403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.13.03.txt
 ## swap threshold exceeded
## server overview
2025-11-07.13.03 load[0] mem[57/70] mysql[1/25] httpd[10]
              total        used        free      shared  buff/cache   available
Mem:           2363        1269          72          29        1021         880
Swap:          1999        1463         536
 13:03:01 up  3:16,  0 users,  load average: 0.08, 0.11, 0.24
## system overview
top - 13:03:01 up  3:16,  0 users,  load average: 0.08, 0.11, 0.24
Tasks: 200 total,   8 running, 190 sleeping,   0 stopped,   2 zombie
%Cpu(s): 68.8 us, 25.0 sy,  0.0 ni,  6.2 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    73412 free,  1301108 used,  1045780 buff/cache
KiB Swap:  2047996 total,   549300 free,  1498696 used.   900400 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1782 mysql     20   0 1469608 261064   4212 S  81.2 10.8   4:19.48 /usr/sbin+
 88394 nigeria   20   0  400652  15940  10220 R  18.8  0.7   0:00.04 /opt/cpan+
 88418 root      20   0  219372  18160   2288 S  12.5  0.8   0:00.02 tailwatch+
 88420 root      20   0  108108    620    524 R  12.5  0.0   0:00.02 /bin/dmesg
   489 root      20   0   24720   1224    788 S   6.2  0.1   0:02.72 /usr/lib/+
     1 root      20   0   44424   3648   1692 S   0.0  0.2   0:17.51 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.15 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.16 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:12.85 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.14 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.54 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:22.10 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.21 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:02.22 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:02.49 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:00.79 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40244   3636   3388 S   0.0  0.2   0:05.83 /usr/lib/+
   382 root      20   0   45352      8      4 S   0.0  0.0   0:00.36 /usr/lib/+
   409 root      16  -4   55532    452    332 S   0.0  0.0   0:00.90 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   493 root      20   0  224268   4860   1276 S   0.0  0.2   0:00.29 queueproc+
   494 root      20   0  152780     68     28 S   0.0  0.0   0:00.00 /usr/sbin+
   499 nscd      20   0 1334484   1972    764 S   0.0  0.1   0:03.80 /usr/sbin+
   500 rpc       20   0   69256     24      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   503 dbus      20   0   57032   1328    616 S   0.0  0.1   0:06.23 /usr/bin/+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0   52852    300    204 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  610540    992    608 S   0.0  0.0   0:01.60 /usr/lib/+
   541 root      20   0   21540    388    280 S   0.0  0.0   0:00.27 /usr/sbin+
   551 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  124480    428    296 S   0.0  0.0   0:00.33 /usr/sbin+
   558 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   570 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   622 mailnull  20   0   89116   3660    748 S   0.0  0.2   0:00.19 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:03.12 [loop0]
   677 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   959 systuser  20   0  114016  10232   2596 S   0.0  0.4   0:02.89 /usr/loca+
   960 systuser  20   0   11604     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   961 root      20   0  572372    624    164 S   0.0  0.0   0:01.10 /usr/bin/+
   963 telegraf  20   0 5654048  34652   5960 S   0.0  1.4   0:06.75 /usr/loca+
   964 root      20   0   51508    460    296 S   0.0  0.0   0:00.17 /usr/sbin+
   966 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   968 systuser  20   0  111608      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 systuser  20   0   10388     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   970 systuser  20   0  113932      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   981 named     20   0  785392  28500   1996 S   0.0  1.2   0:08.19 /usr/sbin+
   982 root      20   0 1828076 257052    532 S   0.0 10.6   0:33.90 /usr/loca+
   984 root      20   0  386112    416    324 S   0.0  0.0   0:00.40 php-fpm: +
   992 root      20   0  397344   2412    608 S   0.0  0.1   0:02.71 php-fpm: +
   994 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.25 /usr/bin/+
  1007 root      20   0  392856    396    312 S   0.0  0.0   0:00.40 php-fpm: +
  1012 root      20   0  385496    352    252 S   0.0  0.0   0:00.41 php-fpm: +
  1013 root      20   0  249168   3612   2976 S   0.0  0.1   0:03.04 /usr/sbin+
  1014 root      20   0  261032  29852   7516 S   0.0  1.2   0:03.51 cpsrvd (S+
  1017 root      20   0  436392    364    276 S   0.0  0.0   0:00.50 php-fpm: +
  1018 root      20   0  153404    224    140 S   0.0  0.0   0:00.25 pure-ftpd+
  1020 root      20   0  111304    356    260 S   0.0  0.0   0:01.25 /usr/sbin+
  1026 cpanelc+  20   0   10540   3580   2320 S   0.0  0.1   0:08.98 /usr/loca+
  1096 dovenull  20   0   46912   1328    792 S   0.0  0.1   0:00.17 dovecot/p+
  1097 dovenull  20   0   47576   2744   1644 S   0.0  0.1   0:00.09 dovecot/i+
  1098 dovecot   20   0   10320    316    200 S   0.0  0.0   0:00.03 dovecot/a+
  1099 root      20   0   10452    568    368 S   0.0  0.0   0:00.15 dovecot/l+
  1100 dovenull  20   0   46912   2164   1596 S   0.0  0.1   0:00.27 dovecot/p+
  1101 dovenull  20   0   47596   2976   1784 S   0.0  0.1   0:00.16 dovecot/i+
  1108 root      20   0   24564   2368    496 S   0.0  0.1   0:00.10 dovecot/c+
  1113 dovecot   20   0   13568    436    220 S   0.0  0.0   0:00.03 dovecot/s+
  1182 dovecot   20   0   41136   1464   1008 S   0.0  0.1   0:00.29 dovecot/a+
  1218 systuser  20   0  157708   2864    816 S   0.0  0.1   0:00.08 SonarPush+
  1233 wp-tool+  20   0  410452  26032   1684 S   0.0  1.1   0:09.76 /usr/bin/+
  1234 wp-tool+  20   0  387528   3492   1636 S   0.0  0.1   0:00.19 /usr/bin/+
  1264 root      20   0  183900   6692   3460 S   0.0  0.3   0:00.77 cpdavd - +
  1265 root      20   0  209472  10604   2048 S   0.0  0.4   0:01.52 tailwatchd
  1267 root      20   0  167452   1200    652 S   0.0  0.0   0:00.21 dnsadmin +
  1713 root      20   0  299272    632    448 S   0.0  0.0   0:00.32 php-fpm: +
  1728 root      38  18  130416   1364    692 S   0.0  0.1   0:00.02 cpanellog+
  1968 root      20   0  266984   5096    600 S   0.0  0.2   0:00.72 /usr/sbin+
  1970 root      20   0   12816    328    212 S   0.0  0.0   0:00.97 /usr/loca+
  1971 root      20   0   12732    288    212 S   0.0  0.0   0:00.82 /usr/loca+
  1972 root      20   0   12848    340    216 S   0.0  0.0   0:00.90 /usr/loca+
  1977 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  2041 root      20   0  181920   9396   1104 S   0.0  0.4   0:10.30 lfd - sle+
  9063 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  9089 oysipao+  20   0    3152     56     16 S   0.0  0.0   0:00.21 [kworker]
 24354 root      30  10  132964      4      0 S   0.0  0.0   0:00.00 ConfigSer+
 24364 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 116+
 28537 root      20   0  248100 118080   1388 S   0.0  4.9   0:03.65 /usr/loca+
 32709 root      20   0  266976 133712   3032 S   0.0  5.5   0:03.68 spamd chi+
 32710 root      20   0  249228 118356    624 S   0.0  4.9   0:00.04 spamd chi+
 55186 worencom  20   0   38468   2540   1532 S   0.0  0.1   0:00.02 dovecot/i+
 63858 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 64585 nobody    20   0  277528  20356   4840 S   0.0  0.8   0:02.14 /usr/sbin+
 72680 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 73247 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 77172 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 78020 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 78247 nobody    20   0  277856  19848   4620 S   0.0  0.8   0:00.93 /usr/sbin+
 78254 nobody    20   0  277564  19440   4520 S   0.0  0.8   0:01.01 /usr/sbin+
 78323 nobody    20   0  277844  19592   4708 S   0.0  0.8   0:00.97 /usr/sbin+
 78577 nobody    20   0  277560  19496   4656 S   0.0  0.8   0:01.03 /usr/sbin+
 78598 nobody    20   0  277848  19364   4428 S   0.0  0.8   0:00.83 /usr/sbin+
 78865 nobody    20   0  277564  19760   4584 S   0.0  0.8   0:00.82 /usr/sbin+
 78949 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 80111 nobody    20   0  277844  19488   4600 S   0.0  0.8   0:00.88 /usr/sbin+
 80244 nobody    20   0  277520  19016   4452 S   0.0  0.8   0:00.73 /usr/sbin+
 80522 nobody    20   0  277536  19344   4572 S   0.0  0.8   0:00.77 /usr/sbin+
 81548 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 81789 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 84717 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 84730 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 85251 nobody    20   0  277520  18100   3940 S   0.0  0.7   0:00.20 /usr/sbin+
 85807 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 87186 root      20   0 1341636  10460    600 S   0.0  0.4   0:00.04 /usr/bin/+
 87220 root      20   0 1277312  15196    596 S   0.0  0.6   0:00.06 /usr/bin/+
 87808 nobody    20   0  277844  17524   3672 S   0.0  0.7   0:00.04 /usr/sbin+
 87934 nobody    20   0  277652  17248   3628 S   0.0  0.7   0:00.01 /usr/sbin+
 87937 nobody    20   0  277520  17204   3624 S   0.0  0.7   0:00.06 /usr/sbin+
 87938 nobody    20   0  277844  17340   3592 S   0.0  0.7   0:00.03 /usr/sbin+
 87951 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 87966 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 87967 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 88188 root      20   0  261032  24512   2144 S   0.0  1.0   0:00.00 cpaneld -+
 88198 nigeria   20   0  397064   5272   2268 S   0.0  0.2   0:00.01 php-fpm: +
 88202 root      20   0  261032  24512   2144 S   0.0  1.0   0:00.00 webmaild +
 88231 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 88293 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 88307 salutem   20   0  401800  16036   3804 S   0.0  0.7   0:00.09 php-fpm: +
 88315 nigeria   20   0  397064   5272   2268 S   0.0  0.2   0:00.00 php-fpm: +
 88321 nobody    20   0  277176  15912   2840 S   0.0  0.7   0:00.00 /usr/sbin+
 88324 root      20   0  111304   4440   3404 S   0.0  0.2   0:00.00 sshd: [ac+
 88325 sshd      20   0  115644   2628   1560 R   0.0  0.1   0:00.00 sshd: [ne+
 88326 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 88328 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 88329 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 88330 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 88331 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 88335 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 88336 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 88338 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 88341 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 88342 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 88344 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 88352 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 88354 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 88357 cloudw    20   0  350316  16880  10452 S   0.0  0.7   0:00.01 /opt/cpan+
 88362 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 88364 root      20   0   20164    984    784 R   0.0  0.0   0:00.00 /usr/loca+
 88366 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 88367 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 88368 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 88382 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 88385 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 88389 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 88412 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 88414 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 88421 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 88423 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 88424 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 88425 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [setupvir+
 88426 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 88427 cloudsms  20   0  113284    180      0 R   0.0  0.0   0:00.00 /usr/loca+
 88428 cloudsms  20   0  113284    184      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    09:46   0:12  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:46   0:22  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        660  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [loop0]
root        677  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      63858  0.0  0.0      0     0 ?        S    12:11   0:00  \_ [kworker/u200:0]
root      72680  0.0  0.0      0     0 ?        S    12:29   0:00  \_ [kworker/0:3]
root      73247  0.0  0.0      0     0 ?        S    12:30   0:00  \_ [kworker/1:3]
root      77172  0.0  0.0      0     0 ?        S    12:39   0:00  \_ [kworker/0:1]
root      78020  0.0  0.0      0     0 ?        S    12:41   0:00  \_ [kworker/1:2]
root      78949  0.0  0.0      0     0 ?        S    12:43   0:00  \_ [kworker/0:4]
root      81548  0.0  0.0      0     0 ?        S    12:49   0:00  \_ [kworker/1:1]
root      81789  0.0  0.0      0     0 ?        S    12:49   0:00  \_ [kworker/u200:1]
root      84717  0.0  0.0      0     0 ?        S    12:56   0:00  \_ [kworker/0:2]
root      84730  0.0  0.0      0     0 ?        S    12:56   0:00  \_ [kworker/1:4]
root      85807  0.0  0.0      0     0 ?        S    12:58   0:00  \_ [kworker/1:5]
root      88412  0.0  0.0      0     0 ?        S    13:03   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44424  3648 ?        Ss   09:46   0:17 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  40244  3636 ?        Ss   09:46   0:05 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45352     8 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   452 ?        S<sl 09:46   0:00 /sbin/auditd
root        489  0.0  0.0  24720  1224 ?        Ss   09:46   0:02 /usr/lib/systemd/systemd-logind
root        493  0.0  0.2 224268  4860 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
root        494  0.0  0.0 152780    68 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        499  0.0  0.0 1334484 1972 ?        Ssl  09:46   0:03 /usr/sbin/nscd
rpc         500  0.0  0.0  69256    24 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        503  0.0  0.0  57032  1328 ?        Ss   09:46   0:06 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        523  0.0  0.0 195208     0 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0  52852   300 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.0 610540   992 ?        Ssl  09:46   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        541  0.0  0.0  21540   388 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        551  0.0  0.0  24208     4 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        552  0.0  0.0 124480   428 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      88326  0.0  0.0 183048  2136 ?        S    13:03   0:00  \_ /usr/sbin/CROND -n
root      88341  0.0  0.0 113284  1208 ?        Ss   13:03   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      88342  0.0  0.0 108052   356 ?        S    13:03   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      88344  0.0  0.0 113288  1520 ?        S    13:03   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      88429  0.0  0.0 153840  2092 ?        R    13:03   0:00  |               \_ ps auxf
root      88328  0.0  0.0 183048  2140 ?        S    13:03   0:00  \_ /usr/sbin/CROND -n
root      88354  0.0  0.0  20164   988 ?        Ss   13:03   0:00  |   \_ jailshell (cloudsms) [88421] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  88421  0.0  0.0  20164   264 ?        S    13:03   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  88423  0.0  0.0 113284  1208 ?        S    13:03   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms  88427  0.0  0.0 113284   180 ?        R    13:03   0:00  |               \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      88329  0.0  0.0 183048  2140 ?        S    13:03   0:00  \_ /usr/sbin/CROND -n
root      88366  0.0  0.0  20164   804 ?        Ss   13:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      88330  0.0  0.0 183048  2140 ?        S    13:03   0:00  \_ /usr/sbin/CROND -n
root      88352  0.0  0.0  20164   984 ?        Ss   13:03   0:00  |   \_ jailshell (cloudsms) [88424] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  88424  0.0  0.0  20164   260 ?        S    13:03   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  88426  0.0  0.0 113284  1212 ?        S    13:03   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  88428  0.0  0.1 131852  3316 ?        R    13:03   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/bin/php -q -f /home/cloudsms/public_html/massmailer/cron.php
root      88331  0.0  0.0 183048  2140 ?        S    13:03   0:00  \_ /usr/sbin/CROND -n
root      88368  0.0  0.0  20164   808 ?        Ss   13:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      88335  0.0  0.0 183048  2140 ?        S    13:03   0:00  \_ /usr/sbin/CROND -n
root      88364  0.0  0.0  20164   984 ?        Ss   13:03   0:00  |   \_ jailshell (cloudsms) [88430] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  88430  0.0  0.0  20164   260 ?        S    13:03   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  88432  0.0  0.0  20164   260 ?        R    13:03   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      88336  0.0  0.0 183048  2144 ?        S    13:03   0:00  \_ /usr/sbin/CROND -n
root      88362  0.0  0.0  20164   964 ?        Ss   13:03   0:00  |   \_ jailshell (pactpay) [88382] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   88382  0.0  0.0  20164   260 ?        S    13:03   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   88389  0.0  0.7 476724 17484 ?        S    13:03   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      88338  0.0  0.0 183048  2140 ?        S    13:03   0:00  \_ /usr/sbin/CROND -n
root      88367  0.0  0.0  20164   968 ?        Ss   13:03   0:00      \_ jailshell (nigeria) [88385] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   88385  0.0  0.0  20164   264 ?        S    13:03   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   88394  0.0  0.6 400652 15940 ?        S    13:03   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0   4388     4 ?        Ss   09:46   0:00 /usr/sbin/acpid
root        569  0.0  0.0 114704     0 ttyS0    Ss+  09:46   0:00 /bin/bash
root        570  0.0  0.0 108296     8 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    622  0.0  0.1  89116  3660 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    959  0.0  0.4 114016 10232 ?        Ssl  09:46   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    960  0.0  0.0  11604    24 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        961  0.0  0.0 572372   624 ?        Ssl  09:46   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    963  0.0  1.4 5654048 34652 ?       SLsl 09:46   0:06 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0  51508   460 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1096  0.0  0.0  46912  1328 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1097  0.0  0.1  47576  2744 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1098  0.0  0.0  10320   316 ?        S    09:46   0:00  \_ dovecot/anvil
root       1099  0.0  0.0  10452   568 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1100  0.0  0.0  46912  2164 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1101  0.0  0.1  47596  2976 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1108  0.0  0.0  24564  2368 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1113  0.0  0.0  13568   436 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1182  0.0  0.0  41136  1464 ?        S    09:46   0:00  \_ dovecot/auth
worencom  55186  0.0  0.1  38468  2540 ?        S    11:53   0:00  \_ dovecot/imap
root        966  0.0  0.0 445028     0 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    968  0.0  0.0 111608     4 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    969  0.0  0.0  10388    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    970  0.0  0.0 113932     8 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
named       981  0.0  1.1 785392 28500 ?        Ssl  09:46   0:08 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        982  0.2 10.6 1828076 257052 ?      Ssl  09:46   0:33 /usr/local/cpanel/3rdparty/bin/clamd -F
root        984  0.0  0.0 386112   416 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  0.0 397344  2412 ?        Ss   09:46   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   88198  0.0  0.2 397064  5272 ?        S    13:02   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria   88315  0.0  0.2 397064  5272 ?        S    13:02   0:00  \_ php-fpm: pool nigeriadecide_org
memcach+    994  0.0  0.0 342400     0 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1007  0.0  0.0 392856   396 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
salutem   88307  1.8  0.6 401800 16036 ?        S    13:02   0:00  \_ php-fpm: pool salutem_com_ng
root       1012  0.0  0.0 385496   352 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1013  0.0  0.1 249168  3612 ?        Ssl  09:46   0:03 /usr/sbin/rsyslogd -n
root       1014  0.0  1.2 261032 29852 ?        Ss   09:46   0:03 cpsrvd (SSL) - waiting for connections                   
root      88188  0.0  0.0      0     0 ?        R    13:02   0:00  \_ [cpaneld - servi]
root      88202  0.0  1.0 261032 24512 ?        S    13:02   0:00  \_ webmaild - serving 104.248.90.230
root      88293  0.0  0.0      0     0 ?        Z    13:02   0:00  \_ [cpaneld - servi] <defunct>
root       1017  0.0  0.0 436392   364 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1018  0.0  0.0 153404   224 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
root       1020  0.0  0.0 111304   356 ?        Ss   09:46   0:01 /usr/sbin/sshd -D
root      87951  0.0  0.1 111304  4264 ?        Ss   13:02   0:00  \_ sshd: [accepted]
root      87966  0.0  0.1 111304  4264 ?        Ss   13:02   0:00  \_ sshd: [accepted]
sshd      87967  0.0  0.1 115644  2632 ?        S    13:02   0:00  |   \_ sshd: [net]
root      88231  0.0  0.1 111304  4272 ?        Ss   13:02   0:00  \_ sshd: [accepted]
root      88324  0.0  0.1 111304  4440 ?        Ss   13:03   0:00  \_ sshd: [accepted]
sshd      88325  0.0  0.1 115644  2628 ?        S    13:03   0:00      \_ sshd: [net]
cpanelc+   1026  0.0  0.1  10540  3580 ?        Ss   09:46   0:08 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1218  0.0  0.1 157708  2864 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1233  0.0  1.0 410452 26032 ?        Ss   09:46   0:09 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1234  0.0  0.1 387528  3492 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.2 183900  6692 ?        Ss   09:46   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1265  0.0  0.4 209472 10604 ?        Ss   09:46   0:01 tailwatchd
root      88418  0.0  0.7 221920 18648 ?        D    13:03   0:00  \_ tailwatchd - chkservd - queueprocd check
root      88431  0.0  0.7 221920 18648 ?        R    13:03   0:00      \_ tailwatchd - chkservd - queueprocd check
root       1267  0.0  0.0 167452  1200 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1713  0.0  0.0 299272   632 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1728  0.0  0.0 130416  1364 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1782  2.2 10.7 1469608 261064 ?      Sl   09:46   4:19 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1968  0.0  0.2 266984  5096 ?        Ss   09:46   0:00 /usr/sbin/httpd -k start
root       1970  0.0  0.0  12816   328 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1971  0.0  0.0  12732   288 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1972  0.0  0.0  12848   340 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1977  0.0  0.0  53340     4 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    64585  0.0  0.8 277528 20356 ?        S    12:12   0:02  \_ /usr/sbin/httpd -k start
nobody    78247  0.0  0.8 277856 19848 ?        S    12:41   0:00  \_ /usr/sbin/httpd -k start
nobody    78254  0.0  0.8 277564 19440 ?        S    12:41   0:01  \_ /usr/sbin/httpd -k start
nobody    78323  0.0  0.8 277844 19592 ?        S    12:41   0:00  \_ /usr/sbin/httpd -k start
nobody    78577  0.0  0.8 277560 19496 ?        S    12:42   0:01  \_ /usr/sbin/httpd -k start
nobody    78598  0.0  0.8 277848 19364 ?        S    12:42   0:00  \_ /usr/sbin/httpd -k start
nobody    78865  0.0  0.8 277564 19760 ?        S    12:42   0:00  \_ /usr/sbin/httpd -k start
nobody    80111  0.0  0.8 277844 19488 ?        S    12:45   0:00  \_ /usr/sbin/httpd -k start
nobody    80244  0.0  0.7 277520 19016 ?        S    12:45   0:00  \_ /usr/sbin/httpd -k start
nobody    80522  0.0  0.7 277536 19344 ?        S    12:46   0:00  \_ /usr/sbin/httpd -k start
nobody    85251  0.0  0.7 277520 18100 ?        S    12:56   0:00  \_ /usr/sbin/httpd -k start
nobody    87808  0.0  0.7 277844 17524 ?        S    13:01   0:00  \_ /usr/sbin/httpd -k start
nobody    87934  0.0  0.7 277652 17248 ?        S    13:02   0:00  \_ /usr/sbin/httpd -k start
nobody    87937  0.1  0.7 277520 17204 ?        S    13:02   0:00  \_ /usr/sbin/httpd -k start
nobody    87938  0.0  0.7 277844 17340 ?        S    13:02   0:00  \_ /usr/sbin/httpd -k start
nobody    88321  0.0  0.6 277632 16340 ?        S    13:02   0:00  \_ /usr/sbin/httpd -k start
cloudw    88357  1.0  0.6 350316 16880 ?        R    13:03   0:00      \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
root       2041  0.0  0.3 181920  9396 ?        Ss   09:46   0:10 lfd - sleeping
oysipao+   9063  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+   9089  0.0  0.0   3152    56 ?        S    10:01   0:00  \_ [kworker]
root      24354  0.0  0.0 132964     4 ?        SN   10:42   0:00 ConfigServer Version Check
root      24364  0.0  0.0 108056     0 ?        SN   10:42   0:00  \_ sleep 11664
root      28537  0.0  4.8 248100 118080 ?       Ss   10:50   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      32709  0.0  5.5 266976 133712 ?       S    11:00   0:03  \_ spamd child
root      32710  0.0  4.8 249228 118356 ?       S    11:00   0:00  \_ spamd child
root      87186  0.0  0.4 1341636 10460 ?       Ssl  13:00   0:00 /usr/bin/cspdaemon
root      87220  0.0  0.6 1277312 15196 ?       Ssl  13:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 33506  Threads: 5  Questions: 1794522  Slow queries: 0  Opens: 6012  Flush tables: 1  Open tables: 2000  Queries per second avg: 53.558
*************************** 1. row ***************************
     Id: 27072
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 27077
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 27080
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 1
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 4. row ***************************
     Id: 27082
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 27083
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 148.113.128.39 TIME_WAIT
      1 157.55.39.8 TIME_WAIT
      1 ::1 TIME_WAIT
      1 47.128.121.85 TIME_WAIT
      1 51.161.65.62 TIME_WAIT
      1 54.39.136.221 TIME_WAIT
      1 54.39.89.201 TIME_WAIT
      1 66.249.70.38 TIME_WAIT
      1 66.249.70.39 TIME_WAIT
      1 68.221.75.27 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 13:03:02 WAT
   Restart Time: Friday, 07-Nov-2025 03:44:42 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 9 hours 18 minutes 19 seconds
   Server load: 0.08 0.11 0.24
   Total accesses: 42119 - Total Traffic: 578.8 MB - Total Duration: 64527231
   CPU Usage: u7.78 s3.39 cu280.58 cs185.4 - 1.42% CPU load
   1.26 requests/sec - 17.7 kB/second - 14.1 kB/request - 1532.02 ms/request
   9 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

RK_R_K_RW_KK_R_..._.............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur    Conn Child  Slot     Client     Protocol          VHost                                       Request
   0-0  78865 0/196/3003 R 3.57 16   1   1417347  0.0  3.73  36.52 47.128.121.85  http/1.1
   1-0  85251 4/48/2903  K 1.09 0    7   1448779  25.6 1.36  39.19 147.135.253.34 http/1.1 nigeriadecide.org:443    GET /polling_unit_category.php?state=Katsina&lga=Kankara&ward=W
   2-0  80111 0/180/2886 _ 3.70 0    7   1280134  0.0  3.70  35.47 54.225.181.161 http/1.1 nigeriadecide.org:443    GET /polling_unit_category.php/blog/2019elections/assets/js/pol
   3-0  80244 0/185/2705 R 3.15 89   341 1275377  0.0  2.90  43.97 102.90.98.3    http/1.1
   4-0  87808 0/9/2711   _ 0.16 1    25  1241543  0.0  2.07  36.49 116.203.134.67 http/1.1 cloudsms.com.ng:443      GET /cron/process_queue4.php HTTP/1.1
   5-0  80522 1/267/3118 K 3.04 2    301 1248623  36.5 3.04  43.53 66.249.70.32   http/1.1 support.cloudware.ng:443 GET /?c=1447879440 HTTP/1.1
   6-0  78577 0/221/2379 _ 4.60 1    23  1141569  0.0  5.29  41.75 116.203.129.16 http/1.1 cloudsms.com.ng:443      GET /cron/process_queue2.php HTTP/1.1
   7-0  87934 0/7/2108   R 0.01 5    1   44409066 0.0  0.07  29.16 62.73.93.254   http/1.1
   8-0  87937 0/12/2204  W 0.26 0    0   943210   0.0  0.28  25.28 ::1            http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   9-0  78247 0/288/2293 _ 4.49 1    23  913133   0.0  3.68  27.27 128.140.8.200  http/1.1 cloudsms.com.ng:443      GET /cron/process_queue3.php HTTP/1.1
   10-0 87938 2/7/1946   K 0.12 4    299 835945   65.8 0.09  21.69 66.249.70.34   http/1.1 support.cloudware.ng:443 GET /?c=2620366737 HTTP/1.1
   11-0 88321 1/1/1633   K 0.00 0    369 722041   36.0 0.04  24.27 66.249.70.38   http/1.1 support.cloudware.ng:443 GET /?c=3375401137 HTTP/1.1
   12-0 78254 0/205/1749 _ 4.39 0    0   724141   0.0  5.39  23.72 ::1            http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   13-0 64585 0/557/1596 R 9.71 91   396 992723   0.0  12.29 29.88 102.90.98.3    http/1.1
   14-0 78598 0/243/2017 _ 2.90 0    397 853271   0.0  3.92  26.07 66.249.70.39   http/1.1 support.cloudware.ng:443 GET /?c=3586906274 HTTP/1.1
   15-0 -     0/0/1384   . 0.00 1231 4   648335   0.0  0.00  15.14 ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   16-0 -     0/0/293    . 0.00 1163 0   153126   0.0  0.00  3.74  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   17-0 -     0/0/1157   . 0.00 41   0   647662   0.0  0.00  16.82 ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   18-0 78323 0/199/843  _ 4.34 0    358 287332   0.0  4.32  9.66  66.249.70.33   http/1.1 support.cloudware.ng:443 GET /?c=1721138959 HTTP/1.1
   19-0 -     0/0/95     . 0.00 3844 0   60658    0.0  0.00  1.43  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   20-0 -     0/0/94     . 0.00 3815 0   71360    0.0  0.00  1.35  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   21-0 -     0/0/194    . 0.00 2988 0   225947   0.0  0.00  1.79  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   22-0 -     0/0/765    . 0.00 1255 0   380252   0.0  0.00  8.43  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   23-0 -     0/0/13     . 0.00 3808 0   32567    0.0  0.00  0.18  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   24-0 -     0/0/9      . 0.00 3814 0   29442    0.0  0.00  0.16  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   25-0 -     0/0/8      . 0.00 3831 0   29769    0.0  0.00  0.23  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   26-0 -     0/0/12     . 0.00 3791 0   24649    0.0  0.00  0.26  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   27-0 -     0/0/31     . 0.00 3827 0   34716    0.0  0.00  0.61  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   28-0 -     0/0/259    . 0.00 3840 0   143065   0.0  0.00  3.62  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   29-0 -     0/0/96     . 0.00 3856 0   59764    0.0  0.00  2.78  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   30-0 -     0/0/13     . 0.00 3781 0   22779    0.0  0.00  9.52  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   31-0 -     0/0/103    . 0.00 3582 0   179005   0.0  0.00  0.84  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   32-0 -     0/0/2      . 0.00 3857 0   9851     0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   33-0 -     0/0/7      . 0.00 3806 0   21858    0.0  0.00  0.36  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   34-0 -     0/0/2      . 0.00 3852 0   17699    0.0  0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   35-0 -     0/0/5      . 0.00 3821 0   19399    0.0  0.00  0.08  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   36-0 -     0/0/4      . 0.00 3830 0   14235    0.0  0.00  0.12  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   37-0 -     0/0/2      . 0.00 3853 0   15595    0.0  0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   38-0 -     0/0/156    . 0.00 3586 0   148319   0.0  0.00  0.63  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   39-0 -     0/0/2      . 0.00 3854 0   15338    0.0  0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   40-0 -     0/0/6      . 0.00 3809 0   21858    0.0  0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   41-0 -     0/0/208    . 0.00 2985 0   243070   0.0  0.00  2.95  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   42-0 -     0/0/2      . 0.00 3849 0   19835    0.0  0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00 3850 0   19620    0.0  0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   44-0 -     0/0/6      . 0.00 3807 0   24371    0.0  0.00  0.22  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   45-0 -     0/0/5      . 0.00 3816 0   19070    0.0  0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   46-0 -     0/0/6      . 0.00 3811 0   20569    0.0  0.00  0.14  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   47-0 -     0/0/4      . 0.00 3826 0   17777    0.0  0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   48-0 -     0/0/4      . 0.00 3823 0   16933    0.0  0.00  0.14  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   49-0 -     0/0/2      . 0.00 3851 0   17743    0.0  0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   50-0 -     0/0/3      . 0.00 3833 0   22693    0.0  0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   51-0 -     0/0/4      . 0.00 3820 0   22016    0.0  0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   52-0 -     0/0/4      . 0.00 3829 0   22448    0.0  0.00  0.16  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   53-0 -     0/0/3      . 0.00 3837 0   9096     0.0  0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   54-0 -     0/0/6      . 0.00 3825 0   23840    0.0  0.00  0.22  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   55-0 -     0/0/17     . 0.00 3798 0   16331    0.0  0.00  0.47  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   56-0 -     0/0/184    . 0.00 3618 0   130360   0.0  0.00  0.50  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   57-0 -     0/0/3      . 0.00 3834 0   22445    0.0  0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   58-0 -     0/0/3      . 0.00 3838 0   7899     0.0  0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   59-0 -     0/0/5      . 0.00 3813 0   23139    0.0  0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   60-0 -     0/0/139    . 0.00 3483 0   237404   0.0  0.00  1.00  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   61-0 -     0/0/2      . 0.00 3847 0   2361     0.0  0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   62-0 -     0/0/11     . 0.00 3796 0   9214     0.0  0.00  0.14  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   63-0 -     0/0/4      . 0.00 3822 0   8490     0.0  0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   64-0 -     0/0/1      . 0.00 3863 0   0        0.0  0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   65-0 -     0/0/1      . 0.00 3861 0   0        0.0  0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   66-0 -     0/0/2      . 0.00 3845 0   8680     0.0  0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   67-0 -     0/0/1      . 0.00 3860 0   0        0.0  0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   68-0 -     0/0/3      . 0.00 3836 0   742      0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   69-0 -     0/0/1      . 0.00 3862 11  22       0.0  0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00 3843 0   10366    0.0  0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   71-0 -     0/0/65     . 0.00 3656 0   105003   0.0  0.00  1.01  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   72-0 -     0/0/151    . 0.00 3484 0   218700   0.0  0.00  1.26  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   73-0 -     0/0/2      . 0.00 3842 0   8818     0.0  0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   74-0 -     0/0/4      . 0.00 3832 0   1447     0.0  0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   75-0 -     0/0/2      . 0.00 3848 0   463      0.0  0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   76-0 -     0/0/101    . 0.00 3568 0   159456   0.0  0.00  0.87  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   77-0 -     0/0/6      . 0.00 3817 0   4997     0.0  0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   78-0 -     0/0/338    . 0.00 2060 0   272159   0.0  0.00  5.63  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00 3859 0   0        0.0  0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   80-0 -     0/0/2      . 0.00 3841 0   7766     0.0  0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   81-0 -     0/0/3      . 0.00 3824 0   10368    0.0  0.00  0.14  ::1            http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 489
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 21 seconds, (range: 1...91)
   index usage: 8%, cache usage: 11%
   total entries stored since starting: 23425
   total entries replaced since starting: 0
   total entries expired since starting: 22914
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 78 miss
   total removes since starting: 22 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit