403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.17.24.txt
 ## swap threshold exceeded
## server overview
2025-11-07.17.24 load[0] mem[59/77] mysql[2/25] httpd[15]
              total        used        free      shared  buff/cache   available
Mem:           2363        1349         130          94         883         745
Swap:          1999        1611         388
 17:24:01 up  7:37,  0 users,  load average: 0.61, 0.72, 0.73
## system overview
top - 17:24:02 up  7:37,  0 users,  load average: 0.61, 0.72, 0.73
Tasks: 212 total,   3 running, 207 sleeping,   0 stopped,   2 zombie
%Cpu(s): 66.7 us, 24.2 sy,  0.0 ni,  9.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   125936 free,  1388132 used,   906232 buff/cache
KiB Swap:  2047996 total,   397940 free,  1650056 used.   757128 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1782 mysql     20   0 1484772 279484   2908 S  64.7 11.5   8:54.58 /usr/sbin+
 32709 root      20   0  269720 136768   3192 S  23.5  5.7   0:22.88 spamd chi+
 12901 nigeria   20   0  400652  15932  10220 S  11.8  0.7   0:00.03 /opt/cpan+
     1 root      20   0   44424   3496   1528 S   5.9  0.1   0:39.83 /usr/lib/+
   503 dbus      20   0   57032   1328    616 S   5.9  0.1   0:14.29 /usr/bin/+
   982 root      20   0 1828140  87692    980 S   5.9  3.6   0:35.57 /usr/loca+
  1026 cpanelc+  20   0   10540   3552   2292 S   5.9  0.1   0:21.17 /usr/loca+
 12907 pactpay   20   0  476724  17484  11728 S   5.9  0.7   0:00.02 /opt/cpan+
 12908 cloudw    20   0  364868  18972  10792 S   5.9  0.8   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.21 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.46 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:32.23 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.42 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.48 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:25.99 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.50 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:02.78 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:03.11 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.72 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40244   7624   7380 S   0.0  0.3   0:13.72 /usr/lib/+
   382 root      20   0   45352      8      4 S   0.0  0.0   0:00.36 /usr/lib/+
   409 root      16  -4   55532    456    336 S   0.0  0.0   0:02.16 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0   24720   1224    788 S   0.0  0.1   0:06.23 /usr/lib/+
   493 root      20   0  224268   4840   1216 S   0.0  0.2   0:00.43 queueproc+
   494 root      20   0  152780     76     36 S   0.0  0.0   0:00.01 /usr/sbin+
   499 nscd      20   0 1334484   1976    784 S   0.0  0.1   0:10.21 /usr/sbin+
   500 rpc       20   0   69256     24      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0   52852    372    260 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  610540    984    608 S   0.0  0.0   0:03.67 /usr/lib/+
   539 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
   541 root      20   0   21540    388    280 S   0.0  0.0   0:00.64 /usr/sbin+
   551 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  124480    428    296 S   0.0  0.0   0:00.76 /usr/sbin+
   558 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   570 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   622 mailnull  20   0   89116   3768    824 S   0.0  0.2   0:00.42 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:03.32 [loop0]
   677 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   940 root      20   0 1277312  11576    596 S   0.0  0.5   0:00.07 /usr/bin/+
   959 systuser  20   0  114016  10428   2436 S   0.0  0.4   0:06.48 /usr/loca+
   960 systuser  20   0   11604     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   961 root      20   0  572372    620    160 S   0.0  0.0   0:02.40 /usr/bin/+
   963 telegraf  20   0 5654304  35112   5744 S   0.0  1.5   0:14.99 /usr/loca+
   964 root      20   0   51508    608    428 S   0.0  0.0   0:00.35 /usr/sbin+
   966 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   968 systuser  20   0  111608      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 systuser  20   0   10388     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   970 systuser  20   0  113932      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   979 root      20   0 1276100  10356    596 S   0.0  0.4   0:00.06 /usr/bin/+
   981 named     20   0  784388  36876   1904 S   0.0  1.5   0:18.08 /usr/sbin+
   984 root      20   0  386112    408    312 S   0.0  0.0   0:00.78 php-fpm: +
   992 root      20   0  397344   2420    612 S   0.0  0.1   0:06.10 php-fpm: +
   994 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.59 /usr/bin/+
  1007 root      20   0  392856    440    356 S   0.0  0.0   0:00.75 php-fpm: +
  1012 root      20   0  385496    544    444 S   0.0  0.0   0:00.79 php-fpm: +
  1013 root      20   0  290128   7864   6844 S   0.0  0.3   0:07.21 /usr/sbin+
  1014 root      20   0  261296  27536   4916 S   0.0  1.1   0:08.64 cpsrvd (S+
  1017 root      20   0  436392    404    316 S   0.0  0.0   0:00.89 php-fpm: +
  1018 root      20   0  153404    224    140 S   0.0  0.0   0:00.60 pure-ftpd+
  1020 root      20   0  111304    356    260 S   0.0  0.0   0:03.00 /usr/sbin+
  1096 dovenull  20   0   46912   2496   1920 S   0.0  0.1   0:00.40 dovecot/p+
  1097 dovenull  20   0   47936   3304   1892 S   0.0  0.1   0:00.21 dovecot/i+
  1098 dovecot   20   0   10320    316    200 S   0.0  0.0   0:00.07 dovecot/a+
  1099 root      20   0   10452    568    368 S   0.0  0.0   0:00.34 dovecot/l+
  1100 dovenull  20   0   46912   2112   1544 S   0.0  0.1   0:00.54 dovecot/p+
  1101 dovenull  20   0   47996   3172   1652 S   0.0  0.1   0:00.32 dovecot/i+
  1108 root      20   0   24568   2524    512 S   0.0  0.1   0:00.21 dovecot/c+
  1113 dovecot   20   0   13568    436    220 S   0.0  0.0   0:00.07 dovecot/s+
  1182 dovecot   20   0   41268   1548   1016 S   0.0  0.1   0:00.57 dovecot/a+
  1218 systuser  20   0  157708   2864    816 S   0.0  0.1   0:00.14 SonarPush+
  1233 wp-tool+  20   0  410452  25752   1404 S   0.0  1.1   0:22.49 /usr/bin/+
  1234 wp-tool+  20   0  387528   3280   1424 S   0.0  0.1   0:00.29 /usr/bin/+
  1264 root      20   0  262228  24620   6760 S   0.0  1.0   0:02.45 cpdavd - +
  1265 root      20   0  209456  10800   2104 S   0.0  0.4   0:02.77 tailwatchd
  1267 root      20   0  167452   4164   2796 S   0.0  0.2   0:00.46 dnsadmin +
  1713 root      20   0  299272    580    396 S   0.0  0.0   0:00.74 php-fpm: +
  1728 root      38  18  130416   1376    692 S   0.0  0.1   0:00.07 cpanellog+
  1968 root      20   0  266984   5096    600 S   0.0  0.2   0:01.64 /usr/sbin+
  1970 root      20   0   12804    328    212 S   0.0  0.0   0:02.21 /usr/loca+
  1971 root      20   0   12732    288    212 S   0.0  0.0   0:01.87 /usr/loca+
  1972 root      20   0   12836    340    216 S   0.0  0.0   0:02.04 /usr/loca+
  1977 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  2041 root      20   0  183152  11508   1104 S   0.0  0.5   0:23.86 lfd - sle+
  5482 nobody    20   0  277516  18688   4480 S   0.0  0.8   0:00.77 /usr/sbin+
  5491 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
  5866 nobody    20   0  277516  18888   4316 S   0.0  0.8   0:00.39 /usr/sbin+
  5941 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  7490 nobody    20   0  277472  18076   4132 S   0.0  0.7   0:00.38 /usr/sbin+
  7529 nobody    20   0  277512  18592   4368 S   0.0  0.8   0:00.50 /usr/sbin+
  7531 nobody    20   0  277848  19028   4452 S   0.0  0.8   0:00.54 /usr/sbin+
  7532 nobody    20   0  277832  19368   4464 S   0.0  0.8   0:00.75 /usr/sbin+
  7750 nobody    20   0  277516  19088   4484 S   0.0  0.8   0:00.61 /usr/sbin+
  9063 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  9089 oysipao+  20   0    3152     56     16 S   0.0  0.0   0:00.50 [kworker]
  9590 nobody    20   0  277844  18420   4208 S   0.0  0.8   0:00.54 /usr/sbin+
  9591 nobody    20   0  277512  18920   4260 S   0.0  0.8   0:00.46 /usr/sbin+
  9602 nobody    20   0  277520  18404   4360 S   0.0  0.8   0:00.42 /usr/sbin+
 10235 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 10250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 10379 cloudw    20   0  471824   9440   5236 S   0.0  0.4   0:00.38 php-fpm: +
 10509 nobody    20   0  277836  18480   4068 S   0.0  0.8   0:00.31 /usr/sbin+
 10776 nobody    20   0  277660  18364   4048 S   0.0  0.8   0:00.23 /usr/sbin+
 10857 nobody    20   0  277464  18024   3972 S   0.0  0.7   0:00.24 /usr/sbin+
 11120 nobody    20   0  277512  17076   3560 S   0.0  0.7   0:00.06 /usr/sbin+
 11247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12092 cloudw    20   0  471784   9196   4968 S   0.0  0.4   0:00.19 php-fpm: +
 12209 mailnull  20   0   89380   8696   4200 S   0.0  0.4   0:00.00 /usr/sbin+
 12219 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 12307 cloudw    20   0  471784   9196   4972 S   0.0  0.4   0:00.19 php-fpm: +
 12348 nobody    20   0  277476  18024   3924 S   0.0  0.7   0:00.05 /usr/sbin+
 12574 nobody    20   0  277176  15912   2860 S   0.0  0.7   0:00.00 /usr/sbin+
 12576 cloudw    20   0  470992   6368   3336 S   0.0  0.3   0:00.13 php-fpm: +
 12629 nobody    20   0  277512  16740   3204 S   0.0  0.7   0:00.01 /usr/sbin+
 12641 nobody    20   0  277512  16580   3116 S   0.0  0.7   0:00.01 /usr/sbin+
 12642 nobody    20   0  277452  17024   3516 S   0.0  0.7   0:00.02 /usr/sbin+
 12663 healtho+  20   0  455192  65280   4188 S   0.0  2.7   0:01.18 php-fpm: +
 12668 nigeria   20   0  397064   5272   2264 S   0.0  0.2   0:00.00 php-fpm: +
 12669 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 12678 healtho+  20   0  455328  65288   4188 S   0.0  2.7   0:01.16 php-fpm: +
 12680 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 12700 nobody    20   0  277444  16788   3476 S   0.0  0.7   0:00.00 /usr/sbin+
 12763 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 12799 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [dnsadmin+
 12805 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [whostmgr+
 12815 cpanelp+  20   0  298280   2356   1492 S   0.0  0.1   0:00.00 php-fpm: +
 12833 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 12834 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 12835 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 12836 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 12838 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 12839 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 12840 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 12841 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 12842 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 12843 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 12845 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12847 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 12849 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 12850 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 12851 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 12867 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 12869 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 12870 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 12872 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 12873 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 12874 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 12877 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 12878 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 12879 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 12880 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 12882 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 12890 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 12895 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 12903 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 12904 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 12913 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 12923 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 12927 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 12928 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 12929 cloudsms  20   0  129728   3108   2204 R   0.0  0.1   0:00.00 /usr/loca+
 28537 root      20   0  248100 118060   1368 S   0.0  4.9   0:05.51 /usr/loca+
 32710 root      20   0  258916 125628   2836 S   0.0  5.2   0:00.76 spamd chi+
 77244 root      20   0       0      0      0 S   0.0  0.0   0:00.22 [kworker/+
 86097 nobody    20   0  277564  20564   4960 S   0.0  0.8   0:03.00 /usr/sbin+
 87152 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 88029 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 91703 nobody    20   0  277852  20716   4924 S   0.0  0.9   0:02.34 /usr/sbin+
 95789 cloudw    20   0  471840   9792   5340 S   0.0  0.4   0:01.90 php-fpm: +
100807 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
101257 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
101394 nobody    20   0  277476  18812   4564 S   0.0  0.8   0:01.38 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    09:46   0:32  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    09:46   0:25  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        660  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [loop0]
root        677  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      77244  0.0  0.0      0     0 ?        S    16:09   0:00  \_ [kworker/1:3]
root      87152  0.0  0.0      0     0 ?        S    16:29   0:00  \_ [kworker/0:3]
root      88029  0.0  0.0      0     0 ?        S    16:30   0:00  \_ [kworker/u200:1]
root     100807  0.0  0.0      0     0 ?        S    16:57   0:00  \_ [kworker/u200:0]
root     101257  0.0  0.0      0     0 ?        S    16:58   0:00  \_ [kworker/1:2]
root        539  0.0  0.0      0     0 ?        S    17:00   0:00  \_ [kworker/0:2]
root       5491  0.0  0.0      0     0 ?        S    17:09   0:00  \_ [kworker/1:4]
root       5941  0.0  0.0      0     0 ?        S    17:10   0:00  \_ [kworker/0:0]
root      10235  0.0  0.0      0     0 ?        S    17:19   0:00  \_ [kworker/1:0]
root      10250  0.0  0.0      0     0 ?        S    17:19   0:00  \_ [kworker/0:1]
root      11247  0.0  0.0      0     0 ?        S    17:21   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44424  3496 ?        Ss   09:46   0:39 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.3  40244  7624 ?        Ss   09:46   0:13 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45352     8 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   456 ?        S<sl 09:46   0:02 /sbin/auditd
root        489  0.0  0.0  24720  1224 ?        Ss   09:46   0:06 /usr/lib/systemd/systemd-logind
root        493  0.0  0.1 224268  4840 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
root        494  0.0  0.0 152780    76 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        499  0.0  0.0 1334484 1976 ?        Ssl  09:46   0:10 /usr/sbin/nscd
rpc         500  0.0  0.0  69256    24 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        503  0.0  0.0  57032  1328 ?        Ss   09:46   0:14 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        523  0.0  0.0 195208     0 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0  52852   372 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.0 610540   984 ?        Ssl  09:46   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        541  0.0  0.0  21540   388 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        551  0.0  0.0  24208     4 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        552  0.0  0.0 124480   428 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      12833  0.0  0.0 183048  2140 ?        S    17:24   0:00  \_ /usr/sbin/CROND -n
root      12849  0.0  0.0 113284  1212 ?        Ss   17:24   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      12850  0.0  0.0 108052   360 ?        S    17:24   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      12851  0.0  0.0 113288  1520 ?        S    17:24   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      12930  0.0  0.0 153840  2096 ?        R    17:24   0:00  |               \_ ps auxf
root      12834  0.0  0.0 183048  2148 ?        S    17:24   0:00  \_ /usr/sbin/CROND -n
root      12878  0.0  0.0  20164   808 ?        Ss   17:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      12835  0.0  0.0 183048  2148 ?        S    17:24   0:00  \_ /usr/sbin/CROND -n
root      12869  0.0  0.0  20164   804 ?        Ss   17:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      12836  0.0  0.0 183048  2148 ?        S    17:24   0:00  \_ /usr/sbin/CROND -n
root      12877  0.0  0.0  20164   804 ?        Ss   17:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      12838  0.0  0.0 183048  2148 ?        S    17:24   0:00  \_ /usr/sbin/CROND -n
root      12880  0.0  0.0  20164   808 ?        Ss   17:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      12839  0.0  0.0 183048  2148 ?        S    17:24   0:00  \_ /usr/sbin/CROND -n
root      12867  0.0  0.0  20164   804 ?        Ss   17:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      12840  0.0  0.0 183048  2148 ?        S    17:24   0:00  \_ /usr/sbin/CROND -n
root      12874  0.0  0.0  20164   988 ?        Ss   17:24   0:00  |   \_ jailshell (cloudsms) [12927] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  12927  0.0  0.0      0     0 ?        D    17:24   0:00  |       \_ [jailshell]
root      12841  0.0  0.0 183048  2148 ?        S    17:24   0:00  \_ /usr/sbin/CROND -n
root      12842  0.0  0.0 183048  2148 ?        S    17:24   0:00  \_ /usr/sbin/CROND -n
root      12873  0.0  0.0  20164   808 ?        Ss   17:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      12843  0.0  0.0 183048  2148 ?        S    17:24   0:00  \_ /usr/sbin/CROND -n
root      12879  0.0  0.0  20164   808 ?        Ss   17:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      12845  0.0  0.0 183048  2144 ?        S    17:24   0:00  \_ /usr/sbin/CROND -n
root      12882  0.0  0.0  20164   964 ?        Ss   17:24   0:00  |   \_ jailshell (pactpay) [12903] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   12903  0.0  0.0  20164   260 ?        S    17:24   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   12907  0.0  0.7 476724 17484 ?        S    17:24   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      12847  0.0  0.0 183048  2144 ?        S    17:24   0:00  \_ /usr/sbin/CROND -n
root      12870  0.0  0.0  20164   964 ?        Ss   17:24   0:00      \_ jailshell (nigeria) [12895] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   12895  0.0  0.0  20164   260 ?        S    17:24   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   12901  0.0  0.6 400652 15932 ?        S    17:24   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0   4388     4 ?        Ss   09:46   0:00 /usr/sbin/acpid
root        569  0.0  0.0 114704     0 ttyS0    Ss+  09:46   0:00 /bin/bash
root        570  0.0  0.0 108296     8 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    622  0.0  0.1  89116  3768 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  12209  0.0  0.3  89380  8696 ?        S    17:23   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    959  0.0  0.4 114016 10428 ?        Ssl  09:46   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    960  0.0  0.0  11604    24 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        961  0.0  0.0 572372   620 ?        Ssl  09:46   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    963  0.0  1.4 5654304 35112 ?       SLsl 09:46   0:14 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0  51508   608 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1096  0.0  0.1  46912  2496 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1097  0.0  0.1  47936  3304 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1098  0.0  0.0  10320   316 ?        S    09:46   0:00  \_ dovecot/anvil
root       1099  0.0  0.0  10452   568 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1100  0.0  0.0  46912  2112 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1101  0.0  0.1  47996  3172 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1108  0.0  0.1  24568  2524 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1113  0.0  0.0  13568   436 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1182  0.0  0.0  41268  1548 ?        S    09:46   0:00  \_ dovecot/auth
root      12763  0.0  0.1  60820  4508 ?        S    17:23   0:00  \_ dovecot/lmtp
root        966  0.0  0.0 445028     0 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    968  0.0  0.0 111608     4 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    969  0.0  0.0  10388    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    970  0.0  0.0 113932     8 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
named       981  0.0  1.5 784388 36876 ?        Ssl  09:46   0:18 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        982  0.1  3.6 1828160 87692 ?       Ssl  09:46   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
root        984  0.0  0.0 386112   408 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  0.0 397344  2420 ?        Ss   09:46   0:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    95789  0.0  0.4 471840  9792 ?        S    16:46   0:01  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    10379  0.1  0.3 471824  9440 ?        S    17:19   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    12092  0.3  0.3 471784  9196 ?        S    17:23   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    12307  0.5  0.3 471784  9196 ?        S    17:23   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    12576  0.8  0.2 470992  6368 ?        S    17:23   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
healtho+  12663 16.8  2.6 455192 65280 ?        S    17:23   0:01  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   12668  0.0  0.2 397064  5272 ?        S    17:23   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  12678 19.3  2.6 455328 65288 ?        S    17:23   0:01  \_ php-fpm: pool health_oyostate_gov_ng
memcach+    994  0.0  0.0 342400     0 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1007  0.0  0.0 392856   440 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root       1012  0.0  0.0 385496   544 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1013  0.0  0.3 290128  7864 ?        Ssl  09:46   0:07 /usr/sbin/rsyslogd -n
root       1014  0.0  1.1 261296 27536 ?        Ss   09:46   0:08 cpsrvd (SSL) - waiting for connections                   
root      12805  0.0  0.0      0     0 ?        Z    17:23   0:00  \_ [whostmgrd - ser] <defunct>
root       1017  0.0  0.0 436392   404 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1018  0.0  0.0 153404   224 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
root       1020  0.0  0.0 111304   356 ?        Ss   09:46   0:03 /usr/sbin/sshd -D
root      12219  0.0  0.1 111304  4268 ?        Ss   17:23   0:00  \_ sshd: [accepted]
root      12669  0.0  0.1 111304  4264 ?        Ss   17:23   0:00  \_ sshd: [accepted]
sshd      12680  0.0  0.1 115644  2624 ?        S    17:23   0:00  |   \_ sshd: [net]
root      12890  0.0  0.1 111304  4272 ?        Ss   17:24   0:00  \_ sshd: [accepted]
sshd      12904  0.0  0.1 115644  2628 ?        S    17:24   0:00      \_ sshd: [net]
cpanelc+   1026  0.0  0.1  10540  3552 ?        Rs   09:46   0:21 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1218  0.0  0.1 157708  2864 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1233  0.0  1.0 410452 25752 ?        Ss   09:46   0:22 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1234  0.0  0.1 387528  3280 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  1.0 262228 24620 ?        Ss   09:46   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1265  0.0  0.4 209456 10800 ?        Ss   09:46   0:02 tailwatchd
root       1267  0.0  0.1 167452  4164 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root      12799  0.0  0.0      0     0 ?        Z    17:23   0:00  \_ [dnsadmin - dorm] <defunct>
root       1713  0.0  0.0 299272   580 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
cpanelp+  12815  0.0  0.0 298280  2356 ?        S    17:24   0:00  \_ php-fpm: pool cpanelphpmyadmin
root       1728  0.0  0.0 130416  1376 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1782  1.9 11.5 1484772 279484 ?      Sl   09:46   8:54 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1968  0.0  0.2 266984  5096 ?        Ss   09:46   0:01 /usr/sbin/httpd -k start
root       1970  0.0  0.0  12804   328 ?        S    09:46   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1971  0.0  0.0  12732   288 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1972  0.0  0.0  12836   340 ?        S    09:46   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1977  0.0  0.0  53340     4 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    86097  0.0  0.8 277564 20564 ?        S    16:26   0:03  \_ /usr/sbin/httpd -k start
nobody    91703  0.0  0.8 277852 20716 ?        S    16:37   0:02  \_ /usr/sbin/httpd -k start
nobody   101394  0.0  0.7 277476 18812 ?        S    16:58   0:01  \_ /usr/sbin/httpd -k start
nobody     5482  0.0  0.7 277516 18688 ?        S    17:09   0:00  \_ /usr/sbin/httpd -k start
nobody     5866  0.0  0.7 277516 18888 ?        S    17:09   0:00  \_ /usr/sbin/httpd -k start
cloudw    12908  0.0  0.7 364868 18972 ?        S    17:24   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody     7490  0.0  0.7 277472 18076 ?        S    17:13   0:00  \_ /usr/sbin/httpd -k start
nobody     7529  0.0  0.7 277512 18592 ?        S    17:13   0:00  \_ /usr/sbin/httpd -k start
nobody     7531  0.0  0.7 277848 19028 ?        S    17:13   0:00  \_ /usr/sbin/httpd -k start
nobody     7532  0.1  0.8 277832 19368 ?        S    17:13   0:00  \_ /usr/sbin/httpd -k start
nobody     7750  0.1  0.7 277516 19088 ?        S    17:13   0:00  \_ /usr/sbin/httpd -k start
nobody     9590  0.1  0.7 277844 18420 ?        S    17:17   0:00  \_ /usr/sbin/httpd -k start
nobody     9591  0.1  0.7 277512 18920 ?        S    17:17   0:00  \_ /usr/sbin/httpd -k start
nobody     9602  0.1  0.7 277520 18404 ?        S    17:17   0:00  \_ /usr/sbin/httpd -k start
nobody    10509  0.1  0.7 277836 18480 ?        S    17:19   0:00  \_ /usr/sbin/httpd -k start
nobody    10776  0.0  0.7 277660 18364 ?        S    17:20   0:00  \_ /usr/sbin/httpd -k start
nobody    10857  0.1  0.7 277464 18024 ?        S    17:20   0:00  \_ /usr/sbin/httpd -k start
nobody    11120  0.0  0.7 277512 17076 ?        S    17:20   0:00  \_ /usr/sbin/httpd -k start
nobody    12348  0.1  0.7 277476 18024 ?        S    17:23   0:00  \_ /usr/sbin/httpd -k start
nobody    12574  0.0  0.6 277176 15912 ?        S    17:23   0:00  \_ /usr/sbin/httpd -k start
nobody    12629  0.1  0.6 277512 16740 ?        S    17:23   0:00  \_ /usr/sbin/httpd -k start
nobody    12641  0.1  0.6 277512 16580 ?        S    17:23   0:00  \_ /usr/sbin/httpd -k start
nobody    12642  0.2  0.7 277452 17024 ?        S    17:23   0:00  \_ /usr/sbin/httpd -k start
nobody    12700  0.0  0.6 277444 16788 ?        S    17:23   0:00  \_ /usr/sbin/httpd -k start
root       2041  0.0  0.4 183152 11508 ?        Ss   09:46   0:23 lfd - sleeping
oysipao+   9063  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+   9089  0.0  0.0   3152    56 ?        S    10:01   0:00  \_ [kworker]
root      28537  0.0  4.8 248100 118060 ?       Ss   10:50   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      32709  0.0  5.6 269720 136768 ?       S    11:00   0:22  \_ spamd child
root      32710  0.0  5.1 258916 125628 ?       S    11:00   0:00  \_ spamd child
root        940  0.0  0.4 1277312 11576 ?       Ssl  17:00   0:00 /usr/bin/checkstatus
root        979  0.0  0.4 1276100 10356 ?       Ssl  17:00   0:00 /usr/bin/cspdaemon
## mysql stats
Uptime: 49167  Threads: 3  Questions: 3600098  Slow queries: 0  Opens: 10456  Flush tables: 1  Open tables: 2000  Queries per second avg: 73.221
*************************** 1. row ***************************
     Id: 54386
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 54388
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-07' LIMIT 1
*************************** 3. row ***************************
     Id: 54392
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 113.95.137.38 TIME_WAIT
      1 114.119.132.104 TIME_WAIT
      1 114.119.140.48 TIME_WAIT
      1 15.235.96.8 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 20.222.66.73 TIME_WAIT
      1 27.46.75.2 TIME_WAIT
      1 85.208.96.212 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 109.105.209.4 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 223.109.252.208 TIME_WAIT
      3 109.105.209.2 TIME_WAIT
      3 109.105.209.5 TIME_WAIT
      5 109.105.209.3 TIME_WAIT
     29 104.248.90.230 TIME_WAIT
     82 157.230.45.41 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 17:24:02 WAT
   Restart Time: Friday, 07-Nov-2025 03:44:42 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 13 hours 39 minutes 19 seconds
   Server load: 0.61 0.72 0.73
   Total accesses: 94080 - Total Traffic: 1.5 GB - Total Duration: 214558136
   CPU Usage: u10.05 s4.59 cu777.15 cs553.9 - 2.74% CPU load
   1.91 requests/sec - 32.1 kB/second - 16.8 kB/request - 2280.59 ms/request
   15 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

K_WW__KWKW_RKKWK.....___R_WR....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID       Acc     M CPU    SS   Req   Dur    Conn Child  Slot      Client      Protocol              VHost                                          Request
   0-0  10509  27/178/5669 K 1.08  0     18  10767517 16.2 0.82  80.94  20.222.66.73    http/1.1 workflow-management-software.co GET /bless5.php HTTP/1.1
   1-0  86097  0/752/5528  _ 11.52 1     391 11953904 0.0  11.32 82.58  66.249.70.35    http/1.1 support.cloudware.ng:443        GET /?c=925932620 HTTP/1.1
   2-0  12348  0/17/5639   W 0.12  0     0   8444324  0.0  0.18  96.85  ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   3-0  5866   2/90/5441   W 1.32  0     0   8543796  66.5 1.60  98.58  66.249.70.39    http/1.1 support.cloudware.ng:443        GET /?c=3841167024 HTTP/1.1
   4-0  7750   0/164/5759  _ 1.58  0     295 7110039  0.0  2.74  89.37  157.230.45.41   http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   5-0  10776  0/61/6147   _ 1.01  0     0   7236971  0.0  0.89  99.03  ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   6-0  10857  1/56/4792   K 1.09  3     427 8985836  35.9 0.93  86.10  66.249.70.33    http/1.1 support.cloudware.ng:443        GET /?c=1796504749 HTTP/1.1
   7-0  11120  0/11/4935   W 0.20  129   0   51655241 0.0  0.25  73.71  173.199.190.174 http/1.1 wmoulms.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323533363131332p2231223
   8-0  101394 28/355/4656 K 5.18  0     4   9774214  15.1 6.55  70.31  20.222.66.73    http/1.1 proxy-subdomains-vhost.localhos GET /bless10.php HTTP/1.1
   9-0  12574  0/0/5209    W 0.00  15    0   8258430  0.0  0.00  102.12 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323533363232372p2231223
   10-0 12629  0/3/4241    _ 0.06  0     24  10358521 0.0  0.07  57.86  128.140.8.200   http/1.1 cloudsms.com.ng:443             GET /cron/process_queue3.php HTTP/1.1
   11-0 91703  0/536/3764  R 9.42  3     0   10411813 0.0  9.21  62.14  105.112.121.157 http/1.1
   12-0 12641  3/3/4001    K 0.05  4     383 6000143  97.3 0.10  67.85  66.249.70.36    http/1.1 support.cloudware.ng:443        GET /?c=1066347238 HTTP/1.1
   13-0 12642  2/5/4224    K 0.04  1     286 6888182  65.9 0.08  71.08  66.249.70.38    http/1.1 support.cloudware.ng:443        GET /?c=1126842189 HTTP/1.1
   14-0 7490   0/81/4565   W 1.43  55    0   6934474  0.0  1.50  67.88  173.199.190.174 http/1.1 wmoulms.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323533363138372p2231223
   15-0 12700  1/2/3835    K 0.00  0     300 8592897  36.1 0.04  55.03  66.249.70.37    http/1.1 support.cloudware.ng:443        GET /?c=1284334192 HTTP/1.1
   16-0 -      0/0/1851    . 0.00  333   0   8550570  0.0  0.00  39.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   17-0 -      0/0/2941    . 0.00  340   4   5866408  0.0  0.00  59.25  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-0 -      0/0/2933    . 0.00  347   0   1888625  0.0  0.00  48.45  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   19-0 -      0/0/1512    . 0.00  164   0   4701388  0.0  0.00  27.48  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   20-0 -      0/0/1366    . 0.00  140   0   2227938  0.0  0.00  17.70  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 7529   0/123/577   _ 1.68  1     34  2603571  0.0  2.35  9.40   116.203.129.16  http/1.1 cloudsms.com.ng:443             GET /cron/process_queue5.php HTTP/1.1
   22-0 5482   0/334/1328  _ 1.97  1     24  1825122  0.0  10.16 22.93  116.203.129.16  http/1.1 cloudsms.com.ng:443             GET /cron/process_queue2.php HTTP/1.1
   23-0 9590   0/107/148   _ 2.23  1     31  584284   0.0  2.39  3.01   116.203.129.16  http/1.1 cloudsms.com.ng:443             GET /cron/process_queue1.php HTTP/1.1
   24-0 7531   0/114/211   R 2.35  20    398 618652   0.0  2.42  4.02   105.112.121.157 http/1.1
   25-0 9591   0/122/443   _ 1.47  0     321 1120005  0.0  1.64  6.68   157.230.45.41   http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   26-0 7532   0/168/180   W 3.29  35    0   123761   0.0  4.33  4.59   173.199.190.174 http/1.1 wmoulms.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323533363230372p2231223
   27-0 9602   0/184/215   R 1.27  1     303 76997    0.0  1.35  1.96   157.230.45.41   http/1.1 health.oyostate.gov.ng:443
   28-0 -      0/0/259     . 0.00  19500 0   143065   0.0  0.00  3.62   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -      0/0/96      . 0.00  19516 0   59764    0.0  0.00  2.78   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -      0/0/13      . 0.00  19441 0   22779    0.0  0.00  9.52   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -      0/0/103     . 0.00  19242 0   179005   0.0  0.00  0.84   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -      0/0/2       . 0.00  19517 0   9851     0.0  0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -      0/0/7       . 0.00  19466 0   21858    0.0  0.00  0.36   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -      0/0/2       . 0.00  19512 0   17699    0.0  0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -      0/0/5       . 0.00  19481 0   19399    0.0  0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -      0/0/4       . 0.00  19490 0   14235    0.0  0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -      0/0/2       . 0.00  19513 0   15595    0.0  0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -      0/0/156     . 0.00  19246 0   148319   0.0  0.00  0.63   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -      0/0/2       . 0.00  19514 0   15338    0.0  0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -      0/0/6       . 0.00  19469 0   21858    0.0  0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -      0/0/208     . 0.00  18645 0   243070   0.0  0.00  2.95   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -      0/0/2       . 0.00  19509 0   19835    0.0  0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -      0/0/2       . 0.00  19510 0   19620    0.0  0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -      0/0/6       . 0.00  19467 0   24371    0.0  0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -      0/0/5       . 0.00  19476 0   19070    0.0  0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -      0/0/6       . 0.00  19471 0   20569    0.0  0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -      0/0/4       . 0.00  19486 0   17777    0.0  0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -      0/0/4       . 0.00  19483 0   16933    0.0  0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -      0/0/2       . 0.00  19511 0   17743    0.0  0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -      0/0/3       . 0.00  19493 0   22693    0.0  0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -      0/0/4       . 0.00  19480 0   22016    0.0  0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -      0/0/4       . 0.00  19489 0   22448    0.0  0.00  0.16   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -      0/0/3       . 0.00  19497 0   9096     0.0  0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -      0/0/6       . 0.00  19485 0   23840    0.0  0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-0 -      0/0/17      . 0.00  19458 0   16331    0.0  0.00  0.47   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-0 -      0/0/184     . 0.00  19278 0   130360   0.0  0.00  0.50   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-0 -      0/0/3       . 0.00  19494 0   22445    0.0  0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   58-0 -      0/0/3       . 0.00  19498 0   7899     0.0  0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   59-0 -      0/0/5       . 0.00  19473 0   23139    0.0  0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-0 -      0/0/139     . 0.00  19143 0   237404   0.0  0.00  1.00   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-0 -      0/0/2       . 0.00  19507 0   2361     0.0  0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   62-0 -      0/0/11      . 0.00  19456 0   9214     0.0  0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   63-0 -      0/0/4       . 0.00  19482 0   8490     0.0  0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   64-0 -      0/0/1       . 0.00  19523 0   0        0.0  0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   65-0 -      0/0/1       . 0.00  19521 0   0        0.0  0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   66-0 -      0/0/2       . 0.00  19505 0   8680     0.0  0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   67-0 -      0/0/1       . 0.00  19520 0   0        0.0  0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   68-0 -      0/0/3       . 0.00  19496 0   742      0.0  0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   69-0 -      0/0/1       . 0.00  19522 11  22       0.0  0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   70-0 -      0/0/2       . 0.00  19503 0   10366    0.0  0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   71-0 -      0/0/65      . 0.00  19316 0   105003   0.0  0.00  1.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   72-0 -      0/0/151     . 0.00  19144 0   218700   0.0  0.00  1.26   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   73-0 -      0/0/2       . 0.00  19502 0   8818     0.0  0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   74-0 -      0/0/4       . 0.00  19492 0   1447     0.0  0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   75-0 -      0/0/2       . 0.00  19508 0   463      0.0  0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   76-0 -      0/0/101     . 0.00  19228 0   159456   0.0  0.00  0.87   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   77-0 -      0/0/6       . 0.00  19477 0   4997     0.0  0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   78-0 -      0/0/338     . 0.00  17720 0   272159   0.0  0.00  5.63   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   79-0 -      0/0/1       . 0.00  19519 0   0        0.0  0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   80-0 -      0/0/2       . 0.00  19501 0   7766     0.0  0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   81-0 -      0/0/3       . 0.00  19484 0   10368    0.0  0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 771
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 18 seconds, (range: 1...71)
   index usage: 13%, cache usage: 18%
   total entries stored since starting: 56091
   total entries replaced since starting: 0
   total entries expired since starting: 55283
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 162 miss
   total removes since starting: 37 hit, 149 miss
Youez - 2016 - github.com/yon3zu
LinuXploit