403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.18.36.txt
 ## swap threshold exceeded
## server overview
2025-11-07.18.36 load[0] mem[60/79] mysql[7/25] httpd[17]
              total        used        free      shared  buff/cache   available
Mem:           2363        1365         152         100         845         727
Swap:          1999        1644         355
 18:36:02 up  8:49,  0 users,  load average: 0.64, 0.65, 0.70
## system overview
top - 18:36:02 up  8:49,  0 users,  load average: 0.64, 0.65, 0.70
Tasks: 202 total,   5 running, 195 sleeping,   0 stopped,   2 zombie
%Cpu(s): 86.1 us, 13.9 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   131508 free,  1422500 used,   866292 buff/cache
KiB Swap:  2047996 total,   364340 free,  1683656 used.   720232 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1782 mysql     20   0 1484772 298392   3716 S  58.8 12.3  10:31.88 /usr/sbin+
 49471 healtho+  20   0  459804  69532   4184 R  41.2  2.9   0:02.24 php-fpm: +
 49608 cloudw    20   0  480384  87280   4020 R  29.4  3.6   0:00.37 php-fpm: +
 49468 healtho+  20   0  457244  67428   4188 R  23.5  2.8   0:02.32 php-fpm: +
 49668 nigeria   20   0  400652  15936  10220 S  11.8  0.7   0:00.05 /opt/cpan+
   503 dbus      20   0   57032   1328    616 S   5.9  0.1   0:16.55 /usr/bin/+
  1233 wp-tool+  20   0  410452  25792   1444 S   5.9  1.1   0:26.01 /usr/bin/+
 48766 nobody    20   0  277840  17660   3876 S   5.9  0.7   0:00.14 /usr/sbin+
 49705 cloudw    20   0  299200  18680  10532 S   5.9  0.8   0:00.01 /opt/cpan+
     1 root      20   0   44424   3520   1552 S   0.0  0.1   0:46.09 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.67 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.54 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:38.26 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.50 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.20 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:27.18 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.57 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:02.93 [kworker/+
   271 root       0 -20       0      0      0 S   0.0  0.0   0:03.30 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:01.95 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40244   4100   3856 S   0.0  0.2   0:15.66 /usr/lib/+
   382 root      20   0   45352      8      4 S   0.0  0.0   0:00.36 /usr/lib/+
   409 root      16  -4   55532    456    336 S   0.0  0.0   0:02.46 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0   24720   1224    788 S   0.0  0.1   0:07.22 /usr/lib/+
   493 root      20   0  224268   4632   1040 S   0.0  0.2   0:00.47 queueproc+
   494 root      20   0  152780     76     36 S   0.0  0.0   0:00.02 /usr/sbin+
   499 nscd      20   0 1334484   1976    784 S   0.0  0.1   0:12.17 /usr/sbin+
   500 rpc       20   0   69256     24      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   523 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0   52852    292    180 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  610540    984    608 S   0.0  0.0   0:04.23 /usr/lib/+
   541 root      20   0   21540    412    304 S   0.0  0.0   0:00.74 /usr/sbin+
   551 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  124480    428    296 S   0.0  0.0   0:00.89 /usr/sbin+
   558 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   570 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   622 mailnull  20   0   89116   3828    880 S   0.0  0.2   0:00.48 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:03.36 [loop0]
   677 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   959 systuser  20   0  114016  10652   2592 S   0.0  0.4   0:07.45 /usr/loca+
   960 systuser  20   0   11604     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   961 root      20   0  572372    620    160 S   0.0  0.0   0:02.76 /usr/bin/+
   963 telegraf  20   0 5654304  35452   5880 S   0.0  1.5   0:17.31 /usr/loca+
   964 root      20   0   51508    604    424 S   0.0  0.0   0:00.40 /usr/sbin+
   966 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   968 systuser  20   0  111608      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 systuser  20   0   10388     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   970 systuser  20   0  113932      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   981 named     20   0  784388  37848   2180 S   0.0  1.6   0:20.64 /usr/sbin+
   982 root      20   0 1828076  85688    532 S   0.0  3.5   0:35.59 /usr/loca+
   984 root      20   0  386112    512    416 S   0.0  0.0   0:00.89 php-fpm: +
   992 root      20   0  397344   2420    612 S   0.0  0.1   0:07.29 php-fpm: +
   994 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.68 /usr/bin/+
  1007 root      20   0  392856    520    428 S   0.0  0.0   0:00.86 php-fpm: +
  1012 root      20   0  385496    548    448 S   0.0  0.0   0:00.99 php-fpm: +
  1013 root      20   0  306512   5028   3904 S   0.0  0.2   0:08.29 /usr/sbin+
  1014 root      20   0  261428  27588   4860 S   0.0  1.1   0:09.27 cpsrvd (S+
  1017 root      20   0  436392    408    320 S   0.0  0.0   0:01.00 php-fpm: +
  1018 root      20   0  153404    224    140 S   0.0  0.0   0:00.70 pure-ftpd+
  1020 root      20   0  111304    356    260 S   0.0  0.0   0:03.41 /usr/sbin+
  1026 cpanelc+  20   0   10532   3580   2320 S   0.0  0.1   0:24.75 /usr/loca+
  1096 dovenull  20   0   47060   2484   1908 S   0.0  0.1   0:00.49 dovecot/p+
  1097 dovenull  20   0   48080   3280   1868 S   0.0  0.1   0:00.23 dovecot/i+
  1098 dovecot   20   0   10320    316    200 S   0.0  0.0   0:00.08 dovecot/a+
  1099 root      20   0   10452    568    368 S   0.0  0.0   0:00.39 dovecot/l+
  1100 dovenull  20   0   46912   2332   1736 S   0.0  0.1   0:00.64 dovecot/p+
  1101 dovenull  20   0   47996   3388   1840 S   0.0  0.1   0:00.37 dovecot/i+
  1108 root      20   0   24568   2524    512 S   0.0  0.1   0:00.23 dovecot/c+
  1113 dovecot   20   0   13568    436    220 S   0.0  0.0   0:00.09 dovecot/s+
  1182 dovecot   20   0   41268   1548   1016 S   0.0  0.1   0:00.66 dovecot/a+
  1218 systuser  20   0  157708   2864    816 S   0.0  0.1   0:00.15 SonarPush+
  1234 wp-tool+  20   0  387528   3280   1424 S   0.0  0.1   0:00.32 /usr/bin/+
  1264 root      20   0  262224  24504   6772 S   0.0  1.0   0:02.81 cpdavd - +
  1265 root      20   0  209456  11132   2396 S   0.0  0.5   0:03.09 tailwatchd
  1267 root      20   0  167452   4116   2748 S   0.0  0.2   0:00.52 dnsadmin +
  1713 root      20   0  299272    632    448 S   0.0  0.0   0:00.86 php-fpm: +
  1728 root      38  18  130416   1376    692 S   0.0  0.1   0:00.07 cpanellog+
  1968 root      20   0  266984   5096    600 S   0.0  0.2   0:01.94 /usr/sbin+
  1970 root      20   0   12816    328    212 S   0.0  0.0   0:02.70 /usr/loca+
  1971 root      20   0   12732    288    212 S   0.0  0.0   0:02.27 /usr/loca+
  1972 root      20   0   12848    340    216 S   0.0  0.0   0:02.48 /usr/loca+
  1977 root      20   0   53340      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  2041 root      20   0  183352  11944   1104 S   0.0  0.5   0:27.79 lfd - sle+
  9063 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  9089 oysipao+  20   0    3152     56     16 S   0.0  0.0   0:00.58 [kworker]
 17438 root      20   0       0      0      0 S   0.0  0.0   0:00.27 [kworker/+
 28537 root      20   0  248100  94172   1348 S   0.0  3.9   0:06.02 /usr/loca+
 30350 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 31943 root      20   0 1341636  10692    600 S   0.0  0.4   0:00.07 /usr/bin/+
 31980 root      20   0 1277312  11588    596 S   0.0  0.5   0:00.06 /usr/bin/+
 32709 root      20   0  269720 122564   2484 S   0.0  5.1   0:23.29 spamd chi+
 32710 root      20   0  258916 111432   2784 S   0.0  4.6   0:00.76 spamd chi+
 35648 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 37273 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 37886 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 39102 cloudw    20   0  471824   9520   5288 S   0.0  0.4   0:01.18 php-fpm: +
 40343 nobody    20   0  277860  19228   4512 S   0.0  0.8   0:01.14 /usr/sbin+
 40405 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 43113 nobody    20   0  277512  19008   4400 S   0.0  0.8   0:00.95 /usr/sbin+
 43620 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 44324 nobody    20   0  277864  19016   4372 S   0.0  0.8   0:00.38 /usr/sbin+
 45529 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 46053 cloudw    20   0  471824   9440   5236 S   0.0  0.4   0:00.38 php-fpm: +
 46267 nobody    20   0  277852  18364   4144 S   0.0  0.8   0:00.29 /usr/sbin+
 46344 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 47163 nobody    20   0  277512  18440   4096 S   0.0  0.8   0:00.21 /usr/sbin+
 47171 nobody    20   0  277828  18572   4132 S   0.0  0.8   0:00.36 /usr/sbin+
 47174 nobody    20   0  277516  18516   4176 S   0.0  0.8   0:00.33 /usr/sbin+
 47365 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 48060 cloudw    20   0  471784   9196   4972 S   0.0  0.4   0:00.19 php-fpm: +
 48106 nobody    20   0  277788  18148   4040 S   0.0  0.7   0:00.26 /usr/sbin+
 48112 nobody    20   0  277848  17984   3952 S   0.0  0.7   0:00.24 /usr/sbin+
 48140 nobody    20   0  277176  16408   3320 S   0.0  0.7   0:00.00 /usr/sbin+
 48265 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 48270 cloudw    20   0  471784   9196   4968 S   0.0  0.4   0:00.19 php-fpm: +
 48486 worencom  20   0   38468   3832   2996 S   0.0  0.2   0:00.00 dovecot/i+
 48520 cloudw    20   0  471784   9204   4976 S   0.0  0.4   0:00.19 php-fpm: +
 48708 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 48741 nobody    20   0  277840  18140   4096 S   0.0  0.7   0:00.11 /usr/sbin+
 48742 nobody    20   0  277512  17724   3932 S   0.0  0.7   0:00.15 /usr/sbin+
 48747 nobody    20   0  277848  17988   3912 S   0.0  0.7   0:00.14 /usr/sbin+
 48748 nobody    20   0  277860  17800   3804 S   0.0  0.7   0:00.08 /usr/sbin+
 48750 nobody    20   0  277512  17456   3672 S   0.0  0.7   0:00.09 /usr/sbin+
 48763 nobody    20   0  277844  17884   3908 S   0.0  0.7   0:00.11 /usr/sbin+
 48764 nobody    20   0  277512  17840   3860 S   0.0  0.7   0:00.17 /usr/sbin+
 48765 nobody    20   0  277476  16964   3528 S   0.0  0.7   0:00.08 /usr/sbin+
 49455 nigeria   20   0  397064   5272   2264 S   0.0  0.2   0:00.00 php-fpm: +
 49485 nigeria   20   0  397064   5272   2264 S   0.0  0.2   0:00.00 php-fpm: +
 49531 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 49564 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [dnsadmin+
 49569 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [whostmgr+
 49579 cpanelp+  20   0  298280   2356   1492 S   0.0  0.1   0:00.00 php-fpm: +
 49609 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 49610 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 49611 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 49612 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 49614 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 49616 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 49617 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 49618 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 49621 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 49623 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 49625 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 49626 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 49627 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 49631 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 49634 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 49637 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 49638 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 49640 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 49641 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 49642 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 49643 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 49644 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 49645 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 49658 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 49662 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 49702 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 49707 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 49708 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 49709 cloudsms  20   0  317976   8204   5864 R   0.0  0.3   0:00.00 /opt/cpan+
100807 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:46   0:38  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    09:46   0:27  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        660  0.0  0.0      0     0 ?        S<   09:46   0:03  \_ [loop0]
root        677  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root     100807  0.0  0.0      0     0 ?        S    16:57   0:00  \_ [kworker/u200:0]
root      17438  0.0  0.0      0     0 ?        S    17:33   0:00  \_ [kworker/1:4]
root      30350  0.0  0.0      0     0 ?        S    17:58   0:00  \_ [kworker/1:3]
root      35648  0.0  0.0      0     0 ?        S    18:07   0:00  \_ [kworker/0:0]
root      37273  0.0  0.0      0     0 ?        S    18:10   0:00  \_ [kworker/0:4]
root      37886  0.0  0.0      0     0 ?        S    18:11   0:00  \_ [kworker/1:2]
root      40405  0.0  0.0      0     0 ?        S    18:16   0:00  \_ [kworker/0:3]
root      43620  0.0  0.0      0     0 ?        S    18:23   0:00  \_ [kworker/1:1]
root      45529  0.0  0.0      0     0 ?        S    18:27   0:00  \_ [kworker/u200:2]
root      46344  0.0  0.0      0     0 ?        S    18:29   0:00  \_ [kworker/0:2]
root      47365  0.0  0.0      0     0 ?        S    18:31   0:00  \_ [kworker/1:0]
root      48265  0.0  0.0      0     0 ?        S    18:33   0:00  \_ [kworker/u200:1]
root      48708  0.0  0.0      0     0 ?        S    18:34   0:00  \_ [kworker/1:5]
root          1  0.1  0.1  44424  3520 ?        Ss   09:46   0:46 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  40244  4100 ?        Ss   09:46   0:15 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45352     8 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   456 ?        S<sl 09:46   0:02 /sbin/auditd
root        489  0.0  0.0  24720  1224 ?        Ss   09:46   0:07 /usr/lib/systemd/systemd-logind
root        493  0.0  0.1 224268  4632 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
root        494  0.0  0.0 152780    76 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        499  0.0  0.0 1334484 1976 ?        Ssl  09:46   0:12 /usr/sbin/nscd
rpc         500  0.0  0.0  69256    24 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        503  0.0  0.0  57032  1328 ?        Ss   09:46   0:16 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        523  0.0  0.0 195208     0 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0  52852   292 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.0 610540   984 ?        Ssl  09:46   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        541  0.0  0.0  21540   412 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        551  0.0  0.0  24208     4 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        552  0.0  0.0 124480   428 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      49609  0.0  0.0 183048  2140 ?        S    18:36   0:00  \_ /usr/sbin/CROND -n
root      49625  0.0  0.0 113284  1212 ?        Ss   18:36   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      49626  0.0  0.0 108052   356 ?        S    18:36   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      49627  0.0  0.0 113288  1520 ?        S    18:36   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      49711  0.0  0.0 153840  2096 ?        R    18:36   0:00  |               \_ ps auxf
root      49610  0.0  0.0 183048  2144 ?        S    18:36   0:00  \_ /usr/sbin/CROND -n
root      49643  0.0  0.0  20164   808 ?        Ss   18:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      49611  0.0  0.0 183048  2144 ?        S    18:36   0:00  \_ /usr/sbin/CROND -n
root      49637  0.0  0.0  20164   984 ?        Ss   18:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      49712  0.0  0.0  20164   260 ?        R    18:36   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      49612  0.0  0.0 183048  2144 ?        S    18:36   0:00  \_ /usr/sbin/CROND -n
root      49641  0.0  0.0  20164   804 ?        Ss   18:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      49614  0.0  0.0 183048  2144 ?        S    18:36   0:00  \_ /usr/sbin/CROND -n
root      49642  0.0  0.0  20164   804 ?        Ss   18:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      49616  0.0  0.0 183048  2144 ?        S    18:36   0:00  \_ /usr/sbin/CROND -n
root      49644  0.0  0.0  20164   804 ?        Ss   18:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      49617  0.0  0.0 183048  2144 ?        S    18:36   0:00  \_ /usr/sbin/CROND -n
root      49631  0.0  0.0  20164   988 ?        Rs   18:36   0:00  |   \_ jailshell (cloudsms) [49707] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  49707  0.0  0.0      0     0 ?        Z    18:36   0:00  |       \_ [jailshell] <defunct>
root      49618  0.0  0.0 183048  2144 ?        S    18:36   0:00  \_ /usr/sbin/CROND -n
root      49645  0.0  0.0  20164   804 ?        Ss   18:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      49621  0.0  0.0 183048  2144 ?        S    18:36   0:00  \_ /usr/sbin/CROND -n
root      49638  0.0  0.0  20164   960 ?        Ss   18:36   0:00  |   \_ jailshell (pactpay) [49640] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   49640  0.0  0.0  20164   256 ?        S    18:36   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   49658  2.0  0.7 476724 17484 ?        S    18:36   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      49623  0.0  0.0 183048  2140 ?        S    18:36   0:00  \_ /usr/sbin/CROND -n
root      49634  0.0  0.0  20164   964 ?        Ss   18:36   0:00      \_ jailshell (nigeria) [49662] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   49662  0.0  0.0  20164   256 ?        S    18:36   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   49668  5.0  0.6 400652 15936 ?        S    18:36   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0   4388     4 ?        Ss   09:46   0:00 /usr/sbin/acpid
root        569  0.0  0.0 114704     0 ttyS0    Ss+  09:46   0:00 /bin/bash
root        570  0.0  0.0 108296     8 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    622  0.0  0.1  89116  3828 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    959  0.0  0.4 114016 10652 ?        Ssl  09:46   0:07 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    960  0.0  0.0  11604    24 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        961  0.0  0.0 572372   620 ?        Ssl  09:46   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    963  0.0  1.4 5654304 35452 ?       SLsl 09:46   0:17 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0  51508   604 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1096  0.0  0.1  47060  2484 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1097  0.0  0.1  48080  3280 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1098  0.0  0.0  10320   316 ?        S    09:46   0:00  \_ dovecot/anvil
root       1099  0.0  0.0  10452   568 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1100  0.0  0.0  46912  2332 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1101  0.0  0.1  47996  3388 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1108  0.0  0.1  24568  2524 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1113  0.0  0.0  13568   436 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1182  0.0  0.0  41268  1548 ?        S    09:46   0:00  \_ dovecot/auth
worencom  48486  0.0  0.1  38468  3832 ?        S    18:33   0:00  \_ dovecot/imap
root      49531  0.0  0.1  60820  4508 ?        S    18:35   0:00  \_ dovecot/lmtp
root        966  0.0  0.0 445028     0 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    968  0.0  0.0 111608     4 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    969  0.0  0.0  10388    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    970  0.0  0.0 113932     8 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
named       981  0.0  1.5 784388 37848 ?        Ssl  09:46   0:20 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        982  0.1  3.5 1828076 85688 ?       Ssl  09:46   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
root        984  0.0  0.0 386112   512 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  0.0 397344  2420 ?        Ss   09:46   0:07 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    39102  0.0  0.3 471824  9520 ?        S    18:13   0:01  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    46053  0.0  0.3 471824  9440 ?        S    18:28   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    48060  0.0  0.3 471784  9196 ?        S    18:32   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    48270  0.1  0.3 471784  9196 ?        S    18:33   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
cloudw    48520  0.1  0.3 471784  9204 ?        S    18:33   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
nigeria   49455  0.0  0.2 397064  5272 ?        S    18:35   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  49468 17.9  2.7 457244 67428 ?        R    18:35   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  49471 18.7  2.8 459804 69796 ?        R    18:35   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   49485  0.0  0.2 397064  5272 ?        S    18:35   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    49608 39.0  3.8 484480 92556 ?        R    18:36   0:00  \_ php-fpm: pool cloudware_ng
memcach+    994  0.0  0.0 342400     0 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1007  0.0  0.0 392856   520 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root       1012  0.0  0.0 385496   548 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1013  0.0  0.2 306512  5028 ?        Ssl  09:46   0:08 /usr/sbin/rsyslogd -n
root       1014  0.0  1.1 261428 27588 ?        Ss   09:46   0:09 cpsrvd (SSL) - waiting for connections                   
root      49569  0.0  0.0      0     0 ?        Z    18:35   0:00  \_ [whostmgrd - ser] <defunct>
root       1017  0.0  0.0 436392   408 ?        Ss   09:46   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1018  0.0  0.0 153404   224 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
root       1020  0.0  0.0 111304   356 ?        Ss   09:46   0:03 /usr/sbin/sshd -D
cpanelc+   1026  0.0  0.1  10532  3580 ?        Ss   09:46   0:24 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1218  0.0  0.1 157708  2864 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1233  0.0  1.0 410452 25792 ?        Ss   09:46   0:26 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1234  0.0  0.1 387528  3280 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  1.0 262224 24504 ?        Ss   09:46   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1265  0.0  0.4 209456 11132 ?        Ss   09:46   0:03 tailwatchd
root       1267  0.0  0.1 167452  4116 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root      49564  0.0  0.0      0     0 ?        Z    18:35   0:00  \_ [dnsadmin - dorm] <defunct>
root       1713  0.0  0.0 299272   632 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
cpanelp+  49579  0.0  0.0 298280  2356 ?        S    18:35   0:00  \_ php-fpm: pool cpanelphpmyadmin
root       1728  0.0  0.0 130416  1376 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1782  1.9 12.3 1484772 298392 ?      Sl   09:46  10:31 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1968  0.0  0.2 266984  5096 ?        Ss   09:46   0:01 /usr/sbin/httpd -k start
root       1970  0.0  0.0  12816   328 ?        S    09:46   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1971  0.0  0.0  12732   288 ?        S    09:46   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1972  0.0  0.0  12848   340 ?        S    09:46   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1977  0.0  0.0  53340     4 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    40343  0.0  0.7 277860 19228 ?        S    18:15   0:01  \_ /usr/sbin/httpd -k start
nobody    43113  0.1  0.7 277512 19008 ?        S    18:22   0:00  \_ /usr/sbin/httpd -k start
nobody    44324  0.0  0.7 277864 19016 ?        S    18:24   0:00  \_ /usr/sbin/httpd -k start
nobody    46267  0.0  0.7 277852 18364 ?        S    18:28   0:00  \_ /usr/sbin/httpd -k start
nobody    47163  0.0  0.7 277512 18440 ?        S    18:30   0:00  \_ /usr/sbin/httpd -k start
nobody    47171  0.1  0.7 277828 18572 ?        S    18:30   0:00  \_ /usr/sbin/httpd -k start
nobody    47174  0.1  0.7 277516 18516 ?        S    18:30   0:00  \_ /usr/sbin/httpd -k start
nobody    48106  0.1  0.7 277788 18148 ?        S    18:32   0:00  \_ /usr/sbin/httpd -k start
nobody    48112  0.1  0.7 277848 17984 ?        S    18:32   0:00  \_ /usr/sbin/httpd -k start
nobody    48140  0.0  0.6 277176 16408 ?        S    18:32   0:00  \_ /usr/sbin/httpd -k start
nobody    48741  0.0  0.7 277840 18140 ?        S    18:34   0:00  \_ /usr/sbin/httpd -k start
nobody    48742  0.1  0.7 277512 17724 ?        S    18:34   0:00  \_ /usr/sbin/httpd -k start
nobody    48747  0.1  0.7 277848 17988 ?        S    18:34   0:00  \_ /usr/sbin/httpd -k start
nobody    48748  0.0  0.7 277860 17800 ?        S    18:34   0:00  \_ /usr/sbin/httpd -k start
cloudw    49705  0.0  0.7 364868 18708 ?        S    18:36   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    48750  0.0  0.7 277512 17456 ?        S    18:34   0:00  \_ /usr/sbin/httpd -k start
nobody    48763  0.0  0.7 277844 17884 ?        S    18:34   0:00  \_ /usr/sbin/httpd -k start
nobody    48764  0.1  0.7 277512 17840 ?        S    18:34   0:00  \_ /usr/sbin/httpd -k start
nobody    48765  0.0  0.7 277476 16964 ?        S    18:34   0:00  \_ /usr/sbin/httpd -k start
nobody    48766  0.1  0.7 277840 17660 ?        S    18:34   0:00  \_ /usr/sbin/httpd -k start
root       2041  0.0  0.4 183352 11944 ?        Ss   09:46   0:27 lfd - sleeping
oysipao+   9063  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+   9089  0.0  0.0   3152    56 ?        S    10:01   0:00  \_ [kworker]
root      28537  0.0  3.8 248100 94172 ?        Ss   10:50   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      32709  0.0  5.0 269720 122564 ?       S    11:00   0:23  \_ spamd child
root      32710  0.0  4.6 258916 111432 ?       S    11:00   0:00  \_ spamd child
root      31943  0.0  0.4 1341636 10692 ?       Ssl  18:00   0:00 /usr/bin/cspdaemon
root      31980  0.0  0.4 1277312 11588 ?       Ssl  18:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 53487  Threads: 6  Questions: 4325165  Slow queries: 0  Opens: 11674  Flush tables: 1  Open tables: 2000  Queries per second avg: 80.863
*************************** 1. row ***************************
     Id: 65024
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 65025
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 65028
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 65037
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 65040
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 15.235.27.67 TIME_WAIT
      1 167.94.146.58 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 216.73.216.88 TIME_WAIT
      1 66.249.70.34 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     70 157.230.45.41 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 18:36:03 WAT
   Restart Time: Friday, 07-Nov-2025 03:44:42 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 14 hours 51 minutes 20 seconds
   Server load: 0.64 0.65 0.70
   Total accesses: 114981 - Total Traffic: 1.8 GB - Total Duration: 259514749
   CPU Usage: u4.15 s2.99 cu960.39 cs685.12 - 3.09% CPU load
   2.15 requests/sec - 35.5 kB/second - 16.5 kB/request - 2257.02 ms/request
   17 requests currently being processed, 0 workers gracefully restarting, 2 idle workers

.KWW..W...C_..W.WKKWKW.WR...._KKW...............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur    Conn  Child  Slot      Client      Protocol           VHost                                        Request
   0-0  -     0/0/6699   . 0.00 96    0   13215505 0.0   0.00  97.77  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   1-0  48106 2/57/6314  K 0.92 4     269 14566048 65.0  1.11  95.40  66.249.70.39    http/1.1 support.cloudware.ng:443   GET /?c=2437276709 HTTP/1.1
   2-0  44324 0/97/6636  W 1.36 159   0   10975781 0.0   1.53  111.60 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323534303430332p2231223
   3-0  40343 0/264/6335 W 4.67 140   0   10230807 0.0   4.33  113.65 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323534303432332p2231223
   4-0  -     0/0/6728   . 0.00 95    0   8352136  0.0   0.00  106.50 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   5-0  -     0/0/6886   . 0.00 41    0   9748223  0.0   0.00  111.99 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   6-0  46267 0/60/6092  W 1.18 200   0   9880705  0.0   1.03  103.14 173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323534303336332p2231223
   7-0  -     0/0/5704   . 0.00 101   0   54892437 0.0   0.00  86.29  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   8-0  -     0/0/5578   . 0.00 98    0   11401282 0.0   0.00  88.44  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   9-0  -     0/0/5987   . 0.00 97    0   11148079 0.0   0.00  113.39 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-0 43113 1/233/4988 C 3.14 0     761 12800862 5.7   3.63  69.23  157.230.45.41   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   11-0 48112 0/56/4696  _ 0.78 0     396 11138372 0.0   0.84  73.87  66.249.70.32    http/1.1 support.cloudware.ng:443   GET /?c=3084555985 HTTP/1.1
   12-0 -     0/0/4998   . 0.00 102   0   7267761  0.0   0.00  79.49  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 -     0/0/5058   . 0.00 93    0   8311042  0.0   0.00  84.46  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-0 48140 0/1/5340   W 0.00 179   0   8501472  0.0   0.01  77.83  173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323534303338332p2231223
   15-0 -     0/0/4448   . 0.00 73    0   9525266  0.0   0.00  62.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 47163 0/42/2272  W 0.80 120   0   8735624  0.0   0.88  44.54  173.199.190.174 http/1.1 wmoulms.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323534303434332p2231223
   17-0 48741 2/28/3685  K 0.39 3     293 7872002  67.9  0.52  69.43  66.249.70.35    http/1.1 support.cloudware.ng:443   GET /?c=2853569569 HTTP/1.1
   18-0 48742 1/32/3284  K 0.59 4     0   3908730  53.8  0.68  52.05  197.211.52.213  http/1.1 health.oyostate.gov.ng:443 GET /wp-content/uploads/2019/11/contact_03_h.png HTTP/1.1
   19-0 47171 0/89/2110  W 1.13 0     0   4968805  0.0   1.64  37.25  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   20-0 48747 1/31/1976  K 0.52 1     5   3032644  10.0  0.61  28.03  137.135.191.36  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?lga=Surulere&state=Oyo HTTP/1.1
   21-0 48748 0/24/1264  W 0.18 0     0   4176825  0.0   0.28  19.00  66.249.70.33    http/1.1 support.cloudware.ng:443   GET /?c=1159171801 HTTP/1.1
   22-0 -     0/0/2329   . 0.00 99    0   3965461  0.0   0.00  36.25  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 48750 0/25/456   W 0.53 1     0   1597993  0.0   0.30  6.60   103.109.180.104 http/1.1 cloudware.ng:443           GET /wp-login.php HTTP/1.1
   24-0 47174 0/90/1010  R 0.93 5     7   2368798  0.0   1.16  19.14  197.211.52.213  http/1.1
   25-0 -     0/0/894    . 0.00 40    0   2182828  0.0   0.00  12.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/197    . 0.00 103   0   566975   0.0   0.00  4.76   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/687    . 0.00 100   0   1181282  0.0   0.00  9.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/398    . 0.00 94    0   598491   0.0   0.00  5.30   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 48763 0/31/131   _ 0.36 0     0   76167    0.0   0.63  3.51   ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   30-0 48764 4/34/89    K 0.87 0     292 64474    124.2 0.67  10.98  66.249.70.34    http/1.1 support.cloudware.ng:443   GET /?c=3496283944 HTTP/1.1
   31-0 48765 40/46/180  K 0.08 1     5   197485   205.6 0.24  1.64   147.135.128.94  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Osun&lga=Boripe&ward=Oke%2
   32-0 48766 0/32/35    W 0.46 0     0   24337    0.0   0.52  0.53   157.230.45.41   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   33-0 -     0/0/7      . 0.00 23787 0   21858    0.0   0.00  0.36   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/2      . 0.00 23833 0   17699    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/5      . 0.00 23802 0   19399    0.0   0.00  0.08   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/4      . 0.00 23811 0   14235    0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/2      . 0.00 23834 0   15595    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/156    . 0.00 23567 0   148319   0.0   0.00  0.63   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/2      . 0.00 23835 0   15338    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/6      . 0.00 23790 0   21858    0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/208    . 0.00 22966 0   243070   0.0   0.00  2.95   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/2      . 0.00 23830 0   19835    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00 23831 0   19620    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/6      . 0.00 23788 0   24371    0.0   0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/5      . 0.00 23797 0   19070    0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/6      . 0.00 23792 0   20569    0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/4      . 0.00 23807 0   17777    0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/4      . 0.00 23804 0   16933    0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/2      . 0.00 23832 0   17743    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/3      . 0.00 23814 0   22693    0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/4      . 0.00 23801 0   22016    0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/4      . 0.00 23810 0   22448    0.0   0.00  0.16   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/3      . 0.00 23818 0   9096     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/6      . 0.00 23806 0   23840    0.0   0.00  0.22   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/17     . 0.00 23779 0   16331    0.0   0.00  0.47   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/184    . 0.00 23599 0   130360   0.0   0.00  0.50   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/3      . 0.00 23815 0   22445    0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/3      . 0.00 23819 0   7899     0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/5      . 0.00 23794 0   23139    0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/139    . 0.00 23464 0   237404   0.0   0.00  1.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/2      . 0.00 23828 0   2361     0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/11     . 0.00 23777 0   9214     0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/4      . 0.00 23803 0   8490     0.0   0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/1      . 0.00 23844 0   0        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/1      . 0.00 23842 0   0        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/2      . 0.00 23826 0   8680     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/1      . 0.00 23841 0   0        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/3      . 0.00 23817 0   742      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/1      . 0.00 23843 11  22       0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00 23824 0   10366    0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/65     . 0.00 23637 0   105003   0.0   0.00  1.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/151    . 0.00 23465 0   218700   0.0   0.00  1.26   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/2      . 0.00 23823 0   8818     0.0   0.00  0.11   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/4      . 0.00 23813 0   1447     0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/2      . 0.00 23829 0   463      0.0   0.00  0.02   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/101    . 0.00 23549 0   159456   0.0   0.00  0.87   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/6      . 0.00 23798 0   4997     0.0   0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/338    . 0.00 22041 0   272159   0.0   0.00  5.63   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00 23840 0   0        0.0   0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -     0/0/2      . 0.00 23822 0   7766     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -     0/0/3      . 0.00 23805 0   10368    0.0   0.00  0.14   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 753
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 16 seconds, (range: 0...100)
   index usage: 13%, cache usage: 18%
   total entries stored since starting: 66454
   total entries replaced since starting: 0
   total entries expired since starting: 65657
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 171 miss
   total removes since starting: 44 hit, 185 miss
Youez - 2016 - github.com/yon3zu
LinuXploit