403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.13.48.txt
 ## swap threshold exceeded
## server overview
2025-11-20.13.48 load[0] mem[65/66] mysql[1/9] httpd[26]
              total        used        free      shared  buff/cache   available
Mem:           2363        1467         124          61         771         669
Swap:          1999        1501         498
 13:48:01 up  4:07,  0 users,  load average: 0.03, 0.11, 0.22
## system overview
top - 13:48:01 up  4:07,  0 users,  load average: 0.03, 0.11, 0.22
Tasks: 227 total,   7 running, 219 sleeping,   0 stopped,   1 zombie
%Cpu(s): 59.4 us, 40.6 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   122744 free,  1507500 used,   790056 buff/cache
KiB Swap:  2047996 total,   510972 free,  1537024 used.   680824 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1793 mysql     20   0 1463376 232168   3036 S  33.3  9.6   3:19.88 /usr/sbin+
     1 root      20   0   44268   3340   1484 S  13.3  0.1   0:21.95 /usr/lib/+
100491 nigeria   20   0  404052  16136  10384 S  13.3  0.7   0:00.02 /opt/cpan+
   470 root      20   0   24712   1180    836 R   6.7  0.0   0:03.56 /usr/lib/+
   486 polkitd   20   0  612240   1088    740 S   6.7  0.0   0:02.17 /usr/lib/+
 81100 nobody    20   0  277760  19864   4688 S   6.7  0.8   0:01.43 /usr/sbin+
 94449 nobody    20   0  277760  19440   4364 S   6.7  0.8   0:00.82 /usr/sbin+
100495 pactpay   20   0  479860  16264  10648 S   6.7  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.83 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.74 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:16.40 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.69 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.85 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:19.73 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.37 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.88 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:02.12 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.87 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   4036   3800 S   0.0  0.2   0:09.06 /usr/lib/+
   387 root      20   0   45352    252    248 S   0.0  0.0   0:00.38 /usr/lib/+
   410 root      16  -4   55532    512    384 R   0.0  0.0   0:01.54 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   471 root      20   0   52852    416    312 S   0.0  0.0   0:00.01 /usr/sbin+
   474 dbus      20   0   58644   1412    680 R   0.0  0.1   0:08.10 /usr/bin/+
   476 rpc       20   0   69256     72     12 S   0.0  0.0   0:00.01 /sbin/rpc+
   487 root      20   0   21540    408    320 S   0.0  0.0   0:00.32 /usr/sbin+
   492 root      20   0  152780    248    204 S   0.0  0.0   0:00.01 /usr/sbin+
   493 root      20   0  224280   5440   1028 S   0.0  0.2   0:00.31 queueproc+
   507 nscd      20   0  928956   1384    712 S   0.0  0.1   0:12.34 /usr/sbin+
   515 root      20   0  195208     68     68 S   0.0  0.0   0:00.00 /usr/sbin+
   516 root      20   0    4388    156    152 S   0.0  0.0   0:00.00 /usr/sbin+
   543 root      20   0   24208    164    140 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0  124480    520    388 S   0.0  0.0   0:00.44 /usr/sbin+
   562 root      20   0  108296    180    176 S   0.0  0.0   0:00.00 /sbin/age+
   563 root      20   0  114704    180    180 S   0.0  0.0   0:00.02 /bin/bash
   613 mailnull  20   0   89116   3848    916 S   0.0  0.2   0:00.39 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   675 root       0 -20       0      0      0 S   0.0  0.0   0:02.60 [loop0]
   735 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   736 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   931 root      20   0  153404    396    316 S   0.0  0.0   0:00.30 pure-ftpd+
   932 root      20   0  572372   1052    480 S   0.0  0.0   0:01.35 /usr/bin/+
   933 systuser  20   0  112268     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   935 systuser  20   0  114016  15324   2556 S   0.0  0.6   0:03.84 /usr/loca+
   936 root      20   0 1277056   6144    164 S   0.0  0.3   0:21.14 /usr/bin/+
   937 root      20   0  445028   1384   1272 S   0.0  0.1   0:00.61 sw-engine+
   938 systuser  20   0   11796     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.01 /usr/loca+
   942 root      20   0  111304    544    436 S   0.0  0.0   0:02.18 /usr/sbin+
   943 systuser  20   0   11348     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   944 root      20   0 1349832   8612    128 S   0.0  0.4   0:28.15 /usr/bin/+
   945 root      20   0   51508    612    428 S   0.0  0.0   0:00.22 /usr/sbin+
   946 telegraf  20   0 5654304  35584   6152 S   0.0  1.5   0:08.43 /usr/loca+
   947 memcach+  20   0  342400    232    232 S   0.0  0.0   0:00.33 /usr/bin/+
   948 root      20   0 1763312 234680    536 S   0.0  9.7   0:14.99 /usr/loca+
   949 root      20   0  389508    500    408 S   0.0  0.0   0:00.46 php-fpm: +
   950 root      20   0  261160   7052   2076 S   0.0  0.3   0:02.86 cpsrvd (S+
   953 root      20   0  388892    756    552 S   0.0  0.0   0:00.40 php-fpm: +
   958 root      20   0  265552   4204   3368 S   0.0  0.2   0:04.60 /usr/sbin+
   986 root      20   0  396248    516    424 S   0.0  0.0   0:00.41 php-fpm: +
   990 root      20   0  439788   1172   1080 S   0.0  0.0   0:00.53 php-fpm: +
   994 root      20   0  400740   3096    716 S   0.0  0.1   0:02.09 php-fpm: +
   996 named     20   0 1186868  37456   1812 S   0.0  1.5   0:09.72 /usr/sbin+
  1013 cpanelc+  20   0   10580   3676   2412 S   0.0  0.2   0:11.89 /usr/loca+
  1093 dovenull  20   0   47424   3088   2092 S   0.0  0.1   0:00.28 dovecot/p+
  1094 dovenull  20   0   48176   3460   1972 S   0.0  0.1   0:00.27 dovecot/i+
  1095 dovecot   20   0   10320    292    176 S   0.0  0.0   0:00.06 dovecot/a+
  1096 root      20   0   10452    488    308 S   0.0  0.0   0:00.18 dovecot/l+
  1097 dovenull  20   0   47308   3000   2068 S   0.0  0.1   0:00.23 dovecot/p+
  1098 dovenull  20   0   47996   3292   1928 S   0.0  0.1   0:00.24 dovecot/i+
  1104 root      20   0   24528   2632    548 S   0.0  0.1   0:00.12 dovecot/c+
  1110 dovecot   20   0   13568    624    424 S   0.0  0.0   0:00.04 dovecot/s+
  1145 systuser  20   0  157704   3068   1092 S   0.0  0.1   0:00.09 SonarPush+
  1170 dovecot   20   0   41192   1564   1048 S   0.0  0.1   0:00.55 dovecot/a+
  1175 wp-tool+  20   0  412368  27512   1612 S   0.0  1.1   0:04.85 /usr/bin/+
  1176 wp-tool+  20   0  387528   8692   1560 S   0.0  0.4   0:00.21 /usr/bin/+
  1234 root      20   0  167452   1320    776 S   0.0  0.1   0:00.25 dnsadmin +
  1235 root      20   0  183900   6692   3460 S   0.0  0.3   0:02.43 cpdavd - +
  1237 root      20   0  209460  20000   2540 S   0.0  0.8   0:01.98 tailwatchd
  1669 root      20   0  299272    604    440 S   0.0  0.0   0:00.39 php-fpm: +
  1701 root      38  18  130416   1404    728 S   0.0  0.1   0:00.04 cpanellog+
  1959 root      20   0  266992   7380    740 S   0.0  0.3   0:01.27 /usr/sbin+
  1962 root      20   0   12856    400    296 S   0.0  0.0   0:01.75 /usr/loca+
  1963 root      20   0   12732    368    292 S   0.0  0.0   0:01.51 /usr/loca+
  1964 root      20   0   12896    420    296 S   0.0  0.0   0:01.65 /usr/loca+
  1968 root      20   0   53340    216    216 S   0.0  0.0   0:00.05 /usr/loca+
  2014 root      20   0  183096  11052   1168 S   0.0  0.5   0:13.69 lfd - sle+
 18294 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 18303 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.25 [kworker]
 47448 nobody    20   0  277884  20808   4984 S   0.0  0.9   0:03.89 /usr/sbin+
 50669 nobody    20   0  277896  20556   4976 S   0.0  0.8   0:02.60 /usr/sbin+
 56404 root      20   0  248036 117144   1060 S   0.0  4.8   0:04.01 /usr/loca+
 60287 nobody    20   0  277600  20484   4996 S   0.0  0.8   0:02.27 /usr/sbin+
 61529 nobody    20   0  278196  20624   4944 S   0.0  0.9   0:01.58 /usr/sbin+
 62813 nobody    20   0  277760  20112   4804 S   0.0  0.8   0:01.73 /usr/sbin+
 64340 root      20   0  260788 127288   2720 S   0.0  5.3   0:01.38 spamd chi+
 64341 root      20   0  248036 116460    416 S   0.0  4.8   0:00.00 spamd chi+
 65204 root      20   0       0      0      0 D   0.0  0.0   0:00.04 [kworker/+
 65953 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 67149 nobody    20   0  277696  19848   4896 S   0.0  0.8   0:02.28 /usr/sbin+
 69624 nobody    20   0  277884  20224   4860 S   0.0  0.8   0:01.41 /usr/sbin+
 73194 nobody    20   0  277712  20576   4940 S   0.0  0.9   0:02.21 /usr/sbin+
 75040 nobody    20   0  277760  19616   4676 S   0.0  0.8   0:01.34 /usr/sbin+
 75350 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 79071 nobody    20   0  277632  20144   4712 S   0.0  0.8   0:01.37 /usr/sbin+
 79374 nobody    20   0  277796  19700   4780 S   0.0  0.8   0:01.18 /usr/sbin+
 79513 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 81832 nobody    20   0  277760  19340   4496 S   0.0  0.8   0:00.69 /usr/sbin+
 82577 nobody    20   0  277760  20028   4800 S   0.0  0.8   0:01.42 /usr/sbin+
 83977 nobody    20   0  277760  19952   4824 S   0.0  0.8   0:01.49 /usr/sbin+
 88612 nobody    20   0  277628  19196   4336 S   0.0  0.8   0:00.32 /usr/sbin+
 88633 nobody    20   0  277768  20292   4748 S   0.0  0.8   0:00.93 /usr/sbin+
 88934 nobody    20   0  277900  19088   4492 S   0.0  0.8   0:00.89 /usr/sbin+
 88935 nobody    20   0  277760  19380   4332 S   0.0  0.8   0:00.40 /usr/sbin+
 89033 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 89869 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 90012 nobody    20   0  277892  19932   4652 S   0.0  0.8   0:00.65 /usr/sbin+
 90023 nobody    20   0  277520  19576   4584 S   0.0  0.8   0:00.75 /usr/sbin+
 91646 nobody    20   0  277892  19212   4180 S   0.0  0.8   0:00.39 /usr/sbin+
 91663 nobody    20   0  277892  18996   4516 S   0.0  0.8   0:00.44 /usr/sbin+
 92189 nobody    20   0  277496  18900   4308 S   0.0  0.8   0:00.46 /usr/sbin+
 92768 nobody    20   0  277884  19604   4364 S   0.0  0.8   0:00.44 /usr/sbin+
 92910 nobody    20   0  277760  18900   4248 S   0.0  0.8   0:00.58 /usr/sbin+
 93897 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 94431 nobody    20   0  277760  19504   4444 S   0.0  0.8   0:00.77 /usr/sbin+
 95031 nobody    20   0  277760  18664   4112 S   0.0  0.8   0:00.24 /usr/sbin+
 95424 root      20   0       0      0      0 D   0.0  0.0   0:00.01 [kworker/+
 96653 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 97036 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 97237 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 97416 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 97481 nobody    20   0  277892  19220   4388 S   0.0  0.8   0:00.49 /usr/sbin+
 97497 nobody    20   0  277908  19116   4188 S   0.0  0.8   0:00.41 /usr/sbin+
 97498 nobody    20   0  277760  19188   4304 S   0.0  0.8   0:00.43 /usr/sbin+
 97699 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 97917 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.22 /opt/cpan+
 98139 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 98553 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 98575 nobody    20   0  277480  18408   3892 S   0.0  0.8   0:00.08 /usr/sbin+
 98784 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 98963 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 99260 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 99469 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 99644 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 99798 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 99908 cloudw    20   0  367184  19148  12236 S   0.0  0.8   0:00.21 /opt/cpan+
 99961 root      20   0   41052   2732   2088 S   0.0  0.1   0:00.00 dovecot/a+
100016 mailnull  20   0   89496   4912   1752 S   0.0  0.2   0:00.00 /usr/sbin+
100125 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
100250 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
100251 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
100309 cloudw    20   0  366248  16796  10940 S   0.0  0.7   0:00.13 /opt/cpan+
100320 mailnull  20   0   89496   5680   2456 S   0.0  0.2   0:00.00 /usr/sbin+
100329 nigeria   20   0  400460   5572   2328 S   0.0  0.2   0:00.00 php-fpm: +
100371 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
100402 mailnull  20   0   89292   5744   2504 S   0.0  0.2   0:00.00 /usr/sbin+
100414 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
100421 cloudw    20   0  353712  15976  10492 R   0.0  0.7   0:00.01 /opt/cpan+
100422 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
100423 root      20   0  183048   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
100424 root      20   0  183048   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
100426 root      20   0  183048   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
100427 root      20   0  183048   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
100428 root      20   0  183048   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
100429 root      20   0  183048   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
100430 root      20   0  183048   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
100431 root      20   0  183048   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
100432 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
100433 root      20   0  183048   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
100434 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
100436 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
100439 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
100440 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
100441 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
100463 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
100465 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
100466 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
100467 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
100468 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
100470 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
100471 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
100472 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
100473 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
100474 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
100475 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
100476 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
100478 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
100488 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
100493 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
100498 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
100665 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:40   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:40   0:16  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:40   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:40   0:19  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   09:40   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kvm-irqfd-clean]
root        675  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [loop0]
root        735  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/loop0-8]
root        736  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root     100665  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/u200:2]
root      65204  0.0  0.0      0     0 ?        S    13:03   0:00  \_ [kworker/u200:0]
root      65953  0.0  0.0      0     0 ?        S    13:04   0:00  \_ [kworker/1:4]
root      75350  0.0  0.0      0     0 ?        S    13:16   0:00  \_ [kworker/0:1]
root      79513  0.0  0.0      0     0 ?        S    13:21   0:00  \_ [kworker/0:3]
root      89033  0.0  0.0      0     0 ?        S    13:33   0:00  \_ [kworker/0:0]
root      89869  0.0  0.0      0     0 ?        S    13:34   0:00  \_ [kworker/1:1]
root      93897  0.0  0.0      0     0 ?        S    13:39   0:00  \_ [kworker/0:4]
root      95424  0.0  0.0      0     0 ?        D    13:41   0:00  \_ [kworker/1:2]
root      99798  0.0  0.0      0     0 ?        S    13:47   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44268  3340 ?        Rs   09:40   0:21 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.1  40244  4036 ?        Ss   09:40   0:09 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   252 ?        Ss   09:40   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   512 ?        S<sl 09:40   0:01 /sbin/auditd
root        470  0.0  0.0  24712  1180 ?        Rs   09:40   0:03 /usr/lib/systemd/systemd-logind
root        471  0.0  0.0  52852   416 ?        Ss   09:40   0:00 /usr/sbin/smartd -n -q never
dbus        474  0.0  0.0  58644  1412 ?        Ss   09:40   0:08 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         476  0.0  0.0  69256    72 ?        Ss   09:40   0:00 /sbin/rpcbind -w
polkitd     486  0.0  0.0 612240  1088 ?        Ssl  09:40   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        487  0.0  0.0  21540   408 ?        Ss   09:40   0:00 /usr/sbin/irqbalance --foreground
root        492  0.0  0.0 152780   248 ?        Ss   09:40   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        493  0.0  0.2 224280  5440 ?        Ss   09:40   0:00 queueprocd - waiting up to 60s to process a task
nscd        507  0.0  0.0 928956  1384 ?        Ssl  09:40   0:12 /usr/sbin/nscd
root        515  0.0  0.0 195208    68 ?        Ssl  09:40   0:00 /usr/sbin/gssproxy -D
root        516  0.0  0.0   4388   156 ?        Ss   09:40   0:00 /usr/sbin/acpid
root        543  0.0  0.0  24208   164 ?        Ss   09:40   0:00 /usr/sbin/atd -f
root        545  0.0  0.0 124480   520 ?        Ss   09:40   0:00 /usr/sbin/crond -n
root     100422  0.0  0.0 183048  2156 ?        S    13:48   0:00  \_ /usr/sbin/CROND -n
root     100439  0.0  0.0 113284  1212 ?        Ss   13:48   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root     100440  0.0  0.0 108052   356 ?        S    13:48   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root     100441  0.0  0.0 113288  1520 ?        S    13:48   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root     100500  0.0  0.0 153840  2096 ?        R    13:48   0:00  |               \_ ps auxf
root     100423  0.0  0.0 183048  2160 ?        S    13:48   0:00  \_ /usr/sbin/CROND -n
root     100471  0.0  0.0  20164   808 ?        Ss   13:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root     100424  0.0  0.0 183048  2160 ?        S    13:48   0:00  \_ /usr/sbin/CROND -n
root     100472  0.0  0.0  20164   808 ?        Ss   13:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root     100426  0.0  0.0 183048  2160 ?        S    13:48   0:00  \_ /usr/sbin/CROND -n
root     100470  0.0  0.0  20164   804 ?        Ss   13:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root     100427  0.0  0.0 183048  2160 ?        S    13:48   0:00  \_ /usr/sbin/CROND -n
root     100476  0.0  0.0  20164   804 ?        Ss   13:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root     100428  0.0  0.0 183048  2160 ?        S    13:48   0:00  \_ /usr/sbin/CROND -n
root     100478  0.0  0.0  20164   804 ?        Ss   13:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root     100429  0.0  0.0 183048  2156 ?        S    13:48   0:00  \_ /usr/sbin/CROND -n
root     100475  0.0  0.0  20164   808 ?        Ss   13:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root     100430  0.0  0.0 183048  2156 ?        S    13:48   0:00  \_ /usr/sbin/CROND -n
root     100473  0.0  0.0  20164   808 ?        Ss   13:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root     100431  0.0  0.0 183048  2156 ?        S    13:48   0:00  \_ /usr/sbin/CROND -n
root     100465  0.0  0.0  20164   808 ?        Ss   13:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root     100432  0.0  0.0 183048  2152 ?        S    13:48   0:00  \_ /usr/sbin/CROND -n
root     100466  0.0  0.0  20164   804 ?        Ss   13:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root     100433  0.0  0.0 183048  2152 ?        S    13:48   0:00  \_ /usr/sbin/CROND -n
root     100474  0.0  0.0  20164   808 ?        Ss   13:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root     100434  0.0  0.0 183048  2148 ?        S    13:48   0:00  \_ /usr/sbin/CROND -n
root     100468  0.0  0.0  20164   972 ?        Ss   13:48   0:00  |   \_ jailshell (pactpay) [100493] ll -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay  100493  0.0  0.0  20164   260 ?        S    13:48   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay  100495  0.0  0.6 479860 16264 ?        R    13:48   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root     100436  0.0  0.0 183048  2148 ?        S    13:48   0:00  \_ /usr/sbin/CROND -n
root     100467  0.0  0.0  20164   968 ?        Ss   13:48   0:00      \_ jailshell (nigeria) [100488] ll -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria  100488  0.0  0.0  20164   260 ?        S    13:48   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria  100491  0.0  0.6 404052 16136 ?        R    13:48   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        562  0.0  0.0 108296   180 tty1     Ss+  09:40   0:00 /sbin/agetty --noclear tty1 linux
root        563  0.0  0.0 114704   180 ttyS0    Ss+  09:40   0:00 /bin/bash
mailnull    613  0.0  0.1  89116  3848 ?        Ss   09:40   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull 100016  0.0  0.2  89496  4912 ?        S    13:47   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull 100320  0.0  0.2  89496  5680 ?        S    13:47   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull 100402  0.0  0.2  89292  5744 ?        S    13:47   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        931  0.0  0.0 153404   396 ?        Ss   09:40   0:00 pure-ftpd (SERVER)
root        932  0.0  0.0 572372  1052 ?        Ssl  09:40   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    933  0.0  0.0 112268    56 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.6 114016 15324 ?        Ssl  09:40   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        936  0.1  0.2 1277056 6144 ?        Ssl  09:40   0:21 /usr/bin/checkstatus
root        937  0.0  0.0 445028  1384 ?        Ss   09:40   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+ 100414  0.0  0.0 445028   320 ?        S    13:48   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    938  0.0  0.0  11796    32 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    939  0.0  0.0 111608    60 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        942  0.0  0.0 111304   544 ?        Ss   09:40   0:02 /usr/sbin/sshd -D
root     100250  0.0  0.1 111304  4268 ?        Ss   13:47   0:00  \_ sshd: [accepted]
sshd     100251  0.0  0.1 115644  2632 ?        S    13:47   0:00      \_ sshd: [net]
systuser    943  0.0  0.0  11348    24 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        944  0.1  0.3 1349832 8612 ?        Ssl  09:40   0:28 /usr/bin/cspdaemon
root        945  0.0  0.0  51508   612 ?        Ss   09:40   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1093  0.0  0.1  47424  3088 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1094  0.0  0.1  48176  3460 ?        S    09:40   0:00  \_ dovecot/imap-login
dovecot    1095  0.0  0.0  10320   292 ?        S    09:40   0:00  \_ dovecot/anvil
root       1096  0.0  0.0  10452   488 ?        S    09:40   0:00  \_ dovecot/log
dovenull   1097  0.0  0.1  47308  3000 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47996  3292 ?        S    09:40   0:00  \_ dovecot/imap-login
root       1104  0.0  0.1  24528  2632 ?        S    09:40   0:00  \_ dovecot/config
dovecot    1110  0.0  0.0  13568   624 ?        S    09:40   0:00  \_ dovecot/stats
dovecot    1170  0.0  0.0  41192  1564 ?        S    09:40   0:00  \_ dovecot/auth
root      99961  0.0  0.1  41052  2732 ?        S    13:47   0:00  \_ dovecot/auth -w
telegraf    946  0.0  1.4 5654304 35584 ?       SLsl 09:40   0:08 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    947  0.0  0.0 342400   232 ?        Ssl  09:40   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        948  0.1  9.6 1763312 234680 ?      Ssl  09:40   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        949  0.0  0.0 389508   500 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        950  0.0  0.2 261160  7052 ?        Ss   09:40   0:02 cpsrvd (SSL) - waiting for connections                   
root     100371  0.0  0.0      0     0 ?        Z    13:47   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.0 388892   756 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        958  0.0  0.1 265552  4204 ?        Ssl  09:40   0:04 /usr/sbin/rsyslogd -n
root        986  0.0  0.0 396248   516 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        990  0.0  0.0 439788  1172 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        994  0.0  0.1 400740  3096 ?        Ss   09:40   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria  100329  0.0  0.2 400460  5572 ?        S    13:47   0:00  \_ php-fpm: pool nigeriadecide_org
named       996  0.0  1.5 1186868 37456 ?       Ssl  09:40   0:09 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
cpanelc+   1013  0.0  0.1  10580  3676 ?        Rs   09:40   0:11 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1145  0.0  0.1 157704  3068 ?        S    09:40   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1175  0.0  1.1 412368 27512 ?        Ss   09:40   0:04 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1176  0.0  0.3 387528  8692 ?        Ss   09:40   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1234  0.0  0.0 167452  1320 ?        Ss   09:40   0:00 dnsadmin - dormant mode
root       1235  0.0  0.2 183900  6692 ?        Ss   09:40   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1237  0.0  0.8 209460 20000 ?        Ss   09:40   0:01 tailwatchd
root       1669  0.0  0.0 299272   604 ?        Ss   09:40   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1701  0.0  0.0 130416  1404 ?        SN   09:40   0:00 cpanellogd - sleeping for logs
mysql      1793  1.3  9.5 1463376 232168 ?      Sl   09:40   3:19 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1959  0.0  0.3 266992  7380 ?        Ss   09:40   0:01 /usr/sbin/httpd -k start
root       1962  0.0  0.0  12856   400 ?        S    09:40   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1963  0.0  0.0  12732   368 ?        S    09:40   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1964  0.0  0.0  12896   420 ?        S    09:40   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1968  0.0  0.0  53340   216 ?        S    09:40   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    47448  0.0  0.8 277884 20808 ?        S    12:42   0:03  \_ /usr/sbin/httpd -k start
cloudw    97699  0.0  0.7 367184 19032 ?        S    13:44   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    50669  0.0  0.8 277896 20556 ?        S    12:46   0:02  \_ /usr/sbin/httpd -k start
nobody    60287  0.0  0.8 277600 20484 ?        S    12:58   0:02  \_ /usr/sbin/httpd -k start
nobody    61529  0.0  0.8 278196 20624 ?        S    12:59   0:01  \_ /usr/sbin/httpd -k start
nobody    62813  0.0  0.8 277760 20112 ?        S    13:01   0:01  \_ /usr/sbin/httpd -k start
nobody    67149  0.0  0.8 277696 19848 ?        S    13:05   0:02  \_ /usr/sbin/httpd -k start
cloudw    96653  0.0  0.7 367184 19028 ?        S    13:42   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    69624  0.0  0.8 277884 20224 ?        S    13:08   0:01  \_ /usr/sbin/httpd -k start
cloudw    99908  0.3  0.7 367184 19148 ?        S    13:47   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    73194  0.1  0.8 277712 20576 ?        S    13:13   0:02  \_ /usr/sbin/httpd -k start
nobody    75040  0.0  0.8 277760 19616 ?        S    13:15   0:01  \_ /usr/sbin/httpd -k start
cloudw    97917  0.1  0.7 367184 19032 ?        S    13:44   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    79071  0.0  0.8 277632 20144 ?        S    13:20   0:01  \_ /usr/sbin/httpd -k start
cloudw    98784  0.1  0.7 367184 19028 ?        S    13:45   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    79374  0.0  0.8 277796 19700 ?        S    13:21   0:01  \_ /usr/sbin/httpd -k start
cloudw    97416  0.0  0.7 367184 19032 ?        S    13:43   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    81100  0.0  0.8 277760 19864 ?        S    13:23   0:01  \_ /usr/sbin/httpd -k start
nobody    81832  0.0  0.7 277760 19340 ?        S    13:24   0:00  \_ /usr/sbin/httpd -k start
cloudw    97036  0.0  0.7 367184 19032 ?        S    13:43   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    82577  0.1  0.8 277760 20028 ?        S    13:25   0:01  \_ /usr/sbin/httpd -k start
cloudw    98139  0.1  0.7 367184 19028 ?        S    13:44   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    83977  0.1  0.8 277760 19952 ?        S    13:27   0:01  \_ /usr/sbin/httpd -k start
nobody    88612  0.0  0.7 277628 19196 ?        S    13:32   0:00  \_ /usr/sbin/httpd -k start
cloudw   100309  1.0  0.6 366248 16796 ?        S    13:47   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    88633  0.1  0.8 277768 20292 ?        S    13:32   0:00  \_ /usr/sbin/httpd -k start
nobody    88934  0.0  0.7 277900 19088 ?        S    13:33   0:00  \_ /usr/sbin/httpd -k start
nobody    88935  0.0  0.8 277760 19380 ?        S    13:33   0:00  \_ /usr/sbin/httpd -k start
nobody    90012  0.0  0.8 277892 19932 ?        S    13:34   0:00  \_ /usr/sbin/httpd -k start
cloudw    98963  0.1  0.7 367184 19032 ?        S    13:45   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    90023  0.0  0.8 277520 19576 ?        S    13:34   0:00  \_ /usr/sbin/httpd -k start
cloudw   100125  0.6  0.7 367184 19028 ?        S    13:47   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    91646  0.0  0.7 277892 19212 ?        S    13:36   0:00  \_ /usr/sbin/httpd -k start
cloudw    98553  0.1  0.7 367184 19032 ?        S    13:45   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    91663  0.0  0.7 277892 18996 ?        S    13:36   0:00  \_ /usr/sbin/httpd -k start
cloudw    99469  0.2  0.7 367184 19028 ?        S    13:46   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    92189  0.0  0.7 277496 18900 ?        S    13:37   0:00  \_ /usr/sbin/httpd -k start
cloudw    99644  0.2  0.7 367184 19028 ?        S    13:46   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    92768  0.0  0.8 277884 19604 ?        S    13:37   0:00  \_ /usr/sbin/httpd -k start
nobody    92910  0.0  0.7 277760 18900 ?        S    13:38   0:00  \_ /usr/sbin/httpd -k start
cloudw    97237  0.0  0.7 367184 19028 ?        S    13:43   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    94431  0.1  0.8 277760 19504 ?        S    13:39   0:00  \_ /usr/sbin/httpd -k start
nobody    94449  0.1  0.8 277760 19440 ?        S    13:39   0:00  \_ /usr/sbin/httpd -k start
nobody    95031  0.0  0.7 277760 18664 ?        S    13:40   0:00  \_ /usr/sbin/httpd -k start
nobody    97481  0.1  0.7 277892 19220 ?        S    13:43   0:00  \_ /usr/sbin/httpd -k start
nobody    97497  0.1  0.7 277908 19116 ?        S    13:43   0:00  \_ /usr/sbin/httpd -k start
nobody    97498  0.1  0.7 277760 19188 ?        S    13:43   0:00  \_ /usr/sbin/httpd -k start
cloudw   100421  0.0  0.6 353712 15976 ?        S    13:48   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    98575  0.0  0.7 277480 18408 ?        S    13:45   0:00  \_ /usr/sbin/httpd -k start
cloudw    99260  0.1  0.7 367184 19028 ?        S    13:46   0:00      \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
root       2014  0.0  0.4 183096 11052 ?        Ss   09:40   0:13 lfd - sleeping
oysipao+  18294  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+  18303  0.0  0.0   3152    36 ?        S    10:01   0:00  \_ [kworker]
root      56404  0.0  4.8 248036 117144 ?       Ss   10:49   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      64340  0.0  5.2 260788 127288 ?       S    11:00   0:01  \_ spamd child
root      64341  0.0  4.8 248036 116460 ?       S    11:00   0:00  \_ spamd child
## mysql stats
Uptime: 36565  Threads: 3  Questions: 1066106  Slow queries: 0  Opens: 5878  Flush tables: 1  Open tables: 2000  Queries per second avg: 29.156
*************************** 1. row ***************************
     Id: 17314
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 17318
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 17320
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.210.140.129 TIME_WAIT
      1 104.210.140.140 TIME_WAIT
      1 114.119.143.119 TIME_WAIT
      1 142.44.228.111 TIME_WAIT
      1 ::1 TIME_WAIT
      1 45.130.202.105 TIME_WAIT
      1 45.130.202.107 TIME_WAIT
      1 45.130.202.74 TIME_WAIT
      1 45.130.202.75 TIME_WAIT
      1 45.130.202.76 TIME_WAIT
      1 45.130.202.97 TIME_WAIT
      1 52.167.144.167 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 45.130.202.108 TIME_WAIT
      2 45.130.202.109 TIME_WAIT
      2 45.130.202.81 TIME_WAIT
      3 45.130.202.69 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 13:48:01 WAT
   Restart Time: Thursday, 20-Nov-2025 03:38:40 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 10 hours 9 minutes 21 seconds
   Server load: 0.03 0.11 0.22
   Total accesses: 77627 - Total Traffic: 1.9 GB - Total Duration: 183338634
   CPU Usage: u26.05 s11.57 cu994.98 cs781.33 - 4.96% CPU load
   2.12 requests/sec - 54.1 kB/second - 25.5 kB/request - 2361.79 ms/request
   27 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

W__WW_KKKLLL.WLKKLWKWL_LLLWWL.R..R.K...__.......................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur    Conn  Child  Slot     Client      Protocol            VHost                                        Request
   0-0  88612 0/54/3398  W 1.96  12    0   4895539  0.0   1.31  96.67 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343634
   1-0  62813 0/295/3350 _ 8.51  0     259 48841623 0.0   7.41  85.35 192.178.4.98    http/1.1 team.cloudware.ng:443       GET /?l=1579165951 HTTP/1.1
   2-0  83977 0/246/3431 _ 6.71  0     26  4923553  0.0   6.39  94.07 116.203.134.67  http/1.1 cloudsms.com.ng:443         GET /cron/process_queue4.php HTTP/1.1
   3-0  92768 0/129/3851 W 1.84  0     0   5521870  0.0   1.61  89.20 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   4-0  69624 0/250/3485 W 6.55  52    0   4878220  0.0   7.45  88.62 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343634
   5-0  88633 0/157/3606 _ 3.92  0     0   2789422  0.0   3.81  82.03 45.130.202.107  http/1.1 cloudsms.com.ng:443         GET /recharge/recharge.php?do=dealer%20AND%20EXTRACTVALUE%28603
   6-0  97481 2/177/3495 K 1.77  4     263 3592138  64.0  1.84  86.72 192.178.4.97    http/1.1 team.cloudware.ng:443       GET /?l=2097623877 HTTP/1.1
   7-0  94431 1/143/3473 K 3.20  4     296 4164158  33.9  6.73  92.90 192.178.4.104   http/1.1 team.cloudware.ng:443       GET /?l=4091184866 HTTP/1.1
   8-0  95031 5/39/3274  K 1.21  3     263 4194449  155.2 1.02  99.28 192.178.4.101   http/1.1 team.cloudware.ng:443       GET /?l=2313374272 HTTP/1.1
   9-0  91646 1/71/3353  L 1.83  172   0   5343146  5.3   1.59  78.55 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343633
   10-0 90012 1/111/3149 L 2.90  132   0   4060091  5.3   2.71  76.00 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343633
   11-0 67149 1/372/3185 L 10.43 312   0   3999879  5.3   10.08 72.89 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343631
   12-0 -     0/0/2916   . 0.00  113   0   5306239  0.0   0.00  70.92 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   13-0 90023 0/131/2538 W 3.11  32    0   4471704  0.0   3.10  62.03 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343634
   14-0 47448 1/703/2692 L 17.73 232   0   3911125  5.3   16.49 70.27 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343632
   15-0 81100 1/233/2627 K 6.34  0     361 4347532  35.2  6.04  61.15 192.178.4.105   http/1.1 team.cloudware.ng:443       GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2197699
   16-0 94449 7/188/2483 K 3.29  0     358 3727297  214.1 3.35  59.81 192.178.4.102   http/1.1 team.cloudware.ng:443       GET /?l=996172405 HTTP/1.1
   17-0 81832 1/123/2172 L 3.28  292   0   4932053  5.3   4.38  58.46 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343631
   18-0 98575 0/13/2609  W 0.24  112   0   3752138  0.0   0.28  54.67 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343633
   19-0 50669 5/491/2748 K 11.97 4     275 4871281  160.9 11.55 60.63 192.178.4.100   http/1.1 team.cloudware.ng:443       GET /?l=2350529940 HTTP/1.1
   20-0 91663 0/73/2280  W 2.06  92    0   4800088  0.0   1.89  52.26 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343633
   21-0 92910 1/91/1774  L 2.45  272   0   3361893  5.3   3.04  42.64 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343632
   22-0 97497 0/75/1726  _ 1.75  0     0   3941495  0.0   1.75  41.87 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   23-0 79071 1/231/1054 L 6.34  152   0   3071804  5.3   5.88  25.72 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343633
   24-0 79374 1/201/1155 L 5.31  252   0   3132709  5.3   8.36  31.79 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343632
   25-0 82577 1/238/1125 L 6.16  192   0   2471331  5.3   6.26  28.67 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343632
   26-0 92189 0/77/528   W 2.42  72    0   2177653  0.0   4.35  15.18 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343634
   27-0 97498 0/169/913  W 1.57  0     0   2969544  0.0   1.64  21.94 192.178.4.99    http/1.1 team.cloudware.ng:443       GET /?l=1510162669 HTTP/1.1
   28-0 75040 1/218/628  L 6.50  212   0   3538407  5.3   5.77  15.66 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343632
   29-0 -     0/0/845    . 0.00  18    0   1066006  0.0   0.00  21.99 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   30-0 73194 0/466/699  R 9.44  0     29  2204245  0.0   9.52  14.26 45.130.202.86   http/1.1 cloudsms.com.ng:443
   31-0 -     0/0/410    . 0.00  154   0   808184   0.0   0.00  17.16 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   32-0 -     0/0/459    . 0.00  893   0   2123269  0.0   0.00  10.06 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   33-0 60287 0/377/383  R 10.70 1     7   3405859  0.0   9.76  9.80  192.178.4.96    http/1.1 team.cloudware.ng:443
   34-0 -     0/0/194    . 0.00  896   0   1384361  0.0   0.00  4.60  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   35-0 61529 1/268/272  K 8.00  2     258 3978054  34.1  8.83  8.92  192.178.4.103   http/1.1 team.cloudware.ng:443       GET /?l=3115074645 HTTP/1.1
   36-0 -     0/0/126    . 0.00  748   0   46685    0.0   0.00  2.72  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   37-0 -     0/0/332    . 0.00  253   0   2698252  0.0   0.00  3.85  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   38-0 -     0/0/148    . 0.00  436   0   1341544  0.0   0.00  3.12  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   39-0 88934 0/147/231  _ 3.99  0     25  756275   0.0   3.87  5.77  128.140.8.200   http/1.1 cloudsms.com.ng:443         GET /cron/process_queue3.php HTTP/1.1
   40-0 88935 0/76/104   _ 2.09  0     24  1329332  0.0   2.26  3.01  116.203.129.16  http/1.1 cloudsms.com.ng:443         GET /cron/process_queue2.php HTTP/1.1
   41-0 -     0/0/3      . 0.00  36328 0   840      0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   42-0 -     0/0/227    . 0.00  35434 0   110452   0.0   0.00  5.70  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   43-0 -     0/0/9      . 0.00  36331 0   4927     0.0   0.00  0.24  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   44-0 -     0/0/154    . 0.00  35809 0   84969    0.0   0.00  4.58  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   45-0 -     0/0/13     . 0.00  36298 0   6975     0.0   0.00  0.32  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1025
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 12 seconds, (range: 0...72)
   index usage: 18%, cache usage: 24%
   total entries stored since starting: 47888
   total entries replaced since starting: 0
   total entries expired since starting: 46844
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 24 hit, 83 miss
   total removes since starting: 21 hit, 28 miss
Youez - 2016 - github.com/yon3zu
LinuXploit