403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.13.42.txt
 ## swap threshold exceeded
## server overview
2025-11-20.13.42 load[0] mem[65/66] mysql[3/9] httpd[28]
              total        used        free      shared  buff/cache   available
Mem:           2363        1482         137          61         744         655
Swap:          1999        1495         504
 13:42:01 up  4:01,  0 users,  load average: 0.12, 0.19, 0.29
## system overview
top - 13:42:02 up  4:01,  0 users,  load average: 0.12, 0.19, 0.29
Tasks: 226 total,   5 running, 220 sleeping,   0 stopped,   1 zombie
%Cpu(s): 54.5 us, 24.2 sy,  0.0 ni, 21.2 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   133492 free,  1524584 used,   762224 buff/cache
KiB Swap:  2047996 total,   516348 free,  1531648 used.   663852 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1793 mysql     20   0 1463376 231932   3028 S 100.0  9.6   3:15.66 /usr/sbin+
 96088 nigeria   20   0  404052  16136  10380 S  18.8  0.7   0:00.05 /opt/cpan+
 96111 cloudsms  20   0  404052  15612  10164 S   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44268   3340   1484 S   0.0  0.1   0:21.47 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.81 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.72 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:15.90 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.68 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.79 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:19.66 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.37 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.87 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:02.12 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.86 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   3244   3008 S   0.0  0.1   0:08.91 /usr/lib/+
   387 root      20   0   45352    252    248 S   0.0  0.0   0:00.38 /usr/lib/+
   410 root      16  -4   55532    524    396 S   0.0  0.0   0:01.51 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0   24712   1180    836 S   0.0  0.0   0:03.48 /usr/lib/+
   471 root      20   0   52852    416    312 S   0.0  0.0   0:00.01 /usr/sbin+
   474 dbus      20   0   58644   1412    680 S   0.0  0.1   0:07.91 /usr/bin/+
   476 rpc       20   0   69256     72     12 S   0.0  0.0   0:00.01 /sbin/rpc+
   486 polkitd   20   0  612240   1088    740 S   0.0  0.0   0:02.12 /usr/lib/+
   487 root      20   0   21540    408    320 S   0.0  0.0   0:00.31 /usr/sbin+
   492 root      20   0  152780    248    204 S   0.0  0.0   0:00.01 /usr/sbin+
   493 root      20   0  224280   5440   1028 S   0.0  0.2   0:00.30 queueproc+
   507 nscd      20   0  928956   1384    712 S   0.0  0.1   0:12.07 /usr/sbin+
   515 root      20   0  195208     68     68 S   0.0  0.0   0:00.00 /usr/sbin+
   516 root      20   0    4388    156    152 S   0.0  0.0   0:00.00 /usr/sbin+
   543 root      20   0   24208    164    140 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0  124480    520    388 S   0.0  0.0   0:00.43 /usr/sbin+
   562 root      20   0  108296    180    176 S   0.0  0.0   0:00.00 /sbin/age+
   563 root      20   0  114704    180    180 S   0.0  0.0   0:00.02 /bin/bash
   613 mailnull  20   0   89116   3848    916 S   0.0  0.2   0:00.38 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   675 root       0 -20       0      0      0 S   0.0  0.0   0:02.60 [loop0]
   735 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   736 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   931 root      20   0  153404    396    316 S   0.0  0.0   0:00.29 pure-ftpd+
   932 root      20   0  572372   1052    480 S   0.0  0.0   0:01.31 /usr/bin/+
   933 systuser  20   0  112268     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   935 systuser  20   0  114016  15056   2292 S   0.0  0.6   0:03.76 /usr/loca+
   936 root      20   0 1277056   6144    164 S   0.0  0.3   0:21.14 /usr/bin/+
   937 root      20   0  445028   1384   1272 S   0.0  0.1   0:00.59 sw-engine+
   938 systuser  20   0   11796     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.01 /usr/loca+
   942 root      20   0  111304    544    436 S   0.0  0.0   0:02.14 /usr/sbin+
   943 systuser  20   0   11348     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   944 root      20   0 1349832   8612    128 S   0.0  0.4   0:28.15 /usr/bin/+
   945 root      20   0   51508    612    428 S   0.0  0.0   0:00.22 /usr/sbin+
   946 telegraf  20   0 5654304  36544   5948 S   0.0  1.5   0:08.24 /usr/loca+
   947 memcach+  20   0  342400    232    232 S   0.0  0.0   0:00.32 /usr/bin/+
   948 root      20   0 1763312 240572    860 S   0.0  9.9   0:14.99 /usr/loca+
   949 root      20   0  389508    500    408 S   0.0  0.0   0:00.45 php-fpm: +
   950 root      20   0  261160   7056   2080 S   0.0  0.3   0:02.83 cpsrvd (S+
   953 root      20   0  388892    756    552 S   0.0  0.0   0:00.40 php-fpm: +
   958 root      20   0  265552   3500   2668 S   0.0  0.1   0:04.52 /usr/sbin+
   986 root      20   0  396248    516    424 S   0.0  0.0   0:00.41 php-fpm: +
   990 root      20   0  439788   1176   1084 S   0.0  0.0   0:00.51 php-fpm: +
   994 root      20   0  400740   3092    712 S   0.0  0.1   0:02.03 php-fpm: +
   996 named     20   0 1186868  37248   1716 S   0.0  1.5   0:09.51 /usr/sbin+
  1013 cpanelc+  20   0   10580   3676   2412 S   0.0  0.2   0:11.61 /usr/loca+
  1093 dovenull  20   0   47424   3088   2092 S   0.0  0.1   0:00.28 dovecot/p+
  1094 dovenull  20   0   48176   3460   1972 S   0.0  0.1   0:00.27 dovecot/i+
  1095 dovecot   20   0   10320    292    176 S   0.0  0.0   0:00.06 dovecot/a+
  1096 root      20   0   10452    488    308 S   0.0  0.0   0:00.17 dovecot/l+
  1097 dovenull  20   0   47308   3000   2068 S   0.0  0.1   0:00.22 dovecot/p+
  1098 dovenull  20   0   47996   3292   1928 S   0.0  0.1   0:00.24 dovecot/i+
  1104 root      20   0   24528   2632    548 S   0.0  0.1   0:00.12 dovecot/c+
  1110 dovecot   20   0   13568    624    424 S   0.0  0.0   0:00.04 dovecot/s+
  1145 systuser  20   0  157704   3068   1092 S   0.0  0.1   0:00.09 SonarPush+
  1170 dovecot   20   0   41192   1564   1048 S   0.0  0.1   0:00.53 dovecot/a+
  1175 wp-tool+  20   0  412368  27512   1612 S   0.0  1.1   0:04.74 /usr/bin/+
  1176 wp-tool+  20   0  387528   8692   1560 S   0.0  0.4   0:00.20 /usr/bin/+
  1234 root      20   0  167452   1316    772 S   0.0  0.1   0:00.24 dnsadmin +
  1235 root      20   0  262228  24356   6620 S   0.0  1.0   0:02.42 cpdavd - +
  1237 root      20   0  209316  19940   2536 S   0.0  0.8   0:01.93 tailwatchd
  1669 root      20   0  299272    604    440 S   0.0  0.0   0:00.38 php-fpm: +
  1701 root      38  18  130416   1396    720 S   0.0  0.1   0:00.04 cpanellog+
  1959 root      20   0  266992   7380    740 S   0.0  0.3   0:01.25 /usr/sbin+
  1962 root      20   0   12808    400    296 S   0.0  0.0   0:01.72 /usr/loca+
  1963 root      20   0   12732    368    292 S   0.0  0.0   0:01.47 /usr/loca+
  1964 root      20   0   12832    420    296 S   0.0  0.0   0:01.60 /usr/loca+
  1968 root      20   0   53340    216    216 S   0.0  0.0   0:00.05 /usr/loca+
  2014 root      20   0  183096  10996   1168 S   0.0  0.5   0:13.35 lfd - sle+
 18294 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 18303 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.24 [kworker]
 47448 nobody    20   0  277884  20808   4984 S   0.0  0.9   0:03.87 /usr/sbin+
 50669 nobody    20   0  277896  20552   4976 S   0.0  0.8   0:02.48 /usr/sbin+
 56404 root      20   0  248036 117144   1060 S   0.0  4.8   0:03.97 /usr/loca+
 60287 nobody    20   0  277600  20396   4984 S   0.0  0.8   0:02.03 /usr/sbin+
 61529 nobody    20   0  278196  20544   4904 S   0.0  0.8   0:01.38 /usr/sbin+
 62813 nobody    20   0  277760  19876   4752 S   0.0  0.8   0:01.46 /usr/sbin+
 64340 root      20   0  260788 127464   2896 S   0.0  5.3   0:01.35 spamd chi+
 64341 root      20   0  248036 116460    416 S   0.0  4.8   0:00.00 spamd chi+
 65204 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 65953 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 67149 nobody    20   0  277696  19792   4852 S   0.0  0.8   0:02.21 /usr/sbin+
 68641 nobody    20   0  277504  19392   4720 S   0.0  0.8   0:01.98 /usr/sbin+
 69362 nobody    20   0  277544  19560   4600 S   0.0  0.8   0:01.14 /usr/sbin+
 69624 nobody    20   0  277884  19564   4680 S   0.0  0.8   0:00.83 /usr/sbin+
 72501 nobody    20   0  277892  20904   5072 S   0.0  0.9   0:02.30 /usr/sbin+
 73194 nobody    20   0  277704  20148   4804 S   0.0  0.8   0:01.76 /usr/sbin+
 75040 nobody    20   0  277760  19244   4608 S   0.0  0.8   0:01.04 /usr/sbin+
 75350 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 77501 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 79071 nobody    20   0  277632  19464   4572 S   0.0  0.8   0:01.00 /usr/sbin+
 79374 nobody    20   0  277796  19536   4732 S   0.0  0.8   0:00.97 /usr/sbin+
 79513 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 81100 nobody    20   0  277760  18996   4448 S   0.0  0.8   0:00.84 /usr/sbin+
 81832 nobody    20   0  277760  19140   4396 S   0.0  0.8   0:00.57 /usr/sbin+
 82577 nobody    20   0  277760  19472   4668 S   0.0  0.8   0:01.09 /usr/sbin+
 83977 nobody    20   0  277760  19368   4712 S   0.0  0.8   0:01.05 /usr/sbin+
 88612 nobody    20   0  277756  19220   4256 S   0.0  0.8   0:00.28 /usr/sbin+
 88633 nobody    20   0  277768  19388   4476 S   0.0  0.8   0:00.39 /usr/sbin+
 88934 nobody    20   0  277900  18880   4356 S   0.0  0.8   0:00.81 /usr/sbin+
 88935 nobody    20   0  277760  18992   4120 S   0.0  0.8   0:00.28 /usr/sbin+
 89033 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 89869 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 90012 nobody    20   0  277892  18964   4052 S   0.0  0.8   0:00.21 /usr/sbin+
 90023 nobody    20   0  277496  18276   3932 S   0.0  0.8   0:00.22 /usr/sbin+
 91646 nobody    20   0  277892  18396   3908 S   0.0  0.8   0:00.21 /usr/sbin+
 91663 nobody    20   0  277892  18808   4340 S   0.0  0.8   0:00.28 /usr/sbin+
 92039 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 92189 nobody    20   0  277488  18380   3952 S   0.0  0.8   0:00.42 /usr/sbin+
 92376 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 92612 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 92768 nobody    20   0  277884  18200   3792 S   0.0  0.8   0:00.04 /usr/sbin+
 92798 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 92910 nobody    20   0  277760  18560   4116 S   0.0  0.8   0:00.44 /usr/sbin+
 92996 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 93208 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 93446 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 93728 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 93897 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 94034 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 94245 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 94431 nobody    20   0  277760  18544   4040 S   0.0  0.8   0:00.23 /usr/sbin+
 94448 nobody    20   0  277324  17092   3216 S   0.0  0.7   0:00.00 /usr/sbin+
 94449 nobody    20   0  277760  18232   3844 S   0.0  0.8   0:00.30 /usr/sbin+
 94461 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 94826 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 95020 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 95031 nobody    20   0  277760  18312   3888 S   0.0  0.8   0:00.20 /usr/sbin+
 95212 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 95424 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 95454 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 95527 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 95738 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 95902 nigeria   20   0  400460   5568   2324 S   0.0  0.2   0:00.00 php-fpm: +
 95906 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 95917 cloudw    20   0  366248  17056  11084 R   0.0  0.7   0:00.13 /opt/cpan+
 95977 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 96023 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 96025 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 96026 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 96027 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 96028 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 96029 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 96030 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 96032 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 96033 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 96034 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 96035 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 96037 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 96039 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 96045 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 96046 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 96052 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 96057 cloudw    20   0  353712  15972  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 96058 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 96059 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 96060 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 96061 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 96062 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 96063 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 96064 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 96065 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 96066 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 96068 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 96081 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 96085 pactpay   20   0  480124  16792  11088 R   0.0  0.7   0:00.01 /opt/cpan+
 96086 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 96107 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 96109 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 96110 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 96113 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 96114 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 96115 cloudsms  20   0  113284    384    200 R   0.0  0.0   0:00.00 /usr/loca+
100665 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:40   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:40   0:15  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:40   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:40   0:19  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   09:40   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kvm-irqfd-clean]
root        675  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [loop0]
root        735  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/loop0-8]
root        736  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root     100665  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/u200:2]
root      65204  0.0  0.0      0     0 ?        S    13:03   0:00  \_ [kworker/u200:0]
root      65953  0.0  0.0      0     0 ?        S    13:04   0:00  \_ [kworker/1:4]
root      75350  0.0  0.0      0     0 ?        S    13:16   0:00  \_ [kworker/0:1]
root      77501  0.0  0.0      0     0 ?        S    13:19   0:00  \_ [kworker/1:0]
root      79513  0.0  0.0      0     0 ?        S    13:21   0:00  \_ [kworker/0:3]
root      89033  0.0  0.0      0     0 ?        S    13:33   0:00  \_ [kworker/0:0]
root      89869  0.0  0.0      0     0 ?        S    13:34   0:00  \_ [kworker/1:1]
root      92996  0.0  0.0      0     0 ?        S    13:38   0:00  \_ [kworker/0:2]
root      93897  0.0  0.0      0     0 ?        S    13:39   0:00  \_ [kworker/0:4]
root      95424  0.0  0.0      0     0 ?        S    13:41   0:00  \_ [kworker/1:2]
root      95454  0.0  0.0      0     0 ?        S    13:41   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44268  3340 ?        Ss   09:40   0:21 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.1  40244  3244 ?        Ss   09:40   0:08 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   252 ?        Ss   09:40   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   524 ?        S<sl 09:40   0:01 /sbin/auditd
root        470  0.0  0.0  24712  1180 ?        Ss   09:40   0:03 /usr/lib/systemd/systemd-logind
root        471  0.0  0.0  52852   416 ?        Ss   09:40   0:00 /usr/sbin/smartd -n -q never
dbus        474  0.0  0.0  58644  1412 ?        Ss   09:40   0:07 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         476  0.0  0.0  69256    72 ?        Ss   09:40   0:00 /sbin/rpcbind -w
polkitd     486  0.0  0.0 612240  1088 ?        Ssl  09:40   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        487  0.0  0.0  21540   408 ?        Ss   09:40   0:00 /usr/sbin/irqbalance --foreground
root        492  0.0  0.0 152780   248 ?        Ss   09:40   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        493  0.0  0.2 224280  5440 ?        Ss   09:40   0:00 queueprocd - waiting up to 60s to process a task
nscd        507  0.0  0.0 928956  1384 ?        Ssl  09:40   0:12 /usr/sbin/nscd
root        515  0.0  0.0 195208    68 ?        Ssl  09:40   0:00 /usr/sbin/gssproxy -D
root        516  0.0  0.0   4388   156 ?        Ss   09:40   0:00 /usr/sbin/acpid
root        543  0.0  0.0  24208   164 ?        Ss   09:40   0:00 /usr/sbin/atd -f
root        545  0.0  0.0 124480   520 ?        Ss   09:40   0:00 /usr/sbin/crond -n
root      96023  0.0  0.0 183048  2156 ?        S    13:42   0:00  \_ /usr/sbin/CROND -n
root      96039  0.0  0.0 113284  1208 ?        Ss   13:42   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      96045  0.0  0.0 108052   360 ?        S    13:42   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      96046  0.0  0.0 113288  1516 ?        S    13:42   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      96116  0.0  0.0 153840  2096 ?        R    13:42   0:00  |               \_ ps auxf
root      96025  0.0  0.0 183048  2156 ?        S    13:42   0:00  \_ /usr/sbin/CROND -n
root      96065  0.0  0.0  20164   804 ?        Ss   13:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      96026  0.0  0.0 183048  2156 ?        S    13:42   0:00  \_ /usr/sbin/CROND -n
root      96059  0.0  0.0  20164   808 ?        Ss   13:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      96027  0.0  0.0 183048  2156 ?        S    13:42   0:00  \_ /usr/sbin/CROND -n
root      96063  0.0  0.0  20164   808 ?        Ss   13:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      96028  0.0  0.0 183048  2156 ?        S    13:42   0:00  \_ /usr/sbin/CROND -n
root      96058  0.0  0.0  20164   804 ?        Ss   13:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      96029  0.0  0.0 183048  2152 ?        S    13:42   0:00  \_ /usr/sbin/CROND -n
root      96052  0.0  0.0  20164   984 ?        Ss   13:42   0:00  |   \_ jailshell (cloudsms) [96109] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  96109  0.0  0.0      0     0 ?        D    13:42   0:00  |       \_ [jailshell]
root      96030  0.0  0.0 183048  2152 ?        S    13:42   0:00  \_ /usr/sbin/CROND -n
root      96066  0.0  0.0  20164   988 ?        Ss   13:42   0:00  |   \_ jailshell (cloudsms) [96113] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  96113  0.0  0.0  20164   264 ?        S    13:42   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  96114  0.0  0.0 113284  1212 ?        S    13:42   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  96115  0.0  0.3 310036  7468 ?        R    13:42   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue.php
root      96032  0.0  0.0 183048  2148 ?        S    13:42   0:00  \_ /usr/sbin/CROND -n
root      96068  0.0  0.0  20164   804 ?        Ss   13:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      96033  0.0  0.0 183048  2148 ?        S    13:42   0:00  \_ /usr/sbin/CROND -n
root      96061  0.0  0.0  20164   808 ?        Ss   13:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      96034  0.0  0.0 183048  2148 ?        S    13:42   0:00  \_ /usr/sbin/CROND -n
root      96060  0.0  0.0  20164   808 ?        Ss   13:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      96035  0.0  0.0 183048  2144 ?        S    13:42   0:00  \_ /usr/sbin/CROND -n
root      96062  0.0  0.0  20164   968 ?        Ss   13:42   0:00  |   \_ jailshell (pactpay) [96081] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   96081  0.0  0.0  20164   260 ?        S    13:42   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   96085  0.0  0.7 480124 17320 ?        R    13:42   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      96037  0.0  0.0 183048  2144 ?        S    13:42   0:00  \_ /usr/sbin/CROND -n
root      96064  0.0  0.0  20164   968 ?        Ss   13:42   0:00      \_ jailshell (nigeria) [96086] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   96086  0.0  0.0  20164   260 ?        S    13:42   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   96088  0.0  0.6 404052 16136 ?        R    13:42   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        562  0.0  0.0 108296   180 tty1     Ss+  09:40   0:00 /sbin/agetty --noclear tty1 linux
root        563  0.0  0.0 114704   180 ttyS0    Ss+  09:40   0:00 /bin/bash
mailnull    613  0.0  0.1  89116  3848 ?        Ss   09:40   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        931  0.0  0.0 153404   396 ?        Ss   09:40   0:00 pure-ftpd (SERVER)
root        932  0.0  0.0 572372  1052 ?        Ssl  09:40   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    933  0.0  0.0 112268    56 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.6 114016 15056 ?        Ssl  09:40   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        936  0.1  0.2 1277056 6144 ?        Ssl  09:40   0:21 /usr/bin/checkstatus
root        937  0.0  0.0 445028  1384 ?        Ss   09:40   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  95906  0.0  0.0 445028   320 ?        S    13:41   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    938  0.0  0.0  11796    32 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    939  0.0  0.0 111608    60 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        942  0.0  0.0 111304   544 ?        Ss   09:40   0:02 /usr/sbin/sshd -D
systuser    943  0.0  0.0  11348    24 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        944  0.1  0.3 1349832 8612 ?        Ssl  09:40   0:28 /usr/bin/cspdaemon
root        945  0.0  0.0  51508   612 ?        Ss   09:40   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1093  0.0  0.1  47424  3088 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1094  0.0  0.1  48176  3460 ?        S    09:40   0:00  \_ dovecot/imap-login
dovecot    1095  0.0  0.0  10320   292 ?        S    09:40   0:00  \_ dovecot/anvil
root       1096  0.0  0.0  10452   488 ?        S    09:40   0:00  \_ dovecot/log
dovenull   1097  0.0  0.1  47308  3000 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47996  3292 ?        S    09:40   0:00  \_ dovecot/imap-login
root       1104  0.0  0.1  24528  2632 ?        S    09:40   0:00  \_ dovecot/config
dovecot    1110  0.0  0.0  13568   624 ?        S    09:40   0:00  \_ dovecot/stats
dovecot    1170  0.0  0.0  41192  1564 ?        S    09:40   0:00  \_ dovecot/auth
telegraf    946  0.0  1.5 5654304 36544 ?       SLsl 09:40   0:08 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    947  0.0  0.0 342400   232 ?        Ssl  09:40   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        948  0.1  9.9 1763312 240572 ?      Ssl  09:40   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        949  0.0  0.0 389508   500 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        950  0.0  0.2 261160  7056 ?        Ss   09:40   0:02 cpsrvd (SSL) - waiting for connections                   
root      95977  0.0  0.0      0     0 ?        Z    13:41   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.0 388892   756 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        958  0.0  0.1 265552  3500 ?        Ssl  09:40   0:04 /usr/sbin/rsyslogd -n
root        986  0.0  0.0 396248   516 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        990  0.0  0.0 439788  1176 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        994  0.0  0.1 400740  3092 ?        Ss   09:40   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   95902  0.0  0.2 400460  5568 ?        S    13:41   0:00  \_ php-fpm: pool nigeriadecide_org
named       996  0.0  1.5 1186868 37248 ?       Ssl  09:40   0:09 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
cpanelc+   1013  0.0  0.1  10580  3676 ?        Rs   09:40   0:11 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1145  0.0  0.1 157704  3068 ?        S    09:40   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1175  0.0  1.1 412368 27512 ?        Ss   09:40   0:04 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1176  0.0  0.3 387528  8692 ?        Ss   09:40   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1234  0.0  0.0 167452  1316 ?        Ss   09:40   0:00 dnsadmin - dormant mode
root       1235  0.0  1.0 262228 24356 ?        Ss   09:40   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1237  0.0  0.8 209316 19940 ?        Ss   09:40   0:01 tailwatchd
root       1669  0.0  0.0 299272   604 ?        Ss   09:40   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1701  0.0  0.0 130416  1396 ?        SN   09:40   0:00 cpanellogd - sleeping for logs
mysql      1793  1.3  9.5 1463376 231932 ?      Sl   09:40   3:15 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1959  0.0  0.3 266992  7380 ?        Ss   09:40   0:01 /usr/sbin/httpd -k start
root       1962  0.0  0.0  12808   400 ?        S    09:40   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1963  0.0  0.0  12732   368 ?        S    09:40   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1964  0.0  0.0  12832   420 ?        S    09:40   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1968  0.0  0.0  53340   216 ?        S    09:40   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    47448  0.1  0.8 277884 20808 ?        S    12:42   0:03  \_ /usr/sbin/httpd -k start
cloudw    93446  0.0  0.7 367184 19028 ?        S    13:38   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    50669  0.0  0.8 277896 20552 ?        S    12:46   0:02  \_ /usr/sbin/httpd -k start
cloudw    95738  0.6  0.7 367184 19028 ?        S    13:41   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    60287  0.0  0.8 277600 20396 ?        S    12:58   0:02  \_ /usr/sbin/httpd -k start
cloudw    95020  0.2  0.7 367184 19032 ?        S    13:40   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    61529  0.0  0.8 278196 20544 ?        S    12:59   0:01  \_ /usr/sbin/httpd -k start
cloudw    94826  0.1  0.7 367184 19032 ?        S    13:40   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    62813  0.0  0.8 277760 19876 ?        S    13:01   0:01  \_ /usr/sbin/httpd -k start
cloudw    93728  0.1  0.7 367184 19032 ?        S    13:38   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    67149  0.1  0.8 277696 19792 ?        S    13:05   0:02  \_ /usr/sbin/httpd -k start
nobody    68641  0.0  0.8 277504 19392 ?        S    13:07   0:01  \_ /usr/sbin/httpd -k start
nobody    69362  0.0  0.8 277544 19560 ?        S    13:08   0:01  \_ /usr/sbin/httpd -k start
nobody    69624  0.0  0.8 277884 19564 ?        S    13:08   0:00  \_ /usr/sbin/httpd -k start
nobody    72501  0.1  0.8 277892 20904 ?        S    13:12   0:02  \_ /usr/sbin/httpd -k start
nobody    73194  0.1  0.8 277704 20148 ?        S    13:13   0:01  \_ /usr/sbin/httpd -k start
cloudw    92612  0.0  0.7 367184 19028 ?        S    13:37   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    75040  0.0  0.7 277760 19244 ?        S    13:15   0:01  \_ /usr/sbin/httpd -k start
nobody    79071  0.0  0.8 277632 19464 ?        S    13:20   0:01  \_ /usr/sbin/httpd -k start
cloudw    92039  0.0  0.7 367184 19028 ?        S    13:36   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    79374  0.0  0.8 277796 19536 ?        S    13:21   0:00  \_ /usr/sbin/httpd -k start
nobody    81100  0.0  0.7 277760 18996 ?        S    13:23   0:00  \_ /usr/sbin/httpd -k start
cloudw    92376  0.0  0.7 367184 19028 ?        S    13:37   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    81832  0.0  0.7 277760 19140 ?        S    13:24   0:00  \_ /usr/sbin/httpd -k start
nobody    82577  0.1  0.8 277760 19472 ?        S    13:25   0:01  \_ /usr/sbin/httpd -k start
nobody    83977  0.1  0.8 277760 19368 ?        S    13:27   0:01  \_ /usr/sbin/httpd -k start
cloudw    94034  0.1  0.7 367184 19028 ?        S    13:39   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    88612  0.0  0.7 277756 19220 ?        S    13:32   0:00  \_ /usr/sbin/httpd -k start
cloudw    95917  1.0  0.7 366248 17056 ?        R    13:41   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    88633  0.0  0.8 277768 19388 ?        S    13:32   0:00  \_ /usr/sbin/httpd -k start
nobody    88934  0.1  0.7 277900 18880 ?        S    13:33   0:00  \_ /usr/sbin/httpd -k start
cloudw    96057  0.0  0.6 353712 15972 ?        S    13:42   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    88935  0.0  0.7 277760 18992 ?        S    13:33   0:00  \_ /usr/sbin/httpd -k start
cloudw    95527  0.3  0.7 367184 19028 ?        S    13:41   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    90012  0.0  0.7 277892 18964 ?        S    13:34   0:00  \_ /usr/sbin/httpd -k start
nobody    90023  0.0  0.7 277496 18276 ?        S    13:34   0:00  \_ /usr/sbin/httpd -k start
nobody    91646  0.0  0.7 277892 18396 ?        S    13:36   0:00  \_ /usr/sbin/httpd -k start
cloudw    92798  0.0  0.7 367184 19032 ?        S    13:37   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    91663  0.0  0.7 277892 18808 ?        S    13:36   0:00  \_ /usr/sbin/httpd -k start
cloudw    94245  0.1  0.7 367184 19032 ?        S    13:39   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    92189  0.1  0.7 277488 18380 ?        S    13:37   0:00  \_ /usr/sbin/httpd -k start
cloudw    95212  0.2  0.7 367184 19032 ?        S    13:40   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    92768  0.0  0.7 277884 18200 ?        S    13:37   0:00  \_ /usr/sbin/httpd -k start
cloudw    93208  0.0  0.7 367184 19032 ?        S    13:38   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    92910  0.1  0.7 277760 18560 ?        S    13:38   0:00  \_ /usr/sbin/httpd -k start
nobody    94431  0.1  0.7 277760 18544 ?        S    13:39   0:00  \_ /usr/sbin/httpd -k start
nobody    94448  0.0  0.7 277324 17092 ?        S    13:39   0:00  \_ /usr/sbin/httpd -k start
cloudw    94461  0.1  0.7 367184 19032 ?        S    13:39   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    94449  0.2  0.7 277760 18232 ?        S    13:39   0:00  \_ /usr/sbin/httpd -k start
nobody    95031  0.2  0.7 277760 18312 ?        S    13:40   0:00  \_ /usr/sbin/httpd -k start
root       2014  0.0  0.4 183096 10996 ?        Ss   09:40   0:13 lfd - sleeping
oysipao+  18294  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+  18303  0.0  0.0   3152    36 ?        S    10:01   0:00  \_ [kworker]
root      56404  0.0  4.8 248036 117144 ?       Ss   10:49   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      64340  0.0  5.2 260788 127464 ?       S    11:00   0:01  \_ spamd child
root      64341  0.0  4.8 248036 116460 ?       S    11:00   0:00  \_ spamd child
## mysql stats
Uptime: 36206  Threads: 3  Questions: 1045475  Slow queries: 0  Opens: 5805  Flush tables: 1  Open tables: 2000  Queries per second avg: 28.875
*************************** 1. row ***************************
     Id: 16964
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 16968
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 16973
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.210.140.137 TIME_WAIT
      1 104.210.140.139 TIME_WAIT
      1 114.119.132.202 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.104 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.222.95.240 TIME_WAIT
      1 68.221.67.166 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 114.119.150.65 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 185.180.141.47 TIME_WAIT
      2 185.180.141.50 TIME_WAIT
      2 185.216.73.95 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 13:42:02 WAT
   Restart Time: Thursday, 20-Nov-2025 03:38:40 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 10 hours 3 minutes 21 seconds
   Server load: 0.12 0.19 0.29
   Total accesses: 75558 - Total Traffic: 1.8 GB - Total Duration: 170977249
   CPU Usage: u22.93 s10.6 cu972.18 cs762.96 - 4.89% CPU load
   2.09 requests/sec - 53.2 kB/second - 25.5 kB/request - 2262.86 ms/request
   26 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

WLLL__WK_L_KLKLLK_KWLK.LKKW._.L..W.W._.WW.......................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur    Conn  Child  Slot     Client      Protocol            VHost                                        Request
   0-0  88612 0/46/3390  W 1.61  13    0   4252915  0.0   1.17  96.53 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343631
   1-0  62813 1/247/3302 L 7.21  193   0   48179718 5.3   6.27  84.21 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343539
   2-0  83977 1/175/3360 L 4.61  173   0   4242919  5.3   4.47  92.15 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343539
   3-0  92768 1/8/3730   L 0.13  233   0   4853096  5.3   0.15  87.74 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343538
   4-0  69624 0/143/3378 _ 4.20  0     1   4829900  0.0   4.82  85.99 192.99.6.228    http/1.1 chs1.nescrow.com.ng:80      GET /.well-known/acme-challenge/OEYCGW34SEK6ZTZ1GWJHFOY9HUKVHPR
   5-0  88633 0/67/3516  _ 1.78  0     0   2748182  0.0   1.63  79.85 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   6-0  72501 0/476/3299 W 10.01 0     0   3547910  0.0   13.60 84.46 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   7-0  94431 1/41/3371  K 0.95  0     398 4117392  37.0  1.03  87.19 192.178.4.98    http/1.1 team.cloudware.ng:443       GET /?l=2778934283 HTTP/1.1
   8-0  95031 0/30/3265  _ 0.81  0     30  3550427  0.0   0.82  99.07 128.140.8.200   http/1.1 cloudsms.com.ng:443         GET /cron/process_queue3.php HTTP/1.1
   9-0  91646 1/36/3318  L 0.92  253   0   4689429  5.3   0.92  77.88 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343538
   10-0 90012 0/35/3073  _ 1.03  0     259 4023439  0.0   0.81  74.10 185.180.141.47  http/1.1
   11-0 67149 2/360/3173 K 10.14 1     17  3993793  10.6  9.80  72.61 185.180.141.47  http/1.1 staging.cloudware.ng:443    GET /cgi-sys/suspendedpage.cgi HTTP/1.1
   12-0 94448 1/1/2899   L 0.00  133   0   4656906  5.3   0.01  70.44 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343539
   13-0 90023 3/38/2445  K 1.06  4     295 4430132  95.1  0.97  59.90 192.178.4.102   http/1.1 team.cloudware.ng:443       GET /?l=1126245067 HTTP/1.1
   14-0 47448 1/699/2688 L 17.42 213   0   3269105  5.3   16.39 70.16 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343539
   15-0 81100 1/138/2532 L 3.78  293   0   3658826  5.3   3.69  58.79 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343538
   16-0 94449 6/47/2342  K 1.31  1     343 3688935  187.6 1.36  57.82 192.178.4.101   http/1.1 team.cloudware.ng:443       GET /?l=2821276238 HTTP/1.1
   17-0 81832 0/101/2150 _ 2.78  0     267 4922252  0.0   2.50  56.59 185.180.141.47  http/1.1
   18-0 68641 2/341/2568 K 8.87  0     344 3730314  63.9  8.80  53.61 192.178.4.97    http/1.1 team.cloudware.ng:443       GET /?l=261429464 HTTP/1.1
   19-0 50669 0/473/2730 W 11.26 33    0   4220634  0.0   11.03 60.12 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343630
   20-0 91663 1/47/2254  L 1.16  153   0   4145987  5.3   1.22  51.59 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343539
   21-0 92910 1/69/1752  K 1.82  0     299 3349700  35.8  2.47  42.07 192.178.4.104   http/1.1 team.cloudware.ng:443       GET /?l=3250407497 HTTP/1.1
   22-0 -     0/0/1651   . 0.00  23    0   3905304  0.0   0.00  40.12 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   23-0 79071 1/171/994  L 4.69  313   0   2404515  5.3   4.50  24.35 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343538
   24-0 79374 5/166/1120 K 4.51  3     300 3114391  156.3 4.23  27.66 192.178.4.103   http/1.1 team.cloudware.ng:443       GET /?l=1176859085 HTTP/1.1
   25-0 82577 3/185/1072 K 4.75  2     342 2443353  93.0  4.80  27.21 192.178.4.100   http/1.1 team.cloudware.ng:443       GET /?l=3189909300 HTTP/1.1
   26-0 92189 0/68/519   W 2.05  73    0   1535543  0.0   4.22  15.06 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343630
   27-0 -     0/0/744    . 0.00  56    0   2936228  0.0   0.00  20.30 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   28-0 75040 0/171/581  _ 5.21  0     28  3510671  0.0   4.47  14.36 185.180.141.47  http/1.1
   29-0 -     0/0/812    . 0.00  504   0   1049952  0.0   0.00  21.16 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   30-0 73194 1/376/609  L 7.53  273   0   1529075  5.3   7.44  12.19 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343538
   31-0 -     0/0/408    . 0.00  477   0   806158   0.0   0.00  17.16 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   32-0 -     0/0/459    . 0.00  534   0   2123269  0.0   0.00  10.06 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   33-0 60287 0/336/342  W 9.41  93    0   2744109  0.0   8.65  8.69  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343630
   34-0 -     0/0/194    . 0.00  537   0   1384361  0.0   0.00  4.60  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   35-0 61529 0/235/239  W 6.98  113   0   3319117  0.0   7.41  7.51  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343630
   36-0 -     0/0/126    . 0.00  388   0   46685    0.0   0.00  2.72  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   37-0 69362 0/298/306  _ 8.64  0     32  2684821  0.0   2.97  3.16  185.180.141.50  http/1.1
   38-0 -     0/0/148    . 0.00  76    0   1341544  0.0   0.00  3.12  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   39-0 88934 6/131/215  W 3.41  0     0   109084   186.1 3.54  5.44  192.178.4.96    http/1.1 team.cloudware.ng:443       GET /?l=216475164 HTTP/1.1
   40-0 88935 0/50/78    W 1.40  53    0   678971   0.0   1.77  2.52  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343630
   41-0 -     0/0/3      . 0.00  35968 0   840      0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   42-0 -     0/0/227    . 0.00  35075 0   110452   0.0   0.00  5.70  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   43-0 -     0/0/9      . 0.00  35971 0   4927     0.0   0.00  0.24  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   44-0 -     0/0/154    . 0.00  35450 0   84969    0.0   0.00  4.58  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   45-0 -     0/0/13     . 0.00  35938 0   6975     0.0   0.00  0.32  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 924
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 16 seconds, (range: 2...40)
   index usage: 16%, cache usage: 22%
   total entries stored since starting: 46680
   total entries replaced since starting: 0
   total entries expired since starting: 45738
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 24 hit, 78 miss
   total removes since starting: 19 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit