   0:00  \_ php-fpm: pool health_oyostate_gov_ng
memcach+    994  0.0  0.0 342400     0 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1007  0.0  0.0 392856   432 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root       1012  0.0  0.0 385496   552 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1013  0.0  0.1 273744  3708 ?        Ssl  09:46   0:05 /usr/sbin/rsyslogd -n
root       1014  0.0  1.1 261032 27960 ?        Ss   09:46   0:06 cpsrvd (SSL) - waiting for connections                   
root      51434  0.0  0.0      0     0 ?        Z    15:17   0:00  \_ [cpaneld - servi] <defunct>
root       1017  0.0  0.0 436392   404 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
oysipao+  51474  0.0  0.1 436392  4040 ?        S    15:18   0:00  \_ php-fpm: pool oysipa_oyostate_gov_ng
root       1018  0.0  0.0 153404   224 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
root       1020  0.0  0.0 111304   356 ?        Ss   09:46   0:02 /usr/sbin/sshd -D
root      51462  0.5  0.2 162436  5832 ?        Ss   15:17   0:00  \_ sshd: root [priv]
sshd      51463  0.0  0.1 115644  2632 ?        S    15:17   0:00      \_ sshd: root [net]
cpanelc+   1026  0.0  0.1  10540  3568 ?        Ss   09:46   0:15 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1218  0.0  0.1 157708  2864 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1233  0.0  1.0 410452 26032 ?        Ss   09:46   0:16 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1234  0.0  0.1 387528  3520 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.2 183900  6464 ?        Ss   09:46   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1265  0.0  0.4 209480 11140 ?        Ss   09:46   0:02 tailwatchd
root       1267  0.0  0.0 167452  1200 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1713  0.0  0.0 299272   632 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1728  0.0  0.0 130416  1376 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1782  1.8 10.9 1469608 264152 ?      Sl   09:46   6:16 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1968  0.0  0.2 266984  5096 ?        Ss   09:46   0:01 /usr/sbin/httpd -k start
root       1970  0.0  0.0  12824   328 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1971  0.0  0.0  12732   288 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1972  0.0  0.0  12872   340 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1977  0.0  0.0  53340     4 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    43163  0.0  0.7 277844 19180 ?        S    15:00   0:01  \_ /usr/sbin/httpd -k start
nobody    43178  0.0  0.7 277536 19140 ?        S    15:01   0:00  \_ /usr/sbin/httpd -k start
nobody    43609  0.0  0.7 277520 18632 ?        S    15:01   0:00  \_ /usr/sbin/httpd -k start
nobody    46086  0.0  0.7 277508 18228 ?        S    15:06   0:00  \_ /usr/sbin/httpd -k start
nobody    46952  0.0  0.7 277860 18036 ?        S    15:08   0:00  \_ /usr/sbin/httpd -k start
nobody    47358  0.0  0.7 277512 18100 ?        S    15:09   0:00  \_ /usr/sbin/httpd -k start
nobody    47369  0.0  0.7 277720 18056 ?        S    15:09   0:00  \_ /usr/sbin/httpd -k start
nobody    47378  0.0  0.7 277852 18504 ?        S    15:09   0:00  \_ /usr/sbin/httpd -k start
nobody    47380  0.1  0.7 277852 18768 ?        S    15:09   0:00  \_ /usr/sbin/httpd -k start
nobody    47381  0.1  0.7 277856 18388 ?        S    15:09   0:00  \_ /usr/sbin/httpd -k start
nobody    47955  0.1  0.7 277732 18172 ?        R    15:10   0:00  \_ /usr/sbin/httpd -k start
nobody    47965  0.1  0.7 277844 18376 ?        S    15:10   0:00  \_ /usr/sbin/httpd -k start
root      51558  0.0  0.0   6516   416 ?        S    15:18   0:00  |   \_ /usr/sbin/suexec 1014 1016 ea-php74
nobody    48532  0.1  0.7 277472 18136 ?        S    15:11   0:00  \_ /usr/sbin/httpd -k start
nobody    49002  0.0  0.7 277516 17976 ?        S    15:12   0:00  \_ /usr/sbin/httpd -k start
nobody    49031  0.0  0.7 277512 17424 ?        S    15:13   0:00  \_ /usr/sbin/httpd -k start
nobody    49447  0.1  0.7 277852 18064 ?        S    15:13   0:00  \_ /usr/sbin/httpd -k start
nobody    49936  0.1  0.7 277716 18196 ?        S    15:15   0:00  \_ /usr/sbin/httpd -k start
nobody    50130  0.1  0.7 277836 17868 ?        S    15:15   0:00  \_ /usr/sbin/httpd -k start
nobody    50711  0.0  0.7 277476 17280 ?        S    15:16   0:00  \_ /usr/sbin/httpd -k start
nobody    51464  0.0  0.6 277504 16064 ?        S    15:17   0:00  \_ /usr/sbin/httpd -k start
root       2041  0.0  0.4 182532 10692 ?        Ss   09:46   0:17 lfd - sleeping
oysipao+   9063  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+   9089  0.0  0.0   3152    56 ?        S    10:01   0:00  \_ [kworker]
root      28537  0.0  4.8 248100 118080 ?       Ss   10:50   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      32709  0.1  5.6 269720 136500 ?       S    11:00   0:20  \_ spamd child
root      32710  0.0  5.1 258916 125556 ?       S    11:00   0:00  \_ spamd child
root      42747  0.0  0.4 1341636 10476 ?       Ssl  15:00   0:00 /usr/bin/cspdaemon
root      42789  0.0  0.4 1277312 11744 ?       Ssl  15:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 41606  Threads: 3  Questions: 2468784  Slow queries: 0  Opens: 8186  Flush tables: 1  Open tables: 2000  Queries per second avg: 59.337
*************************** 1. row ***************************
     Id: 37164
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `13` WHERE `phone`='2348038569404' LIMIT 1
*************************** 2. row ***************************
     Id: 37167
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 37170
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 10.30.9.138 TIME_WAIT
      1 114.119.133.34 TIME_WAIT
      1 114.119.145.187 TIME_WAIT
      1 ::1 TIME_WAIT
      1 54.39.136.2 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      3 127.0.0.1 TIME_WAIT
      3 20.78.70.188 TIME_WAIT
      6 112.243.26.115 TIME_WAIT
     75 157.230.45.41 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 15:18:01 WAT
   Restart Time: Friday, 07-Nov-2025 03:44:42 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 11 hours 33 minutes 19 seconds
   Server load: 0.89 0.71 0.52
   Total accesses: 62688 - Total Traffic: 1.0 GB - Total Duration: 138067690
   CPU Usage: u5.85 s2.87 cu519.7 cs356.44 - 2.13% CPU load
   1.51 requests/sec - 25.3 kB/second - 16.8 kB/request - 2202.46 ms/request
   15 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

WKWWRK_WKKK__W_R_.KKW...........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req   Dur    Conn  Child  Slot     Client      Protocol           VHost                                        Request
   0-0  49002 0/49/3955   W 0.73 112   0   6625943  0.0   0.75  54.96 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323532383536392p2231223
   1-0  46952 11/44/4034  K 0.66 1     86  6514350  71.6  0.54  60.29 51.68.234.177   http/1.1 cloudsms.com.ng:443        GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   2-0  48532 0/100/4041  W 1.33 0     0   4013716  0.0   1.53  59.46 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   3-0  46086 0/43/4146   W 0.71 44    0   3046678  0.0   0.76  77.32 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323532383633372p2231223
   4-0  47358 0/94/3960   R 1.67 121   24  4168970  0.0   1.55  62.35 105.112.214.45  http/1.1
   5-0  43163 1/247/4227  K 3.55 0     51  4858209  0.8   4.16  73.64 66.249.79.4     http/1.1 oysipa.oyostate.gov.ng:80  GET /dg HTTP/1.1
   6-0  49031 0/30/3376   _ 0.44 0     26  4806286  0.0   0.51  62.77 128.140.8.200   http/1.1 cloudsms.com.ng:443        GET /cron/process_queue3.php HTTP/1.1
   7-0  50711 0/14/3372   W 0.09 64    0   47826908 0.0   0.15  52.18 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323532383631372p2231223
   8-0  47369 3/62/3016   K 1.05 3     344 5670542  97.2  1.20  43.62 66.249.70.37    http/1.1 support.cloudware.ng:443   GET /?c=1160082801 HTTP/1.1
   9-0  49447 4/105/3567  K 0.69 0     280 4690722  129.1 0.79  77.16 66.249.70.39    http/1.1 support.cloudware.ng:443   GET /?c=3587276501 HTTP/1.1
   10-0 43178 1/197/2855  K 2.39 2     353 5677231  36.3  3.29  36.62 66.249.70.33    http/1.1 support.cloudware.ng:443   GET /?c=4241756066 HTTP/1.1
   11-0 49936 0/49/2576   _ 0.72 0     296 5470602  0.0   0.97  42.81 157.230.45.41   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   12-0 50130 0/60/2909   _ 0.65 0     0   3527683  0.0   0.80  46.75 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   13-0 47378 0/126/2725  W 0.60 4     0   4668710  0.0   1.52  48.21 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323532383637372p2231223
   14-0 47955 0/206/2985  _ 1.81 0     315 4740182  0.0   1.86  43.97 157.230.45.41   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   15-0 43609 0/176/2396  R 3.49 0     23  4968243  0.0   3.59  33.57 157.230.45.41   http/1.1
   16-0 51464 0/1/841     _ 0.00 0     618 5115126  0.0   0.02  14.39 112.243.26.115  http/1.1 cloudware.ng:443           GET /products/ HTTP/1.1
   17-0 -     0/0/1989    . 0.00 339   0   3752953  0.0   0.00  43.74 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 47965 12/195/1716 K 1.43 0     43  1418569  77.9  1.46  26.76 147.135.252.179 http/1.1 cloudsms.com.ng:443        GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   19-0 47380 2/140/559   K 2.12 3     464 920697   67.7  2.60  11.51 66.249.70.36    http/1.1 support.cloudware.ng:443   GET /?c=1783718601 HTTP/1.1
   20-0 47381 0/141/245   W 2.12 24    0   138679   0.0   2.93  4.39  173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323532383635372p2231223
   21-0 -     0/0/289     . 0.00 1906  0   1662947  0.0   0.00  3.78  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/866     . 0.00 2153  0   1178087  0.0   0.00  10.26 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/13      . 0.00 11908 0   32567    0.0   0.00  0.18  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/9       . 0.00 11914 0   29442    0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/8       . 0.00 11931 0   29769    0.0   0.00  0.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/12      . 0.00 11891 0   24649    0.0   0.00  0.26  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/31      . 0.00 11927 0   34716    0.0   0.00  0.61  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/259     . 0.00 11940 0   143065   0.0   0.00  3.62  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/96      . 0.00 11956 0   59764    0.0   0.00  2.78  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/13      . 0.00 11881 0   22779    0.0   0.00  9.52  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/103     . 0.00 11682 0   179005   0.0   0.00  0.84  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/2       . 0.00 11957 0   9851     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/7       . 0.00 11906 0   21858    0.0   0.00  0.36  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/2       . 0.00 11952 0   17699    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/5       . 0.00 11921 0   19399    0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/4       . 0.00 11930 0   14235    0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/2       . 0.00 11953 0   15595    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/156     . 0.00 11686 0   148319   0.0   0.00  0.63  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/2       . 0.00 11954 0   15338    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/6       . 0.00 11909 0   21858    0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/208     . 0.00 11085 0   243070   0.0   0.00  2.95  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/2       . 0.00 11949 0   19835    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/2       . 0.00 11950 0   19620    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/6       . 0.00 11907 0   24371    0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/5       . 0.00 11916 0   19070    0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/6       . 0.00 11911 0   20569    0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/4       . 0.00 11926 0   17777    0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/4       . 0.00 11923 0   16933    0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/2       . 0.00 11951 0   17743    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/3       . 0.00 11933 0   22693    0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/4       . 0.00 11920 0   22016    0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/4       . 0.00 11929 0   22448    0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/3       . 0.00 11937 0   9096     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/6       . 0.00 11925 0   23840    0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/17      . 0.00 11898 0   16331    0.0   0.00  0.47  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/184     . 0.00 11718 0   130360   0.0   0.00  0.50  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/3       . 0.00 11934 0   22445    0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/3       . 0.00 11938 0   7899     0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/5       . 0.00 11913 0   23139    0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/139     . 0.00 11582 0   237404   0.0   0.00  1.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/2       . 0.00 11947 0   2361     0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/11      . 0.00 11896 0   9214     0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/4       . 0.00 11922 0   8490     0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/1       . 0.00 11963 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/1       . 0.00 11961 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/2       . 0.00 11945 0   8680     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/1       . 0.00 11960 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/3       . 0.00 11936 0   742      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/1       . 0.00 11962 11  22       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/2       . 0.00 11943 0   10366    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/65      . 0.00 11755 0   105003   0.0   0.00  1.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/151     . 0.00 11583 0   218700   0.0   0.00  1.26  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/2       . 0.00 11942 0   8818     0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/4       . 0.00 11932 0   1447     0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/2       . 0.00 11948 0   463      0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/101     . 0.00 11668 0   159456   0.0   0.00  0.87  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/6       . 0.00 11917 0   4997     0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/338     . 0.00 10160 0   272159   0.0   0.00  5.63  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/1       . 0.00 11959 0   0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -     0/0/2       . 0.00 11941 0   7766     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -     0/0/3       . 0.00 11924 0   10368    0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 621
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 23 seconds, (range: 2...106)
   index usage: 10%, cache usage: 14%
   total entries stored since starting: 39522
   total entries replaced since starting: 0
   total entries expired since starting: 38870
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 115 miss
   total removes since starting: 31 hit, 81 miss
Youez - 2016 - github.com/yon3zu
LinuXploit