403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-12.04.09.txt
 ## swap threshold exceeded
## server overview
2025-11-12.04.09 load[0] mem[74/47] mysql[1/11] httpd[33]
              total        used        free      shared  buff/cache   available
Mem:           2363        1730         121          20         511         449
Swap:          1999        1046         953
 04:09:01 up 27 min,  0 users,  load average: 0.37, 0.35, 0.40
## system overview
top - 04:09:01 up 27 min,  0 users,  load average: 0.37, 0.35, 0.40
Tasks: 226 total,   4 running, 221 sleeping,   0 stopped,   1 zombie
%Cpu(s): 63.6 us, 30.3 sy,  0.0 ni,  0.0 id,  6.1 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    74964 free,  1779444 used,   565892 buff/cache
KiB Swap:  2047996 total,   976124 free,  1071872 used.   453392 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1790 mysql     20   0 1460332 206716   3140 S  87.5  8.5   0:23.05 /usr/sbin+
 32833 root      20   0  167532  16716   2764 S  43.8  0.7   0:00.08 /usr/loca+
     1 root      20   0   44424   3448   1536 S  12.5  0.1   0:03.41 /usr/lib/+
   257 root       0 -20       0      0      0 S   6.2  0.0   0:00.55 [kworker/+
 28829 nobody    20   0  277576  19528   4012 S   6.2  0.8   0:00.33 /usr/sbin+
 32838 nigeria   20   0  400652  15940  10220 S   6.2  0.7   0:00.02 /opt/cpan+
 32849 pactpay   20   0  476724  17484  11728 S   6.2  0.7   0:00.02 /opt/cpan+
 32859 cloudw    20   0  352096  15236  10128 S   6.2  0.6   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.12 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:02.15 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.11 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.49 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    31 root      20   0       0      0      0 S   0.0  0.0   0:00.17 [kworker/+
    36 root      20   0       0      0      0 S   0.0  0.0   0:07.40 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kauditd]
   111 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   271 root       0 -20       0      0      0 S   0.0  0.0   0:00.61 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40240   6064   5756 S   0.0  0.3   0:00.84 /usr/lib/+
   393 root      20   0   45352    236     92 S   0.0  0.0   0:00.33 /usr/lib/+
   411 root      16  -4   55532    256    144 S   0.0  0.0   0:00.11 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   486 root      20   0   24712   1268    816 S   0.0  0.1   0:00.42 /usr/lib/+
   491 polkitd   20   0  610540    744    312 S   0.0  0.0   0:00.25 /usr/lib/+
   492 root      20   0  224144   5600    908 S   0.0  0.2   0:00.10 queueproc+
   498 rpc       20   0   69256    180     72 S   0.0  0.0   0:00.01 /sbin/rpc+
   500 root      20   0   52852     96     92 S   0.0  0.0   0:00.00 /usr/sbin+
   501 dbus      20   0   56912   1324    628 S   0.0  0.1   0:00.94 /usr/bin/+
   504 nscd      20   0 1062080   1520    724 S   0.0  0.1   0:01.99 /usr/sbin+
   523 root      20   0    4388     32     28 S   0.0  0.0   0:00.00 /usr/sbin+
   531 root      20   0  152780    128     84 S   0.0  0.0   0:00.00 /usr/sbin+
   535 root      20   0   21540    408    296 S   0.0  0.0   0:00.04 /usr/sbin+
   549 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   573 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124476    436    308 S   0.0  0.0   0:00.04 /usr/sbin+
   584 root      20   0  114704     32     32 S   0.0  0.0   0:00.02 /bin/bash
   585 root      20   0  108296     48     44 S   0.0  0.0   0:00.00 /sbin/age+
   608 mailnull  20   0   89112   3812    868 S   0.0  0.2   0:00.06 /usr/sbin+
   643 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   666 root       0 -20       0      0      0 S   0.0  0.0   0:01.34 [loop0]
   750 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   751 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   937 systuser  20   0  112524   2096      0 S   0.0  0.1   0:00.00 /usr/loca+
   938 root      20   0  111304    408    308 S   0.0  0.0   0:00.15 /usr/sbin+
   939 systuser  20   0  113272   1836      0 S   0.0  0.1   0:00.00 /usr/loca+
   941 root      20   0  153404    300    216 S   0.0  0.0   0:00.04 pure-ftpd+
   942 systuser  20   0   11540     56      0 S   0.0  0.0   0:00.00 /usr/loca+
   943 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.03 /usr/bin/+
   945 systuser  20   0   12756     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   947 telegraf  20   0 5654304  37996   4240 S   0.0  1.6   0:01.13 /usr/loca+
   948 systuser  20   0  114016  12316   2612 S   0.0  0.5   0:00.51 /usr/loca+
   949 root      20   0   51508    472    312 S   0.0  0.0   0:00.05 /usr/sbin+
   951 root      20   0  572372    752    280 S   0.0  0.0   0:00.24 /usr/bin/+
   953 root      20   0  445028   2604   2604 S   0.0  0.1   0:00.05 sw-engine+
   960 root      20   0  436392  11236  11032 S   0.0  0.5   0:00.17 php-fpm: +
   963 root      20   0  397344   2892    644 S   0.0  0.1   0:00.40 php-fpm: +
   964 root      20   0 1689316 577212    212 S   0.0 23.8   0:13.66 /usr/loca+
   971 root      20   0  216400   5208   4696 S   0.0  0.2   0:00.43 /usr/sbin+
   988 root      20   0  385496    776    560 S   0.0  0.0   0:00.12 php-fpm: +
   996 root      20   0  392856    232    152 S   0.0  0.0   0:00.12 php-fpm: +
   998 named     20   0  785456  27692   1920 S   0.0  1.1   0:01.54 /usr/sbin+
  1004 root      20   0  386112    504    296 S   0.0  0.0   0:00.11 php-fpm: +
  1005 root      20   0  261160   8224   1956 S   0.0  0.3   0:00.93 cpsrvd (S+
  1010 cpanelc+  20   0    9828   2724   2312 S   0.0  0.1   0:01.54 /usr/loca+
  1087 dovenull  20   0   46912   2444   1744 S   0.0  0.1   0:00.05 dovecot/p+
  1088 dovenull  20   0   47056   2780   1916 S   0.0  0.1   0:00.03 dovecot/i+
  1089 dovecot   20   0   10320    176     64 S   0.0  0.0   0:00.00 dovecot/a+
  1090 root      20   0   10452    408    232 S   0.0  0.0   0:00.01 dovecot/l+
  1095 dovenull  20   0   47012   2372   1628 S   0.0  0.1   0:00.04 dovecot/p+
  1096 dovenull  20   0   47284   2972   1968 S   0.0  0.1   0:00.03 dovecot/i+
  1098 root      20   0   24528   2172    500 S   0.0  0.1   0:00.02 dovecot/c+
  1101 dovecot   20   0   13568    664    432 S   0.0  0.0   0:00.00 dovecot/s+
  1165 systuser  20   0  157704   2856    792 S   0.0  0.1   0:00.01 SonarPush+
  1171 root      20   0  248228 118608   1812 S   0.0  4.9   0:03.03 /usr/loca+
  1186 wp-tool+  20   0  410452  35672   1684 S   0.0  1.5   0:01.58 /usr/bin/+
  1187 wp-tool+  20   0  387528  13040   1456 S   0.0  0.5   0:00.10 /usr/bin/+
  1195 dovecot   20   0   41056   1460   1024 S   0.0  0.1   0:00.05 dovecot/a+
  1244 root      20   0  183900   6096   2864 S   0.0  0.3   0:00.21 cpdavd - +
  1246 root      20   0  209256  11808   2252 S   0.0  0.5   0:00.36 tailwatchd
  1248 root      20   0  167452   1388    784 S   0.0  0.1   0:00.07 dnsadmin +
  1677 root      20   0  299272    820    440 S   0.0  0.0   0:00.04 php-fpm: +
  1711 root      38  18  130416   1428    708 S   0.0  0.1   0:00.00 cpanellog+
  1916 root      20   0  267036   8600    748 S   0.0  0.4   0:00.54 /usr/sbin+
  1917 root      20   0   12780    380    284 S   0.0  0.0   0:00.27 /usr/loca+
  1918 root      20   0   12732    344    264 S   0.0  0.0   0:00.23 /usr/loca+
  1919 root      20   0   12788    332    224 S   0.0  0.0   0:00.26 /usr/loca+
  1927 root      20   0   53268     88     88 S   0.0  0.0   0:00.05 /usr/loca+
  1997 root      20   0  181060   9600   1188 S   0.0  0.4   0:01.54 lfd - sle+
  7196 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  7644 root      20   0  249488 119228   1260 S   0.0  4.9   0:00.13 spamd chi+
  7645 root      20   0  248228 117268    508 S   0.0  4.8   0:00.00 spamd chi+
  8336 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 13975 nobody    20   0  277824  20716   4708 S   0.0  0.9   0:01.55 /usr/sbin+
 14361 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 15616 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 16785 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 20654 nobody    20   0  277760  20464   4736 S   0.0  0.8   0:01.01 /usr/sbin+
 22160 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
 22163 oysipao+  20   0    3152    420      0 S   0.0  0.0   0:00.01 [kworker]
 22408 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 22621 root      20   0 1276100  10516    592 S   0.0  0.4   0:00.05 /usr/bin/+
 22659 root      20   0 1277312  11832    592 S   0.0  0.5   0:00.06 /usr/bin/+
 26601 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 26632 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 26651 nobody    20   0  277824  20304   4516 S   0.0  0.8   0:00.49 /usr/sbin+
 27465 nobody    20   0  277824  20024   4396 S   0.0  0.8   0:00.46 /usr/sbin+
 27926 nobody    20   0  277760  19632   4028 S   0.0  0.8   0:00.47 /usr/sbin+
 28174 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 29012 nobody    20   0  277824  20012   4356 S   0.0  0.8   0:00.31 /usr/sbin+
 30013 nobody    20   0  277600  19748   4156 S   0.0  0.8   0:00.16 /usr/sbin+
 30202 nobody    20   0  277784  19352   3788 S   0.0  0.8   0:00.24 /usr/sbin+
 30232 nobody    20   0  277784  19316   3752 S   0.0  0.8   0:00.10 /usr/sbin+
 30403 nobody    20   0  277784  19088   3528 S   0.0  0.8   0:00.23 /usr/sbin+
 30424 nobody    20   0  277928  19420   3836 S   0.0  0.8   0:00.27 /usr/sbin+
 30442 nobody    20   0  277784  19044   3456 S   0.0  0.8   0:00.16 /usr/sbin+
 30446 nobody    20   0  277784  19232   3632 S   0.0  0.8   0:00.17 /usr/sbin+
 30464 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 31201 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 31285 nobody    20   0  277832  19092   3488 S   0.0  0.8   0:00.13 /usr/sbin+
 31300 nobody    20   0  277784  19004   3460 S   0.0  0.8   0:00.11 /usr/sbin+
 31318 nobody    20   0  277800  18692   3172 S   0.0  0.8   0:00.06 /usr/sbin+
 31319 nobody    20   0  277784  18664   3152 S   0.0  0.8   0:00.14 /usr/sbin+
 31321 nobody    20   0  277784  19008   3468 S   0.0  0.8   0:00.13 /usr/sbin+
 31379 nobody    20   0  277932  19412   3832 S   0.0  0.8   0:00.07 /usr/sbin+
 31399 nobody    20   0  277784  19084   3528 S   0.0  0.8   0:00.13 /usr/sbin+
 31400 nobody    20   0  277784  18848   3344 S   0.0  0.8   0:00.16 /usr/sbin+
 31461 nobody    20   0  277784  19128   3552 S   0.0  0.8   0:00.08 /usr/sbin+
 31462 nobody    20   0  277784  19160   3616 S   0.0  0.8   0:00.09 /usr/sbin+
 31463 nobody    20   0  277784  19540   3964 S   0.0  0.8   0:00.09 /usr/sbin+
 31581 nobody    20   0  277784  19444   3860 S   0.0  0.8   0:00.07 /usr/sbin+
 31582 nobody    20   0  277784  18756   3244 S   0.0  0.8   0:00.10 /usr/sbin+
 31692 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 31805 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 31806 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 32107 nobody    20   0  277824  18748   3208 S   0.0  0.8   0:00.03 /usr/sbin+
 32134 root      20   0  261308   7908   1396 S   0.0  0.3   0:00.00 cpsrvd (S+
 32183 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 32228 nigeria   20   0  416536  27848   4068 S   0.0  1.2   0:00.40 php-fpm: +
 32333 nobody    20   0  277940  19360   3820 S   0.0  0.8   0:00.03 /usr/sbin+
 32342 nobody    20   0  277784  18900   3392 S   0.0  0.8   0:00.03 /usr/sbin+
 32343 nobody    20   0  277784  18932   3424 S   0.0  0.8   0:00.02 /usr/sbin+
 32362 nobody    20   0  277784  18888   3380 S   0.0  0.8   0:00.02 /usr/sbin+
 32363 nobody    20   0  277784  17552   2128 S   0.0  0.7   0:00.02 /usr/sbin+
 32364 nobody    20   0  277784  18660   3160 S   0.0  0.8   0:00.02 /usr/sbin+
 32365 nobody    20   0  277784  18980   3436 S   0.0  0.8   0:00.02 /usr/sbin+
 32441 mailnull  20   0   89280   4172   1140 S   0.0  0.2   0:00.00 /usr/sbin+
 32442 nobody    20   0  277656  19056   3616 S   0.0  0.8   0:00.02 /usr/sbin+
 32467 nobody    20   0  277784  17492   2128 S   0.0  0.7   0:00.01 /usr/sbin+
 32468 nobody    20   0  277792  18668   3156 S   0.0  0.8   0:00.01 /usr/sbin+
 32578 root      20   0  162436   5728   4236 S   0.0  0.2   0:00.01 sshd: roo+
 32579 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: roo+
 32615 nobody    20   0  277488  19076   3876 S   0.0  0.8   0:00.01 /usr/sbin+
 32679 nobody    20   0  277484  18668   3488 S   0.0  0.8   0:00.00 /usr/sbin+
 32681 nobody    20   0  277500  18640   3432 S   0.0  0.8   0:00.00 /usr/sbin+
 32773 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 32775 mailnull  20   0   89120   3932    940 S   0.0  0.2   0:00.00 /usr/sbin+
 32778 root      20   0  183044   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32780 root      20   0  183044   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32781 root      20   0  183044   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32782 root      20   0  183040   2196   1632 R   0.0  0.1   0:00.00 /usr/sbin+
 32783 root      20   0  183044   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32784 root      20   0  183044   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32785 root      20   0  183044   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32786 root      20   0  183044   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32787 root      20   0  183044   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32788 root      20   0  183044   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32789 root      20   0  183044   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 32791 root      20   0  183044   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 32793 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 32794 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 32795 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 32811 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 32812 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32814 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 32815 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 32816 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 32817 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 32818 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 32819 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32820 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 32821 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 32836 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 32846 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 32850 cloudw    20   0  350316  16620  10332 S   0.0  0.7   0:00.01 /opt/cpan+
 32857 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 32863 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 32864 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 32865 cloudsms  20   0  246252   6280   4372 R   0.0  0.3   0:00.00 /opt/cpan+
 32866 nobody    20   0  277784  15540      0 R   0.0  0.6   0:00.00 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    03:41   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    03:41   0:02  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    03:41   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [watchdogd]
root         31  0.0  0.0      0     0 ?        R    03:41   0:00  \_ [kworker/1:1]
root         36  0.4  0.0      0     0 ?        S    03:41   0:07  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   03:41   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   03:41   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [deferwq]
root        104  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [kauditd]
root        111  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [kworker/1:2]
root        242  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [ata_sff]
root        248  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [xprtiod]
root        643  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [kvm-irqfd-clean]
root        666  0.0  0.0      0     0 ?        S<   03:41   0:01  \_ [loop0]
root        750  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [jbd2/loop0-8]
root        751  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [ext4-rsv-conver]
root       7196  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [kworker/0:1]
root       8336  0.0  0.0      0     0 ?        S    03:48   0:00  \_ [kworker/u200:1]
root      14361  0.0  0.0      0     0 ?        S    03:53   0:00  \_ [kworker/0:3]
root      15616  0.0  0.0      0     0 ?        S    03:54   0:00  \_ [kworker/u200:2]
root      16785  0.0  0.0      0     0 ?        S    03:55   0:00  \_ [kworker/1:3]
root      22408  0.0  0.0      0     0 ?        S    04:00   0:00  \_ [kworker/1:0]
root      26601  0.0  0.0      0     0 ?        S    04:04   0:00  \_ [kworker/0:0]
root      26632  0.0  0.0      0     0 ?        S    04:04   0:00  \_ [kworker/u200:0]
root      28174  0.0  0.0      0     0 ?        S    04:05   0:00  \_ [kworker/1:4]
root          1  0.2  0.1  44424  3448 ?        Ss   03:41   0:03 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.2  40240  6064 ?        Ss   03:41   0:00 /usr/lib/systemd/systemd-journald
root        393  0.0  0.0  45352   236 ?        Ss   03:41   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   256 ?        S<sl 03:41   0:00 /sbin/auditd
root        486  0.0  0.0  24712  1268 ?        Ss   03:41   0:00 /usr/lib/systemd/systemd-logind
polkitd     491  0.0  0.0 610540   744 ?        Rsl  03:41   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        492  0.0  0.2 224144  5600 ?        Ss   03:41   0:00 queueprocd - waiting up to 60s to process a task
rpc         498  0.0  0.0  69256   180 ?        Ss   03:41   0:00 /sbin/rpcbind -w
root        500  0.0  0.0  52852    96 ?        Ss   03:41   0:00 /usr/sbin/smartd -n -q never
dbus        501  0.0  0.0  56912  1324 ?        Rs   03:41   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        504  0.1  0.0 1062080 1520 ?        Ssl  03:41   0:01 /usr/sbin/nscd
root        523  0.0  0.0   4388    32 ?        Ss   03:41   0:00 /usr/sbin/acpid
root        531  0.0  0.0 152780   128 ?        Ss   03:41   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        535  0.0  0.0  21540   408 ?        Ss   03:41   0:00 /usr/sbin/irqbalance --foreground
root        549  0.0  0.0 195208     0 ?        Ssl  03:41   0:00 /usr/sbin/gssproxy -D
root        573  0.0  0.0  24208     0 ?        Ss   03:41   0:00 /usr/sbin/atd -f
root        575  0.0  0.0 124476   436 ?        Ss   03:41   0:00 /usr/sbin/crond -n
root      32778  0.0  0.0 183044  2136 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      32793  0.0  0.0 113284  1208 ?        Ss   04:09   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      32794  0.0  0.0 108052   356 ?        S    04:09   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      32795  0.0  0.0 113288  1520 ?        S    04:09   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      32867  0.0  0.0 153840  2096 ?        R    04:09   0:00  |               \_ ps auxf
root      32780  0.0  0.0 183044  2136 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      32821  0.0  0.0  20164   808 ?        Ss   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      32781  0.0  0.0 183044  2136 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      32818  0.0  0.0  20164   808 ?        Ss   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      32783  0.0  0.0 183044  2136 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      32814  0.0  0.0  20164   808 ?        Ss   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      32784  0.0  0.0 183044  2136 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      32816  0.0  0.0  20164   808 ?        Ss   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      32785  0.0  0.0 183044  2136 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      32812  0.0  0.0  20164   804 ?        Ss   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      32786  0.0  0.0 183044  2136 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      32811  0.0  0.0  20164   988 ?        Ss   04:09   0:00  |   \_ jailshell (cloudsms) [32863] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  32863  0.0  0.0      0     0 ?        R    04:09   0:00  |       \_ [jailshell]
root      32787  0.0  0.0 183044  2136 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      32819  0.0  0.0  20164   804 ?        Ss   04:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      32788  0.0  0.0 183044  2136 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      32820  0.0  0.0 113284  1212 ?        Ss   04:09   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root      32833  0.0  0.6 169868 16844 ?        R    04:09   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root      32868  0.0  0.0 113496  1420 ?        S    04:09   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root      32789  0.0  0.0 183044  2140 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      32817  0.0  0.0  20164   972 ?        Ss   04:09   0:00  |   \_ jailshell (pactpay) [32846] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   32846  0.0  0.0  20164   264 ?        S    04:09   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   32849  0.0  0.7 476724 17484 ?        S    04:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      32791  0.0  0.0 183044  2136 ?        S    04:09   0:00  \_ /usr/sbin/CROND -n
root      32815  0.0  0.0  20164   968 ?        Ss   04:09   0:00      \_ jailshell (nigeria) [32836] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   32836  0.0  0.0  20164   260 ?        S    04:09   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   32838  0.0  0.6 400652 15940 ?        S    04:09   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        584  0.0  0.0 114704    32 ttyS0    Ss+  03:41   0:00 /bin/bash
root        585  0.0  0.0 108296    48 tty1     Ss+  03:41   0:00 /sbin/agetty --noclear tty1 linux
mailnull    608  0.0  0.1  89112  3812 ?        Ss   03:41   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  32441  0.0  0.1  89280  4172 ?        S    04:08   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  32775  0.0  0.1  89120  3932 ?        S    04:09   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    937  0.0  0.0 112524  2096 ?        Ssl  03:41   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        938  0.0  0.0 111304   408 ?        Ss   03:41   0:00 /usr/sbin/sshd -D
root      31692  0.0  0.1 111304  4272 ?        Ss   04:08   0:00  \_ sshd: [accepted]
root      31805  0.0  0.1 111304  4268 ?        Ss   04:08   0:00  \_ sshd: [accepted]
sshd      31806  0.0  0.1 115644  2628 ?        S    04:08   0:00  |   \_ sshd: [net]
root      32183  0.0  0.1 111304  4268 ?        Ss   04:08   0:00  \_ sshd: [accepted]
root      32578  0.2  0.2 162436  5728 ?        Ss   04:08   0:00  \_ sshd: root [priv]
sshd      32579  0.0  0.1 115644  2628 ?        S    04:08   0:00      \_ sshd: root [net]
systuser    939  0.0  0.0 113272  1836 ?        Ssl  03:41   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        941  0.0  0.0 153404   300 ?        Ss   03:41   0:00 pure-ftpd (SERVER)
systuser    942  0.0  0.0  11540    56 ?        Ssl  03:41   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
memcach+    943  0.0  0.0 342400     0 ?        Ssl  03:41   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    945  0.0  0.0  12756    60 ?        Ssl  03:41   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    947  0.0  1.5 5654304 37996 ?       SLsl 03:41   0:01 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    948  0.0  0.5 114016 12316 ?        Ssl  03:41   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        949  0.0  0.0  51508   472 ?        Ss   03:41   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1087  0.0  0.1  46912  2444 ?        S    03:41   0:00  \_ dovecot/pop3-login
dovenull   1088  0.0  0.1  47056  2780 ?        S    03:41   0:00  \_ dovecot/imap-login
dovecot    1089  0.0  0.0  10320   176 ?        S    03:41   0:00  \_ dovecot/anvil
root       1090  0.0  0.0  10452   408 ?        S    03:41   0:00  \_ dovecot/log
dovenull   1095  0.0  0.0  47012  2372 ?        S    03:41   0:00  \_ dovecot/pop3-login
dovenull   1096  0.0  0.1  47284  2972 ?        S    03:41   0:00  \_ dovecot/imap-login
root       1098  0.0  0.0  24528  2172 ?        S    03:41   0:00  \_ dovecot/config
dovecot    1101  0.0  0.0  13568   664 ?        S    03:41   0:00  \_ dovecot/stats
dovecot    1195  0.0  0.0  41056  1460 ?        S    03:41   0:00  \_ dovecot/auth
root      30464  0.0  0.1  41052  2728 ?        S    04:07   0:00  \_ dovecot/auth -w
root      31201  0.0  0.1  60820  4508 ?        S    04:07   0:00  \_ dovecot/lmtp
root        951  0.0  0.0 572372   752 ?        Ssl  03:41   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        953  0.0  0.1 445028  2604 ?        Ss   03:41   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        960  0.0  0.4 436392 11236 ?        Ss   03:41   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        963  0.0  0.1 397344  2892 ?        Ss   03:41   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   32228  1.9  1.1 416536 27848 ?        S    04:08   0:00  \_ php-fpm: pool nigeriadecide_org
root        964  0.8 23.8 1689316 577212 ?      Ssl  03:41   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        971  0.0  0.2 216400  5208 ?        Ssl  03:41   0:00 /usr/sbin/rsyslogd -n
root        988  0.0  0.0 385496   776 ?        Ss   03:41   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        996  0.0  0.0 392856   232 ?        Ss   03:41   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
named       998  0.0  1.1 785456 27692 ?        Ssl  03:41   0:01 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1004  0.0  0.0 386112   504 ?        Ss   03:41   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1005  0.0  0.3 261160  8224 ?        Ss   03:41   0:00 cpsrvd (SSL) - waiting for connections                   
root      32134  0.0  0.3 261308  7908 ?        S    04:08   0:00  \_ cpsrvd (SSL) - waiting for connections                   
root      32773  0.0  0.0      0     0 ?        Z    04:09   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+   1010  0.0  0.1   9828  2724 ?        Rs   03:41   0:01 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1165  0.0  0.1 157704  2856 ?        S    03:41   0:00 SonarPush 0.6.12 [sleeping]
root       1171  0.1  4.9 248228 118608 ?       Ss   03:41   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7644  0.0  4.9 249488 119228 ?       S    03:47   0:00  \_ spamd child
root       7645  0.0  4.8 248228 117268 ?       S    03:47   0:00  \_ spamd child
wp-tool+   1186  0.0  1.4 410452 35672 ?        Ss   03:41   0:01 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1187  0.0  0.5 387528 13040 ?        Ss   03:41   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1244  0.0  0.2 183900  6096 ?        Ss   03:41   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1246  0.0  0.4 209256 11808 ?        Ss   03:41   0:00 tailwatchd
root       1248  0.0  0.0 167452  1388 ?        Ss   03:41   0:00 dnsadmin - dormant mode
root       1677  0.0  0.0 299272   820 ?        Ss   03:41   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1711  0.0  0.0 130416  1428 ?        SN   03:41   0:00 cpanellogd - sleeping for logs
mysql      1790  1.3  8.5 1460332 206716 ?      Sl   03:41   0:23 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1916  0.0  0.3 267036  8600 ?        Ss   03:41   0:00 /usr/sbin/httpd -k start
root       1917  0.0  0.0  12780   380 ?        S    03:41   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1918  0.0  0.0  12732   344 ?        S    03:41   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1919  0.0  0.0  12788   332 ?        S    03:41   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1927  0.0  0.0  53268    88 ?        S    03:41   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    13975  0.1  0.8 277824 20716 ?        S    03:52   0:01  \_ /usr/sbin/httpd -k start
nobody    20654  0.1  0.8 277760 20464 ?        S    03:58   0:01  \_ /usr/sbin/httpd -k start
nobody    26651  0.1  0.8 277824 20304 ?        S    04:04   0:00  \_ /usr/sbin/httpd -k start
nobody    27465  0.1  0.8 277824 20024 ?        S    04:04   0:00  \_ /usr/sbin/httpd -k start
nobody    27926  0.1  0.8 277760 19632 ?        S    04:04   0:00  \_ /usr/sbin/httpd -k start
nobody    28829  0.1  0.8 277576 19528 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
cloudw    32859  0.0  0.6 352096 15236 ?        S    04:09   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    29012  0.1  0.8 277824 20012 ?        S    04:05   0:00  \_ /usr/sbin/httpd -k start
nobody    30013  0.1  0.8 277600 19748 ?        S    04:06   0:00  \_ /usr/sbin/httpd -k start
nobody    30202  0.1  0.7 277784 19352 ?        S    04:06   0:00  \_ /usr/sbin/httpd -k start
nobody    30232  0.0  0.7 277784 19316 ?        S    04:06   0:00  \_ /usr/sbin/httpd -k start
nobody    30403  0.1  0.7 277784 19088 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    30424  0.2  0.8 277928 19420 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    30442  0.1  0.7 277784 19044 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    30446  0.1  0.7 277784 19232 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    31285  0.1  0.7 277832 19092 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    31300  0.1  0.7 277784 19004 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    31318  0.0  0.7 277800 18692 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    31319  0.2  0.7 277784 18664 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    31321  0.2  0.7 277784 19008 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
cloudw    32866  0.0  0.6 351952 15232 ?        R    04:09   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    31379  0.1  0.8 277932 19412 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    31399  0.2  0.7 277784 19084 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    31400  0.2  0.7 277784 18848 ?        S    04:07   0:00  \_ /usr/sbin/httpd -k start
nobody    31461  0.1  0.7 277784 19128 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    31462  0.1  0.7 277784 19160 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    31463  0.1  0.8 277784 19540 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    31581  0.1  0.8 277784 19444 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    31582  0.1  0.7 277784 18756 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    32107  0.1  0.7 277824 18748 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
cloudw    32850  0.0  0.6 350316 16620 ?        S    04:09   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    32333  0.2  0.7 277940 19360 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    32342  0.2  0.7 277784 18900 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    32343  0.1  0.7 277784 18932 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    32362  0.1  0.7 277784 18888 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    32363  0.1  0.7 277784 17552 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    32364  0.1  0.7 277784 18660 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    32365  0.1  0.7 277784 18980 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    32442  0.2  0.7 277656 19056 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    32467  0.1  0.7 277784 17492 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    32468  0.1  0.7 277792 18668 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    32615  0.2  0.7 277488 19076 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    32679  0.0  0.7 277484 18668 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
nobody    32681  0.0  0.7 277500 18640 ?        S    04:08   0:00  \_ /usr/sbin/httpd -k start
root       1997  0.0  0.3 181060  9600 ?        Ss   03:41   0:01 lfd - sleeping
oysipao+  22160  0.0  0.0   3148   412 ?        Ss   04:00   0:00 [kworker]
oysipao+  22163  0.0  0.0   3152   420 ?        S    04:00   0:00  \_ [kworker]
root      22621  0.0  0.4 1276100 10516 ?       Ssl  04:00   0:00 /usr/bin/cspdaemon
root      22659  0.0  0.4 1277312 11832 ?       Ssl  04:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 1654  Threads: 3  Questions: 106369  Slow queries: 0  Opens: 1725  Flush tables: 1  Open tables: 1617  Queries per second avg: 64.310
*************************** 1. row ***************************
     Id: 1937
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 1938
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-12' LIMIT 1
*************************** 3. row ***************************
     Id: 1945
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.140.48 TIME_WAIT
      1 114.119.155.236 TIME_WAIT
      1 142.147.189.119 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 185.244.8.238 TIME_WAIT
      1 192.178.4.96 TIME_WAIT
      1 ::1 TIME_WAIT
      1 23.26.84.172 TIME_WAIT
      1 51.222.95.2 TIME_WAIT
      1 66.249.64.131 TIME_WAIT
      1 66.249.70.105 TIME_WAIT
      1 66.249.70.132 TIME_WAIT
      1 66.249.70.171 TIME_WAIT
      1 66.249.70.36 TIME_WAIT
      1 66.249.70.38 TIME_WAIT
      1 66.249.70.39 TIME_WAIT
      1 66.249.70.3 TIME_WAIT
      1 66.249.70.67 TIME_WAIT
      1 66.249.70.71 TIME_WAIT
      1 74.7.230.27 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 66.249.64.132 TIME_WAIT
      2 66.249.70.199 TIME_WAIT
     50 104.248.90.230 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Wednesday, 12-Nov-2025 04:09:01 WAT
   Restart Time: Wednesday, 12-Nov-2025 03:41:32 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 27 minutes 29 seconds
   Server load: 0.37 0.35 0.40
   Total accesses: 12662 - Total Traffic: 343.0 MB - Total Duration: 6869566
   CPU Usage: u5.29 s2.81 cu183.85 cs145.35 - 20.5% CPU load
   7.68 requests/sec - 213.0 kB/second - 27.7 kB/request - 542.534 ms/request
   35 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

KKKKKK_KKKRWK_KW_KK_KKKKKKKRKRKK__KKKKK....W...R................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU  SS  Req  Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  31285 2/20/459   K 0.54 1   297 200645 62.9  0.60  10.68 66.249.70.7    http/1.1 schoolplus.cloudware.ng:80 GET /?p=268303665 HTTP/1.1
   1-0  32107 1/6/326    K 0.15 0   383 167428 37.5  0.19  7.81  66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=2075781710 HTTP/1.1
   2-0  32333 1/8/411    K 0.07 3   298 229625 33.2  0.16  10.80 66.249.64.12   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3673875259 HTTP/1.1
   3-0  32342 1/5/398    K 0.09 0   347 195928 30.6  0.14  9.62  66.249.70.141  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3071265073 HTTP/1.1
   4-0  28829 1/52/438   K 1.41 0   288 182962 29.3  1.48  9.61  66.249.70.192  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1224359321 HTTP/1.1
   5-0  30013 1/30/292   K 0.87 3   631 158850 30.6  8.53  14.94 66.249.64.7    http/1.1 schoolplus.cloudware.ng:80 GET /?p=4114621790 HTTP/1.1
   6-0  27465 0/76/338   _ 1.99 0   26  172639 0.0   2.24  8.63  66.249.70.34   http/1.1 wptraining.cloudware.ng:80 GET /?q=3225466206 HTTP/1.1
   7-0  32343 1/5/359    K 0.05 3   401 206973 31.6  0.13  9.50  66.249.70.160  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2867323032 HTTP/1.1
   8-0  31300 1/20/333   K 0.49 4   568 180149 31.2  0.56  8.79  66.249.64.14   http/1.1 schoolplus.cloudware.ng:80 GET /?p=10560435 HTTP/1.1
   9-0  29012 1/64/355   K 1.55 0   257 183129 30.2  1.49  9.83  192.178.4.99   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1533603652 HTTP/1.1
   10-0 31318 0/9/323    R 0.24 33  275 180274 0.0   0.27  9.47  66.249.70.196  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2595404557 HTTP/1.1
   11-0 30202 0/41/393   W 1.06 0   0   213404 0.0   1.15  10.77 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   12-0 32362 1/4/340    K 0.06 1   265 186615 30.8  0.11  9.22  66.249.70.162  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1815735557 HTTP/1.1
   13-0 31319 0/22/352   _ 0.61 0   413 208159 0.0   0.64  10.11 66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=3621370073 HTTP/1.1
   14-0 32363 1/3/416    K 0.05 0   272 194695 30.6  0.09  9.56  66.249.70.197  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3716105501 HTTP/1.1
   15-0 31321 0/22/300   W 0.82 0   0   175067 0.0   0.60  8.29  66.249.64.229  http/1.1 schoolplus.cloudware.ng:80 GET /?p=910294397 HTTP/1.1
   16-0 31379 0/14/349   _ 0.31 0   1   202345 0.0   0.28  9.78  127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   17-0 31399 1/22/338   K 0.54 1   273 189771 31.2  0.62  9.29  66.249.64.225  http/1.1 schoolplus.cloudware.ng:80 GET /?p=813267891 HTTP/1.1
   18-0 20654 1/212/426  K 5.54 1   366 195449 34.6  4.06  10.02 66.249.70.34   http/1.1 support.cloudware.ng:443   GET /?c=616291995 HTTP/1.1
   19-0 31400 0/26/302   _ 0.73 0   2   176358 0.0   0.74  8.54  ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   20-0 32364 1/3/282    K 0.06 2   410 161528 31.2  0.09  7.67  66.249.70.70   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2106282978 HTTP/1.1
   21-0 31461 1/14/239   K 0.33 2   351 136868 30.8  0.33  6.44  192.178.4.97   http/1.1 schoolplus.cloudware.ng:80 GET /?p=271190214 HTTP/1.1
   22-0 32365 1/4/261    K 0.06 2   389 156214 35.5  0.11  7.59  66.249.70.32   http/1.1 support.cloudware.ng:443   GET /?c=2927264501 HTTP/1.1
   23-0 27926 53/103/281 K 2.70 0   27  136782 356.7 1.89  6.95  109.123.251.96 http/1.1 cloudsms.com.ng:443        GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   24-0 13975 1/313/422  K 8.11 2   377 184465 34.4  6.09  9.64  66.249.70.32   http/1.1 support.cloudware.ng:443   GET /?c=1557637296 HTTP/1.1
   25-0 32442 1/6/262    K 0.03 0   297 150866 32.2  0.13  7.51  66.249.70.107  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3245626118 HTTP/1.1
   26-0 32467 1/2/293    K 0.03 1   257 176055 30.4  0.06  9.14  192.178.4.96   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2315689853 HTTP/1.1
   27-0 31462 0/16/325   R 0.54 1   401 201581 0.0   0.37  8.92  185.106.30.150 http/1.1 nigeriadecide.org:443
   28-0 26651 1/92/304   K 2.15 4   349 167198 33.4  2.15  8.81  66.249.64.230  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4099290154 HTTP/1.1
   29-0 30232 0/17/248   R 0.40 34  6   138507 0.0   0.46  7.15  54.235.191.179 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/images/images/blog/blog/201
   30-0 32468 1/2/262    K 0.03 0   312 144304 35.0  0.07  7.05  66.249.70.38   http/1.1 support.cloudware.ng:443   GET /?c=3363826726 HTTP/1.1
   31-0 31463 1/18/295   K 0.33 1   285 177032 33.4  0.45  7.79  66.249.70.36   http/1.1 schoolplus.cloudware.ng:80 GET /?p=356442125 HTTP/1.1
   32-0 32615 0/7/187    _ 0.01 0   1   107798 0.0   0.10  5.10  127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   33-0 30403 0/38/298   _ 1.05 0   515 172140 0.0   1.09  8.29  66.249.64.224  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2173909232 HTTP/1.1
   34-0 32679 1/3/173    K 0.00 1   219 95003  13.2  0.05  4.67  45.134.70.56   http/1.1 nigeriadecide.org:443      GET /blog/inec-releases-guidelines-for-permanent-voters-card-di
   35-0 31581 2/14/338   K 0.27 1   275 189924 62.7  0.35  9.53  66.249.70.140  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2771973382 HTTP/1.1
   36-0 30424 2/44/313   K 1.16 1   254 180984 62.4  1.23  8.51  66.249.64.231  http/1.1 schoolplus.cloudware.ng:80 GET /?p=841628092 HTTP/1.1
   37-0 32681 1/3/181    K 0.00 2   404 115127 34.1  0.07  5.07  66.249.64.70   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1927618693 HTTP/1.1
   38-0 31582 1/16/97    K 0.44 0   275 50141  30.6  0.50  2.47  192.178.4.103  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1603010563 HTTP/1.1
   39-0 -     0/0/143    . 0.00 112 0   96334  0.0   0.00  4.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/93     . 0.00 79  0   71893  0.0   0.00  2.69  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/4      . 0.00 92  0   1949   0.0   0.00  0.09  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/18     . 0.00 44  0   7310   0.0   0.00  0.37  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 30442 0/38/38    W 0.91 0   0   15575  0.0   0.75  0.75  66.249.64.38   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2075373375 HTTP/1.1
   44-0 -     0/0/3      . 0.00 101 0   1362   0.0   0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/2      . 0.00 102 0   601    0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/24     . 0.00 33  0   13196  0.0   0.00  0.63  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 30446 0/28/28    R 0.99 35  391 18338  0.0   0.79  0.79  66.249.70.197  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1666809165 HTTP/1.1
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1690
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 1 seconds, (range: 0...7)
   index usage: 29%, cache usage: 41%
   total entries stored since starting: 8314
   total entries replaced since starting: 0
   total entries expired since starting: 6620
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 15 miss
   total removes since starting: 4 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit