403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.15.36.txt
 ## swap threshold exceeded
## server overview
2025-11-07.15.36 load[0] mem[65/74] mysql[1/25] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        1489         161          54         712         648
Swap:          1999        1554         445
 15:36:01 up  5:49,  0 users,  load average: 0.99, 0.89, 0.73
## system overview
top - 15:36:01 up  5:49,  0 users,  load average: 0.99, 0.89, 0.73
Tasks: 205 total,   6 running, 198 sleeping,   0 stopped,   1 zombie
%Cpu(s): 75.0 us, 21.9 sy,  0.0 ni,  3.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   170460 free,  1520812 used,   729028 buff/cache
KiB Swap:  2047996 total,   455764 free,  1592232 used.   668884 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1782 mysql     20   0 1469608 264380   3932 S  66.7 10.9   6:40.69 /usr/sbin+
 60039 healtho+  20   0  458236  68376   4308 R  66.7  2.8   0:02.01 php-fpm: +
 60204 nigeria   20   0  400652  15936  10220 R  13.3  0.7   0:00.03 /opt/cpan+
 60215 cloudw    20   0  364736  18708  10552 S  13.3  0.8   0:00.02 /opt/cpan+
     1 root      20   0   44424   3520   1552 S   6.7  0.1   0:30.22 /usr/lib/+
   981 named     20   0  785392  33472   1892 S   6.7  1.4   0:13.91 /usr/sbin+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.62 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.34 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:23.54 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.30 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.54 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:23.93 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.39 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:02.48 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:02.79 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.38 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40244   5884   5636 S   0.0  0.2   0:10.55 /usr/lib/+
   382 root      20   0   45352      8      4 S   0.0  0.0   0:00.36 /usr/lib/+
   409 root      16  -4   55532    456    336 S   0.0  0.0   0:01.65 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0   24720   1224    788 S   0.0  0.1   0:04.75 /usr/lib/+
   493 root      20   0  224268   4680   1096 S   0.0  0.2   0:00.37 queueproc+
   494 root      20   0  152780     76     36 S   0.0  0.0   0:00.01 /usr/sbin+
   499 nscd      20   0 1334484   1932    760 S   0.0  0.1   0:07.32 /usr/sbin+
   500 rpc       20   0   69256     24      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   503 dbus      20   0   57032   1328    616 S   0.0  0.1   0:10.90 /usr/bin/+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0   52852    336    228 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  610540    984    608 S   0.0  0.0   0:02.80 /usr/lib/+
   541 root      20   0   21540    388    280 S   0.0  0.0   0:00.49 /usr/sbin+
   551 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  124480    428    296 S   0.0  0.0   0:00.59 /usr/sbin+
   558 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   570 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   622 mailnull  20   0   89116   3804    884 S   0.0  0.2   0:00.34 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:03.26 [loop0]
   677 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   959 systuser  20   0  114016  10144   2340 S   0.0  0.4   0:04.99 /usr/loca+
   960 systuser  20   0   11604     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   961 root      20   0  572372    624    164 S   0.0  0.0   0:01.86 /usr/bin/+
   963 telegraf  20   0 5654048  35476   6024 S   0.0  1.5   0:11.53 /usr/loca+
   964 root      20   0   51508    460    296 S   0.0  0.0   0:00.29 /usr/sbin+
   966 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   968 systuser  20   0  111608      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 systuser  20   0   10388     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   970 systuser  20   0  113932      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   982 root      20   0 1828076 152288    852 S   0.0  6.3   0:35.54 /usr/loca+
   984 root      20   0  386112    468    372 S   0.0  0.0   0:00.62 php-fpm: +
   992 root      20   0  397344   2416    612 S   0.0  0.1   0:04.48 php-fpm: +
   994 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.45 /usr/bin/+
  1007 root      20   0  392856    380    296 S   0.0  0.0   0:00.61 php-fpm: +
  1012 root      20   0  385496    548    448 S   0.0  0.0   0:00.62 php-fpm: +
  1013 root      20   0  273744   5976   5120 S   0.0  0.2   0:05.47 /usr/sbin+
  1014 root      20   0  261164  27996   5516 S   0.0  1.2   0:06.81 cpsrvd (S+
  1017 root      20   0  436392    404    316 S   0.0  0.0   0:00.73 php-fpm: +
  1018 root      20   0  153404    224    140 S   0.0  0.0   0:00.45 pure-ftpd+
  1020 root      20   0  111304    356    260 S   0.0  0.0   0:02.30 /usr/sbin+
  1026 cpanelc+  20   0   10540   3564   2304 S   0.0  0.1   0:15.92 /usr/loca+
  1096 dovenull  20   0   46912   1580   1032 S   0.0  0.1   0:00.29 dovecot/p+
  1097 dovenull  20   0   47720   2948   1836 S   0.0  0.1   0:00.15 dovecot/i+
  1098 dovecot   20   0   10320    316    200 S   0.0  0.0   0:00.05 dovecot/a+
  1099 root      20   0   10452    568    368 S   0.0  0.0   0:00.26 dovecot/l+
  1100 dovenull  20   0   46912   2164   1596 S   0.0  0.1   0:00.43 dovecot/p+
  1101 dovenull  20   0   47940   3116   1812 S   0.0  0.1   0:00.26 dovecot/i+
  1108 root      20   0   24568   2524    512 S   0.0  0.1   0:00.18 dovecot/c+
  1113 dovecot   20   0   13568    436    220 S   0.0  0.0   0:00.06 dovecot/s+
  1182 dovecot   20   0   41136   1468   1012 S   0.0  0.1   0:00.46 dovecot/a+
  1218 systuser  20   0  157708   2864    816 S   0.0  0.1   0:00.11 SonarPush+
  1233 wp-tool+  20   0  410452  25752   1404 S   0.0  1.1   0:17.23 /usr/bin/+
  1234 wp-tool+  20   0  387528   3284   1428 S   0.0  0.1   0:00.24 /usr/bin/+
  1264 root      20   0  262228  24620   6760 S   0.0  1.0   0:01.51 cpdavd - +
  1265 root      20   0  209480  11172   2428 S   0.0  0.5   0:02.30 tailwatchd
  1267 root      20   0  167452   1200    652 S   0.0  0.0   0:00.33 dnsadmin +
  1713 root      20   0  299272    632    448 S   0.0  0.0   0:00.56 php-fpm: +
  1728 root      38  18  130416   1376    692 S   0.0  0.1   0:00.05 cpanellog+
  1968 root      20   0  266984   5096    600 S   0.0  0.2   0:01.22 /usr/sbin+
  1970 root      20   0   12780    328    212 S   0.0  0.0   0:01.58 /usr/loca+
  1971 root      20   0   12732    288    212 S   0.0  0.0   0:01.34 /usr/loca+
  1972 root      20   0   12804    340    216 S   0.0  0.0   0:01.46 /usr/loca+
  1977 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  2041 root      20   0  182632  10840   1104 S   0.0  0.4   0:18.28 lfd - sle+
  9063 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  9089 oysipao+  20   0    3152     56     16 S   0.0  0.0   0:00.38 [kworker]
 19376 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 28537 root      20   0  248100 118080   1388 S   0.0  4.9   0:04.76 /usr/loca+
 28691 cloudw    20   0  471856   9496   5236 S   0.0  0.4   0:03.35 php-fpm: +
 32709 root      20   0  269720 136716   3224 S   0.0  5.6   0:21.61 spamd chi+
 32710 root      20   0  258916 125508   2908 S   0.0  5.2   0:00.73 spamd chi+
 33012 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 40212 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 42747 root      20   0 1341636  10476    600 S   0.0  0.4   0:00.07 /usr/bin/+
 42789 root      20   0 1277312  11680    596 S   0.0  0.5   0:00.07 /usr/bin/+
 43163 nobody    20   0  277844  20352   4788 R   0.0  0.8   0:02.26 /usr/sbin+
 44285 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 46141 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 47369 nobody    20   0  277592  19948   4840 S   0.0  0.8   0:01.42 /usr/sbin+
 47381 nobody    20   0  277856  20228   4952 S   0.0  0.8   0:01.43 /usr/sbin+
 49002 nobody    20   0  277516  19068   4496 S   0.0  0.8   0:00.59 /usr/sbin+
 49936 nobody    20   0  277652  19968   4772 S   0.0  0.8   0:01.19 /usr/sbin+
 50117 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 51464 nobody    20   0  277584  19588   4712 S   0.0  0.8   0:00.94 /usr/sbin+
 53206 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 53668 nobody    20   0  277844  19640   4524 S   0.0  0.8   0:00.90 /usr/sbin+
 53756 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 54633 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 56884 nobody    20   0  277324  17188   3660 S   0.0  0.7   0:00.05 /usr/sbin+
 56950 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 57278 cloudw    20   0  471808   9784   5332 S   0.0  0.4   0:00.43 php-fpm: +
 57843 nobody    20   0  277460  17484   3840 S   0.0  0.7   0:00.10 /usr/sbin+
 57921 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 58315 nobody    20   0  277512  17880   3964 S   0.0  0.7   0:00.28 /usr/sbin+
 59113 nobody    20   0  277848  18116   3956 S   0.0  0.7   0:00.11 /usr/sbin+
 59136 nobody    20   0  277828  18032   4016 S   0.0  0.7   0:00.20 /usr/sbin+
 59141 nobody    20   0  277512  17624   3852 S   0.0  0.7   0:00.15 /usr/sbin+
 59143 nobody    20   0  277456  17452   3812 S   0.0  0.7   0:00.14 /usr/sbin+
 59286 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 59398 cloudw    20   0  471784   9260   4976 S   0.0  0.4   0:00.22 php-fpm: +
 59514 cloudw    20   0  471784   9260   4976 S   0.0  0.4   0:00.22 php-fpm: +
 59630 nobody    20   0  277512  17404   3764 S   0.0  0.7   0:00.05 /usr/sbin+
 59640 cloudw    20   0  471784   9264   4976 S   0.0  0.4   0:00.21 php-fpm: +
 59812 nobody    20   0  277512  17516   3808 S   0.0  0.7   0:00.06 /usr/sbin+
 59827 nobody    20   0  277456  17184   3640 S   0.0  0.7   0:00.04 /usr/sbin+
 59828 nobody    20   0  277848  17484   3668 S   0.0  0.7   0:00.05 /usr/sbin+
 59835 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 60002 healtho+  20   0  460348  71440   4304 S   0.0  3.0   0:02.87 php-fpm: +
 60009 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 60012 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 60040 healtho+  20   0  462396  73404   4308 S   0.0  3.0   0:02.09 php-fpm: +
 60072 nigeria   20   0  397064   5272   2268 S   0.0  0.2   0:00.00 php-fpm: +
 60091 healtho+  20   0  451096  61176   4212 S   0.0  2.5   0:00.93 php-fpm: +
 60098 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 60118 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 60119 root      20   0  162436   5832   4340 S   0.0  0.2   0:00.01 sshd: roo+
 60120 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 60139 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 60140 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 60141 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 60142 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 60143 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 60144 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 60145 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 60146 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 60147 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 60148 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 60149 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 60151 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 60153 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 60155 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 60156 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 60157 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 60173 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 60174 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 60176 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 60178 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 60179 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 60180 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 60183 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 60184 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 60185 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 60186 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 60187 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 60188 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 60199 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 60206 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 60208 pactpay   20   0  476724  17108  11408 R   0.0  0.7   0:00.01 /opt/cpan+
 60212 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    09:46   0:23  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:46   0:23  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        660  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [loop0]
root        677  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      19376  0.0  0.0      0     0 ?        S    14:12   0:00  \_ [kworker/u200:0]
root      33012  0.0  0.0      0     0 ?        S    14:42   0:00  \_ [kworker/1:4]
root      40212  0.0  0.0      0     0 ?        S    14:56   0:00  \_ [kworker/0:1]
root      44285  0.0  0.0      0     0 ?        S    15:03   0:00  \_ [kworker/0:2]
root      46141  0.0  0.0      0     0 ?        S    15:07   0:00  \_ [kworker/1:2]
root      50117  0.0  0.0      0     0 ?        S    15:15   0:00  \_ [kworker/u200:2]
root      53206  0.0  0.0      0     0 ?        S    15:21   0:00  \_ [kworker/0:4]
root      53756  0.0  0.0      0     0 ?        S    15:22   0:00  \_ [kworker/1:0]
root      54633  0.0  0.0      0     0 ?        S    15:24   0:00  \_ [kworker/1:3]
root      56950  0.0  0.0      0     0 ?        S    15:29   0:00  \_ [kworker/0:0]
root      57921  0.0  0.0      0     0 ?        S    15:31   0:00  \_ [kworker/0:3]
root      59286  0.0  0.0      0     0 ?        S    15:34   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44424  3520 ?        Ss   09:46   0:30 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.2  40244  5884 ?        Ss   09:46   0:10 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45352     8 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   456 ?        S<sl 09:46   0:01 /sbin/auditd
root        489  0.0  0.0  24720  1224 ?        Ss   09:46   0:04 /usr/lib/systemd/systemd-logind
root        493  0.0  0.1 224268  4680 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
root        494  0.0  0.0 152780    76 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        499  0.0  0.0 1334484 1932 ?        Ssl  09:46   0:07 /usr/sbin/nscd
rpc         500  0.0  0.0  69256    24 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        503  0.0  0.0  57032  1328 ?        Ss   09:46   0:10 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        523  0.0  0.0 195208     0 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0  52852   336 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.0 610540   984 ?        Ssl  09:46   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        541  0.0  0.0  21540   388 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        551  0.0  0.0  24208     4 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        552  0.0  0.0 124480   428 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      60139  0.0  0.0 183048  2140 ?        S    15:36   0:00  \_ /usr/sbin/CROND -n
root      60155  0.0  0.0 113284  1208 ?        Ss   15:36   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      60156  0.0  0.0 108052   360 ?        S    15:36   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      60157  0.0  0.0 113288  1512 ?        S    15:36   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      60218  0.0  0.0 153840  2092 ?        R    15:36   0:00  |               \_ ps auxf
root      60140  0.0  0.0 183048  2144 ?        S    15:36   0:00  \_ /usr/sbin/CROND -n
root      60186  0.0  0.0  20164   804 ?        Ss   15:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      60141  0.0  0.0 183048  2144 ?        S    15:36   0:00  \_ /usr/sbin/CROND -n
root      60185  0.0  0.0  20164   804 ?        Ss   15:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      60142  0.0  0.0 183048  2144 ?        S    15:36   0:00  \_ /usr/sbin/CROND -n
root      60184  0.0  0.0  20164   804 ?        Ss   15:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      60143  0.0  0.0 183048  2144 ?        S    15:36   0:00  \_ /usr/sbin/CROND -n
root      60173  0.0  0.0  20164   988 ?        Ss   15:36   0:00  |   \_ jailshell (cloudsms) [60220] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  60220  0.0  0.0  20164   264 ?        S    15:36   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  60221  0.0  0.0  20164   264 ?        R    15:36   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      60144  0.0  0.0 183048  2144 ?        S    15:36   0:00  \_ /usr/sbin/CROND -n
root      60180  0.0  0.0  20164   804 ?        Ss   15:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      60145  0.0  0.0 183048  2144 ?        S    15:36   0:00  \_ /usr/sbin/CROND -n
root      60179  0.0  0.0  20164   804 ?        Ss   15:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      60146  0.0  0.0 183048  2144 ?        S    15:36   0:00  \_ /usr/sbin/CROND -n
root      60188  0.0  0.0  20164   804 ?        Ss   15:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      60147  0.0  0.0 183048  2144 ?        S    15:36   0:00  \_ /usr/sbin/CROND -n
root      60174  0.0  0.0  20164   804 ?        Ss   15:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      60148  0.0  0.0 183048  2144 ?        S    15:36   0:00  \_ /usr/sbin/CROND -n
root      60187  0.0  0.0  20164   804 ?        Ss   15:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      60149  0.0  0.0 183048  2144 ?        S    15:36   0:00  \_ /usr/sbin/CROND -n
root      60178  0.0  0.0  20164   808 ?        Ss   15:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      60151  0.0  0.0 183048  2144 ?        S    15:36   0:00  \_ /usr/sbin/CROND -n
root      60183  0.0  0.0  20164   964 ?        Ss   15:36   0:00  |   \_ jailshell (pactpay) [60206] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   60206  0.0  0.0  20164   256 ?        S    15:36   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   60208  1.0  0.7 476724 17480 ?        S    15:36   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      60153  0.0  0.0 183048  2144 ?        S    15:36   0:00  \_ /usr/sbin/CROND -n
root      60176  0.0  0.0  20164   964 ?        Ss   15:36   0:00      \_ jailshell (nigeria) [60199] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   60199  0.0  0.0  20164   260 ?        S    15:36   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   60204  3.0  0.6 400652 15936 ?        S    15:36   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0   4388     4 ?        Ss   09:46   0:00 /usr/sbin/acpid
root        569  0.0  0.0 114704     0 ttyS0    Ss+  09:46   0:00 /bin/bash
root        570  0.0  0.0 108296     8 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    622  0.0  0.1  89116  3804 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    959  0.0  0.4 114016 10144 ?        Ssl  09:46   0:04 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    960  0.0  0.0  11604    24 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        961  0.0  0.0 572372   624 ?        Ssl  09:46   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    963  0.0  1.4 5654048 35476 ?       SLsl 09:46   0:11 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0  51508   460 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1096  0.0  0.0  46912  1580 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1097  0.0  0.1  47720  2948 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1098  0.0  0.0  10320   316 ?        S    09:46   0:00  \_ dovecot/anvil
root       1099  0.0  0.0  10452   568 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1100  0.0  0.0  46912  2164 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1101  0.0  0.1  47940  3116 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1108  0.0  0.1  24568  2524 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1113  0.0  0.0  13568   436 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1182  0.0  0.0  41136  1468 ?        S    09:46   0:00  \_ dovecot/auth
root      59835  0.0  0.1  41052  2728 ?        S    15:35   0:00  \_ dovecot/auth -w
root        966  0.0  0.0 445028     0 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    968  0.0  0.0 111608     4 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    969  0.0  0.0  10388    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    970  0.0  0.0 113932     8 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
named       981  0.0  1.3 785392 33472 ?        Ssl  09:46   0:13 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        982  0.1  6.2 1828076 152288 ?      Ssl  09:46   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
root        984  0.0  0.0 386112   468 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  0.0 397344  2416 ?        Ss   09:46   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    28691  0.0  0.3 471856  9496 ?        S    14:32   0:03  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    57278  0.1  0.4 471808  9784 ?        S    15:29   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    59398  0.2  0.3 471784  9260 ?        S    15:34   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    59514  0.2  0.3 471784  9260 ?        S    15:34   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    59640  0.3  0.3 471784  9264 ?        S    15:35   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
healtho+  60002 11.4  2.9 460348 71440 ?        S    15:35   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  60039 11.3  2.8 460796 69956 ?        R    15:35   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  60040 11.6  3.0 462396 73404 ?        S    15:35   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   60072  0.0  0.2 397064  5272 ?        S    15:35   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  60091  8.4  2.5 451096 61176 ?        S    15:35   0:00  \_ php-fpm: pool health_oyostate_gov_ng
memcach+    994  0.0  0.0 342400     0 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1007  0.0  0.0 392856   380 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root       1012  0.0  0.0 385496   548 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1013  0.0  0.2 273744  5976 ?        Ssl  09:46   0:05 /usr/sbin/rsyslogd -n
root       1014  0.0  1.1 261164 27996 ?        Ss   09:46   0:06 cpsrvd (SSL) - waiting for connections                   
root      60098  0.0  0.0      0     0 ?        Z    15:35   0:00  \_ [cpaneld - servi] <defunct>
root       1017  0.0  0.0 436392   404 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1018  0.0  0.0 153404   224 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
root       1020  0.0  0.0 111304   356 ?        Ss   09:46   0:02 /usr/sbin/sshd -D
root      60009  0.0  0.1 111304  4268 ?        Ss   15:35   0:00  \_ sshd: [accepted]
sshd      60012  0.0  0.1 115644  2632 ?        S    15:35   0:00  |   \_ sshd: [net]
root      60118  0.0  0.1 111304  4272 ?        Ss   15:35   0:00  \_ sshd: [accepted]
root      60119  0.5  0.2 162436  5832 ?        Ss   15:35   0:00  \_ sshd: root [priv]
sshd      60120  0.0  0.1 115644  2628 ?        S    15:35   0:00      \_ sshd: root [net]
cpanelc+   1026  0.0  0.1  10540  3564 ?        Ss   09:46   0:15 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1218  0.0  0.1 157708  2864 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1233  0.0  1.0 410452 25752 ?        Ss   09:46   0:17 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1234  0.0  0.1 387528  3284 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  1.0 262228 24620 ?        Ss   09:46   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1265  0.0  0.4 209480 11172 ?        Ss   09:46   0:02 tailwatchd
root       1267  0.0  0.0 167452  1200 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1713  0.0  0.0 299272   632 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1728  0.0  0.0 130416  1376 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1782  1.9 10.9 1469608 264380 ?      Sl   09:46   6:40 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1968  0.0  0.2 266984  5096 ?        Ss   09:46   0:01 /usr/sbin/httpd -k start
root       1970  0.0  0.0  12780   328 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1971  0.0  0.0  12732   288 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1972  0.0  0.0  12804   340 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1977  0.0  0.0  53340     4 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    43163  0.1  0.8 277844 20352 ?        S    15:00   0:02  \_ /usr/sbin/httpd -k start
nobody    47369  0.0  0.8 277592 19948 ?        S    15:09   0:01  \_ /usr/sbin/httpd -k start
nobody    47381  0.0  0.8 277856 20228 ?        S    15:09   0:01  \_ /usr/sbin/httpd -k start
nobody    49002  0.0  0.7 277516 19068 ?        S    15:12   0:00  \_ /usr/sbin/httpd -k start
nobody    49936  0.0  0.8 277652 19968 ?        S    15:15   0:01  \_ /usr/sbin/httpd -k start
nobody    51464  0.0  0.8 277584 19588 ?        S    15:17   0:00  \_ /usr/sbin/httpd -k start
nobody    53668  0.1  0.8 277844 19640 ?        S    15:21   0:00  \_ /usr/sbin/httpd -k start
nobody    56884  0.0  0.7 277324 17188 ?        S    15:28   0:00  \_ /usr/sbin/httpd -k start
nobody    57843  0.0  0.7 277460 17484 ?        S    15:30   0:00  \_ /usr/sbin/httpd -k start
cloudw    60215  2.0  0.7 364868 18708 ?        S    15:36   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    58315  0.1  0.7 277512 17880 ?        S    15:31   0:00  \_ /usr/sbin/httpd -k start
nobody    59113  0.0  0.7 277848 18116 ?        S    15:33   0:00  \_ /usr/sbin/httpd -k start
nobody    59136  0.1  0.7 277828 18032 ?        S    15:33   0:00  \_ /usr/sbin/httpd -k start
nobody    59141  0.1  0.7 277512 17688 ?        S    15:33   0:00  \_ /usr/sbin/httpd -k start
nobody    59143  0.1  0.7 277456 17452 ?        S    15:33   0:00  \_ /usr/sbin/httpd -k start
nobody    59630  0.0  0.7 277512 17404 ?        S    15:34   0:00  \_ /usr/sbin/httpd -k start
nobody    59812  0.1  0.7 277512 17516 ?        S    15:35   0:00  \_ /usr/sbin/httpd -k start
nobody    59827  0.0  0.7 277456 17184 ?        S    15:35   0:00  \_ /usr/sbin/httpd -k start
nobody    59828  0.0  0.7 277848 17484 ?        S    15:35   0:00  \_ /usr/sbin/httpd -k start
root       2041  0.0  0.4 182632 10840 ?        Ss   09:46   0:18 lfd - sleeping
oysipao+   9063  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+   9089  0.0  0.0   3152    56 ?        S    10:01   0:00  \_ [kworker]
root      28537  0.0  4.8 248100 118080 ?       Ss   10:50   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      32709  0.1  5.6 269720 136716 ?       S    11:00   0:21  \_ spamd child
root      32710  0.0  5.1 258916 125508 ?       S    11:00   0:00  \_ spamd child
root      42747  0.0  0.4 1341636 10476 ?       Ssl  15:00   0:00 /usr/bin/cspdaemon
root      42789  0.0  0.4 1277312 11680 ?       Ssl  15:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 42686  Threads: 4  Questions: 2644917  Slow queries: 0  Opens: 8456  Flush tables: 1  Open tables: 2000  Queries per second avg: 61.962
*************************** 1. row ***************************
     Id: 40063
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-07' LIMIT 1
*************************** 2. row ***************************
     Id: 40066
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending to client
   Info: SELECT * FROM `25` WHERE `phone`='2347068859150' LIMIT 1
*************************** 3. row ***************************
     Id: 40068
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 40070
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.35 TIME_WAIT
      1 114.119.137.160 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 ::1 TIME_WAIT
      1 20.90.7.156 TIME_WAIT
      1 52.167.144.23 TIME_WAIT
      1 54.39.6.49 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 103.86.176.173 TIME_WAIT
      3 144.91.73.251 TIME_WAIT
     10 104.248.90.230 TIME_WAIT
     71 157.230.45.41 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 15:36:01 WAT
   Restart Time: Friday, 07-Nov-2025 03:44:42 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 11 hours 51 minutes 19 seconds
   Server load: 0.99 0.89 0.73
   Total accesses: 67390 - Total Traffic: 1.1 GB - Total Duration: 148671028
   CPU Usage: u7.79 s3.37 cu553.21 cs384.78 - 2.22% CPU load
   1.58 requests/sec - 26.3 kB/second - 16.7 kB/request - 2206.13 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

RWK_W_._WW_K_W.KW...W._.W.......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur    Conn Child  Slot     Client      Protocol           VHost                                        Request
   0-0  49002 0/159/4065 R 1.59 0     300 7997034  0.0  2.01  56.22 157.230.45.41   http/1.1 health.oyostate.gov.ng:443
   1-0  57843 1/26/4238  W 0.24 0     0   7415974  35.4 0.43  62.87 66.249.70.38    http/1.1 support.cloudware.ng:443   GET /?c=3469972635 HTTP/1.1
   2-0  59630 2/14/4270  K 0.09 3     313 4529419  65.8 0.29  65.84 66.249.70.36    http/1.1 support.cloudware.ng:443   GET /?c=2142885233 HTTP/1.1
   3-0  59812 0/16/4385  _ 0.17 0     303 4362932  0.0  0.32  78.37 157.230.45.41   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   4-0  53668 0/198/4212 W 3.46 80    0   4297267  0.0  3.61  67.16 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323532393638312p2231223
   5-0  43163 0/548/4528 _ 8.25 0     32  5013224  0.0  9.04  78.52 172.70.126.203  http/1.1
   6-0  -     0/0/3597   . 0.00 1     0   5723528  0.0  0.00  65.98 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   7-0  58315 0/68/3617  _ 0.95 0     4   48385944 0.0  1.16  55.51 172.71.147.240  http/1.1
   8-0  47369 0/331/3285 W 4.95 152   0   5797109  0.0  5.63  48.05 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323532393630392p2231223
   9-0  56884 0/20/3860  W 0.06 100   0   5270134  0.0  0.11  79.58 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323532393636312p2231223
   10-0 59827 0/13/3035  _ 0.08 0     350 6239366  0.0  0.24  39.25 172.69.134.11   http/1.1
   11-0 49936 1/279/2806 K 4.05 1     330 6064278  36.6 4.81  46.65 66.249.70.33    http/1.1 support.cloudware.ng:443   GET /?c=2579326589 HTTP/1.1
   12-0 59113 0/38/3039  _ 0.28 0     0   3597061  0.0  0.69  48.96 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   13-0 59136 0/42/2841  W 0.75 0     0   5088508  0.0  0.79  50.26 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   14-0 -     0/0/3269   . 0.00 41    0   4899830  0.0  0.00  48.57 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 59828 2/15/2687  K 0.09 0     266 5473237  65.8 0.18  36.99 66.249.70.39    http/1.1 support.cloudware.ng:443   GET /?c=312059738 HTTP/1.1
   16-0 51464 0/227/1067 W 3.15 40    0   5677479  0.0  4.96  19.34 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323532393732312p2231223
   17-0 -     0/0/2167   . 0.00 126   0   3842589  0.0  0.00  46.84 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 -     0/0/1772   . 0.00 123   0   1436947  0.0  0.00  27.41 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/817    . 0.00 119   0   1438500  0.0  0.00  14.86 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 47381 0/453/557  W 4.45 60    0   634182   0.0  5.72  7.18  173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323532393730312p2231223
   21-0 -     0/0/293    . 0.00 117   0   1664302  0.0  0.00  3.82  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 59141 0/36/902   _ 0.51 0     35  1199365  0.0  0.69  10.95 172.71.146.230  http/1.1
   23-0 -     0/0/16     . 0.00 127   0   33259    0.0  0.00  0.20  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 59143 0/35/44    W 0.44 0     0   45911    0.0  0.70  0.86  157.230.45.41   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   25-0 -     0/0/8      . 0.00 13011 0   29769    0.0  0.00  0.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/12     . 0.00 12971 0   24649    0.0  0.00  0.26  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/31     . 0.00 13007 0   34716    0.0  0.00  0.61  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/259    . 0.00 13020 0   143065   0.0  0.00  3.62  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/96     . 0.00 13036 0   59764    0.0  0.00  2.78  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/13     . 0.00 12961 0   22779    0.0  0.00  9.52  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/103    . 0.00 12762 0   179005   0.0  0.00  0.84  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/2      . 0.00 13037 0   9851     0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/7      . 0.00 12986 0   21858    0.0  0.00  0.36  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/2      . 0.00 13032 0   17699    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/5      . 0.00 13001 0   19399    0.0  0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/4      . 0.00 13010 0   14235    0.0  0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/2      . 0.00 13033 0   15595    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/156    . 0.00 12766 0   148319   0.0  0.00  0.63  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/2      . 0.00 13034 0   15338    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/6      . 0.00 12989 0   21858    0.0  0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/208    . 0.00 12165 0   243070   0.0  0.00  2.95  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/2      . 0.00 13029 0   19835    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00 13030 0   19620    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/6      . 0.00 12987 0   24371    0.0  0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/5      . 0.00 12996 0   19070    0.0  0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/6      . 0.00 12991 0   20569    0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/4      . 0.00 13006 0   17777    0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/4      . 0.00 13003 0   16933    0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/2      . 0.00 13031 0   17743    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/3      . 0.00 13013 0   22693    0.0  0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/4      . 0.00 13000 0   22016    0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/4      . 0.00 13009 0   22448    0.0  0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/3      . 0.00 13017 0   9096     0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/6      . 0.00 13005 0   23840    0.0  0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/17     . 0.00 12978 0   16331    0.0  0.00  0.47  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/184    . 0.00 12798 0   130360   0.0  0.00  0.50  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/3      . 0.00 13014 0   22445    0.0  0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/3      . 0.00 13018 0   7899     0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/5      . 0.00 12993 0   23139    0.0  0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/139    . 0.00 12663 0   237404   0.0  0.00  1.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/2      . 0.00 13027 0   2361     0.0  0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/11     . 0.00 12976 0   9214     0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/4      . 0.00 13002 0   8490     0.0  0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/1      . 0.00 13043 0   0        0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/1      . 0.00 13041 0   0        0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/2      . 0.00 13025 0   8680     0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/1      . 0.00 13040 0   0        0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/3      . 0.00 13016 0   742      0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/1      . 0.00 13042 11  22       0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00 13023 0   10366    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/65     . 0.00 12835 0   105003   0.0  0.00  1.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/151    . 0.00 12664 0   218700   0.0  0.00  1.26  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/2      . 0.00 13022 0   8818     0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/4      . 0.00 13012 0   1447     0.0  0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/2      . 0.00 13028 0   463      0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/101    . 0.00 12748 0   159456   0.0  0.00  0.87  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/6      . 0.00 12997 0   4997     0.0  0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/338    . 0.00 11240 0   272159   0.0  0.00  5.63  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00 13039 0   0        0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -     0/0/2      . 0.00 13021 0   7766     0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -     0/0/3      . 0.00 13004 0   10368    0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 661
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 18 seconds, (range: 2...41)
   index usage: 11%, cache usage: 15%
   total entries stored since starting: 41979
   total entries replaced since starting: 0
   total entries expired since starting: 41286
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 115 miss
   total removes since starting: 32 hit, 105 miss
Youez - 2016 - github.com/yon3zu
LinuXploit