403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.13.15.txt
 ## swap threshold exceeded
## server overview
2025-11-20.13.15 load[0] mem[69/62] mysql[3/9] httpd[26]
              total        used        free      shared  buff/cache   available
Mem:           2363        1572          96          53         694         569
Swap:          1999        1466         533
 13:15:02 up  3:34,  0 users,  load average: 0.15, 0.26, 0.36
## system overview
top - 13:15:02 up  3:34,  0 users,  load average: 0.15, 0.26, 0.36
Tasks: 224 total,   2 running, 221 sleeping,   0 stopped,   1 zombie
%Cpu(s): 64.5 us, 19.4 sy,  0.0 ni, 16.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   106528 free,  1601768 used,   712004 buff/cache
KiB Swap:  2047996 total,   546016 free,  1501980 used.   591976 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1793 mysql     20   0 1463376 231176   2824 S  93.8  9.6   2:54.72 /usr/sbin+
 74516 nigeria   20   0  404052  16140  10384 S  12.5  0.7   0:00.05 /opt/cpan+
   261 root       0 -20       0      0      0 S   6.2  0.0   0:01.78 [kworker/+
 73147 nobody    20   0  277892  18584   4040 S   6.2  0.8   0:00.20 /usr/sbin+
 74528 pactpay   20   0  480124  17692  11892 S   6.2  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44268   3332   1476 S   0.0  0.1   0:19.29 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.73 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.64 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:13.56 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.60 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.45 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:18.90 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.33 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   266 root       0 -20       0      0      0 S   0.0  0.0   0:02.04 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.77 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   6252   6016 S   0.0  0.3   0:08.12 /usr/lib/+
   387 root      20   0   45352    252    248 S   0.0  0.0   0:00.38 /usr/lib/+
   410 root      16  -4   55532    504    376 S   0.0  0.0   0:01.38 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0   24712   1180    836 S   0.0  0.0   0:03.10 /usr/lib/+
   471 root      20   0   52852    416    312 S   0.0  0.0   0:00.01 /usr/sbin+
   474 dbus      20   0   58644   1412    680 S   0.0  0.1   0:07.06 /usr/bin/+
   476 rpc       20   0   69256     72     12 S   0.0  0.0   0:00.01 /sbin/rpc+
   486 polkitd   20   0  612240   1088    740 S   0.0  0.0   0:01.89 /usr/lib/+
   487 root      20   0   21540    408    320 S   0.0  0.0   0:00.28 /usr/sbin+
   492 root      20   0  152780    248    204 S   0.0  0.0   0:00.00 /usr/sbin+
   493 root      20   0  224280   5440   1028 S   0.0  0.2   0:00.29 queueproc+
   507 nscd      20   0  928956   1384    712 S   0.0  0.1   0:10.77 /usr/sbin+
   515 root      20   0  195208     68     68 S   0.0  0.0   0:00.00 /usr/sbin+
   516 root      20   0    4388    156    152 S   0.0  0.0   0:00.00 /usr/sbin+
   543 root      20   0   24208    164    140 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0  124480    520    388 S   0.0  0.0   0:00.38 /usr/sbin+
   562 root      20   0  108296    180    176 S   0.0  0.0   0:00.00 /sbin/age+
   563 root      20   0  114704    180    180 S   0.0  0.0   0:00.02 /bin/bash
   613 mailnull  20   0   89116   3808    896 S   0.0  0.2   0:00.36 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   675 root       0 -20       0      0      0 S   0.0  0.0   0:02.56 [loop0]
   735 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   736 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   931 root      20   0  153404    396    316 S   0.0  0.0   0:00.26 pure-ftpd+
   932 root      20   0  572372   1052    480 S   0.0  0.0   0:01.19 /usr/bin/+
   933 systuser  20   0  112268     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   935 systuser  20   0  114016  15208   2460 S   0.0  0.6   0:03.37 /usr/loca+
   936 root      20   0 1277056   6144    164 S   0.0  0.3   0:21.14 /usr/bin/+
   937 root      20   0  445028   1384   1272 S   0.0  0.1   0:00.53 sw-engine+
   938 systuser  20   0   11796     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   942 root      20   0  111304    544    436 S   0.0  0.0   0:01.94 /usr/sbin+
   943 systuser  20   0   11348     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   944 root      20   0 1349832   8612    128 S   0.0  0.4   0:28.14 /usr/bin/+
   945 root      20   0   51508    608    428 S   0.0  0.0   0:00.19 /usr/sbin+
   946 telegraf  20   0 5654304  37180   5808 S   0.0  1.5   0:07.41 /usr/loca+
   947 memcach+  20   0  342400    232    232 S   0.0  0.0   0:00.28 /usr/bin/+
   948 root      20   0 1763312 310632    848 S   0.0 12.8   0:14.95 /usr/loca+
   949 root      20   0  389508    548    456 S   0.0  0.0   0:00.41 php-fpm: +
   950 root      20   0  261160   6980   2048 S   0.0  0.3   0:02.37 cpsrvd (S+
   953 root      20   0  388892    660    456 S   0.0  0.0   0:00.35 php-fpm: +
   958 root      20   0  257360   6028   5228 S   0.0  0.2   0:04.06 /usr/sbin+
   986 root      20   0  396248    508    416 S   0.0  0.0   0:00.37 php-fpm: +
   990 root      20   0  439788   1176   1084 S   0.0  0.0   0:00.48 php-fpm: +
   994 root      20   0  400740   3096    716 S   0.0  0.1   0:01.83 php-fpm: +
   996 named     20   0 1186868  36276   1344 S   0.0  1.5   0:08.58 /usr/sbin+
  1013 cpanelc+  20   0   10580   3684   2420 S   0.0  0.2   0:10.33 /usr/loca+
  1093 dovenull  20   0   47284   2584   1708 S   0.0  0.1   0:00.24 dovecot/p+
  1094 dovenull  20   0   48032   3212   1780 S   0.0  0.1   0:00.23 dovecot/i+
  1095 dovecot   20   0   10320    292    176 S   0.0  0.0   0:00.06 dovecot/a+
  1096 root      20   0   10452    488    308 S   0.0  0.0   0:00.16 dovecot/l+
  1097 dovenull  20   0   47308   2508   1716 S   0.0  0.1   0:00.19 dovecot/p+
  1098 dovenull  20   0   47996   2812   1540 S   0.0  0.1   0:00.23 dovecot/i+
  1104 root      20   0   24396   2580    544 S   0.0  0.1   0:00.11 dovecot/c+
  1110 dovecot   20   0   13568    624    424 S   0.0  0.0   0:00.04 dovecot/s+
  1145 systuser  20   0  157704   3068   1092 S   0.0  0.1   0:00.09 SonarPush+
  1170 dovecot   20   0   41192   1544   1028 S   0.0  0.1   0:00.48 dovecot/a+
  1175 wp-tool+  20   0  412368  27512   1612 S   0.0  1.1   0:04.25 /usr/bin/+
  1176 wp-tool+  20   0  387528   8692   1560 S   0.0  0.4   0:00.19 /usr/bin/+
  1234 root      20   0  167452   1316    772 S   0.0  0.1   0:00.23 dnsadmin +
  1235 root      20   0  262228  22744   4884 S   0.0  0.9   0:02.24 cpdavd - +
  1237 root      20   0  209456  19792   2312 S   0.0  0.8   0:01.79 tailwatchd
  1669 root      20   0  299272    516    352 S   0.0  0.0   0:00.34 php-fpm: +
  1701 root      38  18  130416   1392    720 S   0.0  0.1   0:00.03 cpanellog+
  1959 root      20   0  266992   7380    740 S   0.0  0.3   0:01.13 /usr/sbin+
  1962 root      20   0   12888    400    296 S   0.0  0.0   0:01.53 /usr/loca+
  1963 root      20   0   12732    368    292 S   0.0  0.0   0:01.31 /usr/loca+
  1964 root      20   0   12952    416    296 S   0.0  0.0   0:01.43 /usr/loca+
  1968 root      20   0   53340    216    216 S   0.0  0.0   0:00.05 /usr/loca+
  2014 root      20   0  182880  10756   1168 S   0.0  0.4   0:12.03 lfd - sle+
 18294 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 18303 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.21 [kworker]
 31542 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 35992 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 43239 nobody    20   0  277768  20488   5040 S   0.0  0.8   0:03.36 /usr/sbin+
 45300 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 47448 nobody    20   0  277884  20372   4876 S   0.0  0.8   0:02.32 /usr/sbin+
 47802 nobody    20   0  277640  19776   4768 S   0.0  0.8   0:01.43 /usr/sbin+
 48527 nobody    20   0  277892  20060   4840 S   0.0  0.8   0:01.48 /usr/sbin+
 48759 nobody    20   0  277772  20288   4884 S   0.0  0.8   0:01.48 /usr/sbin+
 50251 nobody    20   0  277904  19884   4644 S   0.0  0.8   0:00.93 /usr/sbin+
 50669 nobody    20   0  277896  20376   4868 S   0.0  0.8   0:01.62 /usr/sbin+
 54132 worencom  20   0   38480   2764   1708 S   0.0  0.1   0:00.00 dovecot/i+
 55196 nobody    20   0  278256  20460   4888 S   0.0  0.8   0:01.48 /usr/sbin+
 56404 root      20   0  248036 117144   1060 S   0.0  4.8   0:03.77 /usr/loca+
 60272 nobody    20   0  277868  20056   4868 S   0.0  0.8   0:01.23 /usr/sbin+
 60287 nobody    20   0  277592  19620   4644 S   0.0  0.8   0:00.91 /usr/sbin+
 61118 nobody    20   0  277736  19580   4688 S   0.0  0.8   0:00.94 /usr/sbin+
 61503 nobody    20   0  277760  19256   4468 S   0.0  0.8   0:01.11 /usr/sbin+
 61529 nobody    20   0  278196  19952   4404 S   0.0  0.8   0:00.36 /usr/sbin+
 62813 nobody    20   0  277760  19476   4564 S   0.0  0.8   0:00.78 /usr/sbin+
 64340 root      20   0  260788 127804   3408 S   0.0  5.3   0:00.90 spamd chi+
 64341 root      20   0  248036 116460    416 S   0.0  4.8   0:00.00 spamd chi+
 64695 nobody    20   0  277508  18892   4408 S   0.0  0.8   0:00.77 /usr/sbin+
 65204 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65950 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 65953 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66735 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 67149 nobody    20   0  277760  19156   4400 S   0.0  0.8   0:00.62 /usr/sbin+
 67729 nobody    20   0  277892  18476   3948 S   0.0  0.8   0:00.06 /usr/sbin+
 68641 nobody    20   0  277496  18592   4124 S   0.0  0.8   0:00.22 /usr/sbin+
 69321 nobody    20   0  277940  19440   4432 S   0.0  0.8   0:00.38 /usr/sbin+
 69361 nobody    20   0  278100  19764   4444 S   0.0  0.8   0:00.40 /usr/sbin+
 69362 nobody    20   0  277480  18540   3992 S   0.0  0.8   0:00.15 /usr/sbin+
 69438 nobody    20   0  277480  18980   4276 S   0.0  0.8   0:00.45 /usr/sbin+
 69624 nobody    20   0  277884  18544   4032 S   0.0  0.8   0:00.14 /usr/sbin+
 69723 nobody    20   0  277760  18892   4360 S   0.0  0.8   0:00.56 /usr/sbin+
 69899 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 70170 nobody    20   0  277760  18392   3960 S   0.0  0.8   0:00.07 /usr/sbin+
 70392 cloudw    20   0  367184  19108  12196 S   0.0  0.8   0:00.21 /opt/cpan+
 70474 nobody    20   0  277912  18700   4132 S   0.0  0.8   0:00.33 /usr/sbin+
 70801 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 70827 nobody    20   0  277760  18392   3940 S   0.0  0.8   0:00.10 /usr/sbin+
 71030 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 71225 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 71521 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 71758 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 71955 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 72297 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 72501 nobody    20   0  277892  18892   4128 R   0.0  0.8   0:00.24 /usr/sbin+
 72620 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 72818 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 72998 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 73111 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 73128 nobody    20   0  277760  17680   3276 S   0.0  0.7   0:00.15 /usr/sbin+
 73148 nobody    20   0  277744  18024   3660 S   0.0  0.7   0:00.01 /usr/sbin+
 73194 nobody    20   0  277760  18916   3976 S   0.0  0.8   0:00.16 /usr/sbin+
 73225 nobody    20   0  277348  17828   3568 S   0.0  0.7   0:00.00 /usr/sbin+
 73233 nobody    20   0  277892  18544   4000 S   0.0  0.8   0:00.20 /usr/sbin+
 73386 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 73601 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 73908 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 74131 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 74212 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 74321 cloudw    20   0  366248  16792  10940 S   0.0  0.7   0:00.13 /opt/cpan+
 74390 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 74393 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 74394 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 74401 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 74417 nigeria   20   0  400460   5572   2328 S   0.0  0.2   0:00.00 php-fpm: +
 74459 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 74460 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74462 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74463 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74464 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74465 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74467 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74468 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74469 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74470 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 74471 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 74473 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 74481 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 74483 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 74484 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 74485 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 74488 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 74489 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 74490 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 74491 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 74492 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 74493 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 74495 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 74496 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 74498 root      20   0  188244  11124   5148 S   0.0  0.5   0:00.01 /usr/loca+
 74499 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 74506 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 74514 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 74523 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 74550 root      20   0  160224   2384   1636 S   0.0  0.1   0:00.00 top -n 2 +
 74588 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
100665 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:40   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:40   0:13  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:40   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:40   0:18  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   09:40   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kvm-irqfd-clean]
root        675  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [loop0]
root        735  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/loop0-8]
root        736  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root     100665  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/u200:2]
root      31542  0.0  0.0      0     0 ?        S    12:25   0:00  \_ [kworker/1:1]
root      35992  0.0  0.0      0     0 ?        S    12:30   0:00  \_ [kworker/0:2]
root      45300  0.0  0.0      0     0 ?        S    12:40   0:00  \_ [kworker/1:2]
root      65204  0.0  0.0      0     0 ?        S    13:03   0:00  \_ [kworker/u200:0]
root      65950  0.0  0.0      0     0 ?        S    13:04   0:00  \_ [kworker/1:0]
root      65953  0.0  0.0      0     0 ?        S    13:04   0:00  \_ [kworker/1:4]
root      66735  0.0  0.0      0     0 ?        S    13:05   0:00  \_ [kworker/0:0]
root      69899  0.0  0.0      0     0 ?        S    13:09   0:00  \_ [kworker/0:3]
root      72998  0.0  0.0      0     0 ?        S    13:13   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44268  3332 ?        Ss   09:40   0:19 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  40244  6252 ?        Ss   09:40   0:08 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   252 ?        Ss   09:40   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   504 ?        S<sl 09:40   0:01 /sbin/auditd
root        470  0.0  0.0  24712  1180 ?        Ss   09:40   0:03 /usr/lib/systemd/systemd-logind
root        471  0.0  0.0  52852   416 ?        Ss   09:40   0:00 /usr/sbin/smartd -n -q never
dbus        474  0.0  0.0  58644  1412 ?        Ss   09:40   0:07 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         476  0.0  0.0  69256    72 ?        Ss   09:40   0:00 /sbin/rpcbind -w
polkitd     486  0.0  0.0 612240  1088 ?        Ssl  09:40   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        487  0.0  0.0  21540   408 ?        Ss   09:40   0:00 /usr/sbin/irqbalance --foreground
root        492  0.0  0.0 152780   248 ?        Ss   09:40   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        493  0.0  0.2 224280  5440 ?        Ss   09:40   0:00 queueprocd - waiting up to 60s to process a task
nscd        507  0.0  0.0 928956  1384 ?        Ssl  09:40   0:10 /usr/sbin/nscd
root        515  0.0  0.0 195208    68 ?        Ssl  09:40   0:00 /usr/sbin/gssproxy -D
root        516  0.0  0.0   4388   156 ?        Ss   09:40   0:00 /usr/sbin/acpid
root        543  0.0  0.0  24208   164 ?        Ss   09:40   0:00 /usr/sbin/atd -f
root        545  0.0  0.0 124480   520 ?        Ss   09:40   0:00 /usr/sbin/crond -n
root      74459  0.0  0.0 183048  2156 ?        S    13:15   0:00  \_ /usr/sbin/CROND -n
root      74493  0.0  0.0 113284  1212 ?        Ss   13:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      74499  0.0  0.0 108052   360 ?        S    13:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      74506  0.0  0.0 113288  1516 ?        S    13:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      74602  0.0  0.0 153840  2096 ?        R    13:15   0:00  |               \_ ps auxf
root      74460  0.0  0.0 183048  2152 ?        S    13:15   0:00  \_ /usr/sbin/CROND -n
root      74495  0.0  0.0  20164   808 ?        Ss   13:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      74462  0.0  0.0 183048  2152 ?        S    13:15   0:00  \_ /usr/sbin/CROND -n
root      74484  0.0  0.0  20164   804 ?        Ss   13:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      74463  0.0  0.0 183048  2152 ?        S    13:15   0:00  \_ /usr/sbin/CROND -n
root      74481  0.0  0.0  20164   804 ?        Ss   13:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      74464  0.0  0.0 183048  2152 ?        S    13:15   0:00  \_ /usr/sbin/CROND -n
root      74492  0.0  0.0  20164   804 ?        Ss   13:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      74465  0.0  0.0 183048  2148 ?        S    13:15   0:00  \_ /usr/sbin/CROND -n
root      74491  0.0  0.0  20164   804 ?        Ss   13:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      74467  0.0  0.0 183048  2148 ?        S    13:15   0:00  \_ /usr/sbin/CROND -n
root      74485  0.0  0.0  20164   804 ?        Ss   13:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      74468  0.0  0.0 183048  2144 ?        S    13:15   0:00  \_ /usr/sbin/CROND -n
root      74488  0.0  0.0  20164   808 ?        Ss   13:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      74469  0.0  0.0 183048  2144 ?        S    13:15   0:00  \_ /usr/sbin/CROND -n
root      74483  0.0  0.0  20164   808 ?        Ss   13:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      74470  0.0  0.0 183048  2148 ?        S    13:15   0:00  \_ /usr/sbin/CROND -n
root      74490  0.0  0.0 113284  1212 ?        Ss   13:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      74498  1.0  0.4 188244 11124 ?        S    13:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      74550  0.0  0.0 160224  2384 ?        S    13:15   0:00  |           \_ top -n 2 -b -c
root      74471  0.0  0.0 183048  2140 ?        S    13:15   0:00  \_ /usr/sbin/CROND -n
root      74496  0.0  0.0  20164   968 ?        Ss   13:15   0:00  |   \_ jailshell (pactpay) [74523] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   74523  0.0  0.0  20164   260 ?        S    13:15   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   74528  2.0  0.7 480124 17692 ?        S    13:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      74473  0.0  0.0 183048  2144 ?        S    13:15   0:00  \_ /usr/sbin/CROND -n
root      74489  0.0  0.0  20164   968 ?        Ss   13:15   0:00      \_ jailshell (nigeria) [74514] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   74514  0.0  0.0  20164   260 ?        S    13:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   74516  6.0  0.6 404052 16140 ?        S    13:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        562  0.0  0.0 108296   180 tty1     Ss+  09:40   0:00 /sbin/agetty --noclear tty1 linux
root        563  0.0  0.0 114704   180 ttyS0    Ss+  09:40   0:00 /bin/bash
mailnull    613  0.0  0.1  89116  3808 ?        Ss   09:40   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        931  0.0  0.0 153404   396 ?        Ss   09:40   0:00 pure-ftpd (SERVER)
root        932  0.0  0.0 572372  1052 ?        Ssl  09:40   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    933  0.0  0.0 112268    56 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.6 114016 15208 ?        Ssl  09:40   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        936  0.1  0.2 1277056 6144 ?        Ssl  09:40   0:21 /usr/bin/checkstatus
root        937  0.0  0.0 445028  1384 ?        Ss   09:40   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  74401  0.0  0.0 445028   320 ?        S    13:14   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    938  0.0  0.0  11796    32 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    939  0.0  0.0 111608    60 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        942  0.0  0.0 111304   544 ?        Ss   09:40   0:01 /usr/sbin/sshd -D
root      74212  0.0  0.1 111304  4268 ?        Ss   13:14   0:00  \_ sshd: [accepted]
root      74393  0.0  0.1 111304  4276 ?        Ss   13:14   0:00  \_ sshd: [accepted]
sshd      74394  0.0  0.1 115644  2632 ?        S    13:14   0:00      \_ sshd: [net]
systuser    943  0.0  0.0  11348    24 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        944  0.2  0.3 1349832 8612 ?        Ssl  09:40   0:28 /usr/bin/cspdaemon
root        945  0.0  0.0  51508   608 ?        Ss   09:40   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1093  0.0  0.1  47284  2584 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1094  0.0  0.1  48032  3212 ?        S    09:40   0:00  \_ dovecot/imap-login
dovecot    1095  0.0  0.0  10320   292 ?        S    09:40   0:00  \_ dovecot/anvil
root       1096  0.0  0.0  10452   488 ?        S    09:40   0:00  \_ dovecot/log
dovenull   1097  0.0  0.1  47308  2508 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47996  2812 ?        S    09:40   0:00  \_ dovecot/imap-login
root       1104  0.0  0.1  24396  2580 ?        S    09:40   0:00  \_ dovecot/config
dovecot    1110  0.0  0.0  13568   624 ?        S    09:40   0:00  \_ dovecot/stats
dovecot    1170  0.0  0.0  41192  1544 ?        S    09:40   0:00  \_ dovecot/auth
worencom  54132  0.0  0.1  38480  2764 ?        S    12:50   0:00  \_ dovecot/imap
telegraf    946  0.0  1.5 5654304 37180 ?       SLsl 09:40   0:07 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    947  0.0  0.0 342400   232 ?        Ssl  09:40   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        948  0.1 12.8 1763312 310632 ?      Ssl  09:40   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        949  0.0  0.0 389508   548 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        950  0.0  0.2 261160  6980 ?        Ss   09:40   0:02 cpsrvd (SSL) - waiting for connections                   
root      74390  0.0  0.0      0     0 ?        Z    13:14   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.0 388892   660 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        958  0.0  0.2 257360  6028 ?        Ssl  09:40   0:04 /usr/sbin/rsyslogd -n
root        986  0.0  0.0 396248   508 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        990  0.0  0.0 439788  1176 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        994  0.0  0.1 400740  3096 ?        Ss   09:40   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   74417  0.0  0.2 400460  5572 ?        S    13:14   0:00  \_ php-fpm: pool nigeriadecide_org
named       996  0.0  1.4 1186868 36276 ?       Ssl  09:40   0:08 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
cpanelc+   1013  0.0  0.1  10580  3684 ?        Rs   09:40   0:10 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1145  0.0  0.1 157704  3068 ?        S    09:40   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1175  0.0  1.1 412368 27512 ?        Ss   09:40   0:04 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1176  0.0  0.3 387528  8692 ?        Ss   09:40   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1234  0.0  0.0 167452  1316 ?        Ss   09:40   0:00 dnsadmin - dormant mode
root       1235  0.0  0.9 262228 22744 ?        Ss   09:40   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1237  0.0  0.8 209456 19792 ?        Ss   09:40   0:01 tailwatchd
root       1669  0.0  0.0 299272   516 ?        Ss   09:40   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1701  0.0  0.0 130416  1392 ?        SN   09:40   0:00 cpanellogd - sleeping for logs
mysql      1793  1.3  9.5 1463376 231176 ?      Sl   09:40   2:54 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1959  0.0  0.3 266992  7380 ?        Ss   09:40   0:01 /usr/sbin/httpd -k start
root       1962  0.0  0.0  12888   400 ?        S    09:40   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1963  0.0  0.0  12732   368 ?        S    09:40   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1964  0.0  0.0  12952   416 ?        S    09:40   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1968  0.0  0.0  53340   216 ?        S    09:40   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    43239  0.1  0.8 277768 20488 ?        S    12:37   0:03  \_ /usr/sbin/httpd -k start
nobody    47448  0.1  0.8 277884 20372 ?        S    12:42   0:02  \_ /usr/sbin/httpd -k start
nobody    47802  0.0  0.8 277640 19776 ?        S    12:42   0:01  \_ /usr/sbin/httpd -k start
cloudw    72818  0.1  0.7 367184 19032 ?        S    13:12   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    48527  0.0  0.8 277892 20060 ?        S    12:43   0:01  \_ /usr/sbin/httpd -k start
nobody    48759  0.0  0.8 277772 20288 ?        S    12:44   0:01  \_ /usr/sbin/httpd -k start
cloudw    70392  0.0  0.7 367184 19108 ?        S    13:09   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    50251  0.0  0.8 277904 19884 ?        S    12:45   0:00  \_ /usr/sbin/httpd -k start
cloudw    73601  0.2  0.7 367184 19028 ?        S    13:13   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    50669  0.0  0.8 277896 20376 ?        S    12:46   0:01  \_ /usr/sbin/httpd -k start
cloudw    70801  0.0  0.7 367184 19028 ?        S    13:10   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    55196  0.1  0.8 278256 20460 ?        S    12:52   0:01  \_ /usr/sbin/httpd -k start
cloudw    74131  0.6  0.7 367184 19032 ?        S    13:14   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    60272  0.1  0.8 277868 20056 ?        S    12:58   0:01  \_ /usr/sbin/httpd -k start
nobody    60287  0.0  0.8 277592 19620 ?        S    12:58   0:00  \_ /usr/sbin/httpd -k start
cloudw    72620  0.1  0.7 367184 19028 ?        S    13:12   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    61118  0.0  0.8 277736 19580 ?        S    12:59   0:00  \_ /usr/sbin/httpd -k start
nobody    61503  0.1  0.7 277760 19256 ?        S    12:59   0:01  \_ /usr/sbin/httpd -k start
nobody    61529  0.0  0.8 278196 19952 ?        S    12:59   0:00  \_ /usr/sbin/httpd -k start
cloudw    74321  0.9  0.6 366248 16792 ?        S    13:14   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    62813  0.0  0.8 277760 19476 ?        S    13:01   0:00  \_ /usr/sbin/httpd -k start
nobody    64695  0.1  0.7 277508 18892 ?        S    13:02   0:00  \_ /usr/sbin/httpd -k start
nobody    67149  0.1  0.7 277760 19156 ?        S    13:05   0:00  \_ /usr/sbin/httpd -k start
cloudw    71225  0.0  0.7 367184 19028 ?        S    13:10   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    67729  0.0  0.7 277892 18476 ?        S    13:06   0:00  \_ /usr/sbin/httpd -k start
cloudw    72297  0.1  0.7 367184 19028 ?        S    13:12   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    68641  0.0  0.7 277496 18592 ?        S    13:07   0:00  \_ /usr/sbin/httpd -k start
nobody    69321  0.0  0.8 277940 19440 ?        S    13:08   0:00  \_ /usr/sbin/httpd -k start
cloudw    71758  0.0  0.7 367184 19032 ?        S    13:11   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    69361  0.1  0.8 278100 19764 ?        S    13:08   0:00  \_ /usr/sbin/httpd -k start
nobody    69362  0.0  0.7 277480 18540 ?        S    13:08   0:00  \_ /usr/sbin/httpd -k start
cloudw    71955  0.1  0.7 367184 19032 ?        S    13:11   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    69438  0.1  0.7 277480 18980 ?        S    13:08   0:00  \_ /usr/sbin/httpd -k start
nobody    69624  0.0  0.7 277884 18544 ?        S    13:08   0:00  \_ /usr/sbin/httpd -k start
cloudw    73111  0.1  0.7 367184 19032 ?        S    13:13   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    69723  0.1  0.7 277760 18892 ?        S    13:08   0:00  \_ /usr/sbin/httpd -k start
nobody    70170  0.0  0.7 277760 18392 ?        S    13:09   0:00  \_ /usr/sbin/httpd -k start
cloudw    71030  0.0  0.7 367184 19028 ?        S    13:10   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    70474  0.1  0.7 277912 18700 ?        S    13:09   0:00  \_ /usr/sbin/httpd -k start
nobody    70827  0.0  0.7 277760 18392 ?        S    13:10   0:00  \_ /usr/sbin/httpd -k start
cloudw    71521  0.0  0.7 367184 19032 ?        S    13:11   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    72501  0.1  0.7 277892 18892 ?        S    13:12   0:00  \_ /usr/sbin/httpd -k start
nobody    73128  0.1  0.7 277760 17680 ?        S    13:13   0:00  \_ /usr/sbin/httpd -k start
cloudw    73908  0.3  0.7 367184 19032 ?        S    13:14   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    73147  0.1  0.7 277892 18584 ?        S    13:13   0:00  \_ /usr/sbin/httpd -k start
nobody    73148  0.0  0.7 277744 18024 ?        S    13:13   0:00  \_ /usr/sbin/httpd -k start
nobody    73194  0.1  0.7 277760 18916 ?        S    13:13   0:00  \_ /usr/sbin/httpd -k start
nobody    73225  0.0  0.7 277348 17828 ?        S    13:13   0:00  \_ /usr/sbin/httpd -k start
cloudw    73386  0.2  0.7 367184 19032 ?        S    13:13   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    73233  0.1  0.7 277892 18544 ?        S    13:13   0:00  \_ /usr/sbin/httpd -k start
root       2014  0.0  0.4 182880 10756 ?        Ss   09:40   0:12 lfd - sleeping
oysipao+  18294  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+  18303  0.0  0.0   3152    36 ?        S    10:01   0:00  \_ [kworker]
root      56404  0.0  4.8 248036 117144 ?       Ss   10:49   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      64340  0.0  5.2 260788 127804 ?       S    11:00   0:00  \_ spamd child
root      64341  0.0  4.8 248036 116460 ?       S    11:00   0:00  \_ spamd child
## mysql stats
Uptime: 34586  Threads: 3  Questions: 937724  Slow queries: 0  Opens: 5499  Flush tables: 1  Open tables: 2000  Queries per second avg: 27.112
*************************** 1. row ***************************
     Id: 15234
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 15236
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 15245
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.145.187 TIME_WAIT
      1 142.44.225.82 TIME_WAIT
      1 170.106.35.137 TIME_WAIT
      1 195.40.31.108 TIME_WAIT
      1 ::1 TIME_WAIT
      1 45.145.213.167 TIME_WAIT
      1 74.7.228.17 TIME_WAIT
      1 74.7.228.53 TIME_WAIT
      1 95.108.213.250 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
    361 98.80.4.116 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 13:15:02 WAT
   Restart Time: Thursday, 20-Nov-2025 03:38:40 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 9 hours 36 minutes 21 seconds
   Server load: 0.15 0.26 0.36
   Total accesses: 67320 - Total Traffic: 1.6 GB - Total Duration: 115225895
   CPU Usage: u17.75 s7.97 cu857.68 cs674.81 - 4.51% CPU load
   1.95 requests/sec - 49.4 kB/second - 25.4 kB/request - 1711.61 ms/request
   24 requests currently being processed, 0 workers gracefully restarting, 10 idle workers

._LLW_W_KWWLWKKL_L_LL_L..W.K..__WLKW_LK_........................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur    Conn  Child  Slot     Client      Protocol            VHost                                        Request
   0-0  -     0/0/3165   . 0.00  92    0   2855490  0.0   0.00  91.40 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   1-0  62813 0/128/3183 _ 3.48  0     5   46205657 0.0   3.33  81.27 98.80.4.116     http/1.1
   2-0  47802 1/267/3054 L 6.85  133   0   3446503  5.3   6.29  84.40 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343433
   3-0  70827 1/18/3548  L 0.39  233   0   2843144  5.3   0.45  83.23 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343432
   4-0  69624 0/26/3261  W 0.55  113   0   2212751  0.0   0.59  81.75 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343433
   5-0  60272 0/216/3286 _ 5.47  0     394 1997374  0.0   5.05  73.47 98.80.4.116     http/1.1
   6-0  72501 0/41/2864  W 0.98  0     0   2727744  0.0   1.04  71.90 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   7-0  61118 0/167/3117 _ 3.94  0     17  2709167  0.0   5.48  80.86 98.80.4.116     http/1.1
   8-0  43239 3/581/2882 K 15.54 0     402 2145543  95.6  15.69 92.85 192.178.4.98    http/1.1 team.cloudware.ng:443       GET /?l=661037828 HTTP/1.1
   9-0  50251 0/185/3052 W 4.54  73    0   3300282  0.0   3.82  72.52 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343434
   10-0 61503 0/178/2808 W 4.89  0     0   2612405  0.0   4.87  67.67 192.178.4.103   http/1.1 team.cloudware.ng:443       GET /?l=4154146775 HTTP/1.1
   11-0 67149 1/102/2915 L 2.62  253   0   1932957  5.3   2.68  65.49 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343432
   12-0 73128 0/23/2759  W 0.64  53    0   2665033  0.0   0.70  66.97 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343434
   13-0 73147 1/34/2314  K 0.78  0     416 2446683  34.5  0.79  56.75 192.178.4.100   http/1.1 team.cloudware.ng:443       GET /?l=525899742 HTTP/1.1
   14-0 47448 3/428/2417 K 10.52 1     392 2496270  98.0  9.92  63.69 192.178.4.96    http/1.1 team.cloudware.ng:443       GET /?l=1676949754 HTTP/1.1
   15-0 67729 1/13/2319  L 0.42  173   0   2270134  5.3   0.22  53.57 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343433
   16-0 48527 0/269/2137 _ 6.91  0     0   2947912  0.0   6.49  52.60 98.80.4.116     http/1.1
   17-0 48759 1/287/2005 L 6.41  313   0   2291002  5.3   8.44  53.04 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343431
   18-0 68641 0/50/2277  _ 1.04  0     26  2298706  0.0   0.83  45.64 98.80.4.116     http/1.1
   19-0 50669 1/315/2572 L 6.95  293   0   1590943  5.3   6.93  56.02 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343432
   20-0 69321 1/81/2075  L 1.86  213   0   2141102  5.3   1.62  47.08 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343432
   21-0 69723 0/94/1585  _ 2.51  0     360 1338957  0.0   2.88  35.81 98.80.4.116     http/1.1
   22-0 70170 1/16/1431  L 0.25  273   0   1877606  5.3   0.33  34.57 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343432
   23-0 -     0/0/797    . 0.00  78    0   1654760  0.0   0.00  19.11 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   24-0 -     0/0/952    . 0.00  89    0   1748279  0.0   0.00  23.43 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   25-0 55196 0/274/821  W 6.25  33    0   1039296  0.0   6.88  20.89 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343434
   26-0 -     0/0/189    . 0.00  58    0   1374226  0.0   0.00  4.60  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   27-0 73148 1/2/573    K 0.01  4     281 1558971  34.0  0.04  15.53 192.178.4.105   http/1.1 team.cloudware.ng:443       GET /?l=3417036878 HTTP/1.1
   28-0 -     0/0/410    . 0.00  22    0   1495802  0.0   0.00  9.89  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   29-0 -     0/0/697    . 0.00  41    0   987614   0.0   0.00  18.16 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   30-0 73194 0/28/261   _ 0.83  0     257 756871   0.0   0.64  5.38  98.80.4.116     http/1.1
   31-0 70474 0/53/212   _ 1.33  0     25  734816   0.0   1.37  4.72  98.80.4.116     http/1.1
   32-0 73225 0/2/251    W 0.00  93    0   773609   0.0   0.02  6.16  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343434
   33-0 60287 1/155/161  L 4.08  153   0   727623   5.3   3.84  3.88  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343433
   34-0 64695 14/134/175 K 3.43  2     403 1379137  431.5 3.35  4.31  192.178.4.97    http/1.1 team.cloudware.ng:443       GET /?l=917491009 HTTP/1.1
   35-0 61529 0/70/74    W 1.69  13    0   1308844  0.0   1.51  1.60  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343434
   36-0 69361 0/85/87    _ 1.47  0     397 29586    0.0   1.83  1.86  98.80.4.116     http/1.1
   37-0 69362 1/30/38    L 1.30  193   0   13647    5.3   0.48  0.67  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343433
   38-0 73233 5/34/79    K 1.07  4     359 27771    156.0 0.88  1.59  192.178.4.102   http/1.1 team.cloudware.ng:443       GET /?l=2633527782 HTTP/1.1
   39-0 69438 0/81/83    _ 1.81  0     27  37708    0.0   1.86  1.89  98.80.4.116     http/1.1
   40-0 -     0/0/28     . 0.00  57    0   15783    0.0   0.00  0.75  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   41-0 -     0/0/3      . 0.00  34349 0   840      0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   42-0 -     0/0/227    . 0.00  33455 0   110452   0.0   0.00  5.70  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   43-0 -     0/0/9      . 0.00  34352 0   4927     0.0   0.00  0.24  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   44-0 -     0/0/154    . 0.00  33830 0   84969    0.0   0.00  4.58  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   45-0 -     0/0/13     . 0.00  34319 0   6975     0.0   0.00  0.32  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1038
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 8 seconds, (range: 0...21)
   index usage: 18%, cache usage: 24%
   total entries stored since starting: 41465
   total entries replaced since starting: 0
   total entries expired since starting: 40413
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 24 hit, 68 miss
   total removes since starting: 14 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit