403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.14.48.txt
 ## swap threshold exceeded
## server overview
2025-11-07.14.48 load[0] mem[56/72] mysql[1/25] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1263         162          45         937         882
Swap:          1999        1519         480
 14:48:01 up  5:01,  0 users,  load average: 0.07, 0.29, 0.43
## system overview
top - 14:48:02 up  5:01,  0 users,  load average: 0.07, 0.29, 0.43
Tasks: 201 total,   5 running, 195 sleeping,   0 stopped,   1 zombie
%Cpu(s): 62.5 us, 18.8 sy,  0.0 ni, 18.8 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   157392 free,  1302820 used,   960088 buff/cache
KiB Swap:  2047996 total,   492284 free,  1555712 used.   894852 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1782 mysql     20   0 1469608 263216   3988 S 113.3 10.9   5:46.10 /usr/sbin+
 36004 nigeria   20   0  400652  15940  10220 R  20.0  0.7   0:00.05 /opt/cpan+
 36008 pactpay   20   0  476724  17484  11728 S  13.3  0.7   0:00.02 /opt/cpan+
 36039 cloudw    20   0  364868  18708  10552 S   6.7  0.8   0:00.01 /opt/cpan+
     1 root      20   0   44424   3516   1552 S   0.0  0.1   0:25.94 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 R   0.0  0.0   0:01.40 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.28 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:19.75 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.25 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.16 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:23.30 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.32 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:02.40 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:02.68 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.11 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   39500   4568   4324 S   0.0  0.2   0:08.78 /usr/lib/+
   382 root      20   0   45352      8      4 S   0.0  0.0   0:00.36 /usr/lib/+
   409 root      16  -4   55532    456    336 S   0.0  0.0   0:01.35 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0   24720   1224    788 S   0.0  0.1   0:04.09 /usr/lib/+
   493 root      20   0  224268   4680   1096 S   0.0  0.2   0:00.34 queueproc+
   494 root      20   0  152780     76     36 S   0.0  0.0   0:00.01 /usr/sbin+
   499 nscd      20   0 1334484   1968    760 S   0.0  0.1   0:06.10 /usr/sbin+
   500 rpc       20   0   69256     24      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   503 dbus      20   0   57032   1328    616 S   0.0  0.1   0:09.39 /usr/bin/+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0   52852    376    268 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  610540    984    608 S   0.0  0.0   0:02.41 /usr/lib/+
   541 root      20   0   21540    388    280 S   0.0  0.0   0:00.42 /usr/sbin+
   551 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  124480    428    296 S   0.0  0.0   0:00.51 /usr/sbin+
   558 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   570 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   622 mailnull  20   0   89116   3804    888 S   0.0  0.2   0:00.26 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:03.22 [loop0]
   677 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   959 systuser  20   0  114016  10420   2628 S   0.0  0.4   0:04.35 /usr/loca+
   960 systuser  20   0   11604     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   961 root      20   0  572372    624    164 S   0.0  0.0   0:01.63 /usr/bin/+
   963 telegraf  20   0 5654048  35216   6064 S   0.0  1.5   0:10.03 /usr/loca+
   964 root      20   0   51508    460    296 S   0.0  0.0   0:00.24 /usr/sbin+
   966 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   968 systuser  20   0  111608      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 systuser  20   0   10388     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   970 systuser  20   0  113932      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   981 named     20   0  785392  31224   2056 S   0.0  1.3   0:12.15 /usr/sbin+
   982 root      20   0 1828076 192736    932 S   0.0  8.0   0:34.45 /usr/loca+
   984 root      20   0  386112    424    328 S   0.0  0.0   0:00.55 php-fpm: +
   992 root      20   0  397344   2416    612 S   0.0  0.1   0:03.82 php-fpm: +
   994 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.39 /usr/bin/+
  1007 root      20   0  392856    292    208 S   0.0  0.0   0:00.54 php-fpm: +
  1012 root      20   0  385496    400    300 S   0.0  0.0   0:00.55 php-fpm: +
  1013 root      20   0  265552   4684   3912 S   0.0  0.2   0:04.62 /usr/sbin+
  1014 root      20   0  261032  27988   5536 S   0.0  1.2   0:06.37 cpsrvd (S+
  1017 root      20   0  436392    404    316 S   0.0  0.0   0:00.65 php-fpm: +
  1018 root      20   0  153404    224    140 S   0.0  0.0   0:00.39 pure-ftpd+
  1020 root      20   0  111304    356    260 S   0.0  0.0   0:01.89 /usr/sbin+
  1026 cpanelc+  20   0   10540   3572   2312 S   0.0  0.1   0:13.65 /usr/loca+
  1096 dovenull  20   0   46912   1328    792 S   0.0  0.1   0:00.26 dovecot/p+
  1097 dovenull  20   0   47720   2948   1836 S   0.0  0.1   0:00.13 dovecot/i+
  1098 dovecot   20   0   10320    316    200 S   0.0  0.0   0:00.05 dovecot/a+
  1099 root      20   0   10452    568    368 S   0.0  0.0   0:00.22 dovecot/l+
  1100 dovenull  20   0   46912   2164   1596 S   0.0  0.1   0:00.39 dovecot/p+
  1101 dovenull  20   0   47680   3056   1812 S   0.0  0.1   0:00.22 dovecot/i+
  1108 root      20   0   24568   2512    500 S   0.0  0.1   0:00.14 dovecot/c+
  1113 dovecot   20   0   13568    436    220 S   0.0  0.0   0:00.05 dovecot/s+
  1182 dovecot   20   0   41136   1468   1012 S   0.0  0.1   0:00.41 dovecot/a+
  1218 systuser  20   0  157708   2864    816 S   0.0  0.1   0:00.10 SonarPush+
  1233 wp-tool+  20   0  410452  25772   1424 S   0.0  1.1   0:14.89 /usr/bin/+
  1234 wp-tool+  20   0  387528   3284   1428 S   0.0  0.1   0:00.23 /usr/bin/+
  1264 root      20   0  183900   6692   3460 S   0.0  0.3   0:01.26 cpdavd - +
  1265 root      20   0  209320  10956   2416 S   0.0  0.5   0:01.97 tailwatchd
  1267 root      20   0  167452   1200    652 S   0.0  0.0   0:00.30 dnsadmin +
  1713 root      20   0  299272    632    448 S   0.0  0.0   0:00.49 php-fpm: +
  1728 root      38  18  130416   1368    692 S   0.0  0.1   0:00.04 cpanellog+
  1968 root      20   0  266984   5096    600 S   0.0  0.2   0:01.07 /usr/sbin+
  1970 root      20   0   12852    328    212 S   0.0  0.0   0:01.35 /usr/loca+
  1971 root      20   0   12732    288    212 S   0.0  0.0   0:01.14 /usr/loca+
  1972 root      20   0   12892    340    216 S   0.0  0.0   0:01.24 /usr/loca+
  1977 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  2041 root      20   0  182328  10400   1104 S   0.0  0.4   0:15.77 lfd - sle+
  9063 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  9089 oysipao+  20   0    3152     56     16 S   0.0  0.0   0:00.33 [kworker]
 10468 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 13483 root      20   0 1275844  10144    600 S   0.0  0.4   0:00.07 /usr/bin/+
 13517 root      20   0 1277312  11476    600 S   0.0  0.5   0:00.07 /usr/bin/+
 19376 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 23225 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 25119 nobody    20   0  277848  19540   4624 S   0.0  0.8   0:00.60 /usr/sbin+
 25127 nobody    20   0  277584  19900   4824 S   0.0  0.8   0:00.93 /usr/sbin+
 25138 nobody    20   0  277804  19920   4584 S   0.0  0.8   0:00.92 /usr/sbin+
 25146 nobody    20   0  277656  19104   4564 S   0.0  0.8   0:01.05 /usr/sbin+
 27476 nobody    20   0  277516  19604   4572 S   0.0  0.8   0:00.71 /usr/sbin+
 28166 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 28169 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 28537 root      20   0  248100 118080   1388 S   0.0  4.9   0:04.40 /usr/loca+
 28567 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 28691 cloudw    20   0  471856   9496   5236 S   0.0  0.4   0:00.91 php-fpm: +
 28850 nobody    20   0  277844  19456   4496 S   0.0  0.8   0:00.70 /usr/sbin+
 29288 nobody    20   0  277536  18932   4356 S   0.0  0.8   0:00.43 /usr/sbin+
 29685 nobody    20   0  277604  18948   4448 S   0.0  0.8   0:00.72 /usr/sbin+
 29693 nobody    20   0  277472  18156   4108 S   0.0  0.8   0:00.43 /usr/sbin+
 30725 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 30743 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 31936 nobody    20   0  277464  18696   4208 S   0.0  0.8   0:00.51 /usr/sbin+
 32494 nobody    20   0  277520  18132   4180 S   0.0  0.7   0:00.35 /usr/sbin+
 32537 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 32624 worencom  20   0   38468   3676   2872 S   0.0  0.2   0:00.00 dovecot/i+
 32709 root      20   0  269720 136688   3196 S   0.0  5.6   0:10.14 spamd chi+
 32710 root      20   0  258476 125408   3184 S   0.0  5.2   0:00.40 spamd chi+
 32866 root      20   0   28920   2404   1972 S   0.0  0.1   0:00.01 dovecot/q+
 33012 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 33096 cloudw    20   0  471808   9780   5328 S   0.0  0.4   0:00.46 php-fpm: +
 33290 nobody    20   0  277836  17988   3932 S   0.0  0.7   0:00.08 /usr/sbin+
 34094 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 34517 nobody    20   0  277780  17972   4128 S   0.0  0.7   0:00.20 /usr/sbin+
 34539 nobody    20   0  277836  17248   3592 S   0.0  0.7   0:00.04 /usr/sbin+
 34540 nobody    20   0  277516  17656   3820 S   0.0  0.7   0:00.17 /usr/sbin+
 35184 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 35386 cloudw    20   0  471784   9264   4980 S   0.0  0.4   0:00.22 php-fpm: +
 35468 cloudw    20   0  471784   9260   4976 S   0.0  0.4   0:00.23 php-fpm: +
 35538 nobody    20   0  277168  16208   3088 S   0.0  0.7   0:00.00 /usr/sbin+
 35688 mailnull  20   0   90260   9716   4248 S   0.0  0.4   0:00.01 /usr/sbin+
 35695 cloudw    20   0  471784   9264   4980 S   0.0  0.4   0:00.22 php-fpm: +
 35711 root      20   0   41052   2732   2088 S   0.0  0.1   0:00.00 dovecot/a+
 35920 nigeria   20   0  397784   8952   3896 S   0.0  0.4   0:00.19 php-fpm: +
 35925 mailnull  20   0   89500   5856   2580 S   0.0  0.2   0:00.00 /usr/sbin+
 35928 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 35944 cloudw    20   0  405160  15256   3416 S   0.0  0.6   0:00.04 php-fpm: +
 35945 nobody    20   0  277368  16372   3100 S   0.0  0.7   0:00.01 /usr/sbin+
 35954 nobody    20   0  277044  14896   1996 S   0.0  0.6   0:00.00 /usr/sbin+
 35955 nobody    20   0  276908  13340    656 S   0.0  0.6   0:00.00 /usr/sbin+
 35959 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 35961 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35962 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35963 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35964 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35965 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35966 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35968 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35969 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35970 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35971 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 35973 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35981 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 35982 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 35983 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 35984 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 35985 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 35988 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 35989 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 35990 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 35991 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 35992 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 35993 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 35994 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 35995 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 36001 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 36003 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 36005 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 36041 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 36044 cloudsms  20   0       0      0      0 R   0.0  0.0   0:00.00 [jailshel+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    09:46   0:19  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:46   0:23  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        660  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [loop0]
root        677  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      10468  0.0  0.0      0     0 ?        D    13:54   0:00  \_ [kworker/0:2]
root      19376  0.0  0.0      0     0 ?        S    14:12   0:00  \_ [kworker/u200:0]
root      23225  0.0  0.0      0     0 ?        S    14:21   0:00  \_ [kworker/1:1]
root      28166  0.0  0.0      0     0 ?        S    14:31   0:00  \_ [kworker/0:0]
root      28169  0.0  0.0      0     0 ?        S    14:31   0:00  \_ [kworker/0:4]
root      28567  0.0  0.0      0     0 ?        S    14:32   0:00  \_ [kworker/1:2]
root      30725  0.0  0.0      0     0 ?        S    14:37   0:00  \_ [kworker/0:3]
root      30743  0.0  0.0      0     0 ?        D    14:37   0:00  \_ [kworker/u200:1]
root      36048  0.0  0.0      0     0 ?        R    14:48   0:00  |   \_ [kworker/u200:1]
root      32537  0.0  0.0      0     0 ?        D    14:41   0:00  \_ [kworker/1:0]
root      33012  0.0  0.0      0     0 ?        S    14:42   0:00  \_ [kworker/1:4]
root      34094  0.0  0.0      0     0 ?        S    14:44   0:00  \_ [kworker/0:1]
root      35184  0.0  0.0      0     0 ?        S    14:46   0:00  \_ [kworker/0:5]
root          1  0.1  0.1  44424  3516 ?        Ss   09:46   0:25 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  39500  4568 ?        Ss   09:46   0:08 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45352     8 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   456 ?        S<sl 09:46   0:01 /sbin/auditd
root        489  0.0  0.0  24720  1224 ?        Ss   09:46   0:04 /usr/lib/systemd/systemd-logind
root        493  0.0  0.1 224268  4680 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
root        494  0.0  0.0 152780    76 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        499  0.0  0.0 1334484 1968 ?        Ssl  09:46   0:06 /usr/sbin/nscd
rpc         500  0.0  0.0  69256    24 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        503  0.0  0.0  57032  1328 ?        Ss   09:46   0:09 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        523  0.0  0.0 195208     0 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0  52852   376 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.0 610540   984 ?        Ssl  09:46   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        541  0.0  0.0  21540   388 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        551  0.0  0.0  24208     4 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        552  0.0  0.0 124480   428 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      35959  0.0  0.0 183048  2136 ?        S    14:48   0:00  \_ /usr/sbin/CROND -n
root      35981  0.0  0.0 113284  1212 ?        Ss   14:48   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      35995  0.0  0.0 108052   360 ?        S    14:48   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      36001  0.0  0.0 113288  1520 ?        S    14:48   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      36047  0.0  0.0 153840  2088 ?        R    14:48   0:00  |               \_ ps auxf
root      35961  0.0  0.0 183048  2140 ?        S    14:48   0:00  \_ /usr/sbin/CROND -n
root      35989  0.0  0.0  20164   804 ?        Ss   14:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      35962  0.0  0.0 183048  2140 ?        S    14:48   0:00  \_ /usr/sbin/CROND -n
root      35990  0.0  0.0  20164   804 ?        Ss   14:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      35963  0.0  0.0 183048  2140 ?        S    14:48   0:00  \_ /usr/sbin/CROND -n
root      35994  0.0  0.0  20164   808 ?        Ss   14:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      35965  0.0  0.0 183048  2140 ?        S    14:48   0:00  \_ /usr/sbin/CROND -n
root      35983  0.0  0.0  20164   804 ?        Ss   14:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      35966  0.0  0.0 183048  2140 ?        S    14:48   0:00  \_ /usr/sbin/CROND -n
root      35993  0.0  0.0  20164   808 ?        Ss   14:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      35968  0.0  0.0 183048  2140 ?        S    14:48   0:00  \_ /usr/sbin/CROND -n
root      35992  0.0  0.0  20164   804 ?        Ss   14:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      35969  0.0  0.0 183048  2140 ?        S    14:48   0:00  \_ /usr/sbin/CROND -n
root      35985  0.0  0.0  20164   804 ?        Ss   14:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      35970  0.0  0.0 183048  2140 ?        S    14:48   0:00  \_ /usr/sbin/CROND -n
root      35984  0.0  0.0  20164   808 ?        Ss   14:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      35971  0.0  0.0 183048  2144 ?        S    14:48   0:00  \_ /usr/sbin/CROND -n
root      35982  0.0  0.0  20164   968 ?        Ss   14:48   0:00  |   \_ jailshell (pactpay) [36005] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   36005  0.0  0.0  20164   260 ?        S    14:48   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   36008  0.0  0.7 476724 17484 ?        S    14:48   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      35973  0.0  0.0 183048  2140 ?        S    14:48   0:00  \_ /usr/sbin/CROND -n
root      35991  0.0  0.0  20164   964 ?        Ss   14:48   0:00      \_ jailshell (nigeria) [36003] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   36003  0.0  0.0  20164   256 ?        S    14:48   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   36004  0.0  0.6 400652 15940 ?        S    14:48   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0   4388     4 ?        Ss   09:46   0:00 /usr/sbin/acpid
root        569  0.0  0.0 114704     0 ttyS0    Ss+  09:46   0:00 /bin/bash
root        570  0.0  0.0 108296     8 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    622  0.0  0.1  89116  3804 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  35688  0.0  0.4  90260  9716 ?        S    14:47   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  35925  0.0  0.2  89500  5856 ?        S    14:47   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    959  0.0  0.4 114016 10420 ?        Ssl  09:46   0:04 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    960  0.0  0.0  11604    24 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        961  0.0  0.0 572372   624 ?        Ssl  09:46   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    963  0.0  1.4 5654048 35216 ?       SLsl 09:46   0:10 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0  51508   460 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1096  0.0  0.0  46912  1328 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1097  0.0  0.1  47720  2948 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1098  0.0  0.0  10320   316 ?        S    09:46   0:00  \_ dovecot/anvil
root       1099  0.0  0.0  10452   568 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1100  0.0  0.0  46912  2164 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1101  0.0  0.1  47680  3056 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1108  0.0  0.1  24568  2512 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1113  0.0  0.0  13568   436 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1182  0.0  0.0  41136  1468 ?        S    09:46   0:00  \_ dovecot/auth
worencom  32624  0.0  0.1  38468  3676 ?        S    14:41   0:00  \_ dovecot/imap
root      32866  0.0  0.0  28920  2404 ?        S    14:41   0:00  \_ dovecot/quota-status -p postfix
root      35711  0.0  0.1  41052  2732 ?        S    14:47   0:00  \_ dovecot/auth -w
root        966  0.0  0.0 445028     0 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    968  0.0  0.0 111608     4 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    969  0.0  0.0  10388    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    970  0.0  0.0 113932     8 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
named       981  0.0  1.2 785392 31224 ?        Ssl  09:46   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        982  0.1  7.9 1828076 192736 ?      Ssl  09:46   0:34 /usr/local/cpanel/3rdparty/bin/clamd -F
root        984  0.0  0.0 386112   424 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  0.0 397344  2416 ?        Ss   09:46   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    28691  0.0  0.3 471856  9496 ?        S    14:32   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    33096  0.1  0.4 471808  9780 ?        S    14:42   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    35386  0.2  0.3 471784  9264 ?        S    14:46   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    35468  0.3  0.3 471784  9260 ?        S    14:46   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    35695  0.4  0.3 471784  9264 ?        S    14:47   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
nigeria   35920  1.9  0.3 397784  8952 ?        S    14:47   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    35944  1.3  0.6 405160 15256 ?        S    14:47   0:00  \_ php-fpm: pool cloudware_ng
memcach+    994  0.0  0.0 342400     0 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1007  0.0  0.0 392856   292 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root       1012  0.0  0.0 385496   400 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1013  0.0  0.1 265552  4684 ?        Ssl  09:46   0:04 /usr/sbin/rsyslogd -n
root       1014  0.0  1.1 261032 27988 ?        Ss   09:46   0:06 cpsrvd (SSL) - waiting for connections                   
root      35928  0.0  0.0      0     0 ?        Z    14:47   0:00  \_ [cpaneld - servi] <defunct>
root       1017  0.0  0.0 436392   404 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1018  0.0  0.0 153404   224 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
root       1020  0.0  0.0 111304   356 ?        Ss   09:46   0:01 /usr/sbin/sshd -D
cpanelc+   1026  0.0  0.1  10540  3572 ?        Ss   09:46   0:13 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1218  0.0  0.1 157708  2864 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1233  0.0  1.0 410452 25772 ?        Ss   09:46   0:14 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1234  0.0  0.1 387528  3284 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.2 183900  6692 ?        Ss   09:46   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1265  0.0  0.4 209320 10956 ?        Ss   09:46   0:01 tailwatchd
root       1267  0.0  0.0 167452  1200 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1713  0.0  0.0 299272   632 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1728  0.0  0.0 130416  1368 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1782  1.9 10.8 1469608 263216 ?      Sl   09:46   5:46 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1968  0.0  0.2 266984  5096 ?        Ss   09:46   0:01 /usr/sbin/httpd -k start
root       1970  0.0  0.0  12852   328 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1971  0.0  0.0  12732   288 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1972  0.0  0.0  12892   340 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1977  0.0  0.0  53340     4 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    25119  0.0  0.8 277848 19540 ?        S    14:25   0:00  \_ /usr/sbin/httpd -k start
nobody    25127  0.0  0.8 277584 19900 ?        S    14:25   0:00  \_ /usr/sbin/httpd -k start
nobody    25138  0.0  0.8 277804 19920 ?        S    14:25   0:00  \_ /usr/sbin/httpd -k start
nobody    25146  0.0  0.7 277656 19104 ?        S    14:25   0:01  \_ /usr/sbin/httpd -k start
nobody    27476  0.0  0.8 277516 19604 ?        S    14:30   0:00  \_ /usr/sbin/httpd -k start
nobody    28850  0.0  0.8 277844 19456 ?        S    14:32   0:00  \_ /usr/sbin/httpd -k start
nobody    29288  0.0  0.7 277536 18932 ?        S    14:33   0:00  \_ /usr/sbin/httpd -k start
nobody    29685  0.0  0.7 277604 18948 ?        S    14:34   0:00  \_ /usr/sbin/httpd -k start
nobody    29693  0.0  0.7 277472 18156 ?        S    14:35   0:00  \_ /usr/sbin/httpd -k start
nobody    31936  0.1  0.7 277464 18696 ?        S    14:39   0:00  \_ /usr/sbin/httpd -k start
nobody    32494  0.0  0.7 277520 18132 ?        S    14:40   0:00  \_ /usr/sbin/httpd -k start
nobody    33290  0.0  0.7 277836 17988 ?        S    14:42   0:00  \_ /usr/sbin/httpd -k start
nobody    34517  0.1  0.7 277780 17972 ?        S    14:44   0:00  \_ /usr/sbin/httpd -k start
nobody    34539  0.0  0.7 277836 17248 ?        S    14:45   0:00  \_ /usr/sbin/httpd -k start
nobody    34540  0.0  0.7 277516 17656 ?        S    14:45   0:00  \_ /usr/sbin/httpd -k start
nobody    35538  0.0  0.6 277168 16208 ?        S    14:46   0:00  \_ /usr/sbin/httpd -k start
nobody    35945  0.5  0.6 277368 16372 ?        S    14:47   0:00  \_ /usr/sbin/httpd -k start
cloudw    36039  0.0  0.7 364868 18972 ?        S    14:48   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    35954  0.0  0.6 277044 14896 ?        S    14:48   0:00  \_ /usr/sbin/httpd -k start
nobody    35955  0.0  0.5 276908 13340 ?        S    14:48   0:00  \_ /usr/sbin/httpd -k start
root       2041  0.0  0.4 182328 10400 ?        Ss   09:46   0:15 lfd - sleeping
oysipao+   9063  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+   9089  0.0  0.0   3152    56 ?        S    10:01   0:00  \_ [kworker]
root      28537  0.0  4.8 248100 118080 ?       Ss   10:50   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      32709  0.0  5.6 269720 136688 ?       S    11:00   0:10  \_ spamd child
root      32710  0.0  5.1 258476 125408 ?       S    11:00   0:00  \_ spamd child
root      13483  0.0  0.4 1275844 10144 ?       Ssl  14:00   0:00 /usr/bin/cspdaemon
root      13517  0.0  0.4 1277312 11476 ?       Ssl  14:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 39807  Threads: 3  Questions: 2278655  Slow queries: 0  Opens: 7786  Flush tables: 1  Open tables: 2000  Queries per second avg: 57.242
*************************** 1. row ***************************
     Id: 34432
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: starting
   Info: NULL
*************************** 2. row ***************************
     Id: 34433
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 34440
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.200.66.179 TIME_WAIT
      1 114.119.132.104 TIME_WAIT
      1 148.113.128.211 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 208.109.32.191 TIME_WAIT
      1 213.201.204.124 TIME_WAIT
      1 40.77.167.41 TIME_WAIT
      1 45.41.138.175 TIME_WAIT
      1 84.37.247.68 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 103.110.127.136 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 14:48:02 WAT
   Restart Time: Friday, 07-Nov-2025 03:44:42 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 11 hours 3 minutes 20 seconds
   Server load: 0.31 0.34 0.45
   Total accesses: 57393 - Total Traffic: 920.5 MB - Total Duration: 120735215
   CPU Usage: u5.93 s2.99 cu452.88 cs311.14 - 1.94% CPU load
   1.44 requests/sec - 23.7 kB/second - 16.4 kB/request - 2103.66 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

W_WKKK__WW_KK_W_KWK.............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur    Conn Child  Slot     Client      Protocol          VHost                                       Request
   0-0  25119 0/121/3762 W 2.41 32    0   4857248  0.0  2.34  51.22 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443 GET /postnews.php?ARRAY=7o2230223n313736323532363835302p2231223
   1-0  25127 0/275/3746 _ 3.30 0     26  5139860  0.0  6.10  56.38 128.140.8.200   http/1.1 cloudsms.com.ng:443      GET /cron/process_queue3.php HTTP/1.1
   2-0  29288 0/90/3684  W 1.76 72    0   3434101  0.0  1.75  53.73 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443 GET /postnews.php?ARRAY=7o2230223n313736323532363831302p2231223
   3-0  29685 2/148/3932 K 2.71 3     0   2118014  1.4  3.13  73.39 66.249.79.33    http/1.1 pactpay.com:80           GET /ads.txt HTTP/1.1
   4-0  27476 1/151/3688 K 2.97 2     399 3648730  36.5 4.21  57.08 66.249.70.32    http/1.1 support.cloudware.ng:443 GET /?c=865040934 HTTP/1.1
   5-0  33290 1/22/3896  K 0.25 3     0   4314363  5.8  0.31  67.50 66.249.79.34    http/1.1 pactpay.com:443          GET /robots.txt HTTP/1.1
   6-0  28850 0/133/3073 _ 2.84 0     355 4271081  0.0  2.70  56.80 66.249.70.34    http/1.1 support.cloudware.ng:443 GET /?c=837255196 HTTP/1.1
   7-0  31936 0/127/3058 _ 1.95 0     5   47687247 0.0  1.94  46.43 217.113.194.204 http/1.1 nigeriadecide.org:443    GET /polling_unit_category.php?state=Akwa%20ibom&lga=Ikot%20aba
   8-0  35538 0/1/2878   W 0.00 52    0   4278466  0.0  0.02  40.96 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443 GET /postnews.php?ARRAY=7o2230223n313736323532363833302p2231223
   9-0  29693 0/82/3174  W 1.77 92    0   3557103  0.0  1.82  65.46 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443 GET /postnews.php?ARRAY=7o2230223n313736323532363739302p2231223
   10-0 32494 0/68/2621  _ 1.46 1     25  4659414  0.0  1.68  32.60 116.203.129.16  http/1.1 cloudsms.com.ng:443      GET /cron/process_queue1.php HTTP/1.1
   11-0 35945 2/2/2366   K 0.03 0     353 4543297  66.7 0.07  38.68 66.249.70.33    http/1.1 support.cloudware.ng:443 GET /?c=1542434825 HTTP/1.1
   12-0 25138 2/260/2670 K 3.50 0     395 2613651  67.6 4.33  40.03 66.249.70.39    http/1.1 support.cloudware.ng:443 GET /?c=3593925369 HTTP/1.1
   13-0 35954 0/1/2540   _ 0.00 0     1   3652443  0.0  0.02  45.73 ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   14-0 35955 0/0/2630   W 0.00 0     0   3752330  0.0  0.00  39.52 ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   15-0 25146 0/191/2178 _ 4.69 0     13  3912769  0.0  4.75  29.52 114.119.132.104 http/1.1 nigeriadecide.org:443    GET /polling_unit_category.php?state=Edo&lga=Orhionmwon&=Aibiok
   16-0 34517 1/36/706   K 0.90 3     0   3839291  6.0  0.89  11.94 66.249.79.64    http/1.1 cloudsms.com.ng:443      GET /robots.txt HTTP/1.1
   17-0 34539 0/8/1754   W 0.17 134   0   3150630  0.0  0.19  32.18 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443 GET /postnews.php?ARRAY=7o2230223n313736323532363734382p2231223
   18-0 34540 2/33/1316  K 0.66 2     0   925326   1.5  3.57  20.78 66.249.79.73    http/1.1 cloudsms.com.ng:80       GET /ads.txt HTTP/1.1
   19-0 -     0/0/419    . 0.00 894   0   859816   0.0  0.00  8.92  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   20-0 -     0/0/104    . 0.00 1353  0   73342    0.0  0.00  1.47  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   21-0 -     0/0/289    . 0.00 107   0   1662947  0.0  0.00  3.78  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   22-0 -     0/0/866    . 0.00 353   0   1178087  0.0  0.00  10.26 ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   23-0 -     0/0/13     . 0.00 10108 0   32567    0.0  0.00  0.18  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   24-0 -     0/0/9      . 0.00 10114 0   29442    0.0  0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   25-0 -     0/0/8      . 0.00 10131 0   29769    0.0  0.00  0.23  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   26-0 -     0/0/12     . 0.00 10091 0   24649    0.0  0.00  0.26  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   27-0 -     0/0/31     . 0.00 10127 0   34716    0.0  0.00  0.61  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   28-0 -     0/0/259    . 0.00 10140 0   143065   0.0  0.00  3.62  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   29-0 -     0/0/96     . 0.00 10157 0   59764    0.0  0.00  2.78  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   30-0 -     0/0/13     . 0.00 10081 0   22779    0.0  0.00  9.52  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   31-0 -     0/0/103    . 0.00 9882  0   179005   0.0  0.00  0.84  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   32-0 -     0/0/2      . 0.00 10158 0   9851     0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   33-0 -     0/0/7      . 0.00 10106 0   21858    0.0  0.00  0.36  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   34-0 -     0/0/2      . 0.00 10152 0   17699    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   35-0 -     0/0/5      . 0.00 10121 0   19399    0.0  0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   36-0 -     0/0/4      . 0.00 10130 0   14235    0.0  0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   37-0 -     0/0/2      . 0.00 10153 0   15595    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   38-0 -     0/0/156    . 0.00 9886  0   148319   0.0  0.00  0.63  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   39-0 -     0/0/2      . 0.00 10154 0   15338    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   40-0 -     0/0/6      . 0.00 10109 0   21858    0.0  0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   41-0 -     0/0/208    . 0.00 9286  0   243070   0.0  0.00  2.95  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   42-0 -     0/0/2      . 0.00 10149 0   19835    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00 10150 0   19620    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   44-0 -     0/0/6      . 0.00 10107 0   24371    0.0  0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   45-0 -     0/0/5      . 0.00 10116 0   19070    0.0  0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   46-0 -     0/0/6      . 0.00 10111 0   20569    0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   47-0 -     0/0/4      . 0.00 10126 0   17777    0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   48-0 -     0/0/4      . 0.00 10123 0   16933    0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   49-0 -     0/0/2      . 0.00 10151 0   17743    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   50-0 -     0/0/3      . 0.00 10133 0   22693    0.0  0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   51-0 -     0/0/4      . 0.00 10120 0   22016    0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   52-0 -     0/0/4      . 0.00 10129 0   22448    0.0  0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   53-0 -     0/0/3      . 0.00 10137 0   9096     0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   54-0 -     0/0/6      . 0.00 10125 0   23840    0.0  0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   55-0 -     0/0/17     . 0.00 10098 0   16331    0.0  0.00  0.47  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   56-0 -     0/0/184    . 0.00 9919  0   130360   0.0  0.00  0.50  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   57-0 -     0/0/3      . 0.00 10134 0   22445    0.0  0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   58-0 -     0/0/3      . 0.00 10138 0   7899     0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   59-0 -     0/0/5      . 0.00 10113 0   23139    0.0  0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   60-0 -     0/0/139    . 0.00 9783  0   237404   0.0  0.00  1.00  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   61-0 -     0/0/2      . 0.00 10147 0   2361     0.0  0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   62-0 -     0/0/11     . 0.00 10096 0   9214     0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   63-0 -     0/0/4      . 0.00 10122 0   8490     0.0  0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   64-0 -     0/0/1      . 0.00 10164 0   0        0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   65-0 -     0/0/1      . 0.00 10162 0   0        0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   66-0 -     0/0/2      . 0.00 10145 0   8680     0.0  0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   67-0 -     0/0/1      . 0.00 10161 0   0        0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   68-0 -     0/0/3      . 0.00 10136 0   742      0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   69-0 -     0/0/1      . 0.00 10163 11  22       0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00 10143 0   10366    0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   71-0 -     0/0/65     . 0.00 9956  0   105003   0.0  0.00  1.01  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   72-0 -     0/0/151    . 0.00 9784  0   218700   0.0  0.00  1.26  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   73-0 -     0/0/2      . 0.00 10142 0   8818     0.0  0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   74-0 -     0/0/4      . 0.00 10132 0   1447     0.0  0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   75-0 -     0/0/2      . 0.00 10148 0   463      0.0  0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   76-0 -     0/0/101    . 0.00 9868  0   159456   0.0  0.00  0.87  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   77-0 -     0/0/6      . 0.00 10117 0   4997     0.0  0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   78-0 -     0/0/338    . 0.00 8361  0   272159   0.0  0.00  5.63  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00 10160 0   0        0.0  0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   80-0 -     0/0/2      . 0.00 10141 0   7766     0.0  0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   81-0 -     0/0/3      . 0.00 10124 0   10368    0.0  0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 602
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 24 seconds, (range: 0...98)
   index usage: 10%, cache usage: 14%
   total entries stored since starting: 35959
   total entries replaced since starting: 0
   total entries expired since starting: 35327
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 112 miss
   total removes since starting: 30 hit, 57 miss
Youez - 2016 - github.com/yon3zu
LinuXploit