403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.17.15.txt
 ## swap threshold exceeded
## server overview
2025-11-07.17.15 load[0] mem[66/76] mysql[3/25] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1480         111          95         771         613
Swap:          1999        1610         389
 17:15:01 up  7:28,  0 users,  load average: 0.70, 0.79, 0.70
## system overview
top - 17:15:01 up  7:28,  0 users,  load average: 0.70, 0.79, 0.70
Tasks: 210 total,   2 running, 207 sleeping,   0 stopped,   1 zombie
%Cpu(s): 77.1 us, 17.1 sy,  0.0 ni,  2.9 id,  2.9 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   108108 free,  1521320 used,   790872 buff/cache
KiB Swap:  2047996 total,   398904 free,  1649092 used.   622880 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1782 mysql     20   0 1484772 279752   3152 S 137.5 11.6   8:42.05 /usr/sbin+
  8322 nigeria   20   0  400652  15936  10220 S  18.8  0.7   0:00.05 /opt/cpan+
  8317 pactpay   20   0  476724  17484  11728 S   6.2  0.7   0:00.02 /opt/cpan+
  8399 cloudsms  20   0  400784  15560  10020 S   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44424   3488   1520 S   0.0  0.1   0:39.10 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.15 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.45 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:31.46 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.41 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.39 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:25.83 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.50 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:02.74 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:03.09 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.69 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40244   6600   6356 S   0.0  0.3   0:13.50 /usr/lib/+
   382 root      20   0   45352      8      4 S   0.0  0.0   0:00.36 /usr/lib/+
   409 root      16  -4   55532    456    336 S   0.0  0.0   0:02.13 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0   24720   1224    788 S   0.0  0.1   0:06.11 /usr/lib/+
   493 root      20   0  224268   4532    948 S   0.0  0.2   0:00.43 queueproc+
   494 root      20   0  152780     76     36 S   0.0  0.0   0:00.01 /usr/sbin+
   499 nscd      20   0 1334484   1944    752 S   0.0  0.1   0:09.99 /usr/sbin+
   500 rpc       20   0   69256     24      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   503 dbus      20   0   57032   1328    616 S   0.0  0.1   0:14.02 /usr/bin/+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0   52852    372    260 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  610540    984    608 S   0.0  0.0   0:03.60 /usr/lib/+
   539 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
   541 root      20   0   21540    388    280 S   0.0  0.0   0:00.62 /usr/sbin+
   551 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  124480    428    296 S   0.0  0.0   0:00.75 /usr/sbin+
   558 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   570 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   622 mailnull  20   0   89116   3768    824 S   0.0  0.2   0:00.42 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:03.31 [loop0]
   677 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   940 root      20   0 1277312  11576    596 S   0.0  0.5   0:00.07 /usr/bin/+
   959 systuser  20   0  114016  10472   2480 S   0.0  0.4   0:06.36 /usr/loca+
   960 systuser  20   0   11604     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   961 root      20   0  572372    620    160 S   0.0  0.0   0:02.36 /usr/bin/+
   963 telegraf  20   0 5654304  34852   5464 S   0.0  1.4   0:14.71 /usr/loca+
   964 root      20   0   51508    608    428 S   0.0  0.0   0:00.35 /usr/sbin+
   966 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   968 systuser  20   0  111608      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 systuser  20   0   10388     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   970 systuser  20   0  113932      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   979 root      20   0 1276100  10356    596 S   0.0  0.4   0:00.06 /usr/bin/+
   981 named     20   0  784388  36812   1908 S   0.0  1.5   0:17.74 /usr/sbin+
   982 root      20   0 1828076  87332    328 S   0.0  3.6   0:35.56 /usr/loca+
   984 root      20   0  386112    456    360 S   0.0  0.0   0:00.77 php-fpm: +
   992 root      20   0  397344   2420    612 S   0.0  0.1   0:05.94 php-fpm: +
   994 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.58 /usr/bin/+
  1007 root      20   0  392856    328    244 S   0.0  0.0   0:00.74 php-fpm: +
  1012 root      20   0  385496    448    348 S   0.0  0.0   0:00.78 php-fpm: +
  1013 root      20   0  290128   6828   5824 S   0.0  0.3   0:07.08 /usr/sbin+
  1014 root      20   0  261164  27512   4948 S   0.0  1.1   0:08.54 cpsrvd (S+
  1017 root      20   0  436392    404    316 S   0.0  0.0   0:00.87 php-fpm: +
  1018 root      20   0  153404    224    140 S   0.0  0.0   0:00.58 pure-ftpd+
  1020 root      20   0  111304    356    260 S   0.0  0.0   0:02.96 /usr/sbin+
  1026 cpanelc+  20   0   10540   3556   2296 S   0.0  0.1   0:20.71 /usr/loca+
  1096 dovenull  20   0   46912   2236   1672 S   0.0  0.1   0:00.39 dovecot/p+
  1097 dovenull  20   0   47936   3304   1892 S   0.0  0.1   0:00.20 dovecot/i+
  1098 dovecot   20   0   10320    316    200 S   0.0  0.0   0:00.07 dovecot/a+
  1099 root      20   0   10452    568    368 S   0.0  0.0   0:00.33 dovecot/l+
  1100 dovenull  20   0   46912   2112   1544 S   0.0  0.1   0:00.53 dovecot/p+
  1101 dovenull  20   0   47996   3176   1656 S   0.0  0.1   0:00.32 dovecot/i+
  1108 root      20   0   24568   2524    512 S   0.0  0.1   0:00.21 dovecot/c+
  1113 dovecot   20   0   13568    436    220 S   0.0  0.0   0:00.07 dovecot/s+
  1182 dovecot   20   0   41268   1504    972 S   0.0  0.1   0:00.55 dovecot/a+
  1218 systuser  20   0  157708   2864    816 S   0.0  0.1   0:00.13 SonarPush+
  1233 wp-tool+  20   0  410452  25752   1404 S   0.0  1.1   0:22.06 /usr/bin/+
  1234 wp-tool+  20   0  387528   3280   1424 S   0.0  0.1   0:00.29 /usr/bin/+
  1264 root      20   0  262224  22664   4936 S   0.0  0.9   0:02.08 cpdavd - +
  1265 root      20   0  209456  10808   2112 S   0.0  0.4   0:02.73 tailwatchd
  1267 root      20   0  167452   4160   2792 S   0.0  0.2   0:00.46 dnsadmin +
  1713 root      20   0  299272    632    448 S   0.0  0.0   0:00.72 php-fpm: +
  1728 root      38  18  130416   1368    684 S   0.0  0.1   0:00.07 cpanellog+
  1968 root      20   0  266984   5096    600 S   0.0  0.2   0:01.58 /usr/sbin+
  1970 root      20   0   12848    328    212 S   0.0  0.0   0:02.15 /usr/loca+
  1971 root      20   0   12732    288    212 S   0.0  0.0   0:01.82 /usr/loca+
  1972 root      20   0   12888    340    216 S   0.0  0.0   0:01.98 /usr/loca+
  1977 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  2041 root      20   0  183152  11592   1104 S   0.0  0.5   0:23.41 lfd - sle+
  3847 nobody    20   0  277796  18628   4272 S   0.0  0.8   0:00.62 /usr/sbin+
  4705 nobody    20   0  277852  18324   4140 S   0.0  0.8   0:00.52 /usr/sbin+
  5425 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  5482 nobody    20   0  277452  18208   4200 S   0.0  0.8   0:00.43 /usr/sbin+
  5491 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  5866 nobody    20   0  277516  17508   3756 S   0.0  0.7   0:00.14 /usr/sbin+
  5941 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6186 cloudw    20   0  471824   9440   5236 S   0.0  0.4   0:00.38 php-fpm: +
  6441 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6495 nobody    20   0  277836  18184   4080 S   0.0  0.8   0:00.34 /usr/sbin+
  6699 nobody    20   0  277476  17684   3984 S   0.0  0.7   0:00.18 /usr/sbin+
  6775 nobody    20   0  277844  18064   3976 S   0.0  0.7   0:00.21 /usr/sbin+
  7490 nobody    20   0  277472  17552   3844 S   0.0  0.7   0:00.10 /usr/sbin+
  7529 nobody    20   0  277512  17616   3776 S   0.0  0.7   0:00.07 /usr/sbin+
  7531 nobody    20   0  277848  17744   3904 S   0.0  0.7   0:00.13 /usr/sbin+
  7532 nobody    20   0  277832  18120   4084 S   0.0  0.7   0:00.11 /usr/sbin+
  7659 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
  7750 nobody    20   0  277512  17348   3756 S   0.0  0.7   0:00.04 /usr/sbin+
  7815 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  7953 healtho+  20   0  460348  70484   4296 S   0.0  2.9   0:04.04 php-fpm: +
  7958 healtho+  20   0  459292  69496   4204 S   0.0  2.9   0:03.92 php-fpm: +
  8038 cloudw    20   0  471784   9200   4968 S   0.0  0.4   0:00.19 php-fpm: +
  8081 healtho+  20   0  459292  69476   4184 S   0.0  2.9   0:02.55 php-fpm: +
  8159 cloudw    20   0  470992   6364   3332 S   0.0  0.3   0:00.15 php-fpm: +
  8196 healtho+  20   0  442904  52924   4188 S   0.0  2.2   0:00.59 php-fpm: +
  8201 root      20   0   41052   2780   2124 S   0.0  0.1   0:00.00 dovecot/a+
  8203 nigeria   20   0  474080  14284   6196 S   0.0  0.6   0:00.21 php-fpm: +
  8208 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  8212 nigeria   20   0  399832   9876   3896 S   0.0  0.4   0:00.20 php-fpm: +
  8228 healtho+  20   0  428568  38568   4184 S   0.0  1.6   0:00.31 php-fpm: +
  8236 nobody    20   0  277176  15912   2952 S   0.0  0.7   0:00.00 /usr/sbin+
  8259 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  8260 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8261 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8262 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8263 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8265 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8266 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8267 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8268 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8269 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8270 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  8271 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8273 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8279 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8280 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8281 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  8282 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8283 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  8284 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8285 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  8287 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8288 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8289 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8290 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8292 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
  8294 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  8296 root      20   0  188228  11112   5148 S   0.0  0.5   0:00.01 /usr/loca+
  8301 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
  8307 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
  8309 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  8318 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  8344 root      20   0  160224   2340   1636 S   0.0  0.1   0:00.00 top -n 2 +
  8388 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
  8397 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  8398 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
  8400 root      20   0    6516    412    336 R   0.0  0.0   0:00.00 /usr/sbin+
  9063 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  9089 oysipao+  20   0    3152     56     16 S   0.0  0.0   0:00.49 [kworker]
 28537 root      20   0  248100 118080   1388 S   0.0  4.9   0:05.45 /usr/loca+
 32709 root      20   0  269720 136080   2504 S   0.0  5.6   0:22.58 spamd chi+
 32710 root      20   0  258916 125432   2832 S   0.0  5.2   0:00.73 spamd chi+
 77244 root      20   0       0      0      0 S   0.0  0.0   0:00.21 [kworker/+
 86097 nobody    20   0  277564  20440   4928 S   0.0  0.8   0:02.33 /usr/sbin+
 87152 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 87154 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 88029 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 90303 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 91703 nobody    20   0  277852  20588   4900 S   0.0  0.9   0:01.89 /usr/sbin+
 95789 cloudw    20   0  471840   9792   5340 S   0.0  0.4   0:01.51 php-fpm: +
 99040 nobody    20   0  277840  19176   4540 S   0.0  0.8   0:00.64 /usr/sbin+
100551 nobody    20   0  277844  19576   4704 S   0.0  0.8   0:00.95 /usr/sbin+
100807 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
101257 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
101394 nobody    20   0  277476  18388   4296 S   0.0  0.8   0:00.85 /usr/sbin+
101399 nobody    20   0  277780  19508   4712 S   0.0  0.8   0:01.20 /usr/sbin+
101728 nobody    20   0  277516  18092   4172 S   0.0  0.7   0:00.92 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        R    09:46   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:46   0:31  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    09:46   0:25  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        660  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [loop0]
root        677  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      77244  0.0  0.0      0     0 ?        S    16:09   0:00  \_ [kworker/1:3]
root      87152  0.0  0.0      0     0 ?        S    16:29   0:00  \_ [kworker/0:3]
root      87154  0.0  0.0      0     0 ?        S    16:29   0:00  \_ [kworker/0:4]
root      88029  0.0  0.0      0     0 ?        S    16:30   0:00  \_ [kworker/u200:1]
root      90303  0.0  0.0      0     0 ?        S    16:35   0:00  \_ [kworker/1:0]
root     100807  0.0  0.0      0     0 ?        S    16:57   0:00  \_ [kworker/u200:0]
root     101257  0.0  0.0      0     0 ?        S    16:58   0:00  \_ [kworker/1:2]
root        539  0.0  0.0      0     0 ?        S    17:00   0:00  \_ [kworker/0:2]
root       5425  0.0  0.0      0     0 ?        S    17:09   0:00  \_ [kworker/1:1]
root       5491  0.0  0.0      0     0 ?        S    17:09   0:00  \_ [kworker/1:4]
root       5941  0.0  0.0      0     0 ?        S    17:10   0:00  \_ [kworker/0:0]
root       6441  0.0  0.0      0     0 ?        S    17:11   0:00  \_ [kworker/1:5]
root       7815  0.0  0.0      0     0 ?        S    17:14   0:00  \_ [kworker/0:1]
root          1  0.1  0.1  44424  3488 ?        Ss   09:46   0:39 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.2  40244  6600 ?        Ss   09:46   0:13 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45352     8 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   456 ?        S<sl 09:46   0:02 /sbin/auditd
root        489  0.0  0.0  24720  1224 ?        Ss   09:46   0:06 /usr/lib/systemd/systemd-logind
root        493  0.0  0.1 224268  4532 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
root        494  0.0  0.0 152780    76 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        499  0.0  0.0 1334484 1944 ?        Ssl  09:46   0:09 /usr/sbin/nscd
rpc         500  0.0  0.0  69256    24 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        503  0.0  0.0  57032  1328 ?        Ss   09:46   0:14 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        523  0.0  0.0 195208     0 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0  52852   372 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.0 610540   984 ?        Ssl  09:46   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        541  0.0  0.0  21540   388 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        551  0.0  0.0  24208     4 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        552  0.0  0.0 124480   428 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root       8259  0.0  0.0 183048  2136 ?        S    17:15   0:00  \_ /usr/sbin/CROND -n
root       8285  0.0  0.0 113284  1212 ?        Ss   17:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       8301  0.0  0.0 108052   360 ?        S    17:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       8307  0.0  0.0 113288  1516 ?        S    17:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       8401  0.0  0.0 153840  2092 ?        R    17:15   0:00  |               \_ ps auxf
root       8260  0.0  0.0 183048  2140 ?        S    17:15   0:00  \_ /usr/sbin/CROND -n
root       8292  0.0  0.0  20164   984 ?        Ss   17:15   0:00  |   \_ jailshell (cloudsms) [8397] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms   8397  0.0  0.0  20164   260 ?        S    17:15   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms   8398  0.0  0.0 113284  1212 ?        S    17:15   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms   8399  0.0  0.3 203132  8856 ?        R    17:15   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php
root       8261  0.0  0.0 183048  2140 ?        S    17:15   0:00  \_ /usr/sbin/CROND -n
root       8290  0.0  0.0  20164   808 ?        Ss   17:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       8262  0.0  0.0 183048  2140 ?        S    17:15   0:00  \_ /usr/sbin/CROND -n
root       8288  0.0  0.0  20164   804 ?        Ss   17:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       8263  0.0  0.0 183048  2140 ?        S    17:15   0:00  \_ /usr/sbin/CROND -n
root       8287  0.0  0.0  20164   808 ?        Ss   17:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root       8265  0.0  0.0 183048  2140 ?        S    17:15   0:00  \_ /usr/sbin/CROND -n
root       8282  0.0  0.0  20164   804 ?        Ss   17:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root       8266  0.0  0.0 183048  2140 ?        S    17:15   0:00  \_ /usr/sbin/CROND -n
root       8284  0.0  0.0  20164   808 ?        Ss   17:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       8267  0.0  0.0 183048  2140 ?        S    17:15   0:00  \_ /usr/sbin/CROND -n
root       8280  0.0  0.0  20164   808 ?        Ss   17:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       8268  0.0  0.0 183048  2140 ?        S    17:15   0:00  \_ /usr/sbin/CROND -n
root       8289  0.0  0.0  20164   808 ?        Ss   17:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       8269  0.0  0.0 183048  2140 ?        S    17:15   0:00  \_ /usr/sbin/CROND -n
root       8279  0.0  0.0  20164   808 ?        Ss   17:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       8270  0.0  0.0 183048  2136 ?        S    17:15   0:00  \_ /usr/sbin/CROND -n
root       8281  0.0  0.0 113284  1212 ?        Ss   17:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root       8296  0.0  0.4 188228 11112 ?        S    17:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root       8344  0.0  0.0 160224  2340 ?        S    17:15   0:00  |           \_ top -n 2 -b -c
root       8271  0.0  0.0 183048  2144 ?        S    17:15   0:00  \_ /usr/sbin/CROND -n
root       8294  0.0  0.0  20164   964 ?        Ss   17:15   0:00  |   \_ jailshell (pactpay) [8309] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    8309  0.0  0.0  20164   260 ?        S    17:15   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    8317  0.0  0.7 476724 17484 ?        S    17:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       8273  0.0  0.0 183048  2144 ?        S    17:15   0:00  \_ /usr/sbin/CROND -n
root       8283  0.0  0.0  20164   968 ?        Ss   17:15   0:00      \_ jailshell (nigeria) [8318] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    8318  0.0  0.0  20164   264 ?        S    17:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    8322  0.0  0.6 400652 15936 ?        S    17:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0   4388     4 ?        Ss   09:46   0:00 /usr/sbin/acpid
root        569  0.0  0.0 114704     0 ttyS0    Ss+  09:46   0:00 /bin/bash
root        570  0.0  0.0 108296     8 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    622  0.0  0.1  89116  3768 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    959  0.0  0.4 114016 10472 ?        Ssl  09:46   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    960  0.0  0.0  11604    24 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        961  0.0  0.0 572372   620 ?        Ssl  09:46   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    963  0.0  1.4 5654304 34852 ?       SLsl 09:46   0:14 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0  51508   608 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1096  0.0  0.0  46912  2236 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1097  0.0  0.1  47936  3304 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1098  0.0  0.0  10320   316 ?        S    09:46   0:00  \_ dovecot/anvil
root       1099  0.0  0.0  10452   568 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1100  0.0  0.0  46912  2112 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1101  0.0  0.1  47996  3176 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1108  0.0  0.1  24568  2524 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1113  0.0  0.0  13568   436 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1182  0.0  0.0  41268  1504 ?        S    09:46   0:00  \_ dovecot/auth
root       7659  0.0  0.1  60820  4508 ?        S    17:13   0:00  \_ dovecot/lmtp
root       8201  0.0  0.1  41052  2780 ?        S    17:14   0:00  \_ dovecot/auth -w
root        966  0.0  0.0 445028     0 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    968  0.0  0.0 111608     4 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    969  0.0  0.0  10388    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    970  0.0  0.0 113932     8 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
named       981  0.0  1.5 784388 36812 ?        Ssl  09:46   0:17 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        982  0.1  3.6 1828076 87332 ?       Ssl  09:46   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
root        984  0.0  0.0 386112   456 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  0.0 397344  2420 ?        Ss   09:46   0:05 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    95789  0.0  0.4 471840  9792 ?        S    16:46   0:01  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw     6186  0.1  0.3 471824  9440 ?        S    17:10   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
healtho+   7953  8.0  2.9 460348 70484 ?        S    17:14   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+   7958  8.1  2.8 459292 69496 ?        S    17:14   0:03  \_ php-fpm: pool health_oyostate_gov_ng
cloudw     8038  0.5  0.3 471784  9200 ?        S    17:14   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
healtho+   8081  7.9  2.8 459292 69476 ?        S    17:14   0:02  \_ php-fpm: pool health_oyostate_gov_ng
cloudw     8159  0.8  0.2 470992  6364 ?        S    17:14   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
healtho+   8196  6.5  2.1 442904 52924 ?        S    17:14   0:00  \_ php-fpm: pool health_oyostate_gov_ng
nigeria    8203  2.6  0.5 474080 14284 ?        S    17:14   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria    8212  3.3  0.4 399832  9876 ?        S    17:14   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+   8228  7.7  1.5 428568 38568 ?        S    17:14   0:00  \_ php-fpm: pool health_oyostate_gov_ng
memcach+    994  0.0  0.0 342400     0 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1007  0.0  0.0 392856   328 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root       1012  0.0  0.0 385496   448 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1013  0.0  0.2 290128  6828 ?        Ssl  09:46   0:07 /usr/sbin/rsyslogd -n
root       1014  0.0  1.1 261164 27512 ?        Ss   09:46   0:08 cpsrvd (SSL) - waiting for connections                   
root       8208  0.0  0.0      0     0 ?        Z    17:14   0:00  \_ [cpaneld - servi] <defunct>
root       1017  0.0  0.0 436392   404 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1018  0.0  0.0 153404   224 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
root       1020  0.0  0.0 111304   356 ?        Ss   09:46   0:02 /usr/sbin/sshd -D
cpanelc+   1026  0.0  0.1  10540  3556 ?        Rs   09:46   0:20 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1218  0.0  0.1 157708  2864 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1233  0.0  1.0 410452 25752 ?        Ss   09:46   0:22 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1234  0.0  0.1 387528  3280 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.9 262224 22664 ?        Ss   09:46   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1265  0.0  0.4 209456 10808 ?        Ss   09:46   0:02 tailwatchd
root       1267  0.0  0.1 167452  4160 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1713  0.0  0.0 299272   632 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1728  0.0  0.0 130416  1368 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1782  1.9 11.5 1484772 279752 ?      Sl   09:46   8:42 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1968  0.0  0.2 266984  5096 ?        Ss   09:46   0:01 /usr/sbin/httpd -k start
root       1970  0.0  0.0  12848   328 ?        S    09:46   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1971  0.0  0.0  12732   288 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1972  0.0  0.0  12888   340 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1977  0.0  0.0  53340     4 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    86097  0.0  0.8 277564 20440 ?        S    16:26   0:02  \_ /usr/sbin/httpd -k start
nobody    91703  0.0  0.8 277852 20588 ?        S    16:37   0:01  \_ /usr/sbin/httpd -k start
nobody    99040  0.0  0.7 277840 19176 ?        S    16:53   0:00  \_ /usr/sbin/httpd -k start
nobody   100551  0.0  0.8 277844 19576 ?        S    16:56   0:00  \_ /usr/sbin/httpd -k start
nobody   101394  0.0  0.7 277476 18388 ?        S    16:58   0:00  \_ /usr/sbin/httpd -k start
nobody   101399  0.1  0.8 277780 19508 ?        S    16:58   0:01  \_ /usr/sbin/httpd -k start
nobody   101728  0.0  0.7 277516 18092 ?        S    16:58   0:00  \_ /usr/sbin/httpd -k start
nobody     3847  0.1  0.7 277796 18628 ?        S    17:05   0:00  \_ /usr/sbin/httpd -k start
nobody     4705  0.1  0.7 277852 18324 ?        S    17:07   0:00  \_ /usr/sbin/httpd -k start
nobody     5482  0.1  0.7 277452 18208 ?        S    17:09   0:00  \_ /usr/sbin/httpd -k start
nobody     5866  0.0  0.7 277516 17508 ?        S    17:09   0:00  \_ /usr/sbin/httpd -k start
nobody     6495  0.1  0.7 277836 18184 ?        S    17:11   0:00  \_ /usr/sbin/httpd -k start
cloudw     8400  0.0  0.4 292700 11292 ?        R    17:15   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody     6699  0.0  0.7 277476 17684 ?        S    17:11   0:00  \_ /usr/sbin/httpd -k start
nobody     6775  0.1  0.7 277844 18064 ?        S    17:11   0:00  \_ /usr/sbin/httpd -k start
nobody     7490  0.1  0.7 277472 17552 ?        S    17:13   0:00  \_ /usr/sbin/httpd -k start
nobody     7529  0.0  0.7 277512 17616 ?        S    17:13   0:00  \_ /usr/sbin/httpd -k start
nobody     7531  0.1  0.7 277848 17744 ?        S    17:13   0:00  \_ /usr/sbin/httpd -k start
nobody     7532  0.1  0.7 277832 18120 ?        S    17:13   0:00  \_ /usr/sbin/httpd -k start
nobody     7750  0.0  0.7 277512 17348 ?        S    17:13   0:00  \_ /usr/sbin/httpd -k start
nobody     8236  0.0  0.6 277176 15912 ?        S    17:14   0:00  \_ /usr/sbin/httpd -k start
root       2041  0.0  0.4 183152 11592 ?        Ss   09:46   0:23 lfd - sleeping
oysipao+   9063  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+   9089  0.0  0.0   3152    56 ?        S    10:01   0:00  \_ [kworker]
root      28537  0.0  4.8 248100 118080 ?       Ss   10:50   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      32709  0.1  5.6 269720 136080 ?       S    11:00   0:22  \_ spamd child
root      32710  0.0  5.1 258916 125432 ?       S    11:00   0:00  \_ spamd child
root        940  0.0  0.4 1277312 11576 ?       Ssl  17:00   0:00 /usr/bin/checkstatus
root        979  0.0  0.4 1276100 10356 ?       Ssl  17:00   0:00 /usr/bin/cspdaemon
## mysql stats
Uptime: 48626  Threads: 3  Questions: 3497756  Slow queries: 0  Opens: 10283  Flush tables: 1  Open tables: 2000  Queries per second avg: 71.931
*************************** 1. row ***************************
     Id: 53079
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 53081
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `oyo_official_polling_unit` WHERE `pu_code`='30/02/05/002accreditationhasendedvotingab
*************************** 3. row ***************************
     Id: 53085
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.132.202 TIME_WAIT
      1 142.147.199.225 TIME_WAIT
      1 157.15.203.39 TIME_WAIT
      1 165.22.111.5 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 34.196.237.236 TIME_WAIT
      1 52.230.163.42 TIME_WAIT
      1 52.6.5.24 TIME_WAIT
      1 66.249.70.35 TIME_WAIT
      1 91.208.184.168 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      6 34.83.247.91 TIME_WAIT
     17 104.248.90.230 TIME_WAIT
     80 157.230.45.41 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 17:15:02 WAT
   Restart Time: Friday, 07-Nov-2025 03:44:42 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 13 hours 30 minutes 19 seconds
   Server load: 0.70 0.79 0.70
   Total accesses: 91655 - Total Traffic: 1.5 GB - Total Duration: 209138008
   CPU Usage: u8.84 s4.39 cu758.25 cs539.38 - 2.7% CPU load
   1.89 requests/sec - 31.7 kB/second - 16.8 kB/request - 2281.8 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

WK_RK.WK_KW_W.RK..._RW_.W._.....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req   Dur    Conn Child  Slot      Client      Protocol           VHost                                        Request
   0-0  6495   0/78/5447  W 1.19 0     0   10718370 0.0  1.59  79.52  66.249.70.33    http/1.1 support.cloudware.ng:443   GET /?c=1714720852 HTTP/1.1
   1-0  86097  2/598/5374 K 8.98 2     4   11875997 15.4 8.80  80.06  74.125.151.104  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Niger&lga=Kontagora HTTP/1
   2-0  8236   0/1/5534   _ 0.00 0     290 8396073  0.0  0.01  95.54  157.230.45.41   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   3-0  5866   0/30/5381  R 0.49 15    341 8036710  0.0  0.72  97.70  102.91.77.117   http/1.1
   4-0  7750   2/11/5606  K 0.08 1     276 7040361  64.4 0.25  86.88  66.249.70.38    http/1.1 support.cloudware.ng:443   GET /?c=1033602047 HTTP/1.1
   5-0  -      0/0/6075   . 0.00 78    0   7200386  0.0  0.00  97.85  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   6-0  3847   0/128/4714 W 2.28 109   0   8466237  0.0  4.28  84.92  173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323533353539332p2231223
   7-0  6699   1/51/4882  K 0.46 3     320 51627408 34.5 0.82  72.83  66.249.70.35    http/1.1 support.cloudware.ng:443   GET /?c=3778351158 HTTP/1.1
   8-0  101394 0/217/4518 _ 3.23 1     25  9357802  0.0  4.57  68.33  128.140.8.200   http/1.1 cloudsms.com.ng:443        GET /cron/process_queue3.php HTTP/1.1
   9-0  4705   1/127/5155 K 1.92 2     277 8225081  35.8 2.07  101.10 66.249.70.36    http/1.1 support.cloudware.ng:443   GET /?c=1427147697 HTTP/1.1
   10-0 101399 0/297/4189 W 4.83 37    0   9856914  0.0  4.26  57.07  173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323533353636352p2231223
   11-0 91703  0/438/3666 _ 7.77 0     6   9957164  0.0  7.44  60.37  217.113.194.19  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Ogun&lga=Odogbolu&ward=Ogb
   12-0 6775   0/57/3953  W 0.76 0     0   5975944  0.0  0.93  67.06  157.230.45.41   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   13-0 -      0/0/4210   . 0.00 56    0   6883425  0.0  0.00  70.88  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-0 7490   0/27/4511  R 0.25 1     25  6502614  0.0  0.35  66.73  157.230.45.41   http/1.1
   15-0 100551 1/233/3775 K 4.21 3     2   8561801  9.8  3.97  54.03  74.125.151.103  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Nasarawa HTTP/1.1
   16-0 -      0/0/1835   . 0.00 82    0   8543720  0.0  0.00  38.83  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 -      0/0/2933   . 0.00 80    0   5863159  0.0  0.00  59.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 -      0/0/2929   . 0.00 48    0   1888030  0.0  0.00  48.36  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 99040  0/185/1452 _ 1.90 0     321 4308268  0.0  4.84  26.47  157.230.45.41   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   20-0 101728 0/232/1269 R 5.05 55    293 2171647  0.0  3.16  16.37  180.243.8.212   http/1.1
   21-0 7529   0/17/471   W 0.20 17    0   2117468  0.0  0.39  7.44   173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323533353638352p2231223
   22-0 5482   0/259/1253 _ 0.68 0     0   1349119  0.0  8.87  21.65  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   23-0 -      0/0/41     . 0.00 76    0   528636   0.0  0.00  0.62   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 7531   0/24/121   W 0.43 0     0   83970    0.0  0.69  2.28   ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   25-0 -      0/0/321    . 0.00 42    0   1066159  0.0  0.00  5.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 7532   0/27/39    _ 0.65 0     0   46313    0.0  1.29  1.55   ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   27-0 -      0/0/31     . 0.00 18947 0   34716    0.0  0.00  0.61   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -      0/0/259    . 0.00 18960 0   143065   0.0  0.00  3.62   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -      0/0/96     . 0.00 18976 0   59764    0.0  0.00  2.78   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -      0/0/13     . 0.00 18901 0   22779    0.0  0.00  9.52   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -      0/0/103    . 0.00 18702 0   179005   0.0  0.00  0.84   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -      0/0/2      . 0.00 18977 0   9851     0.0  0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -      0/0/7      . 0.00 18926 0   21858    0.0  0.00  0.36   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -      0/0/2      . 0.00 18972 0   17699    0.0  0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -      0/0/5      . 0.00 18941 0   19399    0.0  0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -      0/0/4      . 0.00 18950 0   14235    0.0  0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -      0/0/2      . 0.00 18973 0   15595    0.0  0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -      0/0/156    . 0.00 18706 0   148319   0.0  0.00  0.63   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -      0/0/2      . 0.00 18974 0   15338    0.0  0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -      0/0/6      . 0.00 18929 0   21858    0.0  0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -      0/0/208    . 0.00 18105 0   243070   0.0  0.00  2.95   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -      0/0/2      . 0.00 18969 0   19835    0.0  0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -      0/0/2      . 0.00 18970 0   19620    0.0  0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -      0/0/6      . 0.00 18927 0   24371    0.0  0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -      0/0/5      . 0.00 18936 0   19070    0.0  0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -      0/0/6      . 0.00 18931 0   20569    0.0  0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -      0/0/4      . 0.00 18946 0   17777    0.0  0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -      0/0/4      . 0.00 18943 0   16933    0.0  0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -      0/0/2      . 0.00 18971 0   17743    0.0  0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -      0/0/3      . 0.00 18953 0   22693    0.0  0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -      0/0/4      . 0.00 18940 0   22016    0.0  0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -      0/0/4      . 0.00 18949 0   22448    0.0  0.00  0.16   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -      0/0/3      . 0.00 18957 0   9096     0.0  0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -      0/0/6      . 0.00 18945 0   23840    0.0  0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -      0/0/17     . 0.00 18918 0   16331    0.0  0.00  0.47   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -      0/0/184    . 0.00 18738 0   130360   0.0  0.00  0.50   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -      0/0/3      . 0.00 18954 0   22445    0.0  0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -      0/0/3      . 0.00 18958 0   7899     0.0  0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -      0/0/5      . 0.00 18933 0   23139    0.0  0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -      0/0/139    . 0.00 18603 0   237404   0.0  0.00  1.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -      0/0/2      . 0.00 18967 0   2361     0.0  0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -      0/0/11     . 0.00 18916 0   9214     0.0  0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -      0/0/4      . 0.00 18942 0   8490     0.0  0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -      0/0/1      . 0.00 18983 0   0        0.0  0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -      0/0/1      . 0.00 18981 0   0        0.0  0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -      0/0/2      . 0.00 18965 0   8680     0.0  0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -      0/0/1      . 0.00 18980 0   0        0.0  0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -      0/0/3      . 0.00 18956 0   742      0.0  0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -      0/0/1      . 0.00 18982 11  22       0.0  0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -      0/0/2      . 0.00 18963 0   10366    0.0  0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -      0/0/65     . 0.00 18776 0   105003   0.0  0.00  1.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -      0/0/151    . 0.00 18604 0   218700   0.0  0.00  1.26   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -      0/0/2      . 0.00 18962 0   8818     0.0  0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -      0/0/4      . 0.00 18952 0   1447     0.0  0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -      0/0/2      . 0.00 18968 0   463      0.0  0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -      0/0/101    . 0.00 18688 0   159456   0.0  0.00  0.87   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -      0/0/6      . 0.00 18937 0   4997     0.0  0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -      0/0/338    . 0.00 17180 0   272159   0.0  0.00  5.63   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -      0/0/1      . 0.00 18979 0   0        0.0  0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -      0/0/2      . 0.00 18961 0   7766     0.0  0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -      0/0/3      . 0.00 18944 0   10368    0.0  0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 813
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 13 seconds, (range: 1...67)
   index usage: 14%, cache usage: 19%
   total entries stored since starting: 54702
   total entries replaced since starting: 0
   total entries expired since starting: 53852
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 157 miss
   total removes since starting: 37 hit, 145 miss
Youez - 2016 - github.com/yon3zu
LinuXploit