403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.13.06.txt
 ## swap threshold exceeded
## server overview
2025-11-20.13.06 load[0] mem[67/61] mysql[1/9] httpd[25]
              total        used        free      shared  buff/cache   available
Mem:           2363        1523         122          53         717         613
Swap:          1999        1476         523
 13:06:01 up  3:25,  0 users,  load average: 0.32, 0.45, 0.45
## system overview
top - 13:06:01 up  3:25,  0 users,  load average: 0.32, 0.45, 0.45
Tasks: 224 total,   2 running, 221 sleeping,   0 stopped,   1 zombie
%Cpu(s): 45.5 us, 30.3 sy,  0.0 ni, 21.2 id,  0.0 wa,  0.0 hi,  3.0 si,  0.0 st
KiB Mem :  2420300 total,   121240 free,  1564268 used,   734792 buff/cache
KiB Swap:  2047996 total,   536544 free,  1511452 used.   623900 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1793 mysql     20   0 1463376 230740   2776 S  43.8  9.5   2:47.28 /usr/sbin+
 67513 pactpay   20   0  479860  16260  10648 S  12.5  0.7   0:00.02 /opt/cpan+
 67516 nigeria   20   0  404052  16140  10384 R  12.5  0.7   0:00.02 /opt/cpan+
  1013 cpanelc+  20   0   10580   3684   2420 S   6.2  0.2   0:09.89 /usr/loca+
     1 root      20   0   44268   3332   1476 S   0.0  0.1   0:18.53 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.70 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.62 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:12.74 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.57 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.35 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:18.44 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.32 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.71 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:01.94 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.75 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   4932   4696 S   0.0  0.2   0:07.81 /usr/lib/+
   387 root      20   0   45352    252    248 S   0.0  0.0   0:00.38 /usr/lib/+
   410 root      16  -4   55532    504    376 S   0.0  0.0   0:01.32 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0   24712   1180    836 S   0.0  0.0   0:02.98 /usr/lib/+
   471 root      20   0   52852    456    352 S   0.0  0.0   0:00.01 /usr/sbin+
   474 dbus      20   0   58644   1412    680 S   0.0  0.1   0:06.77 /usr/bin/+
   476 rpc       20   0   69256     72     12 S   0.0  0.0   0:00.01 /sbin/rpc+
   486 polkitd   20   0  612240   1088    740 S   0.0  0.0   0:01.82 /usr/lib/+
   487 root      20   0   21540    408    320 S   0.0  0.0   0:00.27 /usr/sbin+
   492 root      20   0  152780    248    204 S   0.0  0.0   0:00.00 /usr/sbin+
   493 root      20   0  224280   5440   1028 S   0.0  0.2   0:00.28 queueproc+
   507 nscd      20   0  928956   1352    680 S   0.0  0.1   0:10.34 /usr/sbin+
   515 root      20   0  195208     68     68 S   0.0  0.0   0:00.00 /usr/sbin+
   516 root      20   0    4388    156    152 S   0.0  0.0   0:00.00 /usr/sbin+
   543 root      20   0   24208    164    140 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0  124480    520    388 S   0.0  0.0   0:00.36 /usr/sbin+
   562 root      20   0  108296    180    176 S   0.0  0.0   0:00.00 /sbin/age+
   563 root      20   0  114704    180    180 S   0.0  0.0   0:00.02 /bin/bash
   613 mailnull  20   0   89116   3856    944 S   0.0  0.2   0:00.34 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   675 root       0 -20       0      0      0 S   0.0  0.0   0:02.55 [loop0]
   735 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   736 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   931 root      20   0  153404    396    316 S   0.0  0.0   0:00.25 pure-ftpd+
   932 root      20   0  572372   1052    480 S   0.0  0.0   0:01.13 /usr/bin/+
   933 systuser  20   0  112268     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   935 systuser  20   0  114016  15204   2456 S   0.0  0.6   0:03.24 /usr/loca+
   936 root      20   0 1277056   6144    164 S   0.0  0.3   0:21.14 /usr/bin/+
   937 root      20   0  445028   1384   1272 S   0.0  0.1   0:00.51 sw-engine+
   938 systuser  20   0   11796     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   942 root      20   0  111304    544    436 S   0.0  0.0   0:01.87 /usr/sbin+
   943 systuser  20   0   11348     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   944 root      20   0 1349832   8612    128 S   0.0  0.4   0:28.13 /usr/bin/+
   945 root      20   0   51508    608    428 S   0.0  0.0   0:00.18 /usr/sbin+
   946 telegraf  20   0 5654304  35808   5872 S   0.0  1.5   0:07.12 /usr/loca+
   947 memcach+  20   0  342400    232    232 S   0.0  0.0   0:00.27 /usr/bin/+
   948 root      20   0 1763312 334064    476 S   0.0 13.8   0:14.92 /usr/loca+
   949 root      20   0  389508    596    504 S   0.0  0.0   0:00.40 php-fpm: +
   950 root      20   0  261160   7008   2080 S   0.0  0.3   0:02.31 cpsrvd (S+
   953 root      20   0  388892    660    456 S   0.0  0.0   0:00.35 php-fpm: +
   958 root      20   0  257360   4832   4044 S   0.0  0.2   0:03.89 /usr/sbin+
   986 root      20   0  396248    508    416 S   0.0  0.0   0:00.36 php-fpm: +
   990 root      20   0  439788   1176   1084 S   0.0  0.0   0:00.46 php-fpm: +
   994 root      20   0  400740   3096    716 S   0.0  0.1   0:01.75 php-fpm: +
   996 named     20   0 1186868  36248   1708 S   0.0  1.5   0:08.23 /usr/sbin+
  1093 dovenull  20   0   47284   3036   2160 S   0.0  0.1   0:00.22 dovecot/p+
  1094 dovenull  20   0   48032   3304   1932 S   0.0  0.1   0:00.22 dovecot/i+
  1095 dovecot   20   0   10320    292    176 S   0.0  0.0   0:00.04 dovecot/a+
  1096 root      20   0   10452    488    308 S   0.0  0.0   0:00.15 dovecot/l+
  1097 dovenull  20   0   47308   2944   2152 S   0.0  0.1   0:00.19 dovecot/p+
  1098 dovenull  20   0   47996   3140   1868 S   0.0  0.1   0:00.23 dovecot/i+
  1104 root      20   0   24396   2580    544 S   0.0  0.1   0:00.11 dovecot/c+
  1110 dovecot   20   0   13568    640    440 S   0.0  0.0   0:00.03 dovecot/s+
  1145 systuser  20   0  157704   3068   1092 S   0.0  0.1   0:00.08 SonarPush+
  1170 dovecot   20   0   41192   1520   1020 S   0.0  0.1   0:00.46 dovecot/a+
  1175 wp-tool+  20   0  412368  27796   1896 S   0.0  1.1   0:04.08 /usr/bin/+
  1176 wp-tool+  20   0  387528   8936   1804 S   0.0  0.4   0:00.19 /usr/bin/+
  1234 root      20   0  167452   1316    772 S   0.0  0.1   0:00.21 dnsadmin +
  1235 root      20   0  183900   6088   2856 S   0.0  0.3   0:02.16 cpdavd - +
  1237 root      20   0  209456  19420   1940 S   0.0  0.8   0:01.73 tailwatchd
  1669 root      20   0  299272    596    432 S   0.0  0.0   0:00.33 php-fpm: +
  1701 root      38  18  130416   1396    724 S   0.0  0.1   0:00.03 cpanellog+
  1959 root      20   0  266992   7380    740 S   0.0  0.3   0:01.07 /usr/sbin+
  1962 root      20   0   12784    400    296 S   0.0  0.0   0:01.47 /usr/loca+
  1963 root      20   0   12732    368    292 S   0.0  0.0   0:01.26 /usr/loca+
  1964 root      20   0   12808    416    296 S   0.0  0.0   0:01.37 /usr/loca+
  1968 root      20   0   53340    216    216 S   0.0  0.0   0:00.05 /usr/loca+
  2014 root      20   0  182772  10636   1168 S   0.0  0.4   0:11.58 lfd - sle+
 18294 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 18303 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.21 [kworker]
 31256 nobody    20   0  277760  20700   5016 S   0.0  0.9   0:03.25 /usr/sbin+
 31542 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 35992 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 41201 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kworker/+
 43218 nobody    20   0  277764  20196   4964 S   0.0  0.8   0:02.38 /usr/sbin+
 43239 nobody    20   0  277768  20228   4972 S   0.0  0.8   0:02.54 /usr/sbin+
 45300 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 46150 nobody    20   0  277892  20596   5020 S   0.0  0.9   0:01.69 /usr/sbin+
 46881 nobody    20   0  277884  19808   4716 S   0.0  0.8   0:01.47 /usr/sbin+
 46902 nobody    20   0  277576  20048   4976 S   0.0  0.8   0:01.68 /usr/sbin+
 47448 nobody    20   0  277884  20188   4756 S   0.0  0.8   0:02.00 /usr/sbin+
 47802 nobody    20   0  277584  19560   4644 S   0.0  0.8   0:00.58 /usr/sbin+
 47936 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 48527 nobody    20   0  277892  19844   4704 S   0.0  0.8   0:01.18 /usr/sbin+
 48759 nobody    20   0  277772  20300   4920 S   0.0  0.8   0:01.42 /usr/sbin+
 50251 nobody    20   0  277904  19724   4528 S   0.0  0.8   0:00.45 /usr/sbin+
 50669 nobody    20   0  277896  20108   4788 S   0.0  0.8   0:01.45 /usr/sbin+
 50670 nobody    20   0  277908  19672   4628 S   0.0  0.8   0:01.00 /usr/sbin+
 52867 nobody    20   0  277608  19148   4576 S   0.0  0.8   0:01.02 /usr/sbin+
 52940 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 54132 worencom  20   0   38480   3048   1992 S   0.0  0.1   0:00.00 dovecot/i+
 54719 nobody    20   0  277736  19200   4536 S   0.0  0.8   0:00.65 /usr/sbin+
 54728 nobody    20   0  277560  18860   4432 S   0.0  0.8   0:00.51 /usr/sbin+
 54729 nobody    20   0  277684  19612   4636 S   0.0  0.8   0:00.92 /usr/sbin+
 55196 nobody    20   0  277920  19968   4768 S   0.0  0.8   0:01.21 /usr/sbin+
 56174 nobody    20   0  277868  19300   4512 S   0.0  0.8   0:00.72 /usr/sbin+
 56378 nobody    20   0  277744  19020   4320 S   0.0  0.8   0:00.32 /usr/sbin+
 56404 root      20   0  248036 117152   1068 S   0.0  4.8   0:03.72 /usr/loca+
 56510 nobody    20   0  277868  19272   4564 S   0.0  0.8   0:00.68 /usr/sbin+
 56546 nobody    20   0  277736  19236   4508 S   0.0  0.8   0:01.20 /usr/sbin+
 59160 nobody    20   0  277876  18844   4236 S   0.0  0.8   0:00.33 /usr/sbin+
 60123 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 60272 nobody    20   0  277868  18472   4036 S   0.0  0.8   0:00.29 /usr/sbin+
 60287 nobody    20   0  277552  18640   4172 S   0.0  0.8   0:00.21 /usr/sbin+
 61118 nobody    20   0  277736  19064   4360 S   0.0  0.8   0:00.64 /usr/sbin+
 61503 nobody    20   0  277760  18816   4192 S   0.0  0.8   0:00.68 /usr/sbin+
 61528 nobody    20   0  277760  19184   4288 S   0.0  0.8   0:00.58 /usr/sbin+
 61529 nobody    20   0  277900  19360   4352 S   0.0  0.8   0:00.28 /usr/sbin+
 62686 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 62813 nobody    20   0  277760  17828   3404 S   0.0  0.7   0:00.04 /usr/sbin+
 62991 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 63247 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 63611 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 64105 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.22 /opt/cpan+
 64340 root      20   0  249300 118708   1264 S   0.0  4.9   0:00.63 spamd chi+
 64341 root      20   0  248036 116460    416 S   0.0  4.8   0:00.00 spamd chi+
 64545 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 64694 nobody    20   0  277564  18484   4140 S   0.0  0.8   0:00.37 /usr/sbin+
 64695 nobody    20   0  277508  18492   4084 S   0.0  0.8   0:00.29 /usr/sbin+
 64956 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 65204 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65326 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 65527 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 65740 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 65950 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65953 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66073 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.22 /opt/cpan+
 66323 cloudw    20   0  367184  19148  12236 S   0.0  0.8   0:00.20 /opt/cpan+
 66511 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 66735 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66882 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 67098 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 67149 nobody    20   0  277760  17688   3292 S   0.0  0.7   0:00.06 /usr/sbin+
 67170 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 67178 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 67214 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 67334 cloudw    20   0  366248  16792  10940 S   0.0  0.7   0:00.13 /opt/cpan+
 67358 nigeria   20   0  400460   5572   2328 S   0.0  0.2   0:00.00 php-fpm: +
 67403 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 67444 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67445 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67446 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67448 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67449 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67450 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67451 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67452 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67453 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67454 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67455 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67456 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 67458 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 67460 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 67461 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 67462 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 67481 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67482 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67484 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67485 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67486 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67487 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67488 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67489 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67490 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 67492 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 67494 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67495 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67504 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 67510 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 67515 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
100665 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:40   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:40   0:12  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:40   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:40   0:18  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   09:40   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   09:40   0:01  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kvm-irqfd-clean]
root        675  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [loop0]
root        735  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/loop0-8]
root        736  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root      41201  0.0  0.0      0     0 ?        S    10:31   0:00  \_ [kworker/u200:1]
root     100665  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/u200:2]
root      31542  0.0  0.0      0     0 ?        S    12:25   0:00  \_ [kworker/1:1]
root      35992  0.0  0.0      0     0 ?        S    12:30   0:00  \_ [kworker/0:2]
root      45300  0.0  0.0      0     0 ?        S    12:40   0:00  \_ [kworker/1:2]
root      47936  0.0  0.0      0     0 ?        S    12:43   0:00  \_ [kworker/0:4]
root      52940  0.0  0.0      0     0 ?        S    12:49   0:00  \_ [kworker/0:1]
root      60123  0.0  0.0      0     0 ?        S    12:58   0:00  \_ [kworker/1:3]
root      65204  0.0  0.0      0     0 ?        S    13:03   0:00  \_ [kworker/u200:0]
root      65950  0.0  0.0      0     0 ?        S    13:04   0:00  \_ [kworker/1:0]
root      65953  0.0  0.0      0     0 ?        S    13:04   0:00  \_ [kworker/1:4]
root      66735  0.0  0.0      0     0 ?        S    13:05   0:00  \_ [kworker/0:0]
root          1  0.1  0.1  44268  3332 ?        Ss   09:40   0:18 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  40244  4932 ?        Ss   09:40   0:07 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   252 ?        Ss   09:40   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   504 ?        S<sl 09:40   0:01 /sbin/auditd
root        470  0.0  0.0  24712  1180 ?        Ss   09:40   0:02 /usr/lib/systemd/systemd-logind
root        471  0.0  0.0  52852   456 ?        Ss   09:40   0:00 /usr/sbin/smartd -n -q never
dbus        474  0.0  0.0  58644  1412 ?        Ss   09:40   0:06 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         476  0.0  0.0  69256    72 ?        Ss   09:40   0:00 /sbin/rpcbind -w
polkitd     486  0.0  0.0 612240  1088 ?        Ssl  09:40   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        487  0.0  0.0  21540   408 ?        Ss   09:40   0:00 /usr/sbin/irqbalance --foreground
root        492  0.0  0.0 152780   248 ?        Ss   09:40   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        493  0.0  0.2 224280  5440 ?        Ss   09:40   0:00 queueprocd - waiting up to 60s to process a task
nscd        507  0.0  0.0 928956  1352 ?        Ssl  09:40   0:10 /usr/sbin/nscd
root        515  0.0  0.0 195208    68 ?        Ssl  09:40   0:00 /usr/sbin/gssproxy -D
root        516  0.0  0.0   4388   156 ?        Ss   09:40   0:00 /usr/sbin/acpid
root        543  0.0  0.0  24208   164 ?        Ss   09:40   0:00 /usr/sbin/atd -f
root        545  0.0  0.0 124480   520 ?        Ss   09:40   0:00 /usr/sbin/crond -n
root      67444  0.0  0.0 183048  2156 ?        S    13:06   0:00  \_ /usr/sbin/CROND -n
root      67460  0.0  0.0 113284  1212 ?        Ss   13:06   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      67461  0.0  0.0 108052   356 ?        S    13:06   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      67462  0.0  0.0 113288  1516 ?        S    13:06   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      67522  0.0  0.0 153840  2092 ?        R    13:06   0:00  |               \_ ps auxf
root      67445  0.0  0.0 183048  2152 ?        S    13:06   0:00  \_ /usr/sbin/CROND -n
root      67495  0.0  0.0  20164   808 ?        Ss   13:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      67446  0.0  0.0 183048  2152 ?        S    13:06   0:00  \_ /usr/sbin/CROND -n
root      67489  0.0  0.0  20164   804 ?        Ss   13:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      67448  0.0  0.0 183048  2152 ?        S    13:06   0:00  \_ /usr/sbin/CROND -n
root      67494  0.0  0.0  20164   804 ?        Ss   13:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      67449  0.0  0.0 183048  2152 ?        S    13:06   0:00  \_ /usr/sbin/CROND -n
root      67488  0.0  0.0  20164   804 ?        Ss   13:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      67450  0.0  0.0 183048  2148 ?        S    13:06   0:00  \_ /usr/sbin/CROND -n
root      67487  0.0  0.0  20164   808 ?        Ss   13:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      67451  0.0  0.0 183048  2148 ?        S    13:06   0:00  \_ /usr/sbin/CROND -n
root      67481  0.0  0.0  20164   808 ?        Ss   13:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      67452  0.0  0.0 183048  2148 ?        S    13:06   0:00  \_ /usr/sbin/CROND -n
root      67485  0.0  0.0  20164   804 ?        Ss   13:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      67453  0.0  0.0 183048  2144 ?        S    13:06   0:00  \_ /usr/sbin/CROND -n
root      67484  0.0  0.0  20164   804 ?        Ss   13:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      67454  0.0  0.0 183048  2144 ?        S    13:06   0:00  \_ /usr/sbin/CROND -n
root      67482  0.0  0.0  20164   808 ?        Ss   13:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      67455  0.0  0.0 183048  2144 ?        S    13:06   0:00  \_ /usr/sbin/CROND -n
root      67486  0.0  0.0  20164   804 ?        Ss   13:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      67456  0.0  0.0 183048  2140 ?        S    13:06   0:00  \_ /usr/sbin/CROND -n
root      67490  0.0  0.0  20164   968 ?        Ss   13:06   0:00  |   \_ jailshell (pactpay) [67510] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   67510  0.0  0.0  20164   260 ?        S    13:06   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   67513  0.0  0.6 479860 16260 ?        S    13:06   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      67458  0.0  0.0 183048  2140 ?        S    13:06   0:00  \_ /usr/sbin/CROND -n
root      67492  0.0  0.0  20164   968 ?        Ss   13:06   0:00      \_ jailshell (nigeria) [67515] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   67515  0.0  0.0  20164   260 ?        S    13:06   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   67516  0.0  0.6 404052 16140 ?        S    13:06   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        562  0.0  0.0 108296   180 tty1     Ss+  09:40   0:00 /sbin/agetty --noclear tty1 linux
root        563  0.0  0.0 114704   180 ttyS0    Ss+  09:40   0:00 /bin/bash
mailnull    613  0.0  0.1  89116  3856 ?        Ss   09:40   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        931  0.0  0.0 153404   396 ?        Ss   09:40   0:00 pure-ftpd (SERVER)
root        932  0.0  0.0 572372  1052 ?        Ssl  09:40   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    933  0.0  0.0 112268    56 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.6 114016 15204 ?        Ssl  09:40   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        936  0.1  0.2 1277056 6144 ?        Ssl  09:40   0:21 /usr/bin/checkstatus
root        937  0.0  0.0 445028  1384 ?        Ss   09:40   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  67214  0.0  0.0 445028   320 ?        S    13:05   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    938  0.0  0.0  11796    32 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    939  0.0  0.0 111608    60 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        942  0.0  0.0 111304   544 ?        Ss   09:40   0:01 /usr/sbin/sshd -D
root      67170  0.0  0.1 111304  4268 ?        Ss   13:05   0:00  \_ sshd: [accepted]
sshd      67178  0.0  0.1 115644  2628 ?        S    13:05   0:00      \_ sshd: [net]
systuser    943  0.0  0.0  11348    24 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        944  0.2  0.3 1349832 8612 ?        Ssl  09:40   0:28 /usr/bin/cspdaemon
root        945  0.0  0.0  51508   608 ?        Ss   09:40   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1093  0.0  0.1  47284  3036 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1094  0.0  0.1  48032  3304 ?        S    09:40   0:00  \_ dovecot/imap-login
dovecot    1095  0.0  0.0  10320   292 ?        S    09:40   0:00  \_ dovecot/anvil
root       1096  0.0  0.0  10452   488 ?        S    09:40   0:00  \_ dovecot/log
dovenull   1097  0.0  0.1  47308  2944 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47996  3140 ?        S    09:40   0:00  \_ dovecot/imap-login
root       1104  0.0  0.1  24396  2580 ?        S    09:40   0:00  \_ dovecot/config
dovecot    1110  0.0  0.0  13568   640 ?        S    09:40   0:00  \_ dovecot/stats
dovecot    1170  0.0  0.0  41192  1520 ?        S    09:40   0:00  \_ dovecot/auth
worencom  54132  0.0  0.1  38480  3048 ?        S    12:50   0:00  \_ dovecot/imap
telegraf    946  0.0  1.4 5654304 35808 ?       SLsl 09:40   0:07 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    947  0.0  0.0 342400   232 ?        Ssl  09:40   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        948  0.1 13.8 1763312 334064 ?      Ssl  09:40   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        949  0.0  0.0 389508   596 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        950  0.0  0.2 261160  7008 ?        Ss   09:40   0:02 cpsrvd (SSL) - waiting for connections                   
root      67403  0.0  0.0      0     0 ?        Z    13:05   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.0 388892   660 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        958  0.0  0.1 257360  4832 ?        Ssl  09:40   0:03 /usr/sbin/rsyslogd -n
root        986  0.0  0.0 396248   508 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        990  0.0  0.0 439788  1176 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        994  0.0  0.1 400740  3096 ?        Ss   09:40   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   67358  0.0  0.2 400460  5572 ?        S    13:05   0:00  \_ php-fpm: pool nigeriadecide_org
named       996  0.0  1.4 1186868 36248 ?       Ssl  09:40   0:08 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
cpanelc+   1013  0.0  0.1  10580  3684 ?        Ss   09:40   0:09 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1145  0.0  0.1 157704  3068 ?        S    09:40   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1175  0.0  1.1 412368 27796 ?        Ss   09:40   0:04 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1176  0.0  0.3 387528  8936 ?        Ss   09:40   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1234  0.0  0.0 167452  1316 ?        Ss   09:40   0:00 dnsadmin - dormant mode
root       1235  0.0  0.2 183900  6088 ?        Ss   09:40   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1237  0.0  0.8 209456 19420 ?        Ss   09:40   0:01 tailwatchd
root       1669  0.0  0.0 299272   596 ?        Ss   09:40   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1701  0.0  0.0 130416  1396 ?        SN   09:40   0:00 cpanellogd - sleeping for logs
mysql      1793  1.3  9.5 1463376 230740 ?      Sl   09:40   2:47 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1959  0.0  0.3 266992  7380 ?        Ss   09:40   0:01 /usr/sbin/httpd -k start
root       1962  0.0  0.0  12784   400 ?        S    09:40   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1963  0.0  0.0  12732   368 ?        S    09:40   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1964  0.0  0.0  12808   416 ?        S    09:40   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1968  0.0  0.0  53340   216 ?        S    09:40   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    31256  0.1  0.8 277760 20700 ?        S    12:24   0:03  \_ /usr/sbin/httpd -k start
cloudw    66882  0.3  0.7 367184 19028 ?        S    13:05   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    43218  0.1  0.8 277764 20196 ?        S    12:37   0:02  \_ /usr/sbin/httpd -k start
nobody    43239  0.1  0.8 277768 20228 ?        S    12:37   0:02  \_ /usr/sbin/httpd -k start
nobody    46150  0.1  0.8 277892 20596 ?        S    12:41   0:01  \_ /usr/sbin/httpd -k start
cloudw    66323  0.2  0.7 367184 19148 ?        S    13:04   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    46881  0.1  0.8 277884 19808 ?        S    12:41   0:01  \_ /usr/sbin/httpd -k start
nobody    46902  0.1  0.8 277576 20048 ?        S    12:41   0:01  \_ /usr/sbin/httpd -k start
cloudw    65740  0.1  0.7 367184 19032 ?        S    13:03   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    47448  0.1  0.8 277884 20188 ?        S    12:42   0:02  \_ /usr/sbin/httpd -k start
nobody    47802  0.0  0.8 277584 19560 ?        S    12:42   0:00  \_ /usr/sbin/httpd -k start
cloudw    62686  0.0  0.7 367184 19032 ?        S    13:00   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    48527  0.0  0.8 277892 19844 ?        S    12:43   0:01  \_ /usr/sbin/httpd -k start
nobody    48759  0.1  0.8 277772 20300 ?        S    12:44   0:01  \_ /usr/sbin/httpd -k start
cloudw    65527  0.1  0.7 367184 19032 ?        S    13:03   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    50251  0.0  0.8 277904 19724 ?        S    12:45   0:00  \_ /usr/sbin/httpd -k start
cloudw    64545  0.0  0.7 367184 19032 ?        S    13:02   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    50669  0.1  0.8 277896 20108 ?        S    12:46   0:01  \_ /usr/sbin/httpd -k start
nobody    50670  0.0  0.8 277908 19672 ?        S    12:46   0:01  \_ /usr/sbin/httpd -k start
nobody    52867  0.0  0.7 277608 19148 ?        S    12:49   0:01  \_ /usr/sbin/httpd -k start
cloudw    66073  0.1  0.7 367184 19028 ?        S    13:04   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    54719  0.0  0.7 277736 19200 ?        S    12:51   0:00  \_ /usr/sbin/httpd -k start
cloudw    64956  0.1  0.7 367184 19032 ?        S    13:02   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    54728  0.0  0.7 277560 18860 ?        S    12:51   0:00  \_ /usr/sbin/httpd -k start
cloudw    63611  0.0  0.7 367184 19028 ?        S    13:01   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    54729  0.1  0.8 277684 19612 ?        S    12:51   0:00  \_ /usr/sbin/httpd -k start
nobody    55196  0.1  0.8 277920 19968 ?        S    12:52   0:01  \_ /usr/sbin/httpd -k start
nobody    56174  0.0  0.7 277868 19300 ?        S    12:53   0:00  \_ /usr/sbin/httpd -k start
nobody    56378  0.0  0.7 277744 19020 ?        S    12:53   0:00  \_ /usr/sbin/httpd -k start
cloudw    64105  0.0  0.7 367184 19028 ?        S    13:02   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    56510  0.0  0.7 277868 19272 ?        S    12:53   0:00  \_ /usr/sbin/httpd -k start
cloudw    67098  0.6  0.7 367184 19032 ?        S    13:05   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    56546  0.1  0.7 277736 19236 ?        S    12:53   0:01  \_ /usr/sbin/httpd -k start
cloudw    66511  0.2  0.7 367184 19032 ?        S    13:04   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    59160  0.0  0.7 277876 18844 ?        S    12:56   0:00  \_ /usr/sbin/httpd -k start
nobody    60272  0.0  0.7 277868 18472 ?        S    12:58   0:00  \_ /usr/sbin/httpd -k start
nobody    60287  0.0  0.7 277552 18640 ?        S    12:58   0:00  \_ /usr/sbin/httpd -k start
cloudw    62991  0.0  0.7 367184 19032 ?        S    13:01   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    61118  0.1  0.7 277736 19064 ?        S    12:59   0:00  \_ /usr/sbin/httpd -k start
nobody    61503  0.1  0.7 277760 18816 ?        S    12:59   0:00  \_ /usr/sbin/httpd -k start
nobody    61528  0.1  0.7 277760 19184 ?        S    12:59   0:00  \_ /usr/sbin/httpd -k start
nobody    61529  0.0  0.7 277900 19360 ?        S    12:59   0:00  \_ /usr/sbin/httpd -k start
cloudw    65326  0.1  0.7 367184 19032 ?        S    13:03   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    62813  0.0  0.7 277760 17828 ?        S    13:01   0:00  \_ /usr/sbin/httpd -k start
cloudw    63247  0.0  0.7 367184 19028 ?        S    13:01   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    64694  0.1  0.7 277564 18484 ?        S    13:02   0:00  \_ /usr/sbin/httpd -k start
nobody    64695  0.1  0.7 277508 18492 ?        S    13:02   0:00  \_ /usr/sbin/httpd -k start
cloudw    67334  1.0  0.6 366248 16792 ?        S    13:05   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    67149  0.2  0.7 277760 17688 ?        S    13:05   0:00  \_ /usr/sbin/httpd -k start
root       2014  0.0  0.4 182772 10636 ?        Ss   09:40   0:11 lfd - sleeping
oysipao+  18294  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+  18303  0.0  0.0   3152    36 ?        S    10:01   0:00  \_ [kworker]
root      56404  0.0  4.8 248036 117152 ?       Ss   10:49   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      64340  0.0  4.9 249300 118708 ?       S    11:00   0:00  \_ spamd child
root      64341  0.0  4.8 248036 116460 ?       S    11:00   0:00  \_ spamd child
## mysql stats
Uptime: 34045  Threads: 3  Questions: 895713  Slow queries: 0  Opens: 5332  Flush tables: 1  Open tables: 2000  Queries per second avg: 26.309
*************************** 1. row ***************************
     Id: 14494
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 14496
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 14498
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.133.34 TIME_WAIT
      1 114.119.145.187 TIME_WAIT
      1 142.44.228.169 TIME_WAIT
      1 192.178.4.100 TIME_WAIT
      1 ::1 TIME_WAIT
      1 20.215.214.24 TIME_WAIT
      1 35.208.73.44 TIME_WAIT
      1 51.222.168.254 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 54.39.6.112 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 13:06:01 WAT
   Restart Time: Thursday, 20-Nov-2025 03:38:40 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 9 hours 27 minutes 20 seconds
   Server load: 0.32 0.45 0.45
   Total accesses: 64483 - Total Traffic: 1.6 GB - Total Duration: 96597252
   CPU Usage: u23.14 s9.99 cu808.15 cs641.26 - 4.36% CPU load
   1.89 requests/sec - 48.2 kB/second - 25.4 kB/request - 1498.03 ms/request
   24 requests currently being processed, 0 workers gracefully restarting, 9 idle workers

WLLWKKK_KL__LWK._L.WK_LLK__LW_._WLWL............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req   Dur    Conn  Child  Slot     Client      Protocol            VHost                                        Request
   0-0  31256 0/586/3110  W 14.40 52    0   2188713  0.0   14.34 90.09 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343339
   1-0  62813 1/7/3062    L 0.17  272   0   45502341 5.3   0.19  78.13 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343336
   2-0  47802 1/126/2913  L 3.00  312   0   2729099  5.3   2.61  80.72 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343336
   3-0  52867 0/188/3522  W 4.45  112   0   2193492  0.0   4.39  82.69 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343338
   4-0  43218 4/519/3196  K 10.55 3     261 2178479  125.4 14.50 80.21 192.178.4.101   http/1.1 team.cloudware.ng:443       GET /?l=582866013 HTTP/1.1
   5-0  60272 3/46/3116   K 1.42  0     414 1921327  98.2  1.29  69.71 192.178.4.99    http/1.1 team.cloudware.ng:443       GET /?l=3142887656 HTTP/1.1
   6-0  46881 1/261/2729  K 6.83  0     274 2661515  35.2  6.53  68.65 192.178.4.96    http/1.1 team.cloudware.ng:443       GET /?l=3362792721 HTTP/1.1
   7-0  61118 0/111/3061  _ 2.58  0     5   2031482  0.0   4.22  79.60 54.80.73.122    http/1.1 nigeriadecide.org:443       GET /polling_unit_category.php/blog/blog/assets/css/polling_uni
   8-0  43239 10/436/2737 K 11.18 4     396 2075233  308.6 11.99 89.15 192.178.4.102   http/1.1 team.cloudware.ng:443       GET /?l=4076190569 HTTP/1.1
   9-0  50251 1/104/2971  L 2.23  212   0   2617803  5.3   1.75  70.45 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343337
   10-0 61503 0/108/2738  _ 2.86  0     27  1933588  0.0   2.96  65.76 128.140.8.200   http/1.1 cloudsms.com.ng:443         GET /cron/process_queue3.php HTTP/1.1
   11-0 67149 0/10/2823   _ 0.26  0     25  1881910  0.0   0.28  63.09 116.203.129.16  http/1.1 cloudsms.com.ng:443         GET /cron/process_queue5.php HTTP/1.1
   12-0 46902 1/315/2693  L 7.36  132   0   1987428  5.3   7.14  65.20 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343338
   13-0 46150 0/308/2253  W 7.62  92    0   1773383  0.0   7.65  55.22 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343338
   14-0 47448 5/369/2358  K 8.81  0     260 1833834  153.3 8.70  62.47 192.178.4.105   http/1.1 team.cloudware.ng:443       GET /?l=1578299310 HTTP/1.1
   15-0 -     0/0/2306    . 0.00  198   0   1625943  0.0   0.00  53.35 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   16-0 48527 0/217/2085  _ 5.43  0     23  2281538  0.0   5.18  51.30 116.203.129.16  http/1.1 cloudsms.com.ng:443         GET /cron/process_queue2.php HTTP/1.1
   17-0 48759 1/269/1987  L 5.97  152   0   1647786  5.3   8.22  52.81 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343338
   18-0 -     0/0/2227    . 0.00  178   0   1641856  0.0   0.00  44.81 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   19-0 50669 0/281/2538  W 6.22  0     0   1577610  0.0   6.17  55.26 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   20-0 50670 1/269/1968  K 4.87  1     343 2096836  34.1  4.30  44.84 192.178.4.98    http/1.1 team.cloudware.ng:443       GET /?l=505129841 HTTP/1.1
   21-0 64694 0/66/1442   _ 1.55  0     0   1266429  0.0   1.85  31.76 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   22-0 54719 1/113/1404  L 2.92  192   0   1229820  5.3   2.82  34.10 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343337
   23-0 54728 1/95/711    L 2.26  252   0   972977   5.3   2.41  17.20 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343337
   24-0 54729 3/155/912   K 4.13  3     346 1097338  95.3  4.25  22.84 192.178.4.97    http/1.1 team.cloudware.ng:443       GET /?l=2207629431 HTTP/1.1
   25-0 55196 0/209/756   _ 4.89  0     23  379655   0.0   5.76  19.77 116.203.134.67  http/1.1 cloudsms.com.ng:443         GET /cron/process_queue4.php HTTP/1.1
   26-0 56174 0/129/143   _ 3.11  1     342 710234   0.0   3.12  3.38  192.178.4.100   http/1.1 team.cloudware.ng:443       GET /?l=2915515635 HTTP/1.1
   27-0 56378 1/54/529    L 1.46  232   0   901411   5.3   1.35  14.60 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343337
   28-0 56510 0/118/349   W 3.02  32    0   827077   0.0   3.01  8.41  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343339
   29-0 61528 0/111/679   _ 2.43  0     25  339785   0.0   2.60  17.88 116.203.129.16  http/1.1 cloudsms.com.ng:443         GET /cron/process_queue1.php HTTP/1.1
   30-0 -     0/0/206     . 0.00  191   0   732370   0.0   0.00  4.23  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   31-0 59160 0/59/110    _ 1.52  0     414 686064   0.0   1.38  2.27  192.178.4.96    http/1.1 team.cloudware.ng:443       GET /?l=3937537798 HTTP/1.1
   32-0 56546 0/205/228   W 5.01  72    0   124415   0.0   5.38  5.69  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343338
   33-0 60287 1/37/43     L 0.89  292   0   21342    5.3   0.88  0.92  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343336
   34-0 64695 0/54/95     W 1.19  12    0   685853   0.0   1.25  2.21  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343339
   35-0 61529 1/51/55     L 1.04  172   0   23364    5.3   1.15  1.25  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343337
   36-0 -     0/0/2       . 0.00  33823 0   738      0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   37-0 -     0/0/8       . 0.00  33813 0   3463     0.0   0.00  0.19  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   38-0 -     0/0/4       . 0.00  33807 0   1877     0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   39-0 -     0/0/2       . 0.00  33818 0   599      0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   40-0 -     0/0/6       . 0.00  33812 0   3057     0.0   0.00  0.15  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   41-0 -     0/0/3       . 0.00  33808 0   840      0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   42-0 -     0/0/227     . 0.00  32914 0   110452   0.0   0.00  5.70  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   43-0 -     0/0/9       . 0.00  33811 0   4927     0.0   0.00  0.24  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   44-0 -     0/0/154     . 0.00  33289 0   84969    0.0   0.00  4.58  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   45-0 -     0/0/13      . 0.00  33778 0   6975     0.0   0.00  0.32  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1018
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 10 seconds, (range: 0...34)
   index usage: 17%, cache usage: 24%
   total entries stored since starting: 39606
   total entries replaced since starting: 0
   total entries expired since starting: 38574
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 16 hit, 58 miss
   total removes since starting: 14 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit