403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.16.51.txt
 ## swap threshold exceeded
## server overview
2025-11-07.16.51 load[0] mem[62/76] mysql[1/25] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1360         186          69         816         748
Swap:          1999        1609         390
 16:51:01 up  7:04,  0 users,  load average: 0.51, 0.54, 0.56
## system overview
top - 16:51:01 up  7:04,  0 users,  load average: 0.51, 0.54, 0.56
Tasks: 200 total,   6 running, 193 sleeping,   0 stopped,   1 zombie
%Cpu(s): 57.1 us, 37.1 sy,  0.0 ni,  2.9 id,  0.0 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,   158168 free,  1425264 used,   836868 buff/cache
KiB Swap:  2047996 total,   400268 free,  1647728 used.   733932 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1782 mysql     20   0 1484772 279696   3428 S  41.2 11.6   8:05.04 /usr/sbin+
 97804 nigeria   20   0  400652  15940  10220 S  17.6  0.7   0:00.03 /opt/cpan+
   360 root      20   0   39500   3708   3464 S   5.9  0.2   0:12.94 /usr/lib/+
   489 root      20   0   24720   1224    788 R   5.9  0.1   0:05.77 /usr/lib/+
   981 named     20   0  784388  36948   2084 S   5.9  1.5   0:16.86 /usr/sbin+
 97795 cloudw    20   0  364868  18708  10552 S   5.9  0.8   0:00.01 /opt/cpan+
 97800 pactpay   20   0  476460  16052  10480 S   5.9  0.7   0:00.01 /opt/cpan+
 97810 saboakin  20   0  400652  15408  10000 R   5.9  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44424   3488   1520 S   0.0  0.1   0:36.74 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.97 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.42 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:29.37 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.39 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.17 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:25.15 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.48 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:02.67 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:02.98 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.60 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   382 root      20   0   45352      8      4 S   0.0  0.0   0:00.36 /usr/lib/+
   409 root      16  -4   55532    456    336 S   0.0  0.0   0:02.04 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   493 root      20   0  224268   4532    948 S   0.0  0.2   0:00.42 queueproc+
   494 root      20   0  152780     76     36 S   0.0  0.0   0:00.01 /usr/sbin+
   499 nscd      20   0 1334484   1936    764 S   0.0  0.1   0:09.24 /usr/sbin+
   500 rpc       20   0   69256     24      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   503 dbus      20   0   57032   1328    616 S   0.0  0.1   0:13.23 /usr/bin/+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0   52852    216    108 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  610540    984    608 S   0.0  0.0   0:03.40 /usr/lib/+
   541 root      20   0   21540    388    280 S   0.0  0.0   0:00.59 /usr/sbin+
   551 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  124480    428    296 S   0.0  0.0   0:00.72 /usr/sbin+
   558 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   570 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   622 mailnull  20   0   89116   3772    828 S   0.0  0.2   0:00.40 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:03.30 [loop0]
   677 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   959 systuser  20   0  114016  10528   2564 S   0.0  0.4   0:06.04 /usr/loca+
   960 systuser  20   0   11604     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   961 root      20   0  572372    624    164 S   0.0  0.0   0:02.24 /usr/bin/+
   963 telegraf  20   0 5654048  35048   5804 S   0.0  1.4   0:13.94 /usr/loca+
   964 root      20   0   51508    612    432 S   0.0  0.0   0:00.33 /usr/sbin+
   966 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   968 systuser  20   0  111608      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 systuser  20   0   10388     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   970 systuser  20   0  113932      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   982 root      20   0 1828076  92904    432 S   0.0  3.8   0:35.56 /usr/loca+
   984 root      20   0  386112    508    412 S   0.0  0.0   0:00.73 php-fpm: +
   992 root      20   0  397344   2420    612 S   0.0  0.1   0:05.52 php-fpm: +
   994 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.56 /usr/bin/+
  1007 root      20   0  392856    328    244 S   0.0  0.0   0:00.71 php-fpm: +
  1012 root      20   0  385496    440    340 S   0.0  0.0   0:00.74 php-fpm: +
  1013 root      20   0  290128   4284   3308 S   0.0  0.2   0:06.75 /usr/sbin+
  1014 root      20   0  261164  27388   4908 S   0.0  1.1   0:08.21 cpsrvd (S+
  1017 root      20   0  436392    404    316 S   0.0  0.0   0:00.84 php-fpm: +
  1018 root      20   0  153404    224    140 S   0.0  0.0   0:00.55 pure-ftpd+
  1020 root      20   0  111304    356    260 S   0.0  0.0   0:02.85 /usr/sbin+
  1026 cpanelc+  20   0   10540   3560   2300 R   0.0  0.1   0:19.50 /usr/loca+
  1096 dovenull  20   0   46912   2276   1712 S   0.0  0.1   0:00.37 dovecot/p+
  1097 dovenull  20   0   47936   3392   1980 S   0.0  0.1   0:00.20 dovecot/i+
  1098 dovecot   20   0   10320    316    200 S   0.0  0.0   0:00.06 dovecot/a+
  1099 root      20   0   10452    568    368 S   0.0  0.0   0:00.31 dovecot/l+
  1100 dovenull  20   0   46912   2132   1564 S   0.0  0.1   0:00.51 dovecot/p+
  1101 dovenull  20   0   47996   3268   1748 S   0.0  0.1   0:00.31 dovecot/i+
  1108 root      20   0   24568   2524    512 S   0.0  0.1   0:00.20 dovecot/c+
  1113 dovecot   20   0   13568    436    220 S   0.0  0.0   0:00.06 dovecot/s+
  1182 dovecot   20   0   41268   1548   1016 S   0.0  0.1   0:00.55 dovecot/a+
  1218 systuser  20   0  157708   2864    816 S   0.0  0.1   0:00.13 SonarPush+
  1233 wp-tool+  20   0  410452  25752   1404 S   0.0  1.1   0:20.89 /usr/bin/+
  1234 wp-tool+  20   0  387528   3280   1424 S   0.0  0.1   0:00.28 /usr/bin/+
  1264 root      20   0  183900   6096   2864 S   0.0  0.3   0:02.01 cpdavd - +
  1265 root      20   0  209320  11008   2392 S   0.0  0.5   0:02.63 tailwatchd
  1267 root      20   0  167452   4164   2796 S   0.0  0.2   0:00.43 dnsadmin +
  1713 root      20   0  299272    632    448 S   0.0  0.0   0:00.68 php-fpm: +
  1728 root      38  18  130416   1376    692 S   0.0  0.1   0:00.06 cpanellog+
  1968 root      20   0  266984   5096    600 S   0.0  0.2   0:01.48 /usr/sbin+
  1970 root      20   0   12796    328    212 S   0.0  0.0   0:01.99 /usr/loca+
  1971 root      20   0   12732    288    212 S   0.0  0.0   0:01.68 /usr/loca+
  1972 root      20   0   12828    340    216 S   0.0  0.0   0:01.82 /usr/loca+
  1977 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  2041 root      20   0  183040  11484   1104 S   0.0  0.5   0:22.21 lfd - sle+
  9063 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  9089 oysipao+  20   0    3152     56     16 S   0.0  0.0   0:00.46 [kworker]
 19376 root      20   0       0      0      0 S   0.0  0.0   0:00.23 [kworker/+
 28537 root      20   0  248100 118080   1388 S   0.0  4.9   0:05.28 /usr/loca+
 32709 root      20   0  269720 136484   2908 S   0.0  5.6   0:22.43 spamd chi+
 32710 root      20   0  258916 125440   2840 S   0.0  5.2   0:00.73 spamd chi+
 72906 root      20   0 1341636  10700    600 S   0.0  0.4   0:00.08 /usr/bin/+
 72945 root      20   0 1277312  11616    596 S   0.0  0.5   0:00.07 /usr/bin/+
 77244 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 77948 nobody    20   0  277516  20268   4872 S   0.0  0.8   0:01.69 /usr/sbin+
 82053 nobody    20   0  277536  19744   4788 S   0.0  0.8   0:01.85 /usr/sbin+
 82301 worencom  20   0   38492   3568   2608 S   0.0  0.1   0:00.00 dovecot/i+
 82819 root      20   0       0      0      0 R   0.0  0.0   0:00.13 [kworker/+
 84435 nobody    20   0  277572  19584   4760 S   0.0  0.8   0:01.53 /usr/sbin+
 85690 nobody    20   0  277844  18884   4496 S   0.0  0.8   0:00.70 /usr/sbin+
 86097 nobody    20   0  277540  19708   4844 S   0.0  0.8   0:01.57 /usr/sbin+
 86900 nobody    20   0  277528  19032   4652 S   0.0  0.8   0:00.83 /usr/sbin+
 87152 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 87154 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 88029 root      20   0       0      0      0 R   0.0  0.0   0:00.04 [kworker/+
 88807 cloudw    20   0  471840   9792   5340 S   0.0  0.4   0:01.13 php-fpm: +
 89342 nobody    20   0  277512  19324   4544 S   0.0  0.8   0:01.04 /usr/sbin+
 90303 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 91154 nobody    20   0  277516  19364   4384 S   0.0  0.8   0:00.90 /usr/sbin+
 91703 nobody    20   0  277852  18728   4148 S   0.0  0.8   0:00.59 /usr/sbin+
 91765 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 93059 nobody    20   0  277884  19536   4392 S   0.0  0.8   0:00.89 /usr/sbin+
 93069 nobody    20   0  277836  18964   4152 S   0.0  0.8   0:00.35 /usr/sbin+
 93928 nobody    20   0  277516  18416   4204 S   0.0  0.8   0:00.23 /usr/sbin+
 94041 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 94615 nobody    20   0  277476  18228   4060 S   0.0  0.8   0:00.33 /usr/sbin+
 94913 nobody    20   0  277456  18772   4272 S   0.0  0.8   0:00.47 /usr/sbin+
 95388 nobody    20   0  277516  18012   3972 S   0.0  0.7   0:00.26 /usr/sbin+
 95391 nobody    20   0  277840  17680   3748 S   0.0  0.7   0:00.09 /usr/sbin+
 95404 nobody    20   0  277836  18396   4016 S   0.0  0.8   0:00.29 /usr/sbin+
 95789 cloudw    20   0  471784   9260   4976 S   0.0  0.4   0:00.21 php-fpm: +
 95893 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 96421 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 96677 cloudw    20   0  471784   9260   4976 S   0.0  0.4   0:00.22 php-fpm: +
 96792 cloudw    20   0  471784   9260   4976 S   0.0  0.4   0:00.21 php-fpm: +
 96889 cloudw    20   0  471784   9264   4980 S   0.0  0.4   0:00.21 php-fpm: +
 97291 nobody    20   0  277844  17536   3752 S   0.0  0.7   0:00.04 /usr/sbin+
 97601 healtho+  20   0  460548  70932   4372 S   0.0  2.9   0:04.34 php-fpm: +
 97635 healtho+  20   0  459292  69480   4188 S   0.0  2.9   0:03.13 php-fpm: +
 97671 healtho+  20   0  457376  67428   4188 S   0.0  2.8   0:02.01 php-fpm: +
 97697 nigeria   20   0  405980  15956   3896 S   0.0  0.7   0:00.18 php-fpm: +
 97698 nobody    20   0  277340  16504   3292 S   0.0  0.7   0:00.01 /usr/sbin+
 97709 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 97722 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 97740 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97741 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97742 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97743 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97744 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97746 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97747 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97748 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97749 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97750 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 97752 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 97753 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 97754 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 97755 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 97756 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 97778 root      20   0  160244   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 97779 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 97781 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 97782 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 97783 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 97784 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 97785 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 97786 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 97787 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 97788 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 97789 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 97790 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 97796 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 97802 saboakin  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 97803 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:46   0:29  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    09:46   0:25  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        660  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [loop0]
root        677  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      19376  0.0  0.0      0     0 ?        S    14:12   0:00  \_ [kworker/u200:0]
root      77244  0.0  0.0      0     0 ?        S    16:09   0:00  \_ [kworker/1:3]
root      82819  0.0  0.0      0     0 ?        R    16:20   0:00  \_ [kworker/1:5]
root      87152  0.0  0.0      0     0 ?        S    16:29   0:00  \_ [kworker/0:3]
root      87154  0.0  0.0      0     0 ?        S    16:29   0:00  \_ [kworker/0:4]
root      88029  0.0  0.0      0     0 ?        D    16:30   0:00  \_ [kworker/u200:1]
root      97813  0.0  0.0      0     0 ?        R    16:51   0:00  |   \_ [kworker/u200:1]
root      90303  0.0  0.0      0     0 ?        S    16:35   0:00  \_ [kworker/1:0]
root      91765  0.0  0.0      0     0 ?        S    16:38   0:00  \_ [kworker/0:0]
root      94041  0.0  0.0      0     0 ?        S    16:43   0:00  \_ [kworker/0:1]
root      95893  0.0  0.0      0     0 ?        D    16:47   0:00  \_ [kworker/0:2]
root      96421  0.0  0.0      0     0 ?        S    16:48   0:00  \_ [kworker/u200:2]
root          1  0.1  0.1  44424  3488 ?        Ss   09:46   0:36 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  39500  3708 ?        Ss   09:46   0:12 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45352     8 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   456 ?        S<sl 09:46   0:02 /sbin/auditd
root        489  0.0  0.0  24720  1224 ?        Ss   09:46   0:05 /usr/lib/systemd/systemd-logind
root        493  0.0  0.1 224268  4532 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
root        494  0.0  0.0 152780    76 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        499  0.0  0.0 1334484 1936 ?        Ssl  09:46   0:09 /usr/sbin/nscd
rpc         500  0.0  0.0  69256    24 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        503  0.0  0.0  57032  1328 ?        Rs   09:46   0:13 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        523  0.0  0.0 195208     0 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0  52852   216 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.0 610540   984 ?        Ssl  09:46   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        541  0.0  0.0  21540   388 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        551  0.0  0.0  24208     4 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        552  0.0  0.0 124480   428 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      97740  0.0  0.0 183048  2140 ?        S    16:51   0:00  \_ /usr/sbin/CROND -n
root      97754  0.0  0.0 113284  1212 ?        Ss   16:51   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      97755  0.0  0.0 108052   356 ?        S    16:51   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      97756  0.0  0.0 113288  1516 ?        S    16:51   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      97814  0.0  0.0 153840  2092 ?        R    16:51   0:00  |               \_ ps auxf
root      97741  0.0  0.0 183048  2140 ?        S    16:51   0:00  \_ /usr/sbin/CROND -n
root      97786  0.0  0.0  20164   804 ?        Ss   16:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      97742  0.0  0.0 183048  2140 ?        S    16:51   0:00  \_ /usr/sbin/CROND -n
root      97779  0.0  0.0  20164   804 ?        Ss   16:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      97743  0.0  0.0 183048  2140 ?        S    16:51   0:00  \_ /usr/sbin/CROND -n
root      97789  0.0  0.0  20164   808 ?        Ss   16:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      97744  0.0  0.0 183048  2140 ?        S    16:51   0:00  \_ /usr/sbin/CROND -n
root      97788  0.0  0.0  20164   808 ?        Ss   16:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      97746  0.0  0.0 183048  2140 ?        S    16:51   0:00  \_ /usr/sbin/CROND -n
root      97785  0.0  0.0  20164   804 ?        Ss   16:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      97747  0.0  0.0 183048  2140 ?        S    16:51   0:00  \_ /usr/sbin/CROND -n
root      97782  0.0  0.0  20164   808 ?        Ss   16:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      97748  0.0  0.0 183048  2140 ?        S    16:51   0:00  \_ /usr/sbin/CROND -n
root      97787  0.0  0.0  20164   804 ?        Ss   16:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      97749  0.0  0.0 183048  2140 ?        S    16:51   0:00  \_ /usr/sbin/CROND -n
root      97783  0.0  0.0  20164   808 ?        Ss   16:51   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      97750  0.0  0.0 183048  2144 ?        S    16:51   0:00  \_ /usr/sbin/CROND -n
root      97784  0.0  0.0  20164   968 ?        Ss   16:51   0:00  |   \_ jailshell (pactpay) [97796] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   97796  0.0  0.0  20164   264 ?        S    16:51   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   97800  1.0  0.6 476460 16052 ?        R    16:51   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      97752  0.0  0.0 183048  2144 ?        S    16:51   0:00  \_ /usr/sbin/CROND -n
root      97781  0.0  0.0  20164   968 ?        Ss   16:51   0:00  |   \_ jailshell (nigeria) [97803] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   97803  0.0  0.0  20164   264 ?        S    16:51   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   97804  3.0  0.6 400652 15940 ?        R    16:51   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      97753  0.0  0.0 183048  2140 ?        S    16:51   0:00  \_ /usr/sbin/CROND -n
root      97790  0.0  0.0  20164   960 ?        Ss   16:51   0:00      \_ jailshell (saboakin) [97802] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  97802  0.0  0.0      0     0 ?        D    16:51   0:00          \_ [jailshell]
root        558  0.0  0.0   4388     4 ?        Ss   09:46   0:00 /usr/sbin/acpid
root        569  0.0  0.0 114704     0 ttyS0    Ss+  09:46   0:00 /bin/bash
root        570  0.0  0.0 108296     8 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    622  0.0  0.1  89116  3772 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    959  0.0  0.4 114016 10528 ?        Ssl  09:46   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    960  0.0  0.0  11604    24 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        961  0.0  0.0 572372   624 ?        Ssl  09:46   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    963  0.0  1.4 5654048 35048 ?       SLsl 09:46   0:13 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0  51508   612 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1096  0.0  0.0  46912  2276 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1097  0.0  0.1  47936  3392 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1098  0.0  0.0  10320   316 ?        S    09:46   0:00  \_ dovecot/anvil
root       1099  0.0  0.0  10452   568 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1100  0.0  0.0  46912  2132 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1101  0.0  0.1  47996  3268 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1108  0.0  0.1  24568  2524 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1113  0.0  0.0  13568   436 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1182  0.0  0.0  41268  1548 ?        S    09:46   0:00  \_ dovecot/auth
worencom  82301  0.0  0.1  38492  3568 ?        S    16:19   0:00  \_ dovecot/imap
root        966  0.0  0.0 445028     0 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    968  0.0  0.0 111608     4 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    969  0.0  0.0  10388    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    970  0.0  0.0 113932     8 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
named       981  0.0  1.5 784388 36948 ?        Ssl  09:46   0:16 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        982  0.1  3.8 1828076 92904 ?       Ssl  09:46   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
root        984  0.0  0.0 386112   508 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  0.0 397344  2420 ?        Ss   09:46   0:05 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    88807  0.0  0.4 471840  9792 ?        S    16:31   0:01  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    95789  0.0  0.3 471784  9260 ?        S    16:46   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    96677  0.1  0.3 471784  9260 ?        S    16:48   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    96792  0.1  0.3 471784  9260 ?        S    16:48   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    96889  0.1  0.3 471784  9264 ?        S    16:48   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
healtho+  97601 13.5  2.9 460548 70932 ?        S    16:50   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  97635 13.6  2.8 459292 69480 ?        S    16:50   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  97671 12.5  2.7 457376 67428 ?        S    16:50   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   97697  1.8  0.6 405980 15956 ?        S    16:50   0:00  \_ php-fpm: pool nigeriadecide_org
memcach+    994  0.0  0.0 342400     0 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1007  0.0  0.0 392856   328 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root       1012  0.0  0.0 385496   440 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1013  0.0  0.1 290128  4284 ?        Ssl  09:46   0:06 /usr/sbin/rsyslogd -n
root       1014  0.0  1.1 261164 27388 ?        Ss   09:46   0:08 cpsrvd (SSL) - waiting for connections                   
root      97709  0.0  0.0      0     0 ?        Z    16:50   0:00  \_ [cpaneld - servi] <defunct>
root       1017  0.0  0.0 436392   404 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1018  0.0  0.0 153404   224 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
root       1020  0.0  0.0 111304   356 ?        Ss   09:46   0:02 /usr/sbin/sshd -D
root      97722  0.0  0.1 111304  4264 ?        Ss   16:50   0:00  \_ sshd: [accepted]
cpanelc+   1026  0.0  0.1  10540  3560 ?        Ss   09:46   0:19 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1218  0.0  0.1 157708  2864 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1233  0.0  1.0 410452 25752 ?        Ss   09:46   0:20 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1234  0.0  0.1 387528  3280 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.2 183900  6096 ?        Ss   09:46   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1265  0.0  0.4 209320 11008 ?        Ss   09:46   0:02 tailwatchd
root       1267  0.0  0.1 167452  4164 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1713  0.0  0.0 299272   632 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1728  0.0  0.0 130416  1376 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1782  1.9 11.5 1484772 279696 ?      Sl   09:46   8:05 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1968  0.0  0.2 266984  5096 ?        Ss   09:46   0:01 /usr/sbin/httpd -k start
root       1970  0.0  0.0  12796   328 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1971  0.0  0.0  12732   288 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1972  0.0  0.0  12828   340 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1977  0.0  0.0  53340     4 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    77948  0.0  0.8 277516 20268 ?        S    16:10   0:01  \_ /usr/sbin/httpd -k start
nobody    82053  0.0  0.8 277536 19744 ?        S    16:18   0:01  \_ /usr/sbin/httpd -k start
nobody    84435  0.0  0.8 277572 19584 ?        S    16:23   0:01  \_ /usr/sbin/httpd -k start
nobody    85690  0.0  0.7 277844 18884 ?        S    16:25   0:00  \_ /usr/sbin/httpd -k start
nobody    86097  0.1  0.8 277540 19708 ?        S    16:26   0:01  \_ /usr/sbin/httpd -k start
nobody    86900  0.0  0.7 277528 19032 ?        S    16:28   0:00  \_ /usr/sbin/httpd -k start
nobody    89342  0.0  0.7 277512 19324 ?        S    16:32   0:01  \_ /usr/sbin/httpd -k start
nobody    91154  0.1  0.8 277516 19364 ?        S    16:36   0:00  \_ /usr/sbin/httpd -k start
cloudw    97795  1.0  0.7 364868 18708 ?        S    16:51   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    91703  0.0  0.7 277852 18728 ?        S    16:37   0:00  \_ /usr/sbin/httpd -k start
nobody    93059  0.1  0.8 277884 19536 ?        S    16:40   0:00  \_ /usr/sbin/httpd -k start
nobody    93069  0.0  0.7 277836 18964 ?        S    16:40   0:00  \_ /usr/sbin/httpd -k start
nobody    93928  0.0  0.7 277516 18416 ?        S    16:42   0:00  \_ /usr/sbin/httpd -k start
nobody    94615  0.0  0.7 277476 18228 ?        S    16:44   0:00  \_ /usr/sbin/httpd -k start
nobody    94913  0.1  0.7 277456 18772 ?        S    16:44   0:00  \_ /usr/sbin/httpd -k start
nobody    95388  0.0  0.7 277516 18012 ?        S    16:45   0:00  \_ /usr/sbin/httpd -k start
nobody    95391  0.0  0.7 277840 17680 ?        S    16:45   0:00  \_ /usr/sbin/httpd -k start
nobody    95404  0.0  0.7 277836 18396 ?        S    16:45   0:00  \_ /usr/sbin/httpd -k start
nobody    97291  0.0  0.7 277844 17536 ?        S    16:50   0:00  \_ /usr/sbin/httpd -k start
nobody    97698  0.1  0.6 277340 16504 ?        S    16:50   0:00  \_ /usr/sbin/httpd -k start
root       2041  0.0  0.4 183040 11484 ?        Ss   09:46   0:22 lfd - sleeping
oysipao+   9063  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+   9089  0.0  0.0   3152    56 ?        S    10:01   0:00  \_ [kworker]
root      28537  0.0  4.8 248100 118080 ?       Ss   10:50   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      32709  0.1  5.6 269720 136484 ?       S    11:00   0:22  \_ spamd child
root      32710  0.0  5.1 258916 125440 ?       S    11:00   0:00  \_ spamd child
root      72906  0.0  0.4 1341636 10700 ?       Ssl  16:00   0:00 /usr/bin/cspdaemon
root      72945  0.0  0.4 1277312 11616 ?       Ssl  16:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 47186  Threads: 3  Questions: 3222963  Slow queries: 0  Opens: 9674  Flush tables: 1  Open tables: 2000  Queries per second avg: 68.303
*************************** 1. row ***************************
     Id: 48590
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 48592
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 48596
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.136.120 TIME_WAIT
      1 114.119.154.41 TIME_WAIT
      1 140.99.218.51 TIME_WAIT
      1 142.44.233.180 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 198.145.140.157 TIME_WAIT
      1 ::1 TIME_WAIT
      1 207.46.13.127 TIME_WAIT
      1 45.41.174.101 TIME_WAIT
      1 52.167.144.20 TIME_WAIT
      1 54.39.210.61 TIME_WAIT
      1 80.241.214.201 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 170.106.107.87 TIME_WAIT
     77 157.230.45.41 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 16:51:01 WAT
   Restart Time: Friday, 07-Nov-2025 03:44:42 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 13 hours 6 minutes 19 seconds
   Server load: 0.51 0.54 0.56
   Total accesses: 84104 - Total Traffic: 1.3 GB - Total Duration: 193028038
   CPU Usage: u10.38 s4.75 cu695.37 cs491.25 - 2.55% CPU load
   1.78 requests/sec - 29.8 kB/second - 16.7 kB/request - 2295.11 ms/request
   15 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

KKWRR_KW_WW__WWKW..RW...........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req    Dur    Conn  Child  Slot     Client      Protocol             VHost                                         Request
   0-0  93059 3/281/5155 K 3.58 1     309  10199803 100.2 3.64  74.75 66.249.70.39    http/1.1 support.cloudware.ng:443      GET /?c=2261424146 HTTP/1.1
   1-0  86097 1/430/5206 K 5.65 1     272  10025195 34.7  5.74  77.00 66.249.70.35    http/1.1 support.cloudware.ng:443      GET /?c=1762676914 HTTP/1.1
   2-0  94615 0/83/5414  W 1.22 122   0    6206356  0.0   1.14  93.14 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443      GET /postnews.php?ARRAY=7o2230223n313736323533343133392p2231223
   3-0  97291 0/14/5123  R 0.10 0     25   7117675  0.0   0.15  93.87 157.230.45.41   http/1.1 health.oyostate.gov.ng:443
   4-0  94913 0/185/5200 R 2.49 0     27   6837658  0.0   1.54  79.31 72.14.201.90    http/1.1 nigeriadecide.org:443
   5-0  84435 0/455/5516 _ 5.74 0     0    7074254  0.0   5.94  93.02 ::1             http/1.1 chs1.nescrow.com.ng:80        GET //whm-server-status HTTP/1.0
   6-0  93069 1/99/4464  K 1.22 2     1043 7936848  0.5   1.42  78.33 92.205.19.191   http/1.1 developers.cloudsms.com.ng:80 GET /api.php?userid=10312800&password=lovely1&type=5&destinatio
   7-0  95388 0/53/4530  W 0.94 142   0    50578539 0.0   0.98  68.43 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443      GET /postnews.php?ARRAY=7o2230223n313736323533343131392p2231223
   8-0  89342 0/247/4250 _ 4.53 0     290  8766838  0.0   3.94  62.73 157.230.45.41   http/1.1 health.oyostate.gov.ng:443    POST //xmlrpc.php HTTP/1.1
   9-0  91154 0/204/4818 W 3.51 0     0    8045212  0.0   3.50  95.43 66.249.70.34    http/1.1 support.cloudware.ng:443      GET /?c=3701681026 HTTP/1.1
   10-0 86900 0/244/3811 W 2.56 162   0    9207853  0.0   4.60  51.74 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443      GET /postnews.php?ARRAY=7o2230223n313736323533343039392p2231223
   11-0 91703 0/140/3368 _ 2.92 0     461  9403161  0.0   2.36  55.29 52.167.144.20   http/1.1 team.cloudware.ng:80          GET /var/cache/prod/pools/2wJoJAFabM/W/M/?C=S;O=D HTTP/1.1
   12-0 93928 0/65/3680  _ 0.65 0     27   5836369  0.0   1.09  62.12 128.140.8.200   http/1.1 cloudsms.com.ng:443           GET /cron/process_queue3.php HTTP/1.1
   13-0 82053 0/549/3693 W 6.66 230   0    5806653  0.0   10.22 66.35 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443      GET /postnews.php?ARRAY=7o2230223n313736323533343033312p2231223
   14-0 97698 0/4/4079   W 0.00 0     0    6010912  0.0   0.02  62.11 157.230.45.41   http/1.1 health.oyostate.gov.ng:443    POST //xmlrpc.php HTTP/1.1
   15-0 85690 4/166/3500 K 2.48 0     356  8014739  132.4 2.82  49.07 66.249.70.38    http/1.1 support.cloudware.ng:443      GET /?c=591565222 HTTP/1.1
   16-0 95391 0/24/1446  W 0.24 102   0    7524006  0.0   0.32  25.93 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443      GET /postnews.php?ARRAY=7o2230223n313736323533343135392p2231223
   17-0 -     0/0/2726   . 0.00 278   0    5805238  0.0   0.00  56.54 ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   18-0 -     0/0/2595   . 0.00 147   0    1758629  0.0   0.00  40.89 ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   19-0 77948 0/419/1253 R 5.66 12    314  3375518  0.0   6.25  21.42 105.112.121.157 http/1.1
   20-0 95404 0/85/840   W 1.00 0     0    1575218  0.0   0.94  11.91 ::1             http/1.1 chs1.nescrow.com.ng:80        GET //whm-server-status HTTP/1.0
   21-0 -     0/0/338    . 0.00 3821  0    2046139  0.0   0.00  5.01  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   22-0 -     0/0/975    . 0.00 4255  0    1235766  0.0   0.00  12.52 ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   23-0 -     0/0/16     . 0.00 4627  0    33259    0.0   0.00  0.20  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   24-0 -     0/0/87     . 0.00 4362  0    62551    0.0   0.00  1.41  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   25-0 -     0/0/8      . 0.00 17511 0    29769    0.0   0.00  0.23  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   26-0 -     0/0/12     . 0.00 17471 0    24649    0.0   0.00  0.26  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   27-0 -     0/0/31     . 0.00 17507 0    34716    0.0   0.00  0.61  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   28-0 -     0/0/259    . 0.00 17520 0    143065   0.0   0.00  3.62  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   29-0 -     0/0/96     . 0.00 17536 0    59764    0.0   0.00  2.78  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   30-0 -     0/0/13     . 0.00 17461 0    22779    0.0   0.00  9.52  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   31-0 -     0/0/103    . 0.00 17262 0    179005   0.0   0.00  0.84  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   32-0 -     0/0/2      . 0.00 17537 0    9851     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   33-0 -     0/0/7      . 0.00 17486 0    21858    0.0   0.00  0.36  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   34-0 -     0/0/2      . 0.00 17532 0    17699    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   35-0 -     0/0/5      . 0.00 17501 0    19399    0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   36-0 -     0/0/4      . 0.00 17510 0    14235    0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   37-0 -     0/0/2      . 0.00 17533 0    15595    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   38-0 -     0/0/156    . 0.00 17266 0    148319   0.0   0.00  0.63  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   39-0 -     0/0/2      . 0.00 17534 0    15338    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   40-0 -     0/0/6      . 0.00 17489 0    21858    0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   41-0 -     0/0/208    . 0.00 16665 0    243070   0.0   0.00  2.95  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   42-0 -     0/0/2      . 0.00 17529 0    19835    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00 17530 0    19620    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   44-0 -     0/0/6      . 0.00 17487 0    24371    0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   45-0 -     0/0/5      . 0.00 17496 0    19070    0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   46-0 -     0/0/6      . 0.00 17491 0    20569    0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   47-0 -     0/0/4      . 0.00 17506 0    17777    0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   48-0 -     0/0/4      . 0.00 17503 0    16933    0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   49-0 -     0/0/2      . 0.00 17531 0    17743    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   50-0 -     0/0/3      . 0.00 17513 0    22693    0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   51-0 -     0/0/4      . 0.00 17500 0    22016    0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   52-0 -     0/0/4      . 0.00 17509 0    22448    0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   53-0 -     0/0/3      . 0.00 17517 0    9096     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   54-0 -     0/0/6      . 0.00 17505 0    23840    0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   55-0 -     0/0/17     . 0.00 17478 0    16331    0.0   0.00  0.47  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   56-0 -     0/0/184    . 0.00 17298 0    130360   0.0   0.00  0.50  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   57-0 -     0/0/3      . 0.00 17514 0    22445    0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   58-0 -     0/0/3      . 0.00 17518 0    7899     0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   59-0 -     0/0/5      . 0.00 17493 0    23139    0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   60-0 -     0/0/139    . 0.00 17162 0    237404   0.0   0.00  1.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   61-0 -     0/0/2      . 0.00 17527 0    2361     0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   62-0 -     0/0/11     . 0.00 17476 0    9214     0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   63-0 -     0/0/4      . 0.00 17502 0    8490     0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   64-0 -     0/0/1      . 0.00 17543 0    0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   65-0 -     0/0/1      . 0.00 17541 0    0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   66-0 -     0/0/2      . 0.00 17525 0    8680     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   67-0 -     0/0/1      . 0.00 17540 0    0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   68-0 -     0/0/3      . 0.00 17516 0    742      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   69-0 -     0/0/1      . 0.00 17542 11   22       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00 17523 0    10366    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   71-0 -     0/0/65     . 0.00 17335 0    105003   0.0   0.00  1.01  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   72-0 -     0/0/151    . 0.00 17163 0    218700   0.0   0.00  1.26  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   73-0 -     0/0/2      . 0.00 17522 0    8818     0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   74-0 -     0/0/4      . 0.00 17512 0    1447     0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   75-0 -     0/0/2      . 0.00 17528 0    463      0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   76-0 -     0/0/101    . 0.00 17248 0    159456   0.0   0.00  0.87  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   77-0 -     0/0/6      . 0.00 17497 0    4997     0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   78-0 -     0/0/338    . 0.00 15740 0    272159   0.0   0.00  5.63  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00 17539 0    0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   80-0 -     0/0/2      . 0.00 17521 0    7766     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   81-0 -     0/0/3      . 0.00 17504 0    10368    0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 586
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 12 seconds, (range: 1...58)
   index usage: 10%, cache usage: 14%
   total entries stored since starting: 51201
   total entries replaced since starting: 0
   total entries expired since starting: 50580
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 150 miss
   total removes since starting: 35 hit, 133 miss
Youez - 2016 - github.com/yon3zu
LinuXploit