403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.14.45.txt
 ## swap threshold exceeded
## server overview
2025-11-07.14.45 load[0] mem[57/72] mysql[2/25] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1292          96          45         974         853
Swap:          1999        1518         481
 14:45:01 up  4:58,  0 users,  load average: 0.36, 0.42, 0.49
## system overview
top - 14:45:01 up  4:58,  0 users,  load average: 0.36, 0.42, 0.49
Tasks: 214 total,   4 running, 209 sleeping,   0 stopped,   1 zombie
%Cpu(s): 50.0 us, 25.0 sy,  0.0 ni, 25.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    99816 free,  1322684 used,   997800 buff/cache
KiB Swap:  2047996 total,   493564 free,  1554432 used.   875224 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1782 mysql     20   0 1469608 263224   3996 S  68.8 10.9   5:43.48 /usr/sbin+
 34608 nigeria   20   0  400652  15936  10216 R  12.5  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44424   3516   1552 S   6.2  0.1   0:25.69 /usr/lib/+
   503 dbus      20   0   57032   1328    616 S   6.2  0.1   0:09.32 /usr/bin/+
 34639 root      20   0  160224   2348   1632 S   6.2  0.1   0:00.01 top -n 2 +
 34693 cloudsms  20   0  400784  15564  10020 R   6.2  0.6   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.39 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.28 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:19.54 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.25 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.14 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:23.27 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.31 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:02.39 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:02.67 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.10 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   39500   4060   3816 S   0.0  0.2   0:08.67 /usr/lib/+
   382 root      20   0   45352      8      4 S   0.0  0.0   0:00.36 /usr/lib/+
   409 root      16  -4   55532    456    336 S   0.0  0.0   0:01.33 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0   24720   1224    788 S   0.0  0.1   0:04.05 /usr/lib/+
   493 root      20   0  224268   4680   1096 S   0.0  0.2   0:00.34 queueproc+
   494 root      20   0  152780     76     36 S   0.0  0.0   0:00.01 /usr/sbin+
   499 nscd      20   0 1334484   1968    760 S   0.0  0.1   0:06.03 /usr/sbin+
   500 rpc       20   0   69256     24      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0   52852    376    268 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  610540    984    608 S   0.0  0.0   0:02.39 /usr/lib/+
   541 root      20   0   21540    388    280 S   0.0  0.0   0:00.41 /usr/sbin+
   551 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  124480    428    296 S   0.0  0.0   0:00.50 /usr/sbin+
   558 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   570 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   622 mailnull  20   0   89116   3804    888 S   0.0  0.2   0:00.26 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:03.22 [loop0]
   677 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   959 systuser  20   0  114016  10424   2632 S   0.0  0.4   0:04.31 /usr/loca+
   960 systuser  20   0   11604     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   961 root      20   0  572372    624    164 S   0.0  0.0   0:01.61 /usr/bin/+
   963 telegraf  20   0 5654048  35224   6072 S   0.0  1.5   0:09.96 /usr/loca+
   964 root      20   0   51508    460    296 S   0.0  0.0   0:00.24 /usr/sbin+
   966 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   968 systuser  20   0  111608      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 systuser  20   0   10388     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   970 systuser  20   0  113932      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   981 named     20   0  785392  31152   2072 S   0.0  1.3   0:12.04 /usr/sbin+
   982 root      20   0 1828076 194116    932 S   0.0  8.0   0:34.32 /usr/loca+
   984 root      20   0  386112    424    328 S   0.0  0.0   0:00.55 php-fpm: +
   992 root      20   0  397344   2416    612 S   0.0  0.1   0:03.79 php-fpm: +
   994 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.39 /usr/bin/+
  1007 root      20   0  392856    292    208 S   0.0  0.0   0:00.54 php-fpm: +
  1012 root      20   0  385496    400    300 S   0.0  0.0   0:00.55 php-fpm: +
  1013 root      20   0  265552   4244   3476 S   0.0  0.2   0:04.56 /usr/sbin+
  1014 root      20   0  261032  27988   5536 S   0.0  1.2   0:06.34 cpsrvd (S+
  1017 root      20   0  436392    404    316 S   0.0  0.0   0:00.65 php-fpm: +
  1018 root      20   0  153404    224    140 S   0.0  0.0   0:00.39 pure-ftpd+
  1020 root      20   0  111304    356    260 S   0.0  0.0   0:01.86 /usr/sbin+
  1026 cpanelc+  20   0   10540   3572   2312 S   0.0  0.1   0:13.51 /usr/loca+
  1096 dovenull  20   0   46912   1328    792 S   0.0  0.1   0:00.26 dovecot/p+
  1097 dovenull  20   0   47720   2948   1836 S   0.0  0.1   0:00.13 dovecot/i+
  1098 dovecot   20   0   10320    316    200 S   0.0  0.0   0:00.05 dovecot/a+
  1099 root      20   0   10452    568    368 S   0.0  0.0   0:00.22 dovecot/l+
  1100 dovenull  20   0   46912   2164   1596 S   0.0  0.1   0:00.37 dovecot/p+
  1101 dovenull  20   0   47680   3056   1812 S   0.0  0.1   0:00.22 dovecot/i+
  1108 root      20   0   24568   2512    500 S   0.0  0.1   0:00.14 dovecot/c+
  1113 dovecot   20   0   13568    436    220 S   0.0  0.0   0:00.05 dovecot/s+
  1182 dovecot   20   0   41136   1468   1012 S   0.0  0.1   0:00.40 dovecot/a+
  1218 systuser  20   0  157708   2864    816 S   0.0  0.1   0:00.10 SonarPush+
  1233 wp-tool+  20   0  410452  26028   1680 S   0.0  1.1   0:14.75 /usr/bin/+
  1234 wp-tool+  20   0  387528   3512   1656 S   0.0  0.1   0:00.22 /usr/bin/+
  1264 root      20   0  183900   6692   3460 S   0.0  0.3   0:01.26 cpdavd - +
  1265 root      20   0  209320  10940   2416 S   0.0  0.5   0:01.93 tailwatchd
  1267 root      20   0  167452   1200    652 S   0.0  0.0   0:00.29 dnsadmin +
  1713 root      20   0  299272    632    448 S   0.0  0.0   0:00.48 php-fpm: +
  1728 root      38  18  130416   1368    692 S   0.0  0.1   0:00.04 cpanellog+
  1968 root      20   0  266984   5096    600 S   0.0  0.2   0:01.06 /usr/sbin+
  1970 root      20   0   12844    328    212 S   0.0  0.0   0:01.34 /usr/loca+
  1971 root      20   0   12732    288    212 S   0.0  0.0   0:01.13 /usr/loca+
  1972 root      20   0   12876    340    216 S   0.0  0.0   0:01.23 /usr/loca+
  1977 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  2041 root      20   0  182328  10364   1104 S   0.0  0.4   0:15.62 lfd - sle+
  9063 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  9089 oysipao+  20   0    3152     56     16 S   0.0  0.0   0:00.32 [kworker]
 10468 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 13483 root      20   0 1275844  10144    600 S   0.0  0.4   0:00.07 /usr/bin/+
 13517 root      20   0 1277312  11476    600 S   0.0  0.5   0:00.07 /usr/bin/+
 19376 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 22635 nobody    20   0  277520  19264   4520 S   0.0  0.8   0:00.68 /usr/sbin+
 23225 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 25119 nobody    20   0  277848  19476   4560 S   0.0  0.8   0:00.56 /usr/sbin+
 25127 nobody    20   0  277584  19652   4700 S   0.0  0.8   0:00.75 /usr/sbin+
 25138 nobody    20   0  277804  19836   4500 S   0.0  0.8   0:00.72 /usr/sbin+
 25146 nobody    20   0  277512  18816   4484 S   0.0  0.8   0:00.90 /usr/sbin+
 25152 nobody    20   0  277512  19020   4412 S   0.0  0.8   0:00.48 /usr/sbin+
 25794 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 27476 nobody    20   0  277516  19396   4456 S   0.0  0.8   0:00.59 /usr/sbin+
 28166 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 28169 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 28537 root      20   0  248100 118080   1388 S   0.0  4.9   0:04.37 /usr/loca+
 28567 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 28691 cloudw    20   0  471856   9496   5236 S   0.0  0.4   0:00.68 php-fpm: +
 28850 nobody    20   0  277844  19380   4432 S   0.0  0.8   0:00.61 /usr/sbin+
 29288 nobody    20   0  277536  18760   4264 S   0.0  0.8   0:00.41 /usr/sbin+
 29685 nobody    20   0  277452  18664   4388 S   0.0  0.8   0:00.64 /usr/sbin+
 29693 nobody    20   0  277472  18088   4096 S   0.0  0.7   0:00.42 /usr/sbin+
 30725 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 30743 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 30959 cloudw    20   0  471808   9780   5328 S   0.0  0.4   0:00.46 php-fpm: +
 31936 nobody    20   0  277448  18484   4132 S   0.0  0.8   0:00.32 /usr/sbin+
 32494 nobody    20   0  277512  17716   4080 S   0.0  0.7   0:00.21 /usr/sbin+
 32537 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 32624 worencom  20   0   38468   3676   2872 S   0.0  0.2   0:00.00 dovecot/i+
 32709 root      20   0  269720 136688   3196 S   0.0  5.6   0:08.80 spamd chi+
 32710 root      20   0  258476 125408   3184 S   0.0  5.2   0:00.40 spamd chi+
 32866 root      20   0   28920   2404   1972 S   0.0  0.1   0:00.01 dovecot/q+
 33012 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 33096 cloudw    20   0  471784   9260   4976 S   0.0  0.4   0:00.23 php-fpm: +
 33184 cloudw    20   0  471784   9264   4980 S   0.0  0.4   0:00.22 php-fpm: +
 33267 cloudw    20   0  471784   9264   4980 S   0.0  0.4   0:00.23 php-fpm: +
 33290 nobody    20   0  277836  17116   3576 S   0.0  0.7   0:00.01 /usr/sbin+
 33783 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 33859 nobody    20   0  277512  17860   3868 S   0.0  0.7   0:00.08 /usr/sbin+
 34000 nobody    20   0  277512  17568   3916 S   0.0  0.7   0:00.08 /usr/sbin+
 34094 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 34180 mailnull  20   0   90260   9716   4248 S   0.0  0.4   0:00.00 /usr/sbin+
 34274 nigeria   20   0  471968  12204   6196 S   0.0  0.5   0:00.23 php-fpm: +
 34405 nigeria   20   0  398104   9552   4040 S   0.0  0.4   0:00.21 php-fpm: +
 34480 nobody    20   0  277512  16584   3120 S   0.0  0.7   0:00.02 /usr/sbin+
 34490 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 34513 root      20   0  162436   5836   4344 S   0.0  0.2   0:00.01 sshd: roo+
 34514 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: roo+
 34517 nobody    20   0  277176  16068   3008 S   0.0  0.7   0:00.00 /usr/sbin+
 34539 nobody    20   0  277216  16256   3168 S   0.0  0.7   0:00.00 /usr/sbin+
 34540 nobody    20   0  277176  16068   3008 S   0.0  0.7   0:00.00 /usr/sbin+
 34548 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 34549 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 34550 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 34551 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 34552 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 34553 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 34554 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 34555 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 34556 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 34557 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 34558 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 34559 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 34560 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 34562 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 34574 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 34575 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 34576 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 34577 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 34578 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 34579 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 34580 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 34581 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 34582 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 34586 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 34587 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 34588 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 34589 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 34590 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 34596 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 34597 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 34598 root      20   0  188220  11112   5152 S   0.0  0.5   0:00.01 /usr/loca+
 34602 pactpay   20   0  476460  16060  10484 S   0.0  0.7   0:00.02 /opt/cpan+
 34603 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 34604 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 34612 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 34668 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 34672 cloudsms  20   0  400652  15148   9844 S   0.0  0.6   0:00.01 /opt/cpan+
 34679 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 34687 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 34691 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 34692 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:46   0:19  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:46   0:23  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        660  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [loop0]
root        677  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      10468  0.0  0.0      0     0 ?        S    13:54   0:00  \_ [kworker/0:2]
root      19376  0.0  0.0      0     0 ?        S    14:12   0:00  \_ [kworker/u200:0]
root      23225  0.0  0.0      0     0 ?        S    14:21   0:00  \_ [kworker/1:1]
root      25794  0.0  0.0      0     0 ?        S    14:27   0:00  \_ [kworker/1:3]
root      28166  0.0  0.0      0     0 ?        S    14:31   0:00  \_ [kworker/0:0]
root      28169  0.0  0.0      0     0 ?        S    14:31   0:00  \_ [kworker/0:4]
root      28567  0.0  0.0      0     0 ?        S    14:32   0:00  \_ [kworker/1:2]
root      30725  0.0  0.0      0     0 ?        S    14:37   0:00  \_ [kworker/0:3]
root      30743  0.0  0.0      0     0 ?        R    14:37   0:00  \_ [kworker/u200:1]
root      32537  0.0  0.0      0     0 ?        D    14:41   0:00  \_ [kworker/1:0]
root      33012  0.0  0.0      0     0 ?        D    14:42   0:00  \_ [kworker/1:4]
root      34094  0.0  0.0      0     0 ?        S    14:44   0:00  \_ [kworker/0:1]
root          1  0.1  0.1  44424  3516 ?        Ss   09:46   0:25 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  39500  4060 ?        Ss   09:46   0:08 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45352     8 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   456 ?        S<sl 09:46   0:01 /sbin/auditd
root        489  0.0  0.0  24720  1224 ?        Ss   09:46   0:04 /usr/lib/systemd/systemd-logind
root        493  0.0  0.1 224268  4680 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
root        494  0.0  0.0 152780    76 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        499  0.0  0.0 1334484 1968 ?        Ssl  09:46   0:06 /usr/sbin/nscd
rpc         500  0.0  0.0  69256    24 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        503  0.0  0.0  57032  1328 ?        Rs   09:46   0:09 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        523  0.0  0.0 195208     0 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0  52852   376 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.0 610540   984 ?        Ssl  09:46   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        541  0.0  0.0  21540   388 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        551  0.0  0.0  24208     4 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        552  0.0  0.0 124480   428 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      34548  0.0  0.0 183048  2136 ?        S    14:45   0:00  \_ /usr/sbin/CROND -n
root      34577  0.0  0.0 113284  1212 ?        Ss   14:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      34597  0.0  0.0 108052   356 ?        S    14:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      34603  0.0  0.0 113288  1520 ?        S    14:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      34694  0.0  0.0 153840  2096 ?        R    14:45   0:00  |               \_ ps auxf
root      34549  0.0  0.0 183048  2140 ?        S    14:45   0:00  \_ /usr/sbin/CROND -n
root      34575  0.0  0.0  20164   988 ?        Ss   14:45   0:00  |   \_ jailshell (cloudsms) [34691] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms  34691  0.0  0.0      0     0 ?        D    14:45   0:00  |       \_ [jailshell]
root      34550  0.0  0.0 183048  2140 ?        S    14:45   0:00  \_ /usr/sbin/CROND -n
root      34582  0.0  0.0  20164   804 ?        Ss   14:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      34551  0.0  0.0 183048  2140 ?        S    14:45   0:00  \_ /usr/sbin/CROND -n
root      34580  0.0  0.0  20164   804 ?        Ss   14:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      34552  0.0  0.0 183048  2140 ?        S    14:45   0:00  \_ /usr/sbin/CROND -n
root      34581  0.0  0.0  20164   804 ?        Ss   14:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      34553  0.0  0.0 183048  2140 ?        S    14:45   0:00  \_ /usr/sbin/CROND -n
root      34574  0.0  0.0  20164   804 ?        Ss   14:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      34554  0.0  0.0 183048  2140 ?        S    14:45   0:00  \_ /usr/sbin/CROND -n
root      34588  0.0  0.0  20164   964 ?        Ss   14:45   0:00  |   \_ jailshell (cloudsms) [34612] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  34612  0.0  0.0  20164   256 ?        S    14:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  34668  0.0  0.0 113284  1212 ?        S    14:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  34672  0.0  0.6 400652 15148 ?        S    14:45   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      34555  0.0  0.0 183048  2140 ?        S    14:45   0:00  \_ /usr/sbin/CROND -n
root      34579  0.0  0.0  20164   804 ?        Ss   14:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      34557  0.0  0.0 183048  2140 ?        S    14:45   0:00  \_ /usr/sbin/CROND -n
root      34578  0.0  0.0  20164   804 ?        Ss   14:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      34558  0.0  0.0 183048  2140 ?        S    14:45   0:00  \_ /usr/sbin/CROND -n
root      34587  0.0  0.0  20164   808 ?        Ss   14:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      34559  0.0  0.0 183048  2136 ?        S    14:45   0:00  \_ /usr/sbin/CROND -n
root      34576  0.0  0.0 113284  1212 ?        Ss   14:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      34598  0.0  0.4 188220 11112 ?        S    14:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      34639  0.0  0.0 160224  2348 ?        S    14:45   0:00  |           \_ top -n 2 -b -c
root      34560  0.0  0.0 183048  2144 ?        S    14:45   0:00  \_ /usr/sbin/CROND -n
root      34590  0.0  0.0  20164   964 ?        Ss   14:45   0:00  |   \_ jailshell (pactpay) [34596] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   34596  0.0  0.0  20164   260 ?        S    14:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   34602  0.0  0.6 476724 16588 ?        S    14:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      34562  0.0  0.0 183048  2140 ?        S    14:45   0:00  \_ /usr/sbin/CROND -n
root      34589  0.0  0.0  20164   964 ?        Ss   14:45   0:00      \_ jailshell (nigeria) [34604] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   34604  0.0  0.0  20164   260 ?        S    14:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   34608  0.0  0.6 400652 15936 ?        S    14:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0   4388     4 ?        Ss   09:46   0:00 /usr/sbin/acpid
root        569  0.0  0.0 114704     0 ttyS0    Ss+  09:46   0:00 /bin/bash
root        570  0.0  0.0 108296     8 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    622  0.0  0.1  89116  3804 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  34180  0.0  0.4  90260  9716 ?        S    14:44   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    959  0.0  0.4 114016 10424 ?        Ssl  09:46   0:04 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    960  0.0  0.0  11604    24 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        961  0.0  0.0 572372   624 ?        Ssl  09:46   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    963  0.0  1.4 5654048 35224 ?       SLsl 09:46   0:09 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0  51508   460 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1096  0.0  0.0  46912  1328 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1097  0.0  0.1  47720  2948 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1098  0.0  0.0  10320   316 ?        S    09:46   0:00  \_ dovecot/anvil
root       1099  0.0  0.0  10452   568 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1100  0.0  0.0  46912  2164 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1101  0.0  0.1  47680  3056 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1108  0.0  0.1  24568  2512 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1113  0.0  0.0  13568   436 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1182  0.0  0.0  41136  1468 ?        S    09:46   0:00  \_ dovecot/auth
worencom  32624  0.0  0.1  38468  3676 ?        S    14:41   0:00  \_ dovecot/imap
root      32866  0.0  0.0  28920  2404 ?        S    14:41   0:00  \_ dovecot/quota-status -p postfix
root      33783  0.0  0.1  41052  2724 ?        S    14:43   0:00  \_ dovecot/auth -w
root        966  0.0  0.0 445028     0 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    968  0.0  0.0 111608     4 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    969  0.0  0.0  10388    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    970  0.0  0.0 113932     8 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
named       981  0.0  1.2 785392 31152 ?        Ssl  09:46   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        982  0.1  8.0 1828076 194116 ?      Ssl  09:46   0:34 /usr/local/cpanel/3rdparty/bin/clamd -F
root        984  0.0  0.0 386112   424 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  0.0 397344  2416 ?        Ss   09:46   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    28691  0.0  0.3 471856  9496 ?        S    14:32   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    30959  0.1  0.4 471808  9780 ?        S    14:37   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    33096  0.1  0.3 471784  9260 ?        S    14:42   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    33184  0.1  0.3 471784  9264 ?        S    14:42   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    33267  0.1  0.3 471784  9264 ?        S    14:42   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
nigeria   34274  0.6  0.5 471968 12204 ?        S    14:44   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria   34405  0.8  0.3 398104  9552 ?        S    14:44   0:00  \_ php-fpm: pool nigeriadecide_org
memcach+    994  0.0  0.0 342400     0 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1007  0.0  0.0 392856   292 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root       1012  0.0  0.0 385496   400 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1013  0.0  0.1 265552  4244 ?        Ssl  09:46   0:04 /usr/sbin/rsyslogd -n
root       1014  0.0  1.1 261032 27988 ?        Ss   09:46   0:06 cpsrvd (SSL) - waiting for connections                   
root      34490  0.0  0.0      0     0 ?        Z    14:44   0:00  \_ [cpaneld - servi] <defunct>
root       1017  0.0  0.0 436392   404 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1018  0.0  0.0 153404   224 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
root       1020  0.0  0.0 111304   356 ?        Ss   09:46   0:01 /usr/sbin/sshd -D
root      34513  0.3  0.2 162436  5836 ?        Ss   14:44   0:00  \_ sshd: root [priv]
sshd      34514  0.0  0.1 115644  2624 ?        S    14:44   0:00      \_ sshd: root [net]
cpanelc+   1026  0.0  0.1  10540  3572 ?        Ss   09:46   0:13 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1218  0.0  0.1 157708  2864 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1233  0.0  1.0 410452 26028 ?        Ss   09:46   0:14 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1234  0.0  0.1 387528  3512 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.2 183900  6692 ?        Ss   09:46   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1265  0.0  0.4 209320 10940 ?        Ss   09:46   0:01 tailwatchd
root       1267  0.0  0.0 167452  1200 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1713  0.0  0.0 299272   632 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1728  0.0  0.0 130416  1368 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1782  1.9 10.8 1469608 263224 ?      Sl   09:46   5:43 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1968  0.0  0.2 266984  5096 ?        Ss   09:46   0:01 /usr/sbin/httpd -k start
root       1970  0.0  0.0  12844   328 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1971  0.0  0.0  12732   288 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1972  0.0  0.0  12876   340 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1977  0.0  0.0  53340     4 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    22635  0.0  0.7 277520 19264 ?        S    14:19   0:00  \_ /usr/sbin/httpd -k start
nobody    25119  0.0  0.8 277848 19476 ?        S    14:25   0:00  \_ /usr/sbin/httpd -k start
nobody    25127  0.0  0.8 277584 19652 ?        S    14:25   0:00  \_ /usr/sbin/httpd -k start
nobody    25138  0.0  0.8 277804 19836 ?        S    14:25   0:00  \_ /usr/sbin/httpd -k start
nobody    25146  0.0  0.7 277512 18816 ?        S    14:25   0:00  \_ /usr/sbin/httpd -k start
nobody    25152  0.0  0.7 277512 19020 ?        S    14:25   0:00  \_ /usr/sbin/httpd -k start
nobody    27476  0.0  0.8 277516 19396 ?        S    14:30   0:00  \_ /usr/sbin/httpd -k start
nobody    28850  0.0  0.8 277844 19380 ?        S    14:32   0:00  \_ /usr/sbin/httpd -k start
nobody    29288  0.0  0.7 277536 18760 ?        S    14:33   0:00  \_ /usr/sbin/httpd -k start
nobody    29685  0.1  0.7 277452 18664 ?        S    14:34   0:00  \_ /usr/sbin/httpd -k start
nobody    29693  0.0  0.7 277472 18088 ?        S    14:35   0:00  \_ /usr/sbin/httpd -k start
nobody    31936  0.1  0.7 277448 18484 ?        S    14:39   0:00  \_ /usr/sbin/httpd -k start
nobody    32494  0.0  0.7 277512 17716 ?        S    14:40   0:00  \_ /usr/sbin/httpd -k start
nobody    33290  0.0  0.7 277836 17116 ?        S    14:42   0:00  \_ /usr/sbin/httpd -k start
nobody    33859  0.0  0.7 277512 17860 ?        S    14:43   0:00  \_ /usr/sbin/httpd -k start
nobody    34000  0.1  0.7 277512 17568 ?        S    14:44   0:00  \_ /usr/sbin/httpd -k start
nobody    34480  0.2  0.6 277512 16584 ?        S    14:44   0:00  \_ /usr/sbin/httpd -k start
nobody    34517  0.0  0.6 277176 16068 ?        S    14:44   0:00  \_ /usr/sbin/httpd -k start
nobody    34539  0.0  0.6 277216 16256 ?        S    14:45   0:00  \_ /usr/sbin/httpd -k start
nobody    34540  0.0  0.6 277176 16068 ?        S    14:45   0:00  \_ /usr/sbin/httpd -k start
root       2041  0.0  0.4 182328 10364 ?        Ss   09:46   0:15 lfd - sleeping
oysipao+   9063  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+   9089  0.0  0.0   3152    56 ?        S    10:01   0:00  \_ [kworker]
root      28537  0.0  4.8 248100 118080 ?       Ss   10:50   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      32709  0.0  5.6 269720 136688 ?       S    11:00   0:08  \_ spamd child
root      32710  0.0  5.1 258476 125408 ?       S    11:00   0:00  \_ spamd child
root      13483  0.0  0.4 1275844 10144 ?       Ssl  14:00   0:00 /usr/bin/cspdaemon
root      13517  0.0  0.4 1277312 11476 ?       Ssl  14:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 39626  Threads: 3  Questions: 2260081  Slow queries: 0  Opens: 7773  Flush tables: 1  Open tables: 2000  Queries per second avg: 57.035
*************************** 1. row ***************************
     Id: 34234
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 34238
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 34242
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 101.47.53.134 TIME_WAIT
      1 10.30.9.122 TIME_WAIT
      1 103.74.179.12 TIME_WAIT
      1 165.22.111.5 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 208.240.29.185 TIME_WAIT
      1 40.77.167.79 TIME_WAIT
      1 51.222.168.130 TIME_WAIT
      1 63.246.157.189 TIME_WAIT
      1 74.7.227.125 TIME_WAIT
      1 74.7.228.194 TIME_WAIT
      1 74.7.229.82 TIME_WAIT
      1 74.7.230.43 TIME_WAIT
      1 74.7.230.62 TIME_WAIT
      1 84.32.233.71 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 104.248.58.32 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 14:45:02 WAT
   Restart Time: Friday, 07-Nov-2025 03:44:42 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 11 hours 19 seconds
   Server load: 0.36 0.42 0.49
   Total accesses: 56928 - Total Traffic: 907.0 MB - Total Duration: 118415638
   CPU Usage: u5.67 s2.83 cu449.23 cs308.03 - 1.93% CPU load
   1.44 requests/sec - 23.4 kB/second - 16.3 kB/request - 2080.09 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

WKW_KWRKRWKKK___W__..W..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS  Req   Dur    Conn Child  Slot     Client      Protocol              VHost                                          Request
   0-0  25119 0/110/3751  W 2.26 152  0   4412969  0.0  2.18  51.06 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323532363534392p2231223
   1-0  25127 35/185/3656 K 2.76 0    0   5120977  19.9 3.12  53.40 20.37.96.143    http/1.1 international.cloudsms.com.ng:8 GET /uploxe.php HTTP/1.1
   2-0  29288 0/84/3678   W 1.65 213  0   2951789  0.0  1.64  53.62 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323532363438382p2231223
   3-0  29685 0/122/3906  _ 2.48 0    0   2112769  0.0  2.66  72.92 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80          GET /whm-server-status HTTP/1.0
   4-0  27476 14/120/3657 K 2.67 2    5   3640857  72.2 3.81  56.68 51.75.119.161   http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php?state=Edo&lga=Ovia%20north%20eas
   5-0  33290 0/3/3877    W 0.03 112  0   3948916  0.0  0.05  67.24 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323532363538392p2231223
   6-0  28850 0/120/3060  R 2.43 11   301 4263658  0.0  2.34  56.44 102.89.83.233   http/1.1
   7-0  31936 2/61/2992   K 1.25 0    358 47675885 65.3 1.30  45.78 66.249.70.34    http/1.1 support.cloudware.ng:443        GET /?c=2314607314 HTTP/1.1
   8-0  33859 0/16/2872   R 0.20 6    302 4276214  0.0  0.33  40.83 114.119.137.160 http/1.1 nigeriadecide.org:443
   9-0  29693 0/79/3171   W 1.76 132  0   3155643  0.0  1.80  65.44 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323532363536392p2231223
   10-0 32494 1/40/2593   K 0.95 2    300 4647701  35.9 0.95  31.86 66.249.70.36    http/1.1 support.cloudware.ng:443        GET /?c=195705074 HTTP/1.1
   11-0 22635 1/142/2351  K 2.83 1    6   4536299  10.0 2.65  38.36 177.62.120.70   http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php?lga=Nsit+atai&state=Akwa+ibom&wa
   12-0 25138 1/227/2637  K 2.66 4    269 2596907  35.0 3.49  39.19 66.249.70.39    http/1.1 support.cloudware.ng:443        GET /?c=2777433091 HTTP/1.1
   13-0 34000 0/17/2536   _ 0.36 0    0   3651685  0.0  0.38  45.67 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   14-0 34480 0/2/2619    _ 0.04 1    304 3750212  0.0  0.06  38.99 66.249.70.32    http/1.1 support.cloudware.ng:443        GET /?c=3428901517 HTTP/1.1
   15-0 25146 0/164/2151  _ 4.07 1    416 3900374  0.0  3.95  28.72 84.32.233.71    http/1.1 health.oyostate.gov.ng:443      GET /portfolio/omituntun-free-health-mission-physically-challen
   16-0 34517 0/1/671     W 0.00 0    0   3822278  0.0  0.01  11.05 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   17-0 34539 0/1/1747    _ 0.00 0    7   3146923  0.0  0.01  32.00 52.7.33.248     http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/2019elections/images/assets/css/
   18-0 34540 0/1/1284    _ 0.00 0    25  904082   0.0  0.01  17.21 128.140.8.200   http/1.1 cloudsms.com.ng:443             GET /cron/process_queue3.php HTTP/1.1
   19-0 -     0/0/419     . 0.00 713  0   859816   0.0  0.00  8.92  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   20-0 -     0/0/104     . 0.00 1173 0   73342    0.0  0.00  1.47  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 25152 0/93/287    W 1.88 172  0   1182600  0.0  1.98  3.77  173.199.190.174 http/1.1 wmoulms.cloudware.ng:443        GET /postnews.php?ARRAY=7o2230223n313736323532363532392p2231223
   22-0 -     0/0/866     . 0.00 173  0   1178087  0.0  0.00  10.26 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 -     0/0/13      . 0.00 9928 0   32567    0.0  0.00  0.18  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 -     0/0/9       . 0.00 9934 0   29442    0.0  0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 -     0/0/8       . 0.00 9951 0   29769    0.0  0.00  0.23  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 -     0/0/12      . 0.00 9911 0   24649    0.0  0.00  0.26  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/31      . 0.00 9947 0   34716    0.0  0.00  0.61  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -     0/0/259     . 0.00 9960 0   143065   0.0  0.00  3.62  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/96      . 0.00 9976 0   59764    0.0  0.00  2.78  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/13      . 0.00 9901 0   22779    0.0  0.00  9.52  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/103     . 0.00 9702 0   179005   0.0  0.00  0.84  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/2       . 0.00 9977 0   9851     0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -     0/0/7       . 0.00 9926 0   21858    0.0  0.00  0.36  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -     0/0/2       . 0.00 9972 0   17699    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/5       . 0.00 9941 0   19399    0.0  0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/4       . 0.00 9950 0   14235    0.0  0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/2       . 0.00 9973 0   15595    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/156     . 0.00 9706 0   148319   0.0  0.00  0.63  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/2       . 0.00 9974 0   15338    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/6       . 0.00 9929 0   21858    0.0  0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/208     . 0.00 9105 0   243070   0.0  0.00  2.95  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/2       . 0.00 9969 0   19835    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/2       . 0.00 9970 0   19620    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/6       . 0.00 9927 0   24371    0.0  0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/5       . 0.00 9936 0   19070    0.0  0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/6       . 0.00 9931 0   20569    0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/4       . 0.00 9946 0   17777    0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/4       . 0.00 9943 0   16933    0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -     0/0/2       . 0.00 9971 0   17743    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -     0/0/3       . 0.00 9953 0   22693    0.0  0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -     0/0/4       . 0.00 9940 0   22016    0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -     0/0/4       . 0.00 9949 0   22448    0.0  0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -     0/0/3       . 0.00 9957 0   9096     0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -     0/0/6       . 0.00 9945 0   23840    0.0  0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-0 -     0/0/17      . 0.00 9918 0   16331    0.0  0.00  0.47  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-0 -     0/0/184     . 0.00 9738 0   130360   0.0  0.00  0.50  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-0 -     0/0/3       . 0.00 9954 0   22445    0.0  0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   58-0 -     0/0/3       . 0.00 9958 0   7899     0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   59-0 -     0/0/5       . 0.00 9933 0   23139    0.0  0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-0 -     0/0/139     . 0.00 9603 0   237404   0.0  0.00  1.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-0 -     0/0/2       . 0.00 9967 0   2361     0.0  0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   62-0 -     0/0/11      . 0.00 9916 0   9214     0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   63-0 -     0/0/4       . 0.00 9942 0   8490     0.0  0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   64-0 -     0/0/1       . 0.00 9983 0   0        0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   65-0 -     0/0/1       . 0.00 9981 0   0        0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   66-0 -     0/0/2       . 0.00 9965 0   8680     0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   67-0 -     0/0/1       . 0.00 9980 0   0        0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   68-0 -     0/0/3       . 0.00 9956 0   742      0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   69-0 -     0/0/1       . 0.00 9982 11  22       0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   70-0 -     0/0/2       . 0.00 9963 0   10366    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   71-0 -     0/0/65      . 0.00 9776 0   105003   0.0  0.00  1.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   72-0 -     0/0/151     . 0.00 9604 0   218700   0.0  0.00  1.26  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   73-0 -     0/0/2       . 0.00 9962 0   8818     0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   74-0 -     0/0/4       . 0.00 9952 0   1447     0.0  0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   75-0 -     0/0/2       . 0.00 9968 0   463      0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   76-0 -     0/0/101     . 0.00 9688 0   159456   0.0  0.00  0.87  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   77-0 -     0/0/6       . 0.00 9937 0   4997     0.0  0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   78-0 -     0/0/338     . 0.00 8180 0   272159   0.0  0.00  5.63  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   79-0 -     0/0/1       . 0.00 9979 0   0        0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   80-0 -     0/0/2       . 0.00 9961 0   7766     0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   81-0 -     0/0/3       . 0.00 9944 0   10368    0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 562
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 16 seconds, (range: 0...47)
   index usage: 9%, cache usage: 13%
   total entries stored since starting: 35600
   total entries replaced since starting: 0
   total entries expired since starting: 35008
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 112 miss
   total removes since starting: 30 hit, 57 miss
Youez - 2016 - github.com/yon3zu
LinuXploit