403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.18.33.txt
 ## swap threshold exceeded
## server overview
2025-11-20.18.33 load[0] mem[59/80] mysql[5/10] httpd[31]
              total        used        free      shared  buff/cache   available
Mem:           2363        1334         210         100         818         761
Swap:          1999        1672         327
 18:33:01 up  8:52,  0 users,  load average: 0.46, 0.67, 0.53
## system overview
top - 18:33:02 up  8:52,  0 users,  load average: 0.46, 0.67, 0.53
Tasks: 217 total,   5 running, 211 sleeping,   0 stopped,   1 zombie
%Cpu(s): 81.8 us, 15.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  3.0 si,  0.0 st
KiB Mem :  2420300 total,   204332 free,  1372924 used,   843044 buff/cache
KiB Swap:  2047996 total,   334952 free,  1713044 used.   773024 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1793 mysql     20   0 1463640 280692   3072 S 131.2 11.6   7:19.07 /usr/sbin+
 19982 workflo+  20   0  444716  50536   3844 R  31.2  2.1   0:00.22 php-fpm: +
 20046 nigeria   20   0  404052  16144  10384 S  12.5  0.7   0:00.06 /opt/cpan+
     1 root      20   0   44268   3320   1484 S   0.0  0.1   0:46.13 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.79 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.57 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:41.76 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.50 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:06.14 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:26.15 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.06 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.77 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:02.67 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:03.10 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.86 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   39500   2128   1892 S   0.0  0.1   0:18.67 /usr/lib/+
   387 root      20   0   45352    252    248 S   0.0  0.0   0:00.38 /usr/lib/+
   410 root      16  -4   55532    524    396 S   0.0  0.0   0:03.16 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0   24712   1180    836 S   0.0  0.0   0:07.63 /usr/lib/+
   471 root      20   0   52852    416    304 S   0.0  0.0   0:00.01 /usr/sbin+
   474 dbus      20   0   58644   1384    680 R   0.0  0.1   0:17.40 /usr/bin/+
   476 rpc       20   0   69256    208    148 S   0.0  0.0   0:00.03 /sbin/rpc+
   486 polkitd   20   0  612240    984    640 S   0.0  0.0   0:04.58 /usr/lib/+
   487 root      20   0   21540    408    320 S   0.0  0.0   0:00.69 /usr/sbin+
   492 root      20   0  152780    248    204 S   0.0  0.0   0:00.02 /usr/sbin+
   493 root      20   0  224280   5156   1120 S   0.0  0.2   0:00.48 queueproc+
   507 nscd      20   0  994492   1404    720 S   0.0  0.1   0:26.35 /usr/sbin+
   515 root      20   0  195208     68     68 S   0.0  0.0   0:00.00 /usr/sbin+
   516 root      20   0    4388    156    152 S   0.0  0.0   0:00.00 /usr/sbin+
   543 root      20   0   24208     84     60 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0  124480    520    388 S   0.0  0.0   0:00.93 /usr/sbin+
   562 root      20   0  108296    180    176 S   0.0  0.0   0:00.00 /sbin/age+
   563 root      20   0  114704    180    180 S   0.0  0.0   0:00.02 /bin/bash
   613 mailnull  20   0   89116   3876    932 S   0.0  0.2   0:00.88 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   675 root       0 -20       0      0      0 S   0.0  0.0   0:02.81 [loop0]
   735 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [jbd2/loo+
   736 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   931 root      20   0  153404    400    316 S   0.0  0.0   0:00.66 pure-ftpd+
   932 root      20   0  572372   1048    476 S   0.0  0.0   0:02.77 /usr/bin/+
   933 systuser  20   0  112268     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   935 systuser  20   0  114016  15184   2684 S   0.0  0.6   0:07.70 /usr/loca+
   936 root      20   0 1277056   6144    164 S   0.0  0.3   0:21.21 /usr/bin/+
   937 root      20   0  445028   1380   1268 S   0.0  0.1   0:01.20 sw-engine+
   938 systuser  20   0   11796     40      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.01 /usr/loca+
   942 root      20   0  111304    544    436 S   0.0  0.0   0:04.52 /usr/sbin+
   943 systuser  20   0   11348     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   944 root      20   0 1350088   8612    128 S   0.0  0.4   0:28.34 /usr/bin/+
   945 root      20   0   51508    600    428 S   0.0  0.0   0:00.42 /usr/sbin+
   946 telegraf  20   0 5654304  35784   6108 S   0.0  1.5   0:17.40 /usr/loca+
   947 memcach+  20   0  342400    232    232 S   0.0  0.0   0:00.70 /usr/bin/+
   948 root      20   0 1763312  85872   1040 S   0.0  3.5   0:15.36 /usr/loca+
   949 root      20   0  389508    628    536 S   0.0  0.0   0:00.90 php-fpm: +
   950 root      20   0  261032  26972   4560 S   0.0  1.1   0:05.79 cpsrvd (S+
   953 root      20   0  388892    844    636 S   0.0  0.0   0:00.78 php-fpm: +
   958 root      20   0  322896   3544   2300 S   0.0  0.1   0:09.57 /usr/sbin+
   986 root      20   0  396248    556    464 S   0.0  0.0   0:00.81 php-fpm: +
   990 root      20   0  439788    916    824 S   0.0  0.0   0:00.96 php-fpm: +
   994 root      20   0  400740   3100    720 S   0.0  0.1   0:04.67 php-fpm: +
   996 named     20   0 1186868  42472   1848 S   0.0  1.8   0:20.33 /usr/sbin+
  1013 cpanelc+  20   0   10580   3832   2444 R   0.0  0.2   0:25.66 /usr/loca+
  1093 dovenull  20   0   47520   3204   1988 S   0.0  0.1   0:00.65 dovecot/p+
  1094 dovenull  20   0   48452   3232   1908 S   0.0  0.1   0:00.54 dovecot/i+
  1095 dovecot   20   0   10320    528    412 S   0.0  0.0   0:00.14 dovecot/a+
  1096 root      20   0   10452    460    280 S   0.0  0.0   0:00.41 dovecot/l+
  1097 dovenull  20   0   47308   2988   1976 S   0.0  0.1   0:00.51 dovecot/p+
  1098 dovenull  20   0   48268   3304   1956 S   0.0  0.1   0:00.57 dovecot/i+
  1104 root      20   0   24528   2448    544 S   0.0  0.1   0:00.22 dovecot/c+
  1110 dovecot   20   0   13568    524    324 S   0.0  0.0   0:00.08 dovecot/s+
  1145 systuser  20   0  157704   2928    944 S   0.0  0.1   0:00.16 SonarPush+
  1170 dovecot   20   0   41192   1624   1052 S   0.0  0.1   0:01.09 dovecot/a+
  1175 wp-tool+  20   0  412368  10028   1640 S   0.0  0.4   0:10.11 /usr/bin/+
  1176 wp-tool+  20   0  387528   3544   1548 S   0.0  0.1   0:00.33 /usr/bin/+
  1234 root      20   0  167452   1320    776 S   0.0  0.1   0:00.47 dnsadmin +
  1235 root      20   0  262224  24500   6768 S   0.0  1.0   0:04.19 cpdavd - +
  1237 root      20   0  209500  10824   2620 S   0.0  0.4   0:03.95 tailwatchd
  1669 root      20   0  299272    604    440 S   0.0  0.0   0:00.85 php-fpm: +
  1701 root      38  18  130416   1408    728 S   0.0  0.1   0:00.07 cpanellog+
  1959 root      20   0  266992   7380    740 S   0.0  0.3   0:02.95 /usr/sbin+
  1962 root      20   0   12816    452    296 S   0.0  0.0   0:03.81 /usr/loca+
  1963 root      20   0   12732    368    292 S   0.0  0.0   0:03.28 /usr/loca+
  1964 root      20   0   12852    472    296 S   0.0  0.0   0:03.55 /usr/loca+
  1968 root      20   0   53340    216    216 S   0.0  0.0   0:00.05 /usr/loca+
  2014 root      20   0  185464  13940   1168 S   0.0  0.6   0:28.96 lfd - sle+
  2106 nobody    20   0  277768  20104   4760 S   0.0  0.8   0:01.18 /usr/sbin+
  5317 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
  7570 nobody    20   0  277632  20008   4700 S   0.0  0.8   0:01.25 /usr/sbin+
  7754 nobody    20   0  277760  19376   4540 S   0.0  0.8   0:00.58 /usr/sbin+
  9044 nobody    20   0  277760  19300   4352 S   0.0  0.8   0:00.83 /usr/sbin+
  9108 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 10121 nobody    20   0  277896  18800   4268 S   0.0  0.8   0:00.39 /usr/sbin+
 11292 nobody    20   0  277892  19316   4404 S   0.0  0.8   0:00.73 /usr/sbin+
 11609 nobody    20   0  277884  18204   3792 S   0.0  0.8   0:00.07 /usr/sbin+
 11750 nobody    20   0  277760  19588   4568 S   0.0  0.8   0:00.44 /usr/sbin+
 12189 nobody    20   0  277764  18932   4232 S   0.0  0.8   0:00.39 /usr/sbin+
 12217 nobody    20   0  277760  19208   4340 S   0.0  0.8   0:00.54 /usr/sbin+
 12218 nobody    20   0  277760  18980   4356 S   0.0  0.8   0:00.74 /usr/sbin+
 12219 nobody    20   0  277892  19224   4508 S   0.0  0.8   0:00.73 /usr/sbin+
 13794 nobody    20   0  277760  18440   3888 S   0.0  0.8   0:00.05 /usr/sbin+
 13842 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 14406 nobody    20   0  277892  19072   4396 S   0.0  0.8   0:00.63 /usr/sbin+
 15338 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 15682 nobody    20   0  277760  19036   4224 S   0.0  0.8   0:00.66 /usr/sbin+
 15920 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 16202 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 16447 cloudw    20   0  367184  19144  12236 S   0.0  0.8   0:00.21 /opt/cpan+
 16678 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 16741 nobody    20   0  277900  19056   4240 S   0.0  0.8   0:00.33 /usr/sbin+
 17078 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 17319 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 17525 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 17828 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 18006 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 18205 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 18294 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 18303 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.56 [kworker]
 18325 nobody    20   0  277784  18516   4004 S   0.0  0.8   0:00.14 /usr/sbin+
 18422 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 18480 nobody    20   0  277760  19028   3972 S   0.0  0.8   0:00.17 /usr/sbin+
 18546 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 18725 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 18967 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 19196 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 19480 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 19675 wp-tool+  20   0  445028    324    196 S   0.0  0.0   0:00.00 sw-engine+
 19701 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 19715 nobody    20   0  277760  18144   3484 S   0.0  0.7   0:00.01 /usr/sbin+
 19821 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 19904 cloudw    20   0  366248  16796  10940 R   0.0  0.7   0:00.07 /opt/cpan+
 19907 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 19925 nigeria   20   0  400460   5572   2328 S   0.0  0.2   0:00.00 php-fpm: +
 19967 root      20   0  157100   5068   3784 S   0.0  0.2   0:00.00 sshd: unk+
 19968 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: unk+
 19970 nobody    20   0  277760  17500   3152 S   0.0  0.7   0:00.01 /usr/sbin+
 19986 root      20   0  183048   2148   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 19987 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19988 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19989 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19991 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19995 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19996 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 19998 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 20003 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 20005 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 20006 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 20007 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 20008 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 20010 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 20016 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 20017 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 20018 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 20021 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 20032 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 20035 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 20040 pactpay   20   0  480124  17692  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 20060 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 20066 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 20077 root      20   0  160220   2068   1580 R   0.0  0.1   0:00.00 top -bcn1
 23743 root      20   0       0      0      0 S   0.0  0.0   0:00.21 [kworker/+
 56404 root      20   0  248036  42552   1248 S   0.0  1.8   0:06.00 /usr/loca+
 60751 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 64340 root      20   0  266516 103572   3792 S   0.0  4.3   0:05.49 spamd chi+
 64341 root      20   0  248036  40824    412 S   0.0  1.7   0:00.01 spamd chi+
 72719 nobody    20   0  277892  20244   4920 S   0.0  0.8   0:02.54 /usr/sbin+
 78264 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 83203 nobody    20   0  277892  20336   5016 S   0.0  0.8   0:01.84 /usr/sbin+
 85323 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 87115 nobody    20   0  277516  20116   5016 S   0.0  0.8   0:02.70 /usr/sbin+
 87523 nobody    20   0  277760  19996   4988 S   0.0  0.8   0:01.62 /usr/sbin+
 90400 nobody    20   0  277760  20416   5108 S   0.0  0.8   0:03.17 /usr/sbin+
 94068 nobody    20   0  277892  20088   4868 S   0.0  0.8   0:02.33 /usr/sbin+
 97204 nobody    20   0  277760  20616   5064 S   0.0  0.9   0:02.15 /usr/sbin+
 98318 nobody    20   0  277892  19576   4676 S   0.0  0.8   0:01.51 /usr/sbin+
 98581 nobody    20   0  277768  19896   4740 S   0.0  0.8   0:01.27 /usr/sbin+
 99088 nobody    20   0  277760  20100   4964 S   0.0  0.8   0:01.52 /usr/sbin+
 99103 nobody    20   0  277536  20112   5044 S   0.0  0.8   0:01.25 /usr/sbin+
 99105 nobody    20   0  277836  19836   4720 S   0.0  0.8   0:00.72 /usr/sbin+
 99106 nobody    20   0  277768  20040   4728 S   0.0  0.8   0:01.12 /usr/sbin+
 99250 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
100565 nobody    20   0  277696  20112   4996 S   0.0  0.8   0:02.07 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:40   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:40   0:41  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:40   0:06  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    09:40   0:26  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   09:40   0:03  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kvm-irqfd-clean]
root        675  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [loop0]
root        735  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/loop0-8]
root        736  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root      23743  0.0  0.0      0     0 ?        S    16:30   0:00  \_ [kworker/u200:0]
root      60751  0.0  0.0      0     0 ?        S    17:17   0:00  \_ [kworker/1:4]
root      78264  0.0  0.0      0     0 ?        S    17:38   0:00  \_ [kworker/u200:1]
root      85323  0.0  0.0      0     0 ?        S    17:47   0:00  \_ [kworker/0:4]
root      99250  0.0  0.0      0     0 ?        S    18:04   0:00  \_ [kworker/0:0]
root       5317  0.0  0.0      0     0 ?        S    18:14   0:00  \_ [kworker/1:0]
root       9108  0.0  0.0      0     0 ?        S    18:19   0:00  \_ [kworker/0:3]
root      13842  0.0  0.0      0     0 ?        S    18:25   0:00  \_ [kworker/1:2]
root      15338  0.0  0.0      0     0 ?        S    18:27   0:00  \_ [kworker/0:1]
root      17828  0.0  0.0      0     0 ?        S    18:30   0:00  \_ [kworker/1:1]
root      18546  0.0  0.0      0     0 ?        S    18:31   0:00  \_ [kworker/1:3]
root      20060  0.0  0.0      0     0 ?        S    18:33   0:00  \_ [kworker/u200:2]
root          1  0.1  0.1  44268  3320 ?        Ss   09:40   0:46 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.0  39500  2128 ?        Ss   09:40   0:18 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   252 ?        Ss   09:40   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   524 ?        S<sl 09:40   0:03 /sbin/auditd
root        470  0.0  0.0  24712  1180 ?        Ss   09:40   0:07 /usr/lib/systemd/systemd-logind
root        471  0.0  0.0  52852   416 ?        Ss   09:40   0:00 /usr/sbin/smartd -n -q never
dbus        474  0.0  0.0  58644  1384 ?        Ss   09:40   0:17 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         476  0.0  0.0  69256   208 ?        Ss   09:40   0:00 /sbin/rpcbind -w
polkitd     486  0.0  0.0 612240   984 ?        Ssl  09:40   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        487  0.0  0.0  21540   408 ?        Ss   09:40   0:00 /usr/sbin/irqbalance --foreground
root        492  0.0  0.0 152780   248 ?        Ss   09:40   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        493  0.0  0.2 224280  5156 ?        Ss   09:40   0:00 queueprocd - waiting up to 60s to process a task
nscd        507  0.0  0.0 994492  1404 ?        Ssl  09:40   0:26 /usr/sbin/nscd
root        515  0.0  0.0 195208    68 ?        Ssl  09:40   0:00 /usr/sbin/gssproxy -D
root        516  0.0  0.0   4388   156 ?        Ss   09:40   0:00 /usr/sbin/acpid
root        543  0.0  0.0  24208    84 ?        Ss   09:40   0:00 /usr/sbin/atd -f
root        545  0.0  0.0 124480   520 ?        Ss   09:40   0:00 /usr/sbin/crond -n
root      19986  0.0  0.0 183048  2148 ?        S    18:33   0:00  \_ /usr/sbin/CROND -n
root      20007  0.0  0.0 113284  1212 ?        Ss   18:33   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      20010  0.0  0.0 108052   356 ?        S    18:33   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      20018  0.0  0.0 113288  1516 ?        S    18:33   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      20079  0.0  0.0 153840  2092 ?        R    18:33   0:00  |               \_ ps auxf
root      19987  0.0  0.0 183048  2152 ?        S    18:33   0:00  \_ /usr/sbin/CROND -n
root      20008  0.0  0.0  20164   808 ?        Ss   18:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      19988  0.0  0.0 183048  2152 ?        S    18:33   0:00  \_ /usr/sbin/CROND -n
root      20017  0.0  0.0  20164   804 ?        Ss   18:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      19989  0.0  0.0 183048  2152 ?        S    18:33   0:00  \_ /usr/sbin/CROND -n
root      20006  0.0  0.0  20164   804 ?        Ss   18:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      19991  0.0  0.0 183048  2148 ?        S    18:33   0:00  \_ /usr/sbin/CROND -n
root      20005  0.0  0.0  20164   812 ?        Ss   18:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      19995  0.0  0.0 183048  2144 ?        S    18:33   0:00  \_ /usr/sbin/CROND -n
root      20003  0.0  0.0  20164   984 ?        Ss   18:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      19996  0.0  0.0 183048  2144 ?        S    18:33   0:00  \_ /usr/sbin/CROND -n
root      20021  0.0  0.0  20164   964 ?        Ss   18:33   0:00  |   \_ jailshell (pactpay) [20032] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   20032  0.0  0.0  20164   260 ?        S    18:33   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   20040  2.0  0.7 480124 17692 ?        S    18:33   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      19998  0.0  0.0 183048  2144 ?        S    18:33   0:00  \_ /usr/sbin/CROND -n
root      20016  0.0  0.0  20164   964 ?        Ss   18:33   0:00      \_ jailshell (nigeria) [20035] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   20035  0.0  0.0  20164   260 ?        S    18:33   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   20046  6.0  0.6 404052 16144 ?        S    18:33   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        562  0.0  0.0 108296   180 tty1     Ss+  09:40   0:00 /sbin/agetty --noclear tty1 linux
root        563  0.0  0.0 114704   180 ttyS0    Ss+  09:40   0:00 /bin/bash
mailnull    613  0.0  0.1  89116  3876 ?        Ss   09:40   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        931  0.0  0.0 153404   400 ?        Ss   09:40   0:00 pure-ftpd (SERVER)
root        932  0.0  0.0 572372  1048 ?        Ssl  09:40   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    933  0.0  0.0 112268    56 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.6 114016 15184 ?        Ssl  09:40   0:07 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        936  0.0  0.2 1277056 6144 ?        Ssl  09:40   0:21 /usr/bin/checkstatus
root        937  0.0  0.0 445028  1380 ?        Ss   09:40   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  19675  0.0  0.0 445028   324 ?        S    18:32   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    938  0.0  0.0  11796    40 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    939  0.0  0.0 111608    60 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        942  0.0  0.0 111304   544 ?        Ss   09:40   0:04 /usr/sbin/sshd -D
root      19821  0.0  0.1 111304  4268 ?        Ss   18:32   0:00  \_ sshd: [accepted]
root      19967  0.0  0.2 157100  5068 ?        Ss   18:33   0:00  \_ sshd: unknown [priv]
sshd      19968  0.0  0.1 115644  2628 ?        S    18:33   0:00      \_ sshd: unknown [net]
systuser    943  0.0  0.0  11348    24 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        944  0.0  0.3 1350088 8612 ?        Ssl  09:40   0:28 /usr/bin/cspdaemon
root        945  0.0  0.0  51508   600 ?        Ss   09:40   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1093  0.0  0.1  47520  3204 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1094  0.0  0.1  48452  3232 ?        S    09:40   0:00  \_ dovecot/imap-login
dovecot    1095  0.0  0.0  10320   528 ?        S    09:40   0:00  \_ dovecot/anvil
root       1096  0.0  0.0  10452   460 ?        S    09:40   0:00  \_ dovecot/log
dovenull   1097  0.0  0.1  47308  2988 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  48268  3304 ?        S    09:40   0:00  \_ dovecot/imap-login
root       1104  0.0  0.1  24528  2448 ?        S    09:40   0:00  \_ dovecot/config
dovecot    1110  0.0  0.0  13568   524 ?        S    09:40   0:00  \_ dovecot/stats
dovecot    1170  0.0  0.0  41192  1624 ?        S    09:40   0:01  \_ dovecot/auth
telegraf    946  0.0  1.4 5654304 35784 ?       SLsl 09:40   0:17 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    947  0.0  0.0 342400   232 ?        Ssl  09:40   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        948  0.0  3.5 1763312 85872 ?       Ssl  09:40   0:15 /usr/local/cpanel/3rdparty/bin/clamd -F
root        949  0.0  0.0 389508   628 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        950  0.0  1.1 261032 26972 ?        Ss   09:40   0:05 cpsrvd (SSL) - waiting for connections                   
root      19907  0.0  0.0      0     0 ?        Z    18:32   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.0 388892   844 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        958  0.0  0.1 322896  3544 ?        Ssl  09:40   0:09 /usr/sbin/rsyslogd -n
root        986  0.0  0.0 396248   556 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        990  0.0  0.0 439788   916 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        994  0.0  0.1 400740  3100 ?        Ss   09:40   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   19925  0.0  0.2 400460  5572 ?        S    18:32   0:00  \_ php-fpm: pool nigeriadecide_org
workflo+  19982 24.0  2.1 446764 52120 ?        R    18:33   0:00  \_ php-fpm: pool blog_workflow-management-software_com
named       996  0.0  1.7 1186868 42472 ?       Ssl  09:40   0:20 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
cpanelc+   1013  0.0  0.1  10580  3832 ?        Ss   09:40   0:25 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1145  0.0  0.1 157704  2928 ?        S    09:40   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1175  0.0  0.4 412368 10028 ?        Ss   09:40   0:10 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1176  0.0  0.1 387528  3544 ?        Ss   09:40   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1234  0.0  0.0 167452  1320 ?        Ss   09:40   0:00 dnsadmin - dormant mode
root       1235  0.0  1.0 262224 24500 ?        Ss   09:40   0:04 cpdavd - accepting connections on: 2091, 2077, 2078
root       1237  0.0  0.4 209500 10824 ?        Ss   09:40   0:03 tailwatchd
root       1669  0.0  0.0 299272   604 ?        Ss   09:40   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1701  0.0  0.0 130416  1408 ?        SN   09:40   0:00 cpanellogd - sleeping for logs
mysql      1793  1.3 11.5 1463640 280692 ?      Sl   09:40   7:19 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1959  0.0  0.3 266992  7380 ?        Ss   09:40   0:02 /usr/sbin/httpd -k start
root       1962  0.0  0.0  12816   452 ?        S    09:40   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1963  0.0  0.0  12732   368 ?        S    09:40   0:03  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1964  0.0  0.0  12852   472 ?        S    09:40   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1968  0.0  0.0  53340   216 ?        S    09:40   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    72719  0.0  0.8 277892 20244 ?        S    17:31   0:02  \_ /usr/sbin/httpd -k start
cloudw    20066  1.0  0.6 353712 15976 ?        S    18:33   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    83203  0.0  0.8 277892 20336 ?        S    17:44   0:01  \_ /usr/sbin/httpd -k start
cloudw    16678  0.0  0.7 367184 19032 ?        S    18:28   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    87115  0.1  0.8 277516 20116 ?        S    17:49   0:02  \_ /usr/sbin/httpd -k start
cloudw    17525  0.1  0.7 367184 19028 ?        S    18:29   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    87523  0.0  0.8 277760 19996 ?        S    17:49   0:01  \_ /usr/sbin/httpd -k start
cloudw    19904  0.8  0.6 366248 16796 ?        S    18:32   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    90400  0.1  0.8 277760 20416 ?        S    17:53   0:03  \_ /usr/sbin/httpd -k start
cloudw    18422  0.1  0.7 367184 19028 ?        S    18:30   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    94068  0.1  0.8 277892 20088 ?        S    17:58   0:02  \_ /usr/sbin/httpd -k start
nobody    97204  0.1  0.8 277760 20616 ?        S    18:01   0:02  \_ /usr/sbin/httpd -k start
nobody    98318  0.0  0.8 277892 19576 ?        S    18:03   0:01  \_ /usr/sbin/httpd -k start
cloudw    15920  0.0  0.7 367184 19032 ?        S    18:27   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    98581  0.0  0.8 277768 19896 ?        S    18:03   0:01  \_ /usr/sbin/httpd -k start
cloudw    19701  0.7  0.7 367184 19032 ?        S    18:32   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    99088  0.0  0.8 277760 20100 ?        S    18:03   0:01  \_ /usr/sbin/httpd -k start
cloudw    17319  0.1  0.7 367184 19028 ?        S    18:29   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    99103  0.0  0.8 277536 20112 ?        S    18:03   0:01  \_ /usr/sbin/httpd -k start
nobody    99105  0.0  0.8 277836 19836 ?        S    18:03   0:00  \_ /usr/sbin/httpd -k start
nobody    99106  0.0  0.8 277768 20040 ?        S    18:03   0:01  \_ /usr/sbin/httpd -k start
nobody   100565  0.1  0.8 277696 20112 ?        S    18:05   0:02  \_ /usr/sbin/httpd -k start
nobody     2106  0.0  0.8 277768 20104 ?        S    18:10   0:01  \_ /usr/sbin/httpd -k start
nobody     7570  0.1  0.8 277632 20008 ?        S    18:17   0:01  \_ /usr/sbin/httpd -k start
cloudw    16447  0.0  0.7 367184 19144 ?        S    18:28   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody     7754  0.0  0.8 277760 19376 ?        S    18:17   0:00  \_ /usr/sbin/httpd -k start
cloudw    18205  0.1  0.7 367184 19032 ?        S    18:30   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody     9044  0.0  0.7 277760 19300 ?        S    18:19   0:00  \_ /usr/sbin/httpd -k start
cloudw    18967  0.2  0.7 367184 19032 ?        S    18:31   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    10121  0.0  0.7 277896 18800 ?        S    18:20   0:00  \_ /usr/sbin/httpd -k start
cloudw    17078  0.0  0.7 367184 19032 ?        S    18:29   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    11292  0.1  0.7 277892 19316 ?        S    18:21   0:00  \_ /usr/sbin/httpd -k start
nobody    11609  0.0  0.7 277884 18204 ?        S    18:22   0:00  \_ /usr/sbin/httpd -k start
cloudw    16202  0.0  0.7 367184 19028 ?        S    18:28   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    11750  0.0  0.8 277760 19588 ?        S    18:22   0:00  \_ /usr/sbin/httpd -k start
nobody    12189  0.0  0.7 277764 18932 ?        S    18:23   0:00  \_ /usr/sbin/httpd -k start
cloudw    19480  0.4  0.7 367184 19032 ?        S    18:32   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    12217  0.0  0.7 277760 19208 ?        S    18:23   0:00  \_ /usr/sbin/httpd -k start
nobody    12218  0.1  0.7 277760 18980 ?        S    18:23   0:00  \_ /usr/sbin/httpd -k start
cloudw    18006  0.1  0.7 367184 19028 ?        S    18:30   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    12219  0.1  0.7 277892 19224 ?        S    18:23   0:00  \_ /usr/sbin/httpd -k start
nobody    13794  0.0  0.7 277760 18440 ?        S    18:25   0:00  \_ /usr/sbin/httpd -k start
cloudw    18725  0.1  0.7 367184 19032 ?        S    18:31   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    14406  0.1  0.7 277892 19072 ?        S    18:25   0:00  \_ /usr/sbin/httpd -k start
cloudw    19196  0.2  0.7 367184 19028 ?        S    18:31   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    15682  0.1  0.7 277760 19036 ?        S    18:27   0:00  \_ /usr/sbin/httpd -k start
nobody    16741  0.1  0.7 277900 19056 ?        S    18:29   0:00  \_ /usr/sbin/httpd -k start
nobody    18325  0.1  0.7 277784 18516 ?        S    18:30   0:00  \_ /usr/sbin/httpd -k start
nobody    18480  0.1  0.7 277760 19028 ?        S    18:31   0:00  \_ /usr/sbin/httpd -k start
nobody    19715  0.0  0.7 277760 18144 ?        S    18:32   0:00  \_ /usr/sbin/httpd -k start
nobody    19970  0.5  0.7 277760 17500 ?        S    18:33   0:00  \_ /usr/sbin/httpd -k start
root       2014  0.0  0.5 185464 13940 ?        Ss   09:40   0:28 lfd - sleeping
oysipao+  18294  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+  18303  0.0  0.0   3152    36 ?        S    10:01   0:00  \_ [kworker]
root      56404  0.0  1.7 248036 42552 ?        Ss   10:49   0:06 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      64340  0.0  4.2 266516 103572 ?       S    11:00   0:05  \_ spamd child
root      64341  0.0  1.6 248036 40824 ?        S    11:00   0:00  \_ spamd child
## mysql stats
Uptime: 53666  Threads: 4  Questions: 2399522  Slow queries: 0  Opens: 11279  Flush tables: 1  Open tables: 2000  Queries per second avg: 44.712
*************************** 1. row ***************************
     Id: 39218
   User: workflow_wp673
   Host: localhost
     db: workflow_wp673
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 39221
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 39222
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: starting
   Info: NULL
*************************** 4. row ***************************
     Id: 39232
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 103.129.24.49 TIME_WAIT
      1 114.119.133.35 TIME_WAIT
      1 114.119.134.212 TIME_WAIT
      1 147.182.171.92 TIME_WAIT
      1 148.113.128.235 TIME_WAIT
      1 173.244.49.42 TIME_WAIT
      1 185.220.100.255 TIME_WAIT
      1 185.220.101.50 TIME_WAIT
      1 192.178.4.105 TIME_WAIT
      1 192.42.116.178 TIME_WAIT
      1 195.47.238.177 TIME_WAIT
      1 ::1 TIME_WAIT
      1 206.189.91.67 TIME_WAIT
      1 34.147.126.183 TIME_WAIT
      1 51.210.107.127 TIME_WAIT
      1 51.210.108.162 TIME_WAIT
      1 51.210.110.147 TIME_WAIT
      1 51.210.111.180 TIME_WAIT
      1 51.210.111.26 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 18:33:02 WAT
   Restart Time: Thursday, 20-Nov-2025 03:38:40 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 14 hours 54 minutes 21 seconds
   Server load: 0.46 0.67 0.53
   Total accesses: 169828 - Total Traffic: 4.1 GB - Total Duration: 773769145
   CPU Usage: u25.73 s12.88 cu2298.95 cs1738.01 - 7.6% CPU load
   3.16 requests/sec - 79.5 kB/second - 25.1 kB/request - 4556.19 ms/request
   33 requests currently being processed, 0 workers gracefully restarting, 1 idle workers

WWLLKLWLLWKKKWWKKWWKLWK.K..KL.._LK.WLL.KK.......................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req   Dur    Conn  Child  Slot      Client      Protocol              VHost                                          Request
   0-0  11292  0/117/6015 W 3.37  0     0   20176016 0.0   3.18  157.28 85.254.139.51   http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php?state=Bauchi&lga=Misau&ward=Zada
   1-0  13794  0/8/5712   W 0.33  107   0   66573140 0.0   0.16  143.58 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363334
   2-0  11609  1/13/6075  L 0.49  287   0   21513374 5.3   0.29  155.30 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363332
   3-0  98318  1/241/6112 L 6.83  307   0   22039869 5.3   6.66  149.17 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363332
   4-0  15682  1/195/5872 K 2.54  3     885 22509117 89.4  2.67  158.88 43.152.174.166  http/1.1 nigeriadecide.org:443           GET /2019elections/winelectionsusingdatamining.jpg HTTP/1.1
   5-0  7754   1/102/6651 L 2.79  147   0   15641800 5.3   2.45  168.65 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363334
   6-0  87523  0/274/5878 W 7.82  7     0   19512637 0.0   6.96  145.66 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363335
   7-0  99088  1/256/6475 L 7.09  207   0   18565015 5.3   6.48  166.84 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363333
   8-0  87115  1/531/5768 L 12.28 187   0   21969034 5.3   11.73 156.49 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363333
   9-0  98581  0/217/5940 W 5.81  27    0   20761765 0.0   20.70 165.30 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363335
   10-0 100565 2/358/5548 K 8.77  3     1   21170218 103.7 10.00 134.50 43.152.174.166  http/1.1 nigeriadecide.org:443           GET /images/cloudhosthasslefreedollars.png HTTP/1.1
   11-0 99103  2/230/5505 K 5.75  3     1   20367850 86.3  5.42  122.60 43.152.174.166  http/1.1 nigeriadecide.org:443           GET /images/cloudhost430x288.png HTTP/1.1
   12-0 11750  2/79/4972  K 2.17  3     1   24820901 29.2  1.80  116.08 43.152.174.166  http/1.1 nigeriadecide.org:443           GET /assets/js/bootstrap.min.js HTTP/1.1
   13-0 2106   0/200/4954 W 5.13  1     0   20969500 0.0   4.92  119.37 3.230.69.161    http/1.1 blog.workflow-management-softwa GET /2017/05/01/is-vinil-back-lossless-sound-in-retro-perspecti
   14-0 14406  0/108/5072 W 2.54  67    0   20421246 0.0   2.85  132.68 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363335
   15-0 16741  8/64/5642  K 1.35  4     308 16540421 256.6 1.45  128.64 192.178.4.103   http/1.1 team.cloudware.ng:443           GET /?l=2768888498 HTTP/1.1
   16-0 19715  3/5/4895   K 0.03  3     1   18432724 69.2  0.10  121.14 43.152.174.166  http/1.1 nigeriadecide.org:443           GET /images/APGA.jpg HTTP/1.1
   17-0 9044   0/135/4794 W 4.01  87    0   21476906 0.0   3.60  114.79 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363334
   18-0 18325  0/31/5394  W 0.55  0     0   15261424 0.0   0.61  119.26 96.30.57.23     http/1.1 blog.workflow-management-softwa POST /wp-cron.php?doing_wp_cron=1763659982.19285607337951660156
   19-0 19970  2/2/4819   K 0.03  0     268 18561617 63.5  0.06  117.86 192.178.4.105   http/1.1 team.cloudware.ng:443           GET /?l=4267434018 HTTP/1.1
   20-0 10121  1/66/4151  L 1.82  227   0   23770870 5.3   1.65  98.12  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363333
   21-0 12189  0/64/3796  W 1.83  47    0   15207845 0.0   1.64  90.36  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363335
   22-0 18480  2/31/3507  K 0.70  3     1   17593315 24.5  0.76  85.63  43.152.174.166  http/1.1 nigeriadecide.org:443           GET /images/fatskyscrapper240x400.png HTTP/1.1
   23-0 -      0/0/3242   . 0.00  592   0   18137201 0.0   0.00  75.38  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 94068  3/402/3174 K 9.95  3     422 18178351 101.3 10.24 84.06  192.178.4.100   http/1.1 team.cloudware.ng:443           GET /?l=3937967480 HTTP/1.1
   25-0 -      0/0/3602   . 0.00  161   0   15112079 0.0   0.00  82.79  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 -      0/0/2859   . 0.00  595   4   14776086 0.0   0.00  67.79  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 72719  1/480/2947 K 13.59 0     330 16757426 35.0  10.58 72.12  192.178.4.104   http/1.1 team.cloudware.ng:443           GET /?l=3623481178 HTTP/1.1
   28-0 7570   1/207/2825 L 5.37  267   0   15889589 5.3   5.53  58.22  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363333
   29-0 -      0/0/2787   . 0.00  476   0   15425213 0.0   0.00  64.94  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -      0/0/2509   . 0.00  596   0   10668035 0.0   0.00  53.96  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 12217  0/88/2166  _ 2.53  0     0   11188514 0.0   2.36  61.59  ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   32-0 12218  1/181/2649 L 2.94  167   0   14709935 5.3   3.04  72.36  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363334
   33-0 12219  9/122/1726 K 3.00  0     274 11722513 278.9 3.18  39.44  192.178.4.96    http/1.1 team.cloudware.ng:443           GET /?l=1485013902 HTTP/1.1
   34-0 -      0/0/1267   . 0.00  1152  0   12717760 0.0   0.00  27.46  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 99105  0/138/1226 W 4.10  0     0   11453422 0.0   3.07  29.24  ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   36-0 90400  1/543/1929 L 13.58 127   0   9242983  5.3   13.85 45.19  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363334
   37-0 83203  1/383/2161 L 9.82  247   0   11211802 5.3   6.98  42.69  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363333
   38-0 -      0/0/1282   . 0.00  1183  0   12049254 0.0   0.00  27.02  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 97204  6/363/1850 K 9.60  3     309 11838703 187.0 9.41  45.43  192.178.4.102   http/1.1 team.cloudware.ng:443           GET /?l=825926319 HTTP/1.1
   40-0 99106  3/189/984  K 5.41  2     298 7510448  95.9  4.95  25.59  192.178.4.97    http/1.1 team.cloudware.ng:443           GET /?l=856178968 HTTP/1.1
   41-0 -      0/0/392    . 0.00  4515  0   2781829  0.0   0.00  11.81  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -      0/0/680    . 0.00  4526  0   2285353  0.0   0.00  16.74  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -      0/0/250    . 0.00  3522  0   2690856  0.0   0.00  5.98   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -      0/0/778    . 0.00  2354  0   4855287  0.0   0.00  18.18  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -      0/0/306    . 0.00  4529  0   2076497  0.0   0.00  8.08   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -      0/0/257    . 0.00  4513  0   3342075  0.0   0.00  6.37   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -      0/0/105    . 0.00  4219  0   686585   0.0   0.00  2.22   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -      0/0/150    . 0.00  3692  0   2001878  0.0   0.00  3.45   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -      0/0/951    . 0.00  10033 0   6256647  0.0   0.00  23.61  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -      0/0/2      . 0.00  15840 0   616      0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -      0/0/6      . 0.00  15820 0   2135     0.0   0.00  0.09   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -      0/0/145    . 0.00  15118 0   691033   0.0   0.00  2.72   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -      0/0/2      . 0.00  15850 0   661      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -      0/0/34     . 0.00  15733 0   17885    0.0   0.00  0.93   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-0 -      0/0/2      . 0.00  15847 0   644      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-0 -      0/0/4      . 0.00  15838 0   1109     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-0 -      0/0/2      . 0.00  15849 0   760      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   58-0 -      0/0/13     . 0.00  15798 0   6527     0.0   0.00  0.26   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   59-0 -      0/0/86     . 0.00  15705 0   15729    0.0   0.00  0.68   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-0 -      0/0/196    . 0.00  14957 0   724637   0.0   0.00  3.98   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-0 -      0/0/7      . 0.00  15823 0   3153     0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   62-0 -      0/0/4      . 0.00  15837 0   1059     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   63-0 -      0/0/318    . 0.00  14502 0   758246   0.0   0.00  5.87   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   64-0 -      0/0/205    . 0.00  14832 0   754691   0.0   0.00  9.18   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   65-0 -      0/0/201    . 0.00  14505 0   1367301  0.0   0.00  4.25   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 900
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 11 seconds, (range: 0...50)
   index usage: 15%, cache usage: 21%
   total entries stored since starting: 107337
   total entries replaced since starting: 0
   total entries expired since starting: 106397
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 24 hit, 229 miss
   total removes since starting: 40 hit, 242 miss
Youez - 2016 - github.com/yon3zu
LinuXploit