403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.18.18.txt
 ## swap threshold exceeded
## server overview
2025-11-07.18.18 load[0] mem[58/78] mysql[1/25] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1291         153         100         918         801
Swap:          1999        1632         367
 18:18:01 up  8:31,  0 users,  load average: 0.50, 0.78, 0.80
## system overview
top - 18:18:02 up  8:31,  0 users,  load average: 0.50, 0.78, 0.80
Tasks: 204 total,   4 running, 199 sleeping,   0 stopped,   1 zombie
%Cpu(s): 56.2 us, 43.8 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   138312 free,  1339732 used,   942256 buff/cache
KiB Swap:  2047996 total,   376748 free,  1671248 used.   803020 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1782 mysql     20   0 1484772 283400   3636 S  25.0 11.7  10:07.72 /usr/sbin+
     1 root      20   0   44424   3660   1692 R  12.5  0.2   0:44.61 /usr/lib/+
 41261 nigeria   20   0  400652  15940  10220 S  12.5  0.7   0:00.02 /opt/cpan+
   360 root      20   0   40244   1892   1648 S   6.2  0.1   0:15.22 /usr/lib/+
   503 dbus      20   0   57032   1328    616 S   6.2  0.1   0:16.00 /usr/bin/+
 41268 pactpay   20   0  476460  15968  10408 S   6.2  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.56 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.52 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:36.73 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.48 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:04.02 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:26.98 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.56 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:02.92 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:03.28 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.90 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   382 root      20   0   45352      8      4 S   0.0  0.0   0:00.36 /usr/lib/+
   409 root      16  -4   55532    456    336 S   0.0  0.0   0:02.40 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0   24720   1224    788 D   0.0  0.1   0:06.98 /usr/lib/+
   493 root      20   0  224268   4632   1040 S   0.0  0.2   0:00.46 queueproc+
   494 root      20   0  152780     76     36 S   0.0  0.0   0:00.02 /usr/sbin+
   499 nscd      20   0 1334484   1976    784 S   0.0  0.1   0:11.72 /usr/sbin+
   500 rpc       20   0   69256     24      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0   52852    292    180 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  610540    984    608 S   0.0  0.0   0:04.10 /usr/lib/+
   539 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
   541 root      20   0   21540    388    280 S   0.0  0.0   0:00.72 /usr/sbin+
   551 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  124480    428    296 S   0.0  0.0   0:00.86 /usr/sbin+
   558 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   570 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   622 mailnull  20   0   89116   3840    892 S   0.0  0.2   0:00.47 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:03.35 [loop0]
   677 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   959 systuser  20   0  114016  10688   2628 S   0.0  0.4   0:07.21 /usr/loca+
   960 systuser  20   0   11604     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   961 root      20   0  572372    620    160 S   0.0  0.0   0:02.67 /usr/bin/+
   963 telegraf  20   0 5654304  35232   5772 S   0.0  1.5   0:16.73 /usr/loca+
   964 root      20   0   51508    604    424 S   0.0  0.0   0:00.38 /usr/sbin+
   966 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   968 systuser  20   0  111608      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 systuser  20   0   10388     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   970 systuser  20   0  113932      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   981 named     20   0  784388  37564   2004 S   0.0  1.6   0:20.04 /usr/sbin+
   982 root      20   0 1828076  85688    532 S   0.0  3.5   0:35.59 /usr/loca+
   984 root      20   0  386112    440    344 S   0.0  0.0   0:00.86 php-fpm: +
   992 root      20   0  397344   2420    612 S   0.0  0.1   0:06.99 php-fpm: +
   994 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.66 /usr/bin/+
  1007 root      20   0  392856    432    340 S   0.0  0.0   0:00.83 php-fpm: +
  1012 root      20   0  385496    552    452 S   0.0  0.0   0:00.96 php-fpm: +
  1013 root      20   0  306512   3020   1916 S   0.0  0.1   0:08.01 /usr/sbin+
  1014 root      20   0  261428  27596   4868 S   0.0  1.1   0:09.15 cpsrvd (S+
  1017 root      20   0  436392    404    316 S   0.0  0.0   0:00.98 php-fpm: +
  1018 root      20   0  153404    224    140 S   0.0  0.0   0:00.67 pure-ftpd+
  1020 root      20   0  111304    356    260 S   0.0  0.0   0:03.33 /usr/sbin+
  1026 cpanelc+  20   0   10532   3584   2324 S   0.0  0.1   0:23.87 /usr/loca+
  1096 dovenull  20   0   46912   2484   1908 S   0.0  0.1   0:00.45 dovecot/p+
  1097 dovenull  20   0   47936   3288   1876 S   0.0  0.1   0:00.23 dovecot/i+
  1098 dovecot   20   0   10320    316    200 S   0.0  0.0   0:00.08 dovecot/a+
  1099 root      20   0   10452    568    368 S   0.0  0.0   0:00.38 dovecot/l+
  1100 dovenull  20   0   46912   2332   1736 S   0.0  0.1   0:00.61 dovecot/p+
  1101 dovenull  20   0   47996   3392   1844 S   0.0  0.1   0:00.37 dovecot/i+
  1108 root      20   0   24568   2524    512 S   0.0  0.1   0:00.23 dovecot/c+
  1113 dovecot   20   0   13568    436    220 S   0.0  0.0   0:00.08 dovecot/s+
  1182 dovecot   20   0   41268   1548   1016 S   0.0  0.1   0:00.63 dovecot/a+
  1218 systuser  20   0  157708   2864    816 S   0.0  0.1   0:00.15 SonarPush+
  1233 wp-tool+  20   0  410452  26028   1680 S   0.0  1.1   0:25.14 /usr/bin/+
  1234 wp-tool+  20   0  387528   3508   1652 S   0.0  0.1   0:00.31 /usr/bin/+
  1264 root      20   0  183900   6692   3460 S   0.0  0.3   0:02.73 cpdavd - +
  1265 root      20   0  209456  11128   2400 S   0.0  0.5   0:03.03 tailwatchd
  1267 root      20   0  167452   4116   2748 S   0.0  0.2   0:00.51 dnsadmin +
  1713 root      20   0  299272    632    448 S   0.0  0.0   0:00.82 php-fpm: +
  1728 root      38  18  130416   1376    692 S   0.0  0.1   0:00.07 cpanellog+
  1968 root      20   0  266984   5096    600 S   0.0  0.2   0:01.86 /usr/sbin+
  1970 root      20   0   12888    328    212 S   0.0  0.0   0:02.59 /usr/loca+
  1971 root      20   0   12732    288    212 S   0.0  0.0   0:02.18 /usr/loca+
  1972 root      20   0   12928    340    216 S   0.0  0.0   0:02.38 /usr/loca+
  1977 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  2041 root      20   0  183252  11844   1104 S   0.0  0.5   0:26.85 lfd - sle+
  9063 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  9089 oysipao+  20   0    3152     56     16 S   0.0  0.0   0:00.56 [kworker]
 17438 root      20   0       0      0      0 S   0.0  0.0   0:00.22 [kworker/+
 18035 nobody    20   0  277840  20520   4912 S   0.0  0.8   0:02.46 /usr/sbin+
 26285 nobody    20   0  277512  19024   4740 S   0.0  0.8   0:01.46 /usr/sbin+
 26480 nobody    20   0  277640  20064   4860 S   0.0  0.8   0:01.98 /usr/sbin+
 27782 nobody    20   0  277540  19832   4780 S   0.0  0.8   0:01.70 /usr/sbin+
 28537 root      20   0  248100 106532   1348 S   0.0  4.4   0:05.89 /usr/loca+
 28731 nobody    20   0  277856  20064   4764 S   0.0  0.8   0:01.02 /usr/sbin+
 30350 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 30742 nobody    20   0  277844  19724   4768 S   0.0  0.8   0:01.44 /usr/sbin+
 31582 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 31943 root      20   0 1341636  10692    600 S   0.0  0.4   0:00.06 /usr/bin/+
 31980 root      20   0 1277312  11652    596 S   0.0  0.5   0:00.06 /usr/bin/+
 32709 root      20   0  269720 129552   2484 S   0.0  5.4   0:23.17 spamd chi+
 32710 root      20   0  258916 118844   2784 S   0.0  4.9   0:00.76 spamd chi+
 33863 nobody    20   0  277516  18956   4604 S   0.0  0.8   0:01.30 /usr/sbin+
 34649 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 35648 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 35933 nobody    20   0  277516  18800   4388 S   0.0  0.8   0:00.51 /usr/sbin+
 36146 nobody    20   0  277540  18828   4332 S   0.0  0.8   0:00.55 /usr/sbin+
 37143 nobody    20   0  277828  19564   4524 S   0.0  0.8   0:00.67 /usr/sbin+
 37273 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 37814 cloudw    20   0  471792   9516   5284 S   0.0  0.4   0:00.38 php-fpm: +
 37886 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 38252 nobody    20   0  277876  18676   4256 S   0.0  0.8   0:00.54 /usr/sbin+
 38355 nobody    20   0  277856  18652   4280 S   0.0  0.8   0:00.54 /usr/sbin+
 38455 nobody    20   0  277512  18828   4376 S   0.0  0.8   0:00.49 /usr/sbin+
 38495 nobody    20   0  277840  18836   4164 S   0.0  0.8   0:00.26 /usr/sbin+
 38926 nobody    20   0  277840  18668   4156 S   0.0  0.8   0:00.42 /usr/sbin+
 38927 nobody    20   0  277936  18208   3992 S   0.0  0.8   0:00.38 /usr/sbin+
 39102 cloudw    20   0  471000   8860   5288 S   0.0  0.4   0:00.21 php-fpm: +
 39617 nobody    20   0  277836  18152   4040 S   0.0  0.7   0:00.25 /usr/sbin+
 40117 cloudw    20   0  471784   9200   4972 S   0.0  0.4   0:00.18 php-fpm: +
 40226 cloudw    20   0  471784   9196   4968 S   0.0  0.4   0:00.19 php-fpm: +
 40330 cloudw    20   0  471784   9204   4976 S   0.0  0.4   0:00.18 php-fpm: +
 40343 nobody    20   0  277860  18156   3916 S   0.0  0.8   0:00.12 /usr/sbin+
 40405 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 40453 nobody    20   0  277724  18048   3964 S   0.0  0.7   0:00.13 /usr/sbin+
 41078 nobody    20   0  277228  17320   3820 S   0.0  0.7   0:00.01 /usr/sbin+
 41104 healtho+  20   0  457244  67428   4184 S   0.0  2.8   0:02.29 php-fpm: +
 41133 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 41134 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 41137 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 41138 nobody    20   0  277176  16384   3244 S   0.0  0.7   0:00.00 /usr/sbin+
 41152 healtho+  20   0  451100  61164   4188 S   0.0  2.5   0:00.88 php-fpm: +
 41158 nobody    20   0  277176  16532   3436 S   0.0  0.7   0:00.00 /usr/sbin+
 41159 nigeria   20   0  397064   5272   2264 S   0.0  0.2   0:00.00 php-fpm: +
 41185 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 41194 cloudw    20   0  364868  18972  10792 S   0.0  0.8   0:00.02 /opt/cpan+
 41196 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 41197 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 41198 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 41199 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 41200 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 41201 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 41202 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 41203 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 41204 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 41205 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 41206 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 41208 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 41210 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 41212 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 41213 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 41214 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 41236 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 41237 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 41238 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 41241 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 41242 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 41243 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 41244 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 41245 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 41247 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 41248 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 41249 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 41250 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 41251 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 41258 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 41259 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 41267 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 41275 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
100807 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:46   0:36  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    09:46   0:26  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        660  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [loop0]
root        677  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root     100807  0.0  0.0      0     0 ?        S    16:57   0:00  \_ [kworker/u200:0]
root        539  0.0  0.0      0     0 ?        S    17:00   0:00  \_ [kworker/0:2]
root      17438  0.0  0.0      0     0 ?        S    17:33   0:00  \_ [kworker/1:4]
root      30350  0.0  0.0      0     0 ?        S    17:58   0:00  \_ [kworker/1:3]
root      31582  0.0  0.0      0     0 ?        S    18:00   0:00  \_ [kworker/0:1]
root      34649  0.0  0.0      0     0 ?        S    18:05   0:00  \_ [kworker/u200:1]
root      35648  0.0  0.0      0     0 ?        R    18:07   0:00  \_ [kworker/0:0]
root      37273  0.0  0.0      0     0 ?        S    18:10   0:00  \_ [kworker/0:4]
root      37886  0.0  0.0      0     0 ?        S    18:11   0:00  \_ [kworker/1:2]
root      40405  0.0  0.0      0     0 ?        S    18:16   0:00  \_ [kworker/0:3]
root      41275  0.0  0.0      0     0 ?        S    18:18   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44424  3660 ?        Ss   09:46   0:44 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.0  40244  1892 ?        Ss   09:46   0:15 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45352     8 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   456 ?        S<sl 09:46   0:02 /sbin/auditd
root        489  0.0  0.0  24720  1224 ?        Ss   09:46   0:06 /usr/lib/systemd/systemd-logind
root        493  0.0  0.1 224268  4632 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
root        494  0.0  0.0 152780    76 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        499  0.0  0.0 1334484 1976 ?        Ssl  09:46   0:11 /usr/sbin/nscd
rpc         500  0.0  0.0  69256    24 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        503  0.0  0.0  57032  1328 ?        Ss   09:46   0:16 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        523  0.0  0.0 195208     0 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0  52852   292 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.0 610540   984 ?        Ssl  09:46   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        541  0.0  0.0  21540   388 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        551  0.0  0.0  24208     4 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        552  0.0  0.0 124480   428 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      41196  0.0  0.0 183048  2140 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root      41212  0.0  0.0 113284  1212 ?        Ss   18:18   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      41213  0.0  0.0 108052   356 ?        S    18:18   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      41214  0.0  0.0 113288  1520 ?        S    18:18   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      41276  0.0  0.0 153840  2100 ?        R    18:18   0:00  |               \_ ps auxf
root      41197  0.0  0.0 183048  2148 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root      41247  0.0  0.0  20164   804 ?        Ss   18:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      41198  0.0  0.0 183048  2148 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root      41245  0.0  0.0  20164   808 ?        Ss   18:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      41199  0.0  0.0 183048  2148 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root      41250  0.0  0.0  20164   808 ?        Ss   18:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      41200  0.0  0.0 183048  2148 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root      41237  0.0  0.0  20164   808 ?        Ss   18:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      41201  0.0  0.0 183048  2148 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root      41243  0.0  0.0  20164   804 ?        Ss   18:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      41202  0.0  0.0 183048  2148 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root      41241  0.0  0.0  20164   808 ?        Ss   18:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      41203  0.0  0.0 183048  2148 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root      41238  0.0  0.0  20164   808 ?        Ss   18:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      41204  0.0  0.0 183048  2148 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root      41244  0.0  0.0  20164   804 ?        Ss   18:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      41205  0.0  0.0 183048  2148 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root      41242  0.0  0.0  20164   808 ?        Ss   18:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      41206  0.0  0.0 183048  2148 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root      41248  0.0  0.0  20164   804 ?        Ss   18:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      41208  0.0  0.0 183048  2144 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root      41251  0.0  0.0  20164   964 ?        Ss   18:18   0:00  |   \_ jailshell (pactpay) [41267] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   41267  0.0  0.0  20164   260 ?        S    18:18   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   41268  0.0  0.6 476460 15968 ?        Sl   18:18   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      41210  0.0  0.0 183048  2148 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root      41249  0.0  0.0  20164   968 ?        Ss   18:18   0:00      \_ jailshell (nigeria) [41259] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   41259  0.0  0.0  20164   260 ?        S    18:18   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   41261  0.0  0.6 400652 15940 ?        R    18:18   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0   4388     4 ?        Ss   09:46   0:00 /usr/sbin/acpid
root        569  0.0  0.0 114704     0 ttyS0    Ss+  09:46   0:00 /bin/bash
root        570  0.0  0.0 108296     8 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    622  0.0  0.1  89116  3840 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    959  0.0  0.4 114016 10688 ?        Ssl  09:46   0:07 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    960  0.0  0.0  11604    24 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        961  0.0  0.0 572372   620 ?        Ssl  09:46   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    963  0.0  1.4 5654304 35232 ?       SLsl 09:46   0:16 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0  51508   604 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1096  0.0  0.1  46912  2484 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1097  0.0  0.1  47936  3288 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1098  0.0  0.0  10320   316 ?        S    09:46   0:00  \_ dovecot/anvil
root       1099  0.0  0.0  10452   568 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1100  0.0  0.0  46912  2332 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1101  0.0  0.1  47996  3392 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1108  0.0  0.1  24568  2524 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1113  0.0  0.0  13568   436 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1182  0.0  0.0  41268  1548 ?        S    09:46   0:00  \_ dovecot/auth
root        966  0.0  0.0 445028     0 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    968  0.0  0.0 111608     4 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    969  0.0  0.0  10388    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    970  0.0  0.0 113932     8 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
named       981  0.0  1.5 784388 37564 ?        Ssl  09:46   0:20 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        982  0.1  3.5 1828076 85688 ?       Ssl  09:46   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
root        984  0.0  0.0 386112   440 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  0.0 397344  2420 ?        Ss   09:46   0:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    37814  0.0  0.3 471792  9516 ?        S    18:10   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    39102  0.0  0.3 471000  8860 ?        S    18:13   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    40117  0.1  0.3 471784  9200 ?        S    18:15   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    40226  0.1  0.3 471784  9196 ?        S    18:15   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    40330  0.1  0.3 471784  9204 ?        S    18:15   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
healtho+  41104 17.6  2.7 457244 67428 ?        S    18:17   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  41152 17.6  2.5 451100 61164 ?        S    18:17   0:00  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   41159  0.0  0.2 397064  5272 ?        S    18:17   0:00  \_ php-fpm: pool nigeriadecide_org
memcach+    994  0.0  0.0 342400     0 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1007  0.0  0.0 392856   432 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root       1012  0.0  0.0 385496   552 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1013  0.0  0.1 306512  3020 ?        Ssl  09:46   0:08 /usr/sbin/rsyslogd -n
root       1014  0.0  1.1 261428 27596 ?        Ss   09:46   0:09 cpsrvd (SSL) - waiting for connections                   
root      41137  0.0  0.0      0     0 ?        Z    18:17   0:00  \_ [cpaneld - servi] <defunct>
root       1017  0.0  0.0 436392   404 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1018  0.0  0.0 153404   224 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
root       1020  0.0  0.0 111304   356 ?        Ss   09:46   0:03 /usr/sbin/sshd -D
root      41133  0.0  0.2 157100  5076 ?        Ss   18:17   0:00  \_ sshd: unknown [priv]
sshd      41134  0.0  0.1 115644  2628 ?        S    18:17   0:00  |   \_ sshd: unknown [net]
root      41185  0.0  0.1 111304  4276 ?        Ss   18:18   0:00  \_ sshd: [accepted]
sshd      41258  0.0  0.1 115644  2632 ?        S    18:18   0:00      \_ sshd: [net]
cpanelc+   1026  0.0  0.1  10532  3584 ?        Ss   09:46   0:23 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1218  0.0  0.1 157708  2864 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1233  0.0  1.0 410452 26028 ?        Ss   09:46   0:25 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1234  0.0  0.1 387528  3508 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.2 183900  6692 ?        Ss   09:46   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1265  0.0  0.4 209456 11128 ?        Ss   09:46   0:03 tailwatchd
root       1267  0.0  0.1 167452  4116 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1713  0.0  0.0 299272   632 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1728  0.0  0.0 130416  1376 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1782  1.9 11.7 1484772 283400 ?      Sl   09:46  10:07 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1968  0.0  0.2 266984  5096 ?        Ss   09:46   0:01 /usr/sbin/httpd -k start
root       1970  0.0  0.0  12888   328 ?        S    09:46   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1971  0.0  0.0  12732   288 ?        S    09:46   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1972  0.0  0.0  12928   340 ?        S    09:46   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1977  0.0  0.0  53340     4 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    18035  0.0  0.8 277840 20520 ?        S    17:34   0:02  \_ /usr/sbin/httpd -k start
nobody    26285  0.0  0.7 277512 19024 ?        S    17:50   0:01  \_ /usr/sbin/httpd -k start
nobody    26480  0.1  0.8 277640 20064 ?        S    17:50   0:01  \_ /usr/sbin/httpd -k start
nobody    27782  0.1  0.8 277540 19832 ?        S    17:52   0:01  \_ /usr/sbin/httpd -k start
nobody    28731  0.0  0.8 277856 20064 ?        S    17:54   0:01  \_ /usr/sbin/httpd -k start
nobody    30742  0.1  0.8 277844 19724 ?        S    17:59   0:01  \_ /usr/sbin/httpd -k start
nobody    33863  0.1  0.7 277516 18956 ?        S    18:03   0:01  \_ /usr/sbin/httpd -k start
nobody    35933  0.0  0.7 277516 18800 ?        S    18:07   0:00  \_ /usr/sbin/httpd -k start
nobody    36146  0.0  0.7 277540 18828 ?        S    18:07   0:00  \_ /usr/sbin/httpd -k start
nobody    37143  0.1  0.8 277828 19564 ?        S    18:09   0:00  \_ /usr/sbin/httpd -k start
nobody    38252  0.1  0.7 277876 18676 ?        S    18:11   0:00  \_ /usr/sbin/httpd -k start
nobody    38355  0.1  0.7 277856 18652 ?        S    18:12   0:00  \_ /usr/sbin/httpd -k start
nobody    38455  0.1  0.7 277512 18828 ?        S    18:12   0:00  \_ /usr/sbin/httpd -k start
nobody    38495  0.0  0.7 277840 18836 ?        S    18:12   0:00  \_ /usr/sbin/httpd -k start
cloudw    41194  0.0  0.7 364868 18972 ?        S    18:18   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    38926  0.1  0.7 277840 18668 ?        S    18:13   0:00  \_ /usr/sbin/httpd -k start
nobody    38927  0.1  0.7 277936 18208 ?        S    18:13   0:00  \_ /usr/sbin/httpd -k start
nobody    39617  0.1  0.7 277836 18152 ?        S    18:14   0:00  \_ /usr/sbin/httpd -k start
nobody    40343  0.0  0.7 277860 18156 ?        S    18:15   0:00  \_ /usr/sbin/httpd -k start
nobody    40453  0.1  0.7 277724 18048 ?        S    18:16   0:00  \_ /usr/sbin/httpd -k start
nobody    41078  0.0  0.7 277228 17320 ?        S    18:17   0:00  \_ /usr/sbin/httpd -k start
nobody    41138  0.0  0.6 277176 16384 ?        S    18:17   0:00  \_ /usr/sbin/httpd -k start
nobody    41158  0.0  0.6 277176 16532 ?        S    18:17   0:00  \_ /usr/sbin/httpd -k start
root       2041  0.0  0.4 183252 11844 ?        Ss   09:46   0:26 lfd - sleeping
oysipao+   9063  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+   9089  0.0  0.0   3152    56 ?        S    10:01   0:00  \_ [kworker]
root      28537  0.0  4.4 248100 106532 ?       Ss   10:50   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      32709  0.0  5.3 269720 129552 ?       S    11:00   0:23  \_ spamd child
root      32710  0.0  4.9 258916 118844 ?       S    11:00   0:00  \_ spamd child
root      31943  0.0  0.4 1341636 10692 ?       Ssl  18:00   0:00 /usr/bin/cspdaemon
root      31980  0.0  0.4 1277312 11652 ?       Ssl  18:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 52407  Threads: 3  Questions: 4145133  Slow queries: 0  Opens: 11385  Flush tables: 1  Open tables: 2000  Queries per second avg: 79.095
*************************** 1. row ***************************
     Id: 62430
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: init
   Info: SELECT * FROM `27` WHERE `phone`='2348103275312' LIMIT 1
*************************** 2. row ***************************
     Id: 62433
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 62436
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.154.41 TIME_WAIT
      1 119.28.101.51 TIME_WAIT
      1 162.158.88.99 TIME_WAIT
      1 172.202.118.31 TIME_WAIT
      1 172.213.21.148 TIME_WAIT
      1 172.70.188.101 TIME_WAIT
      1 ::1 TIME_WAIT
      1 43.153.96.233 TIME_WAIT
      1 43.173.176.146 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 129.226.197.194 TIME_WAIT
      2 172.202.113.251 TIME_WAIT
      4 127.0.0.1 TIME_WAIT
     12 104.248.90.230 TIME_WAIT
     77 157.230.45.41 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 18:18:02 WAT
   Restart Time: Friday, 07-Nov-2025 03:44:42 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 14 hours 33 minutes 19 seconds
   Server load: 0.50 0.78 0.80
   Total accesses: 110517 - Total Traffic: 1.7 GB - Total Duration: 248972295
   CPU Usage: u12.41 s5.69 cu912.99 cs652.86 - 3.02% CPU load
   2.11 requests/sec - 34.8 kB/second - 16.5 kB/request - 2252.8 ms/request
   11 requests currently being processed, 0 workers gracefully restarting, 11 idle workers

W_W__K_K_KKW____KW.._KW._.......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur    Conn  Child  Slot      Client      Protocol             VHost                                         Request
   0-0  26285 0/376/6446 W 5.26 123   0   12682487 0.0   8.22  93.38  173.199.190.174 http/1.1 wmoulms.cloudware.ng:443      GET /postnews.php?ARRAY=7o2230223n313736323533393335392p2231223
   1-0  39617 0/65/6113  _ 1.11 1     25  13997011 0.0   0.92  92.37  116.203.134.67  http/1.1 cloudsms.com.ng:443           GET /cron/process_queue4.php HTTP/1.1
   2-0  37143 0/158/6494 W 2.71 0     0   10112090 0.0   3.01  109.12 ::1             http/1.1 chs1.nescrow.com.ng:80        GET //whm-server-status HTTP/1.0
   3-0  40343 0/38/6109  _ 0.31 0     3   9674971  0.0   0.40  109.72 172.202.113.251 http/1.1
   4-0  36146 0/128/6483 _ 2.05 0     294 7852735  0.0   2.56  101.43 172.202.113.251 http/1.1 trainings.cloudware.ng:443    GET / HTTP/1.0
   5-0  40453 2/37/6685  K 0.38 0     270 9162021  64.3  0.56  108.27 66.249.70.35    http/1.1 support.cloudware.ng:443      GET /?c=231093612 HTTP/1.1
   6-0  41078 0/9/5894   _ 0.01 1     25  9782979  0.0   0.08  99.75  116.203.129.16  http/1.1 cloudsms.com.ng:443           GET /cron/process_queue1.php HTTP/1.1
   7-0  38252 1/200/5580 K 1.68 3     300 53872663 36.3  3.09  84.41  66.249.70.36    http/1.1 support.cloudware.ng:443      GET /?c=1202177228 HTTP/1.1
   8-0  26480 0/456/5419 _ 8.22 0     294 10442148 0.0   10.18 85.43  66.249.70.39    http/1.1 support.cloudware.ng:443      GET /?c=3519785243 HTTP/1.1
   9-0  38355 5/195/5774 K 1.57 1     282 10556596 160.4 1.70  109.38 66.249.70.32    http/1.1 support.cloudware.ng:443      GET /?c=325276352 HTTP/1.1
   10-0 41138 1/2/4734   K 0.00 4     39  12680902 0.5   0.01  65.10  102.90.103.118  http/1.1 developers.cloudsms.com.ng:80 GET /api.php?&userid=42366540&password=P%40ssw0rd&type=5&destin
   11-0 30742 0/493/4432 W 5.58 103   0   10647116 0.0   5.05  69.81  173.199.190.174 http/1.1 wmoulms.cloudware.ng:443      GET /postnews.php?ARRAY=7o2230223n313736323533393337392p2231223
   12-0 33863 0/482/4902 _ 3.90 0     297 6860034  0.0   4.02  77.95  157.230.45.41   http/1.1 health.oyostate.gov.ng:443    POST //xmlrpc.php HTTP/1.1
   13-0 38455 0/197/4973 _ 1.54 0     312 8026224  0.0   1.67  82.83  157.230.45.41   http/1.1 health.oyostate.gov.ng:443    POST //xmlrpc.php HTTP/1.1
   14-0 41158 0/2/5162   _ 0.00 1     26  8080388  0.0   0.01  75.62  116.203.129.16  http/1.1 cloudsms.com.ng:443           GET /cron/process_queue2.php HTTP/1.1
   15-0 27782 0/513/4398 _ 6.24 0     0   9506520  0.0   6.01  61.44  ::1             http/1.1 chs1.nescrow.com.ng:80        GET //whm-server-status HTTP/1.0
   16-0 38495 3/69/2065  K 0.89 0     308 8635979  101.3 1.31  41.59  66.249.70.38    http/1.1 support.cloudware.ng:443      GET /?c=2387171183 HTTP/1.1
   17-0 28731 0/254/3336 W 3.86 143   0   7294554  0.0   3.67  64.81  173.199.190.174 http/1.1 wmoulms.cloudware.ng:443      GET /postnews.php?ARRAY=7o2230223n313736323533393333392p2231223
   18-0 -     0/0/3245   . 0.00 216   0   3890308  0.0   0.00  51.24  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   19-0 -     0/0/2021   . 0.00 163   0   4931155  0.0   0.00  35.60  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   20-0 38926 0/94/1705  _ 1.71 0     267 2887150  0.0   1.79  23.57  66.249.70.34    http/1.1 support.cloudware.ng:443      GET /?c=405922138 HTTP/1.1
   21-0 38927 1/149/1131 K 1.14 2     277 3234043  35.6  1.28  16.97  66.249.70.37    http/1.1 support.cloudware.ng:443      GET /?c=2809870286 HTTP/1.1
   22-0 18035 0/734/2159 W 9.62 163   0   3392651  0.0   9.10  33.69  173.199.190.174 http/1.1 wmoulms.cloudware.ng:443      GET /postnews.php?ARRAY=7o2230223n313736323533393331392p2231223
   23-0 -     0/0/425    . 0.00 181   0   1582958  0.0   0.00  6.24   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   24-0 35933 0/270/901  _ 1.33 0     26  2318430  0.0   1.40  17.79  116.203.129.16  http/1.1 cloudsms.com.ng:443           GET /cron/process_queue5.php HTTP/1.1
   25-0 -     0/0/870    . 0.00 172   0   2169947  0.0   0.00  11.69  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   26-0 -     0/0/194    . 0.00 2610  0   566947   0.0   0.00  4.75   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   27-0 -     0/0/684    . 0.00 1388  0   1180692  0.0   0.00  9.11   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   28-0 -     0/0/394    . 0.00 2342  0   597187   0.0   0.00  5.28   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   29-0 -     0/0/100    . 0.00 2936  0   61979    0.0   0.00  2.88   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   30-0 -     0/0/55     . 0.00 2784  0   46973    0.0   0.00  10.31  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   31-0 -     0/0/134    . 0.00 2860  0   194555   0.0   0.00  1.40   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   32-0 -     0/0/3      . 0.00 2949  0   9852     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   33-0 -     0/0/7      . 0.00 22706 0   21858    0.0   0.00  0.36   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   34-0 -     0/0/2      . 0.00 22752 0   17699    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   35-0 -     0/0/5      . 0.00 22721 0   19399    0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   36-0 -     0/0/4      . 0.00 22730 0   14235    0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   37-0 -     0/0/2      . 0.00 22753 0   15595    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   38-0 -     0/0/156    . 0.00 22486 0   148319   0.0   0.00  0.63   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   39-0 -     0/0/2      . 0.00 22754 0   15338    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   40-0 -     0/0/6      . 0.00 22709 0   21858    0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   41-0 -     0/0/208    . 0.00 21885 0   243070   0.0   0.00  2.95   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   42-0 -     0/0/2      . 0.00 22749 0   19835    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00 22750 0   19620    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   44-0 -     0/0/6      . 0.00 22707 0   24371    0.0   0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   45-0 -     0/0/5      . 0.00 22716 0   19070    0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   46-0 -     0/0/6      . 0.00 22711 0   20569    0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   47-0 -     0/0/4      . 0.00 22726 0   17777    0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   48-0 -     0/0/4      . 0.00 22723 0   16933    0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   49-0 -     0/0/2      . 0.00 22751 0   17743    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   50-0 -     0/0/3      . 0.00 22733 0   22693    0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   51-0 -     0/0/4      . 0.00 22720 0   22016    0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   52-0 -     0/0/4      . 0.00 22729 0   22448    0.0   0.00  0.16   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   53-0 -     0/0/3      . 0.00 22737 0   9096     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   54-0 -     0/0/6      . 0.00 22725 0   23840    0.0   0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   55-0 -     0/0/17     . 0.00 22698 0   16331    0.0   0.00  0.47   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   56-0 -     0/0/184    . 0.00 22519 0   130360   0.0   0.00  0.50   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   57-0 -     0/0/3      . 0.00 22734 0   22445    0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   58-0 -     0/0/3      . 0.00 22738 0   7899     0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   59-0 -     0/0/5      . 0.00 22713 0   23139    0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   60-0 -     0/0/139    . 0.00 22383 0   237404   0.0   0.00  1.00   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   61-0 -     0/0/2      . 0.00 22747 0   2361     0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   62-0 -     0/0/11     . 0.00 22696 0   9214     0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   63-0 -     0/0/4      . 0.00 22722 0   8490     0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   64-0 -     0/0/1      . 0.00 22764 0   0        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   65-0 -     0/0/1      . 0.00 22761 0   0        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   66-0 -     0/0/2      . 0.00 22745 0   8680     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   67-0 -     0/0/1      . 0.00 22760 0   0        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   68-0 -     0/0/3      . 0.00 22736 0   742      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   69-0 -     0/0/1      . 0.00 22762 11  22       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00 22743 0   10366    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   71-0 -     0/0/65     . 0.00 22556 0   105003   0.0   0.00  1.01   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   72-0 -     0/0/151    . 0.00 22384 0   218700   0.0   0.00  1.26   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   73-0 -     0/0/2      . 0.00 22742 0   8818     0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   74-0 -     0/0/4      . 0.00 22732 0   1447     0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   75-0 -     0/0/2      . 0.00 22748 0   463      0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   76-0 -     0/0/101    . 0.00 22468 0   159456   0.0   0.00  0.87   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   77-0 -     0/0/6      . 0.00 22717 0   4997     0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   78-0 -     0/0/338    . 0.00 20961 0   272159   0.0   0.00  5.63   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00 22759 0   0        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   80-0 -     0/0/2      . 0.00 22741 0   7766     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   81-0 -     0/0/3      . 0.00 22724 0   10368    0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 808
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 14 seconds, (range: 0...55)
   index usage: 14%, cache usage: 19%
   total entries stored since starting: 63906
   total entries replaced since starting: 0
   total entries expired since starting: 63055
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 171 miss
   total removes since starting: 43 hit, 181 miss
Youez - 2016 - github.com/yon3zu
LinuXploit