403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.18.06.txt
 ## swap threshold exceeded
## server overview
2025-11-07.18.06 load[0] mem[58/78] mysql[1/25] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1302          94          92         966         798
Swap:          1999        1624         375
 18:06:01 up  8:19,  0 users,  load average: 0.51, 0.62, 0.77
## system overview
top - 18:06:01 up  8:19,  0 users,  load average: 0.51, 0.62, 0.77
Tasks: 207 total,   6 running, 199 sleeping,   0 stopped,   2 zombie
%Cpu(s): 62.5 us, 37.5 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    78924 free,  1337596 used,  1003780 buff/cache
KiB Swap:  2047996 total,   384880 free,  1663116 used.   813084 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1782 mysql     20   0 1484772 282880   3436 S  80.0 11.7   9:51.68 /usr/sbin+
 35113 nigeria   20   0  400652  15936  10220 S  13.3  0.7   0:00.02 /opt/cpan+
 35116 pactpay   20   0  476460  16056  10480 S   6.7  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44424   3660   1692 S   0.0  0.2   0:43.64 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.48 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.51 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:35.71 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.47 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.90 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:26.73 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 R   0.0  0.0   0:00.55 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:02.88 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:03.24 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.86 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40244   7060   6816 S   0.0  0.3   0:14.93 /usr/lib/+
   382 root      20   0   45352      8      4 S   0.0  0.0   0:00.36 /usr/lib/+
   409 root      16  -4   55532    456    336 S   0.0  0.0   0:02.35 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0   24720   1224    788 S   0.0  0.1   0:06.82 /usr/lib/+
   493 root      20   0  224268   4632   1040 S   0.0  0.2   0:00.46 queueproc+
   494 root      20   0  152780     76     36 S   0.0  0.0   0:00.01 /usr/sbin+
   499 nscd      20   0 1334484   1976    784 S   0.0  0.1   0:11.37 /usr/sbin+
   500 rpc       20   0   69256     24      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   503 dbus      20   0   57032   1328    616 R   0.0  0.1   0:15.63 /usr/bin/+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0   52852    292    180 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  610540    984    608 S   0.0  0.0   0:04.00 /usr/lib/+
   539 root      20   0       0      0      0 D   0.0  0.0   0:00.03 [kworker/+
   541 root      20   0   21540    388    280 S   0.0  0.0   0:00.70 /usr/sbin+
   551 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  124480    428    296 R   0.0  0.0   0:00.84 /usr/sbin+
   558 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   570 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   622 mailnull  20   0   89116   3856    908 S   0.0  0.2   0:00.46 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:03.34 [loop0]
   677 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   959 systuser  20   0  114016  10668   2620 S   0.0  0.4   0:07.06 /usr/loca+
   960 systuser  20   0   11604     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   961 root      20   0  572372    620    160 S   0.0  0.0   0:02.61 /usr/bin/+
   963 telegraf  20   0 5654304  35076   5756 S   0.0  1.4   0:16.35 /usr/loca+
   964 root      20   0   51508    604    424 S   0.0  0.0   0:00.38 /usr/sbin+
   966 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   968 systuser  20   0  111608      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 systuser  20   0   10388     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   970 systuser  20   0  113932      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   981 named     20   0  784388  37360   1880 S   0.0  1.5   0:19.64 /usr/sbin+
   982 root      20   0 1828076  85688    532 S   0.0  3.5   0:35.59 /usr/loca+
   984 root      20   0  386112    440    344 S   0.0  0.0   0:00.84 php-fpm: +
   992 root      20   0  397344   2420    612 S   0.0  0.1   0:06.80 php-fpm: +
   994 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.65 /usr/bin/+
  1007 root      20   0  392856    484    392 S   0.0  0.0   0:00.82 php-fpm: +
  1012 root      20   0  385496    476    376 S   0.0  0.0   0:00.86 php-fpm: +
  1013 root      20   0  298320   7468   6388 S   0.0  0.3   0:07.85 /usr/sbin+
  1014 root      20   0  261428  27624   4896 S   0.0  1.1   0:09.08 cpsrvd (S+
  1017 root      20   0  436392    404    316 S   0.0  0.0   0:00.96 php-fpm: +
  1018 root      20   0  153404    224    140 S   0.0  0.0   0:00.65 pure-ftpd+
  1020 root      20   0  111304    356    260 S   0.0  0.0   0:03.26 /usr/sbin+
  1026 cpanelc+  20   0   10532   3588   2328 S   0.0  0.1   0:23.26 /usr/loca+
  1096 dovenull  20   0   46912   2484   1908 S   0.0  0.1   0:00.45 dovecot/p+
  1097 dovenull  20   0   47936   3288   1876 S   0.0  0.1   0:00.23 dovecot/i+
  1098 dovecot   20   0   10320    316    200 S   0.0  0.0   0:00.07 dovecot/a+
  1099 root      20   0   10452    568    368 S   0.0  0.0   0:00.38 dovecot/l+
  1100 dovenull  20   0   46912   2340   1744 S   0.0  0.1   0:00.60 dovecot/p+
  1101 dovenull  20   0   47996   3392   1844 S   0.0  0.1   0:00.36 dovecot/i+
  1108 root      20   0   24568   2524    512 S   0.0  0.1   0:00.23 dovecot/c+
  1113 dovecot   20   0   13568    436    220 S   0.0  0.0   0:00.08 dovecot/s+
  1182 dovecot   20   0   41268   1548   1016 S   0.0  0.1   0:00.62 dovecot/a+
  1218 systuser  20   0  157708   2864    816 S   0.0  0.1   0:00.14 SonarPush+
  1233 wp-tool+  20   0  410452  26032   1684 S   0.0  1.1   0:24.55 /usr/bin/+
  1234 wp-tool+  20   0  387528   3512   1656 S   0.0  0.1   0:00.31 /usr/bin/+
  1264 root      20   0  262224  24620   6760 S   0.0  1.0   0:02.72 cpdavd - +
  1265 root      20   0  209456  11136   2412 S   0.0  0.5   0:02.96 tailwatchd
  1267 root      20   0  167452   4116   2748 S   0.0  0.2   0:00.49 dnsadmin +
  1713 root      20   0  299272    632    448 S   0.0  0.0   0:00.81 php-fpm: +
  1728 root      38  18  130416   1372    688 S   0.0  0.1   0:00.07 cpanellog+
  1968 root      20   0  266984   5096    600 S   0.0  0.2   0:01.80 /usr/sbin+
  1970 root      20   0   12828    328    212 S   0.0  0.0   0:02.47 /usr/loca+
  1971 root      20   0   12732    288    212 S   0.0  0.0   0:02.09 /usr/loca+
  1972 root      20   0   12868    340    216 S   0.0  0.0   0:02.27 /usr/loca+
  1977 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  2041 root      20   0  183252  11808   1104 S   0.0  0.5   0:26.22 lfd - sle+
  9063 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  9089 oysipao+  20   0    3152     56     16 S   0.0  0.0   0:00.54 [kworker]
 14841 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 16085 cloudw    20   0  471824   9528   5296 S   0.0  0.4   0:01.77 php-fpm: +
 16430 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 17437 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 17438 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kworker/+
 18035 nobody    20   0  277840  20324   4744 S   0.0  0.8   0:02.00 /usr/sbin+
 20800 nobody    20   0  277520  19324   4696 S   0.0  0.8   0:01.06 /usr/sbin+
 22059 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 22273 nobody    20   0  277840  19852   4716 S   0.0  0.8   0:01.52 /usr/sbin+
 22278 nobody    20   0  277512  18932   4436 S   0.0  0.8   0:00.98 /usr/sbin+
 22279 nobody    20   0  277516  19228   4552 S   0.0  0.8   0:00.84 /usr/sbin+
 26285 nobody    20   0  277512  18832   4560 S   0.0  0.8   0:00.93 /usr/sbin+
 26480 nobody    20   0  277640  19164   4452 S   0.0  0.8   0:01.03 /usr/sbin+
 27782 nobody    20   0  277540  18792   4352 S   0.0  0.8   0:00.80 /usr/sbin+
 28205 nobody    20   0  277564  19016   4424 S   0.0  0.8   0:00.89 /usr/sbin+
 28437 cloudw    20   0  471792   9524   5288 S   0.0  0.4   0:00.58 php-fpm: +
 28537 root      20   0  248100 114732   1348 S   0.0  4.7   0:05.80 /usr/loca+
 28724 nobody    20   0  277840  18972   4432 S   0.0  0.8   0:00.51 /usr/sbin+
 28731 nobody    20   0  277856  19212   4556 S   0.0  0.8   0:00.82 /usr/sbin+
 28732 nobody    20   0  277844  18196   4008 S   0.0  0.8   0:00.26 /usr/sbin+
 28733 nobody    20   0  277520  19424   4624 S   0.0  0.8   0:01.00 /usr/sbin+
 28771 nobody    20   0  277716  19016   4272 S   0.0  0.8   0:00.95 /usr/sbin+
 28792 nobody    20   0  277520  18776   4264 S   0.0  0.8   0:00.91 /usr/sbin+
 29471 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 30350 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 30742 nobody    20   0  277844  18580   4208 S   0.0  0.8   0:00.50 /usr/sbin+
 31582 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 31943 root      20   0 1341636  10692    600 S   0.0  0.4   0:00.05 /usr/bin/+
 31980 root      20   0 1277312  11844    596 S   0.0  0.5   0:00.06 /usr/bin/+
 32709 root      20   0  269720 133924   2484 S   0.0  5.5   0:23.11 spamd chi+
 32710 root      20   0  258916 123392   2784 S   0.0  5.1   0:00.76 spamd chi+
 32922 cloudw    20   0  471784   9200   4972 S   0.0  0.4   0:00.19 php-fpm: +
 33158 cloudw    20   0  471784   9196   4972 S   0.0  0.4   0:00.19 php-fpm: +
 33312 nobody    20   0  277860  18084   4044 S   0.0  0.7   0:00.32 /usr/sbin+
 33336 cloudw    20   0  471784   9200   4976 S   0.0  0.4   0:00.19 php-fpm: +
 33466 nobody    20   0  277848  18028   3936 S   0.0  0.7   0:00.06 /usr/sbin+
 33863 nobody    20   0  277452  17648   3904 S   0.0  0.7   0:00.18 /usr/sbin+
 34305 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 34646 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 34649 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 34900 root      20   0  111304   4440   3404 S   0.0  0.2   0:00.00 sshd: [ac+
 34901 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 34912 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 34920 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 34950 root      20   0  261428  24168   1416 S   0.0  1.0   0:00.00 whostmgrd+
 35003 healtho+  20   0  455192  65280   4184 S   0.0  2.7   0:01.15 php-fpm: +
 35004 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 35015 nigeria   20   0  397064   5272   2264 S   0.0  0.2   0:00.00 php-fpm: +
 35024 agradio   20   0  416796  30576   4752 S   0.0  1.3   0:00.22 php-fpm: +
 35030 healtho+  20   0  428572  38568   4180 S   0.0  1.6   0:00.30 php-fpm: +
 35046 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 35047 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35048 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35049 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35050 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35051 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35052 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [crond] <+
 35053 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35054 root      20   0  183044   2200   1632 R   0.0  0.1   0:00.00 /usr/sbin+
 35055 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35056 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35057 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35058 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 35060 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 35061 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 35062 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 35063 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 35064 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 35088 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 35089 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 35090 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 35091 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 35092 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 35093 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 35094 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 35095 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 35096 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 35097 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 35099 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 35100 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 35109 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 35111 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 35114 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 35117 saboakin  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
100807 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    09:46   0:35  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    09:46   0:26  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        660  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [loop0]
root        677  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root     100807  0.0  0.0      0     0 ?        S    16:57   0:00  \_ [kworker/u200:0]
root        539  0.0  0.0      0     0 ?        D    17:00   0:00  \_ [kworker/0:2]
root      14841  0.0  0.0      0     0 ?        R    17:28   0:00  \_ [kworker/0:3]
root      16430  0.0  0.0      0     0 ?        S    17:31   0:00  \_ [kworker/u200:2]
root      17437  0.0  0.0      0     0 ?        S    17:33   0:00  \_ [kworker/1:2]
root      17438  0.0  0.0      0     0 ?        S    17:33   0:00  \_ [kworker/1:4]
root      22059  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [kworker/1:1]
root      29471  0.0  0.0      0     0 ?        S    17:56   0:00  \_ [kworker/0:0]
root      30350  0.0  0.0      0     0 ?        S    17:58   0:00  \_ [kworker/1:3]
root      31582  0.0  0.0      0     0 ?        S    18:00   0:00  \_ [kworker/0:1]
root      34649  0.0  0.0      0     0 ?        D    18:05   0:00  \_ [kworker/u200:1]
root      35127  0.0  0.0      0     0 ?        R    18:06   0:00      \_ [kworker/u200:1]
root          1  0.1  0.1  44424  3660 ?        Ss   09:46   0:43 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.2  40244  7060 ?        Ss   09:46   0:14 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45352     8 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   456 ?        S<sl 09:46   0:02 /sbin/auditd
root        489  0.0  0.0  24720  1224 ?        Ss   09:46   0:06 /usr/lib/systemd/systemd-logind
root        493  0.0  0.1 224268  4632 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
root        494  0.0  0.0 152780    76 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        499  0.0  0.0 1334484 1976 ?        Ssl  09:46   0:11 /usr/sbin/nscd
rpc         500  0.0  0.0  69256    24 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        503  0.0  0.0  57032  1328 ?        Ss   09:46   0:15 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        523  0.0  0.0 195208     0 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0  52852   292 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.0 610540   984 ?        Ssl  09:46   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        541  0.0  0.0  21540   388 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        551  0.0  0.0  24208     4 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        552  0.0  0.0 124480   428 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      35046  0.0  0.0 183048  2136 ?        S    18:06   0:00  \_ /usr/sbin/CROND -n
root      35062  0.0  0.0 113284  1212 ?        Ss   18:06   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      35063  0.0  0.0 108052   356 ?        S    18:06   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      35064  0.0  0.0 113288  1520 ?        S    18:06   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      35128  0.0  0.0 153840  2092 ?        R    18:06   0:00  |               \_ ps auxf
root      35047  0.0  0.0 183048  2140 ?        S    18:06   0:00  \_ /usr/sbin/CROND -n
root      35089  0.0  0.0  20164   804 ?        Ss   18:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      35048  0.0  0.0 183048  2140 ?        S    18:06   0:00  \_ /usr/sbin/CROND -n
root      35090  0.0  0.0  20164   804 ?        Ss   18:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      35049  0.0  0.0 183048  2140 ?        S    18:06   0:00  \_ /usr/sbin/CROND -n
root      35099  0.0  0.0  20164   804 ?        Ss   18:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      35050  0.0  0.0 183048  2140 ?        S    18:06   0:00  \_ /usr/sbin/CROND -n
root      35095  0.0  0.0  20164   804 ?        Ss   18:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      35051  0.0  0.0 183048  2140 ?        S    18:06   0:00  \_ /usr/sbin/CROND -n
root      35093  0.0  0.0  20164   808 ?        Ss   18:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      35053  0.0  0.0 183048  2140 ?        S    18:06   0:00  \_ /usr/sbin/CROND -n
root      35091  0.0  0.0  20164   804 ?        Ss   18:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      35055  0.0  0.0 183048  2140 ?        S    18:06   0:00  \_ /usr/sbin/CROND -n
root      35096  0.0  0.0  20164   804 ?        Ss   18:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      35056  0.0  0.0 183048  2140 ?        S    18:06   0:00  \_ /usr/sbin/CROND -n
root      35088  0.0  0.0  20164   804 ?        Ss   18:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      35057  0.0  0.0 183048  2140 ?        S    18:06   0:00  \_ /usr/sbin/CROND -n
root      35092  0.0  0.0  20164   804 ?        Ss   18:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      35058  0.0  0.0 183048  2144 ?        S    18:06   0:00  \_ /usr/sbin/CROND -n
root      35097  0.0  0.0  20164   968 ?        Ss   18:06   0:00  |   \_ jailshell (pactpay) [35114] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   35114  0.0  0.0  20164   260 ?        S    18:06   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   35116  0.0  0.6 476460 16056 ?        S    18:06   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      35060  0.0  0.0 183048  2140 ?        S    18:06   0:00  \_ /usr/sbin/CROND -n
root      35100  0.0  0.0  20164   960 ?        Ss   18:06   0:00  |   \_ jailshell (nigeria) [35111] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   35111  0.0  0.0  20164   256 ?        S    18:06   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   35113  0.0  0.6 400652 15936 ?        S    18:06   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      35061  0.0  0.0 183048  2144 ?        S    18:06   0:00  \_ /usr/sbin/CROND -n
root      35094  0.0  0.0  20164   964 ?        Ss   18:06   0:00      \_ jailshell (saboakin) [35117] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  35117  0.0  0.0      0     0 ?        D    18:06   0:00          \_ [jailshell]
root        558  0.0  0.0   4388     4 ?        Ss   09:46   0:00 /usr/sbin/acpid
root        569  0.0  0.0 114704     0 ttyS0    Ss+  09:46   0:00 /bin/bash
root        570  0.0  0.0 108296     8 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    622  0.0  0.1  89116  3856 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    959  0.0  0.4 114016 10668 ?        Ssl  09:46   0:07 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    960  0.0  0.0  11604    24 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        961  0.0  0.0 572372   620 ?        Ssl  09:46   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    963  0.0  1.4 5654304 35076 ?       SLsl 09:46   0:16 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0  51508   604 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1096  0.0  0.1  46912  2484 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1097  0.0  0.1  47936  3288 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1098  0.0  0.0  10320   316 ?        S    09:46   0:00  \_ dovecot/anvil
root       1099  0.0  0.0  10452   568 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1100  0.0  0.0  46912  2340 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1101  0.0  0.1  47996  3392 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1108  0.0  0.1  24568  2524 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1113  0.0  0.0  13568   436 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1182  0.0  0.0  41268  1548 ?        S    09:46   0:00  \_ dovecot/auth
root      34305  0.0  0.1  41052  2728 ?        S    18:04   0:00  \_ dovecot/auth -w
root      34646  0.0  0.1  60820  4512 ?        S    18:05   0:00  \_ dovecot/lmtp
root        966  0.0  0.0 445028     0 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    968  0.0  0.0 111608     4 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    969  0.0  0.0  10388    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    970  0.0  0.0 113932     8 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
named       981  0.0  1.5 784388 37360 ?        Ssl  09:46   0:19 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        982  0.1  3.5 1828076 85688 ?       Ssl  09:46   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
root        984  0.0  0.0 386112   440 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
agradio   35024  7.3  1.2 416796 30576 ?        S    18:05   0:00  \_ php-fpm: pool agradio_ng
root        992  0.0  0.0 397344  2420 ?        Ss   09:46   0:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    16085  0.0  0.3 471824  9528 ?        S    17:30   0:01  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    28437  0.0  0.3 471792  9524 ?        S    17:54   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    32922  0.0  0.3 471784  9200 ?        S    18:02   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    33158  0.0  0.3 471784  9196 ?        S    18:02   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    33336  0.1  0.3 471784  9200 ?        S    18:02   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
healtho+  35003 16.4  2.6 455192 65280 ?        S    18:05   0:01  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   35015  0.0  0.2 397064  5272 ?        S    18:05   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  35030 15.0  1.5 428572 38568 ?        S    18:05   0:00  \_ php-fpm: pool health_oyostate_gov_ng
memcach+    994  0.0  0.0 342400     0 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1007  0.0  0.0 392856   484 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root       1012  0.0  0.0 385496   476 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1013  0.0  0.3 298320  7468 ?        Ssl  09:46   0:07 /usr/sbin/rsyslogd -n
root       1014  0.0  1.1 261428 27624 ?        Ss   09:46   0:09 cpsrvd (SSL) - waiting for connections                   
root      34950  0.0  0.9 261428 24168 ?        S    18:05   0:00  \_ whostmgrd - serving 27.115.124.5
root      35004  0.0  0.0      0     0 ?        Z    18:05   0:00  \_ [cpaneld - servi] <defunct>
root       1017  0.0  0.0 436392   404 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1018  0.0  0.0 153404   224 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
root       1020  0.0  0.0 111304   356 ?        Ss   09:46   0:03 /usr/sbin/sshd -D
root      34900  0.0  0.1 111304  4440 ?        Ss   18:05   0:00  \_ sshd: [accepted]
sshd      34901  0.0  0.1 115644  2628 ?        S    18:05   0:00  |   \_ sshd: [net]
root      34912  0.0  0.1 111304  4260 ?        Ss   18:05   0:00  \_ sshd: [accepted]
sshd      34920  0.0  0.1 115644  2624 ?        S    18:05   0:00      \_ sshd: [net]
cpanelc+   1026  0.0  0.1  10532  3588 ?        Ss   09:46   0:23 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1218  0.0  0.1 157708  2864 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1233  0.0  1.0 410452 26032 ?        Ss   09:46   0:24 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1234  0.0  0.1 387528  3512 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  1.0 262224 24620 ?        Ss   09:46   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1265  0.0  0.4 209456 11136 ?        Ss   09:46   0:02 tailwatchd
root       1267  0.0  0.1 167452  4116 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1713  0.0  0.0 299272   632 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1728  0.0  0.0 130416  1372 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1782  1.9 11.6 1484772 282880 ?      Sl   09:46   9:51 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1968  0.0  0.2 266984  5096 ?        Ss   09:46   0:01 /usr/sbin/httpd -k start
root       1970  0.0  0.0  12828   328 ?        S    09:46   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1971  0.0  0.0  12732   288 ?        S    09:46   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1972  0.0  0.0  12868   340 ?        S    09:46   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1977  0.0  0.0  53340     4 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    18035  0.1  0.8 277840 20324 ?        S    17:34   0:02  \_ /usr/sbin/httpd -k start
nobody    20800  0.0  0.7 277520 19324 ?        S    17:38   0:01  \_ /usr/sbin/httpd -k start
nobody    22273  0.1  0.8 277840 19852 ?        S    17:41   0:01  \_ /usr/sbin/httpd -k start
nobody    22278  0.0  0.7 277512 18932 ?        S    17:41   0:00  \_ /usr/sbin/httpd -k start
nobody    22279  0.0  0.7 277516 19228 ?        S    17:41   0:00  \_ /usr/sbin/httpd -k start
nobody    26285  0.0  0.7 277512 18832 ?        S    17:50   0:00  \_ /usr/sbin/httpd -k start
nobody    26480  0.1  0.7 277640 19164 ?        S    17:50   0:01  \_ /usr/sbin/httpd -k start
nobody    27782  0.1  0.7 277540 18792 ?        S    17:52   0:00  \_ /usr/sbin/httpd -k start
nobody    28205  0.1  0.7 277564 19016 ?        S    17:53   0:00  \_ /usr/sbin/httpd -k start
nobody    28724  0.0  0.7 277840 18972 ?        S    17:54   0:00  \_ /usr/sbin/httpd -k start
nobody    28731  0.1  0.7 277856 19212 ?        S    17:54   0:00  \_ /usr/sbin/httpd -k start
nobody    28732  0.0  0.7 277844 18196 ?        S    17:54   0:00  \_ /usr/sbin/httpd -k start
nobody    28733  0.1  0.8 277520 19424 ?        S    17:54   0:01  \_ /usr/sbin/httpd -k start
nobody    28771  0.1  0.7 277716 19016 ?        S    17:54   0:00  \_ /usr/sbin/httpd -k start
nobody    28792  0.1  0.7 277520 18776 ?        S    17:54   0:00  \_ /usr/sbin/httpd -k start
nobody    30742  0.1  0.7 277844 18580 ?        R    17:59   0:00  \_ /usr/sbin/httpd -k start
nobody    33312  0.1  0.7 277860 18084 ?        S    18:02   0:00  \_ /usr/sbin/httpd -k start
nobody    33466  0.0  0.7 277848 18028 ?        S    18:03   0:00  \_ /usr/sbin/httpd -k start
nobody    33863  0.1  0.7 277452 17648 ?        S    18:03   0:00  \_ /usr/sbin/httpd -k start
root       2041  0.0  0.4 183252 11808 ?        Ss   09:46   0:26 lfd - sleeping
oysipao+   9063  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+   9089  0.0  0.0   3152    56 ?        S    10:01   0:00  \_ [kworker]
root      28537  0.0  4.7 248100 114732 ?       Ss   10:50   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      32709  0.0  5.5 269720 133924 ?       S    11:00   0:23  \_ spamd child
root      32710  0.0  5.0 258916 123392 ?       S    11:00   0:00  \_ spamd child
root      31943  0.0  0.4 1341636 10692 ?       Ssl  18:00   0:00 /usr/bin/cspdaemon
root      31980  0.0  0.4 1277312 11844 ?       Ssl  18:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 51686  Threads: 3  Questions: 4026882  Slow queries: 0  Opens: 11196  Flush tables: 1  Open tables: 2000  Queries per second avg: 77.910
*************************** 1. row ***************************
     Id: 60644
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: NULL
   Info: NULL
*************************** 2. row ***************************
     Id: 60645
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 60648
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.154.89 TIME_WAIT
      1 ::1 TIME_WAIT
      1 216.73.216.51 TIME_WAIT
      1 34.34.31.212 TIME_WAIT
      1 34.7.137.95 TIME_WAIT
      1 43.173.177.208 TIME_WAIT
      1 43.173.182.9 TIME_WAIT
      1 54.39.210.156 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 20.61.126.213 TIME_WAIT
      3 34.32.133.176 TIME_WAIT
      4 139.59.58.202 TIME_WAIT
     83 157.230.45.41 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 18:06:01 WAT
   Restart Time: Friday, 07-Nov-2025 03:44:42 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 14 hours 21 minutes 19 seconds
   Server load: 0.51 0.62 0.77
   Total accesses: 105212 - Total Traffic: 1.7 GB - Total Duration: 240693005
   CPU Usage: u11.69 s5.66 cu880.22 cs628.54 - 2.95% CPU load
   2.04 requests/sec - 34.2 kB/second - 16.8 kB/request - 2287.7 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

_KKRKR_W_KW__W._.WWK..W.........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur    Conn  Child  Slot      Client      Protocol           VHost                                        Request
   0-0  26285 0/181/6251 _ 3.73 0     24  12193147 0.0   6.60  91.75  128.140.8.200   http/1.1 cloudsms.com.ng:443        GET /cron/process_queue3.php HTTP/1.1
   1-0  33312 9/70/6004  K 1.26 1     349 13472553 284.4 1.73  90.87  66.249.70.32    http/1.1 support.cloudware.ng:443   GET /?c=1632882598 HTTP/1.1
   2-0  28792 1/278/6272 K 3.38 2     290 9999677  35.7  3.20  105.29 66.249.70.36    http/1.1 support.cloudware.ng:443   GET /?c=201713771 HTTP/1.1
   3-0  22273 0/343/5983 R 6.42 5     284 9256262  0.0   7.15  108.18 102.90.102.223  http/1.1
   4-0  28205 4/224/6336 K 3.17 1     411 7414842  131.8 3.33  98.51  66.249.70.38    http/1.1 support.cloudware.ng:443   GET /resource/js/json/megadrop_2015new.json HTTP/1.1
   5-0  33466 0/16/6471  R 0.16 1     25  8707997  0.0   0.24  106.38 157.230.45.41   http/1.1 health.oyostate.gov.ng:443
   6-0  28771 0/274/5572 _ 4.01 1     412 9680666  0.0   3.63  97.48  66.249.70.33    http/1.1 support.cloudware.ng:443   GET /?c=217981988 HTTP/1.1
   7-0  20800 0/248/5344 W 3.53 225   0   53319705 0.0   3.95  80.22  173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323533383533362p2231223
   8-0  26480 0/244/5207 _ 4.02 0     4   10332807 0.0   6.56  81.81  100.27.153.9    http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/2019elections/blog/images/assets
   9-0  22278 1/224/5480 K 3.67 4     394 10480401 35.7  3.60  106.47 66.249.70.39    http/1.1 support.cloudware.ng:443   GET /?c=155157611 HTTP/1.1
   10-0 22279 0/192/4663 W 3.45 164   0   11851620 0.0   3.04  64.19  173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323533383539372p2231223
   11-0 30742 0/120/4059 _ 2.01 0     311 10561508 0.0   1.90  66.66  157.230.45.41   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   12-0 33863 0/39/4459  _ 0.66 0     0   6760705  0.0   0.69  74.62  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   13-0 28724 0/110/4706 W 2.01 185   0   7539555  0.0   2.33  79.62  173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323533383537362p2231223
   14-0 -     0/0/4916   . 0.00 471   0   8014226  0.0   0.00  73.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 27782 0/187/4072 _ 3.06 0     318 9180922  0.0   2.95  58.38  157.230.45.41   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   16-0 -     0/0/1919   . 0.00 501   0   8580035  0.0   0.00  39.97  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 28731 0/200/3282 W 3.04 43    0   6393217  0.0   2.98  64.12  173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323533383731382p2231223
   18-0 28732 0/62/3104  W 0.86 205   0   3433552  0.0   0.98  50.87  173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323533383535362p2231223
   19-0 28733 2/201/1923 K 4.02 0     370 4901506  68.2  4.07  34.69  66.249.70.33    http/1.1 support.cloudware.ng:443   GET /resource/js/json/megadrop_2015new.json HTTP/1.1
   20-0 -     0/0/1578   . 0.00 243   0   2819403  0.0   0.00  21.46  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/917    . 0.00 758   0   3178080  0.0   0.00  14.89  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 18035 0/459/1884 W 8.59 0     0   2877967  0.0   7.75  32.34  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   23-0 -     0/0/356    . 0.00 1902  0   1072206  0.0   0.00  5.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/631    . 0.00 670   0   1805698  0.0   0.00  16.39  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/762    . 0.00 1071  0   2166515  0.0   0.00  11.51  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/194    . 0.00 1890  0   566947   0.0   0.00  4.75   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/684    . 0.00 668   0   1180692  0.0   0.00  9.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/394    . 0.00 1621  0   597187   0.0   0.00  5.28   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/100    . 0.00 2216  0   61979    0.0   0.00  2.88   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/55     . 0.00 2064  0   46973    0.0   0.00  10.31  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/134    . 0.00 2140  0   194555   0.0   0.00  1.40   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/3      . 0.00 2229  0   9852     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/7      . 0.00 21986 0   21858    0.0   0.00  0.36   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/2      . 0.00 22032 0   17699    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/5      . 0.00 22001 0   19399    0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/4      . 0.00 22010 0   14235    0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/2      . 0.00 22033 0   15595    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/156    . 0.00 21766 0   148319   0.0   0.00  0.63   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/2      . 0.00 22034 0   15338    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/6      . 0.00 21989 0   21858    0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/208    . 0.00 21165 0   243070   0.0   0.00  2.95   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/2      . 0.00 22029 0   19835    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00 22030 0   19620    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/6      . 0.00 21987 0   24371    0.0   0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/5      . 0.00 21996 0   19070    0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/6      . 0.00 21991 0   20569    0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/4      . 0.00 22006 0   17777    0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/4      . 0.00 22003 0   16933    0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/2      . 0.00 22031 0   17743    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/3      . 0.00 22013 0   22693    0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/4      . 0.00 22000 0   22016    0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/4      . 0.00 22009 0   22448    0.0   0.00  0.16   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/3      . 0.00 22017 0   9096     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/6      . 0.00 22005 0   23840    0.0   0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/17     . 0.00 21978 0   16331    0.0   0.00  0.47   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/184    . 0.00 21798 0   130360   0.0   0.00  0.50   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/3      . 0.00 22014 0   22445    0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/3      . 0.00 22018 0   7899     0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/5      . 0.00 21993 0   23139    0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/139    . 0.00 21663 0   237404   0.0   0.00  1.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/2      . 0.00 22027 0   2361     0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/11     . 0.00 21976 0   9214     0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/4      . 0.00 22002 0   8490     0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/1      . 0.00 22043 0   0        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/1      . 0.00 22041 0   0        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/2      . 0.00 22025 0   8680     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/1      . 0.00 22040 0   0        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/3      . 0.00 22016 0   742      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/1      . 0.00 22042 11  22       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00 22023 0   10366    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/65     . 0.00 21835 0   105003   0.0   0.00  1.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/151    . 0.00 21664 0   218700   0.0   0.00  1.26   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/2      . 0.00 22022 0   8818     0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/4      . 0.00 22012 0   1447     0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/2      . 0.00 22028 0   463      0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/101    . 0.00 21748 0   159456   0.0   0.00  0.87   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/6      . 0.00 21997 0   4997     0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/338    . 0.00 20240 0   272159   0.0   0.00  5.63   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00 22039 0   0        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -     0/0/2      . 0.00 22021 0   7766     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -     0/0/3      . 0.00 22004 0   10368    0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 721
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 14 seconds, (range: 0...63)
   index usage: 12%, cache usage: 17%
   total entries stored since starting: 62094
   total entries replaced since starting: 0
   total entries expired since starting: 61331
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 167 miss
   total removes since starting: 42 hit, 181 miss
Youez - 2016 - github.com/yon3zu
LinuXploit