403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.17.42.txt
 ## swap threshold exceeded
## server overview
2025-11-07.17.42 load[1] mem[66/77] mysql[5/25] httpd[15]
              total        used        free      shared  buff/cache   available
Mem:           2363        1481          76         100         806         610
Swap:          1999        1613         386
 17:42:02 up  7:55,  0 users,  load average: 1.51, 0.97, 0.81
## system overview
top - 17:42:02 up  7:55,  0 users,  load average: 1.51, 0.97, 0.81
Tasks: 207 total,   7 running, 199 sleeping,   0 stopped,   1 zombie
%Cpu(s): 82.9 us, 17.1 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    86132 free,  1508788 used,   825380 buff/cache
KiB Swap:  2047996 total,   395316 free,  1652680 used.   633592 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1782 mysql     20   0 1484772 281076   3580 S  82.4 11.6   9:19.20 /usr/sbin+
 22139 healtho+  20   0  460452  70464   4276 S  35.3  2.9   0:05.19 php-fpm: +
 22319 healtho+  20   0  457888  67660   4192 R  23.5  2.8   0:01.42 php-fpm: +
 22482 nigeria   20   0  400652  15936  10220 S   5.9  0.7   0:00.05 /opt/cpan+
     1 root      20   0   44424   3488   1520 S   0.0  0.1   0:41.30 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.32 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.48 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:33.73 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.44 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.67 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:26.39 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 R   0.0  0.0   0:00.52 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:02.83 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:03.18 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.77 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40244   3796   3552 S   0.0  0.2   0:14.27 /usr/lib/+
   382 root      20   0   45352      8      4 S   0.0  0.0   0:00.36 /usr/lib/+
   409 root      16  -4   55532    468    348 S   0.0  0.0   0:02.25 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0   24720   1224    788 S   0.0  0.1   0:06.47 /usr/lib/+
   493 root      20   0  224268   4664   1040 S   0.0  0.2   0:00.44 queueproc+
   494 root      20   0  152780     76     36 S   0.0  0.0   0:00.01 /usr/sbin+
   499 nscd      20   0 1334484   1972    780 S   0.0  0.1   0:10.72 /usr/sbin+
   500 rpc       20   0   69256     24      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   503 dbus      20   0   57032   1328    616 R   0.0  0.1   0:14.83 /usr/bin/+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0   52852    332    220 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  610540    984    608 S   0.0  0.0   0:03.81 /usr/lib/+
   539 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
   541 root      20   0   21540    388    280 S   0.0  0.0   0:00.66 /usr/sbin+
   551 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  124480    428    296 S   0.0  0.0   0:00.79 /usr/sbin+
   558 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   570 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   622 mailnull  20   0   89116   3768    824 S   0.0  0.2   0:00.43 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:03.33 [loop0]
   677 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   940 root      20   0 1277312  11576    596 S   0.0  0.5   0:00.07 /usr/bin/+
   959 systuser  20   0  114016  10344   2320 S   0.0  0.4   0:06.73 /usr/loca+
   960 systuser  20   0   11604     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   961 root      20   0  572372    620    160 S   0.0  0.0   0:02.49 /usr/bin/+
   963 telegraf  20   0 5654304  35112   5572 S   0.0  1.5   0:15.57 /usr/loca+
   964 root      20   0   51508    604    424 S   0.0  0.0   0:00.36 /usr/sbin+
   966 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   968 systuser  20   0  111608      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 systuser  20   0   10388     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   970 systuser  20   0  113932      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   979 root      20   0 1276100  10356    596 S   0.0  0.4   0:00.08 /usr/bin/+
   981 named     20   0  784388  37364   1968 S   0.0  1.5   0:18.80 /usr/sbin+
   982 root      20   0 1828076  85724    568 S   0.0  3.5   0:35.59 /usr/loca+
   984 root      20   0  386112    488    392 S   0.0  0.0   0:00.81 php-fpm: +
   992 root      20   0  397344   2420    612 S   0.0  0.1   0:06.40 php-fpm: +
   994 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.62 /usr/bin/+
  1007 root      20   0  392856    388    304 S   0.0  0.0   0:00.78 php-fpm: +
  1012 root      20   0  385496    536    436 S   0.0  0.0   0:00.82 php-fpm: +
  1013 root      20   0  298320   4592   3544 S   0.0  0.2   0:07.51 /usr/sbin+
  1014 root      20   0  261296  27472   4824 S   0.0  1.1   0:08.82 cpsrvd (S+
  1017 root      20   0  436392    404    316 S   0.0  0.0   0:00.92 php-fpm: +
  1018 root      20   0  153404    224    140 S   0.0  0.0   0:00.62 pure-ftpd+
  1020 root      20   0  111304    356    260 S   0.0  0.0   0:03.12 /usr/sbin+
  1026 cpanelc+  20   0   10540   3548   2288 R   0.0  0.1   0:22.07 /usr/loca+
  1096 dovenull  20   0   46912   2492   1916 S   0.0  0.1   0:00.41 dovecot/p+
  1097 dovenull  20   0   47936   3296   1884 S   0.0  0.1   0:00.21 dovecot/i+
  1098 dovecot   20   0   10320    316    200 S   0.0  0.0   0:00.07 dovecot/a+
  1099 root      20   0   10452    568    368 S   0.0  0.0   0:00.36 dovecot/l+
  1100 dovenull  20   0   46912   2112   1544 S   0.0  0.1   0:00.56 dovecot/p+
  1101 dovenull  20   0   47996   3404   1856 S   0.0  0.1   0:00.34 dovecot/i+
  1108 root      20   0   24568   2524    512 S   0.0  0.1   0:00.22 dovecot/c+
  1113 dovecot   20   0   13568    436    220 S   0.0  0.0   0:00.07 dovecot/s+
  1182 dovecot   20   0   41268   1548   1016 S   0.0  0.1   0:00.59 dovecot/a+
  1218 systuser  20   0  157708   2864    816 S   0.0  0.1   0:00.14 SonarPush+
  1233 wp-tool+  20   0  410452  25752   1404 S   0.0  1.1   0:23.37 /usr/bin/+
  1234 wp-tool+  20   0  387528   3280   1424 S   0.0  0.1   0:00.30 /usr/bin/+
  1264 root      20   0  262224  23136   5220 S   0.0  1.0   0:02.55 cpdavd - +
  1265 root      20   0  209456  10484   1780 S   0.0  0.4   0:02.84 tailwatchd
  1267 root      20   0  167452   4112   2744 S   0.0  0.2   0:00.47 dnsadmin +
  1713 root      20   0  299272    572    388 S   0.0  0.0   0:00.77 php-fpm: +
  1728 root      38  18  130416   1368    684 S   0.0  0.1   0:00.07 cpanellog+
  1968 root      20   0  266984   5096    600 S   0.0  0.2   0:01.73 /usr/sbin+
  1970 root      20   0   12844    328    212 S   0.0  0.0   0:02.33 /usr/loca+
  1971 root      20   0   12732    288    212 S   0.0  0.0   0:01.97 /usr/loca+
  1972 root      20   0   12900    340    216 S   0.0  0.0   0:02.14 /usr/loca+
  1977 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  2041 root      20   0  183152  11628   1104 S   0.0  0.5   0:24.85 lfd - sle+
  7490 nobody    20   0  277536  19556   4748 S   0.0  0.8   0:01.25 /usr/sbin+
  9063 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  9089 oysipao+  20   0    3152     56     16 S   0.0  0.0   0:00.52 [kworker]
  9591 nobody    20   0  277532  20288   4956 S   0.0  0.8   0:01.38 /usr/sbin+
  9602 nobody    20   0  277548  19980   4876 S   0.0  0.8   0:01.66 /usr/sbin+
 12642 nobody    20   0  277556  19536   4632 S   0.0  0.8   0:01.07 /usr/sbin+
 14841 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 14847 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 15145 nobody    20   0  277716  19908   4668 S   0.0  0.8   0:00.96 /usr/sbin+
 15150 nobody    20   0  277848  18856   4316 S   0.0  0.8   0:00.39 /usr/sbin+
 15165 nobody    20   0  277840  19044   4268 S   0.0  0.8   0:00.41 /usr/sbin+
 16085 cloudw    20   0  471824   9520   5288 S   0.0  0.4   0:00.58 php-fpm: +
 16430 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 17437 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 17438 root      20   0       0      0      0 D   0.0  0.0   0:00.03 [kworker/+
 17481 nobody    20   0  277716  18988   4228 S   0.0  0.8   0:00.45 /usr/sbin+
 17503 nobody    20   0  277844  18736   4388 S   0.0  0.8   0:00.46 /usr/sbin+
 17504 nobody    20   0  277852  19264   4500 S   0.0  0.8   0:00.66 /usr/sbin+
 17973 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 18033 nobody    20   0  277532  18416   4244 S   0.0  0.8   0:00.34 /usr/sbin+
 18034 nobody    20   0  277536  18776   4348 S   0.0  0.8   0:00.65 /usr/sbin+
 18035 nobody    20   0  277840  18436   4176 S   0.0  0.8   0:00.46 /usr/sbin+
 18941 nobody    20   0  277836  18480   4332 S   0.0  0.8   0:00.43 /usr/sbin+
 19353 cloudw    20   0  471792   9520   5288 S   0.0  0.4   0:00.39 php-fpm: +
 19831 nobody    20   0  277892  18652   4092 S   0.0  0.8   0:00.39 /usr/sbin+
 20800 nobody    20   0  277520  17924   3992 S   0.0  0.7   0:00.19 /usr/sbin+
 20955 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 21765 cloudw    20   0  471784   9196   4972 S   0.0  0.4   0:00.19 php-fpm: +
 21891 cloudw    20   0  471784   9200   4976 S   0.0  0.4   0:00.19 php-fpm: +
 21963 nobody    20   0  277460  17232   3588 S   0.0  0.7   0:00.13 /usr/sbin+
 22022 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 22059 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 22108 cloudw    20   0  471784   9196   4968 S   0.0  0.4   0:00.19 php-fpm: +
 22145 healtho+  20   0  460468  71352   4276 S   0.0  2.9   0:05.17 php-fpm: +
 22184 root      20   0   41052   2784   2124 S   0.0  0.1   0:00.00 dovecot/a+
 22186 worencom  20   0   38688   4036   3000 S   0.0  0.2   0:00.00 dovecot/i+
 22187 root      20   0  111304   4260   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 22194 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 22197 worencom  20   0   38444   3792   2984 S   0.0  0.2   0:00.00 dovecot/i+
 22204 worencom  20   0   38168   3152   2556 S   0.0  0.1   0:00.00 dovecot/i+
 22258 healtho+  20   0  459292  69480   4188 S   0.0  2.9   0:02.54 php-fpm: +
 22273 nobody    20   0  277840  17260   3580 S   0.0  0.7   0:00.05 /usr/sbin+
 22278 nobody    20   0  277512  17080   3520 S   0.0  0.7   0:00.04 /usr/sbin+
 22279 nobody    20   0  277452  16940   3496 S   0.0  0.7   0:00.05 /usr/sbin+
 22298 root      20   0  111304   4448   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 22299 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 22357 root      20   0  261296  24244   1568 S   0.0  1.0   0:00.00 webmaild +
 22386 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 22416 nobody    20   0  277472  16296   3084 S   0.0  0.7   0:00.00 /usr/sbin+
 22424 nigeria   20   0  397064   5272   2264 S   0.0  0.2   0:00.00 php-fpm: +
 22425 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22427 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22429 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22430 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22432 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22434 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22435 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22436 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22437 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 22439 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 22446 cloudw    20   0  405164  15268   3416 S   0.0  0.6   0:00.04 php-fpm: +
 22450 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 22452 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 22453 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 22454 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 22455 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 22457 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 22458 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 22459 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 22460 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 22461 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 22463 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 22468 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 22472 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 22476 pactpay   20   0  476724  17480  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 22479 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 22511 oysipao+  20   0  436772   4276   2752 S   0.0  0.2   0:00.00 php-fpm: +
 22515 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 22521 cloudw    20   0  292700  11000   7692 R   0.0  0.5   0:00.00 /opt/cpan+
 28537 root      20   0  248100 118040   1348 S   0.0  4.9   0:05.64 /usr/loca+
 32709 root      20   0  269720 136144   2568 S   0.0  5.6   0:22.96 spamd chi+
 32710 root      20   0  258916 125576   2784 S   0.0  5.2   0:00.76 spamd chi+
 77244 root      20   0       0      0      0 S   0.0  0.0   0:00.24 [kworker/+
100807 root      20   0       0      0      0 R   0.0  0.0   0:00.07 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    09:46   0:33  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    09:46   0:26  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        660  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [loop0]
root        677  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      77244  0.0  0.0      0     0 ?        S    16:09   0:00  \_ [kworker/1:3]
root     100807  0.0  0.0      0     0 ?        S    16:57   0:00  \_ [kworker/u200:0]
root        539  0.0  0.0      0     0 ?        S    17:00   0:00  \_ [kworker/0:2]
root      14841  0.0  0.0      0     0 ?        S    17:28   0:00  \_ [kworker/0:3]
root      14847  0.0  0.0      0     0 ?        S    17:28   0:00  \_ [kworker/0:4]
root      16430  0.0  0.0      0     0 ?        S    17:31   0:00  \_ [kworker/u200:2]
root      17437  0.0  0.0      0     0 ?        S    17:33   0:00  \_ [kworker/1:2]
root      17438  0.0  0.0      0     0 ?        S    17:33   0:00  \_ [kworker/1:4]
root      17973  0.0  0.0      0     0 ?        S    17:34   0:00  \_ [kworker/0:0]
root      20955  0.0  0.0      0     0 ?        S    17:39   0:00  \_ [kworker/1:0]
root      22022  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [kworker/0:1]
root      22059  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44424  3488 ?        Ss   09:46   0:41 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  40244  3796 ?        Ss   09:46   0:14 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45352     8 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   468 ?        S<sl 09:46   0:02 /sbin/auditd
root        489  0.0  0.0  24720  1224 ?        Ss   09:46   0:06 /usr/lib/systemd/systemd-logind
root        493  0.0  0.1 224268  4664 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
root        494  0.0  0.0 152780    76 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        499  0.0  0.0 1334484 1972 ?        Ssl  09:46   0:10 /usr/sbin/nscd
rpc         500  0.0  0.0  69256    24 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        503  0.0  0.0  57032  1328 ?        Ss   09:46   0:14 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        523  0.0  0.0 195208     0 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0  52852   332 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.0 610540   984 ?        Ssl  09:46   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        541  0.0  0.0  21540   388 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        551  0.0  0.0  24208     4 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        552  0.0  0.0 124480   428 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      22425  0.0  0.0 183048  2140 ?        S    17:42   0:00  \_ /usr/sbin/CROND -n
root      22461  0.0  0.0 113284  1212 ?        Ss   17:42   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      22463  0.0  0.0 108052   360 ?        S    17:42   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      22468  0.0  0.0 113288  1512 ?        S    17:42   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      22523  0.0  0.0 153840  2096 ?        R    17:42   0:00  |               \_ ps auxf
root      22427  0.0  0.0 183048  2140 ?        S    17:42   0:00  \_ /usr/sbin/CROND -n
root      22457  0.0  0.0  20164   808 ?        Ss   17:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      22429  0.0  0.0 183048  2140 ?        S    17:42   0:00  \_ /usr/sbin/CROND -n
root      22454  0.0  0.0  20164   808 ?        Ss   17:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      22430  0.0  0.0 183048  2140 ?        S    17:42   0:00  \_ /usr/sbin/CROND -n
root      22450  0.0  0.0  20164   804 ?        Ss   17:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      22432  0.0  0.0 183048  2140 ?        S    17:42   0:00  \_ /usr/sbin/CROND -n
root      22453  0.0  0.0  20164   804 ?        Ss   17:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      22434  0.0  0.0 183048  2140 ?        S    17:42   0:00  \_ /usr/sbin/CROND -n
root      22459  0.0  0.0  20164   804 ?        Ss   17:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      22435  0.0  0.0 183048  2140 ?        S    17:42   0:00  \_ /usr/sbin/CROND -n
root      22452  0.0  0.0  20164   804 ?        Ss   17:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      22436  0.0  0.0 183048  2140 ?        S    17:42   0:00  \_ /usr/sbin/CROND -n
root      22455  0.0  0.0  20164   804 ?        Ss   17:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      22437  0.0  0.0 183048  2144 ?        S    17:42   0:00  \_ /usr/sbin/CROND -n
root      22460  0.0  0.0  20164   964 ?        Ss   17:42   0:00  |   \_ jailshell (pactpay) [22472] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   22472  0.0  0.0  20164   260 ?        S    17:42   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   22476  0.0  0.7 476724 17480 ?        S    17:42   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      22439  0.0  0.0 183048  2144 ?        S    17:42   0:00  \_ /usr/sbin/CROND -n
root      22458  0.0  0.0  20164   968 ?        Ss   17:42   0:00      \_ jailshell (nigeria) [22479] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   22479  0.0  0.0  20164   264 ?        S    17:42   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   22482  0.0  0.6 400652 15936 ?        S    17:42   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0   4388     4 ?        Ss   09:46   0:00 /usr/sbin/acpid
root        569  0.0  0.0 114704     0 ttyS0    Ss+  09:46   0:00 /bin/bash
root        570  0.0  0.0 108296     8 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    622  0.0  0.1  89116  3768 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    959  0.0  0.4 114016 10344 ?        Ssl  09:46   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    960  0.0  0.0  11604    24 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        961  0.0  0.0 572372   620 ?        Ssl  09:46   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    963  0.0  1.4 5654304 35112 ?       SLsl 09:46   0:15 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0  51508   604 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1096  0.0  0.1  46912  2492 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1097  0.0  0.1  47936  3296 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1098  0.0  0.0  10320   316 ?        S    09:46   0:00  \_ dovecot/anvil
root       1099  0.0  0.0  10452   568 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1100  0.0  0.0  46912  2112 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1101  0.0  0.1  47996  3404 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1108  0.0  0.1  24568  2524 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1113  0.0  0.0  13568   436 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1182  0.0  0.0  41268  1548 ?        S    09:46   0:00  \_ dovecot/auth
root      22184  0.0  0.1  41052  2784 ?        S    17:41   0:00  \_ dovecot/auth -w
worencom  22186  0.0  0.1  38688  4036 ?        S    17:41   0:00  \_ dovecot/imap
worencom  22197  0.0  0.1  38444  3792 ?        S    17:41   0:00  \_ dovecot/imap
worencom  22204  0.0  0.1  38168  3152 ?        S    17:41   0:00  \_ dovecot/imap
root        966  0.0  0.0 445028     0 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    968  0.0  0.0 111608     4 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    969  0.0  0.0  10388    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    970  0.0  0.0 113932     8 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
named       981  0.0  1.5 784388 37364 ?        Ssl  09:46   0:18 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        982  0.1  3.5 1828076 85724 ?       Ssl  09:46   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
root        984  0.0  0.0 386112   488 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  0.0 397344  2420 ?        Ss   09:46   0:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    16085  0.0  0.3 471824  9520 ?        S    17:30   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    19353  0.1  0.3 471792  9520 ?        S    17:36   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    21765  0.2  0.3 471784  9196 ?        S    17:40   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    21891  0.2  0.3 471784  9200 ?        S    17:40   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    22108  0.3  0.3 471784  9196 ?        S    17:41   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
healtho+  22139 10.8  2.9 460452 70464 ?        S    17:41   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  22145 11.2  2.9 460468 71352 ?        S    17:41   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  22258 10.1  2.8 459292 69480 ?        S    17:41   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  22319 10.2  2.7 457888 67660 ?        R    17:41   0:01  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   22424  0.0  0.2 397064  5272 ?        S    17:42   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    22446  0.0  0.6 405164 15268 ?        S    17:42   0:00  \_ php-fpm: pool cloudware_ng
memcach+    994  0.0  0.0 342400     0 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1007  0.0  0.0 392856   388 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root       1012  0.0  0.0 385496   536 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1013  0.0  0.1 298320  4592 ?        Ssl  09:46   0:07 /usr/sbin/rsyslogd -n
root       1014  0.0  1.1 261296 27472 ?        Ss   09:46   0:08 cpsrvd (SSL) - waiting for connections                   
root      22357  0.0  1.0 261296 24244 ?        S    17:41   0:00  \_ webmaild - serving 199.45.155.82
root      22386  0.0  0.0      0     0 ?        Z    17:41   0:00  \_ [cpaneld - servi] <defunct>
root       1017  0.0  0.0 436392   404 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
oysipao+  22511  0.0  0.1 436772  4360 ?        S    17:42   0:00  \_ php-fpm: pool oysipa_oyostate_gov_ng
root       1018  0.0  0.0 153404   224 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
root       1020  0.0  0.0 111304   356 ?        Ss   09:46   0:03 /usr/sbin/sshd -D
root      22187  0.0  0.1 111304  4260 ?        Ss   17:41   0:00  \_ sshd: [accepted]
sshd      22194  0.0  0.1 115644  2628 ?        S    17:41   0:00  |   \_ sshd: [net]
root      22298  0.0  0.1 111304  4448 ?        Ss   17:41   0:00  \_ sshd: [accepted]
sshd      22299  0.0  0.1 115644  2632 ?        S    17:41   0:00      \_ sshd: [net]
cpanelc+   1026  0.0  0.1  10540  3548 ?        Ss   09:46   0:22 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1218  0.0  0.1 157708  2864 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1233  0.0  1.0 410452 25752 ?        Ss   09:46   0:23 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1234  0.0  0.1 387528  3280 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.9 262224 23136 ?        Ss   09:46   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1265  0.0  0.4 209456 10484 ?        Ss   09:46   0:02 tailwatchd
root       1267  0.0  0.1 167452  4112 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1713  0.0  0.0 299272   572 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1728  0.0  0.0 130416  1368 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1782  1.9 11.6 1484772 281076 ?      Sl   09:46   9:19 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1968  0.0  0.2 266984  5096 ?        Ss   09:46   0:01 /usr/sbin/httpd -k start
root       1970  0.0  0.0  12844   328 ?        S    09:46   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1971  0.0  0.0  12732   288 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1972  0.0  0.0  12900   340 ?        S    09:46   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1977  0.0  0.0  53340     4 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     7490  0.0  0.8 277536 19556 ?        S    17:13   0:01  \_ /usr/sbin/httpd -k start
nobody     9591  0.0  0.8 277532 20288 ?        S    17:17   0:01  \_ /usr/sbin/httpd -k start
nobody     9602  0.1  0.8 277544 19976 ?        S    17:17   0:01  \_ /usr/sbin/httpd -k start
nobody    12642  0.0  0.8 277556 19536 ?        S    17:23   0:01  \_ /usr/sbin/httpd -k start
nobody    15145  0.1  0.8 277716 19908 ?        S    17:28   0:00  \_ /usr/sbin/httpd -k start
nobody    15150  0.0  0.7 277848 18856 ?        S    17:28   0:00  \_ /usr/sbin/httpd -k start
nobody    15165  0.0  0.7 277840 19044 ?        S    17:28   0:00  \_ /usr/sbin/httpd -k start
nobody    17481  0.0  0.7 277716 18988 ?        S    17:33   0:00  \_ /usr/sbin/httpd -k start
nobody    17503  0.0  0.7 277844 18736 ?        S    17:33   0:00  \_ /usr/sbin/httpd -k start
nobody    17504  0.1  0.7 277852 19264 ?        S    17:33   0:00  \_ /usr/sbin/httpd -k start
nobody    18033  0.0  0.7 277532 18416 ?        S    17:34   0:00  \_ /usr/sbin/httpd -k start
nobody    18034  0.1  0.7 277536 18776 ?        S    17:34   0:00  \_ /usr/sbin/httpd -k start
nobody    18035  0.0  0.7 277840 18436 ?        S    17:34   0:00  \_ /usr/sbin/httpd -k start
nobody    18941  0.1  0.7 277836 18480 ?        S    17:35   0:00  \_ /usr/sbin/httpd -k start
nobody    19831  0.1  0.7 277892 18652 ?        S    17:36   0:00  \_ /usr/sbin/httpd -k start
nobody    20800  0.1  0.7 277520 17924 ?        S    17:38   0:00  \_ /usr/sbin/httpd -k start
nobody    21963  0.2  0.7 277460 17232 ?        S    17:40   0:00  \_ /usr/sbin/httpd -k start
cloudw    22521  0.0  0.7 299200 18680 ?        Rl   17:42   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    22273  0.2  0.7 277840 17260 ?        S    17:41   0:00  \_ /usr/sbin/httpd -k start
nobody    22278  0.1  0.7 277512 17080 ?        S    17:41   0:00  \_ /usr/sbin/httpd -k start
nobody    22279  0.2  0.6 277452 16940 ?        S    17:41   0:00  \_ /usr/sbin/httpd -k start
nobody    22416  0.0  0.6 277472 16296 ?        S    17:41   0:00  \_ /usr/sbin/httpd -k start
root       2041  0.0  0.4 183152 11628 ?        Ss   09:46   0:24 lfd - sleeping
oysipao+   9063  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+   9089  0.0  0.0   3152    56 ?        S    10:01   0:00  \_ [kworker]
root      28537  0.0  4.8 248100 118040 ?       Ss   10:50   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      32709  0.0  5.6 269720 136144 ?       S    11:00   0:22  \_ spamd child
root      32710  0.0  5.1 258916 125576 ?       S    11:00   0:00  \_ spamd child
root        940  0.0  0.4 1277312 11576 ?       Ssl  17:00   0:00 /usr/bin/checkstatus
root        979  0.0  0.4 1276100 10356 ?       Ssl  17:00   0:00 /usr/bin/cspdaemon
## mysql stats
Uptime: 50247  Threads: 4  Questions: 3785457  Slow queries: 0  Opens: 10763  Flush tables: 1  Open tables: 2000  Queries per second avg: 75.336
*************************** 1. row ***************************
     Id: 57114
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 57117
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 57135
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.132.202 TIME_WAIT
      1 159.203.83.20 TIME_WAIT
      1 ::1 TIME_WAIT
      1 66.249.70.39 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      5 159.100.30.154 TIME_WAIT
     75 157.230.45.41 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 17:42:02 WAT
   Restart Time: Friday, 07-Nov-2025 03:44:42 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 13 hours 57 minutes 20 seconds
   Server load: 1.51 0.97 0.81
   Total accesses: 99342 - Total Traffic: 1.6 GB - Total Duration: 225578559
   CPU Usage: u8.51 s4.64 cu829.36 cs589.16 - 2.85% CPU load
   1.98 requests/sec - 32.9 kB/second - 16.7 kB/request - 2270.73 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

WWWK_W_KKC__.R_..._.W_K.WW.K....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur    Conn  Child  Slot      Client      Protocol           VHost                                        Request
   0-0  21963 3/29/6023  W 0.55 0     0   10919637 98.7  0.54  84.71  66.249.70.37    http/1.1 support.cloudware.ng:443   GET /?c=2115102330 HTTP/1.1
   1-0  18941 0/111/5747 W 1.75 91    0   12057353 0.0   1.46  86.12  173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323533373233312p2231223
   2-0  17481 0/173/5890 W 1.93 51    0   8962234  0.0   1.61  100.18 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323533373237312p2231223
   3-0  22273 6/10/5650  K 0.17 1     366 8624662  197.2 0.22  101.25 66.249.70.39    http/1.1 support.cloudware.ng:443   GET /?c=758933418 HTTP/1.1
   4-0  19831 0/97/5958  _ 1.41 0     180 7207340  0.0   1.39  92.73  159.100.30.154  http/1.1 cloudware.ng:443           POST /xmlrpc.php HTTP/1.1
   5-0  17503 0/117/6281 W 1.77 31    0   7650325  0.0   1.65  100.81 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323533373239312p2231223
   6-0  15145 0/245/5041 _ 3.49 0     0   9464493  0.0   3.62  89.76  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   7-0  20800 1/42/5138  K 0.71 1     343 52259675 35.7  0.79  77.06  66.249.70.32    http/1.1 support.cloudware.ng:443   GET /?c=1553754504 HTTP/1.1
   8-0  17504 2/170/4846 K 2.50 2     406 9853099  68.4  2.34  72.89  66.249.70.34    http/1.1 support.cloudware.ng:443   GET /?c=3723017703 HTTP/1.1
   9-0  22278 1/7/5263   C 0.16 0     882 9048976  5.7   0.14  103.01 157.230.45.41   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   10-0 22279 0/9/4480   _ 0.20 1     405 10479088 0.0   0.23  61.37  66.249.70.35    http/1.1 support.cloudware.ng:443   GET /?c=1180789277 HTTP/1.1
   11-0 22416 0/1/3795   _ 0.00 1     8   10422017 0.0   0.01  62.52  114.119.132.202 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Borno&lga=Maiduguri%20m.%2
   12-0 -     0/0/4316   . 0.00 104   0   6210823  0.0   0.00  72.34  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 12642 0/251/4470 R 4.30 115   6   7402101  0.0   4.03  75.03  198.57.247.169  http/1.1
   14-0 7490  0/294/4778 _ 4.72 0     25  7942240  0.0   4.57  70.95  116.203.134.67  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue4.php HTTP/1.1
   15-0 -     0/0/3870   . 0.00 465   0   8607668  0.0   0.00  55.42  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 -     0/0/1866   . 0.00 474   0   8556243  0.0   0.00  39.18  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 -     0/0/3082   . 0.00 229   0   6292821  0.0   0.00  61.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 15150 0/98/3031  _ 1.35 1     6   2902381  0.0   1.33  49.78  18.206.47.187   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/2019elections/blog/images/assets
   19-0 -     0/0/1722   . 0.00 93    0   4796502  0.0   0.00  30.62  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 18033 0/78/1483  W 1.32 0     0   2769677  0.0   1.58  19.71  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   21-0 18034 0/158/775  _ 2.93 0     493 2712177  0.0   2.57  12.79  157.230.45.41   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   22-0 18035 1/98/1523  K 1.89 0     467 2320323  35.2  1.76  26.35  66.249.70.33    http/1.1 support.cloudware.ng:443   GET /?c=2861045125 HTTP/1.1
   23-0 -     0/0/356    . 0.00 462   0   1072206  0.0   0.00  5.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 15165 0/114/366  W 1.77 167   0   1156939  0.0   1.37  5.86   173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323533373135352p2231223
   25-0 9591  0/378/699  W 5.39 71    0   1690564  0.0   4.98  10.01  173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323533373235312p2231223
   26-0 -     0/0/194    . 0.00 450   0   566947   0.0   0.00  4.75   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 9602  2/485/516  K 6.68 0     6   679453   12.4  5.70  6.31   128.199.104.11  http/1.1 oysipa.oyostate.gov.ng:80  GET / HTTP/1.1
   28-0 -     0/0/394    . 0.00 182   0   597187   0.0   0.00  5.28   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/100    . 0.00 777   0   61979    0.0   0.00  2.88   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/55     . 0.00 625   0   46973    0.0   0.00  10.31  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/134    . 0.00 701   0   194555   0.0   0.00  1.40   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/3      . 0.00 790   0   9852     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/7      . 0.00 20547 0   21858    0.0   0.00  0.36   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/2      . 0.00 20593 0   17699    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/5      . 0.00 20562 0   19399    0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/4      . 0.00 20571 0   14235    0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/2      . 0.00 20594 0   15595    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/156    . 0.00 20327 0   148319   0.0   0.00  0.63   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/2      . 0.00 20595 0   15338    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/6      . 0.00 20550 0   21858    0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/208    . 0.00 19726 0   243070   0.0   0.00  2.95   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/2      . 0.00 20590 0   19835    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00 20591 0   19620    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/6      . 0.00 20548 0   24371    0.0   0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/5      . 0.00 20557 0   19070    0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/6      . 0.00 20552 0   20569    0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/4      . 0.00 20567 0   17777    0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/4      . 0.00 20564 0   16933    0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/2      . 0.00 20592 0   17743    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/3      . 0.00 20574 0   22693    0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/4      . 0.00 20561 0   22016    0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/4      . 0.00 20570 0   22448    0.0   0.00  0.16   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/3      . 0.00 20578 0   9096     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/6      . 0.00 20566 0   23840    0.0   0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/17     . 0.00 20539 0   16331    0.0   0.00  0.47   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/184    . 0.00 20359 0   130360   0.0   0.00  0.50   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/3      . 0.00 20575 0   22445    0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/3      . 0.00 20579 0   7899     0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/5      . 0.00 20554 0   23139    0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/139    . 0.00 20223 0   237404   0.0   0.00  1.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/2      . 0.00 20588 0   2361     0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/11     . 0.00 20537 0   9214     0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/4      . 0.00 20563 0   8490     0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/1      . 0.00 20604 0   0        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/1      . 0.00 20602 0   0        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/2      . 0.00 20586 0   8680     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/1      . 0.00 20601 0   0        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/3      . 0.00 20577 0   742      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/1      . 0.00 20603 11  22       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00 20584 0   10366    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/65     . 0.00 20396 0   105003   0.0   0.00  1.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/151    . 0.00 20224 0   218700   0.0   0.00  1.26   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/2      . 0.00 20583 0   8818     0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/4      . 0.00 20573 0   1447     0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/2      . 0.00 20589 0   463      0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/101    . 0.00 20309 0   159456   0.0   0.00  0.87   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/6      . 0.00 20558 0   4997     0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/338    . 0.00 18801 0   272159   0.0   0.00  5.63   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00 20600 0   0        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -     0/0/2      . 0.00 20582 0   7766     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -     0/0/3      . 0.00 20565 0   10368    0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 719
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 0...58)
   index usage: 12%, cache usage: 17%
   total entries stored since starting: 58883
   total entries replaced since starting: 0
   total entries expired since starting: 58125
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 167 miss
   total removes since starting: 39 hit, 169 miss
Youez - 2016 - github.com/yon3zu
LinuXploit