403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.15.21.txt
 ## swap threshold exceeded
## server overview
2025-11-20.15.21 load[0] mem[61/73] mysql[3/9] httpd[27]
              total        used        free      shared  buff/cache   available
Mem:           2363        1355         179          71         828         771
Swap:          1999        1555         444
 15:21:01 up  5:40,  0 users,  load average: 0.09, 0.18, 0.30
## system overview
top - 15:21:01 up  5:40,  0 users,  load average: 0.09, 0.18, 0.30
Tasks: 216 total,   2 running, 213 sleeping,   0 stopped,   1 zombie
%Cpu(s): 54.8 us, 25.8 sy,  0.0 ni, 19.4 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   178104 free,  1393904 used,   848292 buff/cache
KiB Swap:  2047996 total,   454908 free,  1593088 used.   783684 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1793 mysql     20   0 1463376 250200   3248 S  68.8 10.3   4:48.23 /usr/sbin+
 73336 nigeria   20   0  404052  16136  10384 S  18.8  0.7   0:00.06 /opt/cpan+
 73334 pactpay   20   0  480124  17312  11580 S   6.2  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44268   3344   1484 S   0.0  0.1   0:29.93 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.17 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.00 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:24.69 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.96 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.93 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:22.35 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.50 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:02.21 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:02.54 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.20 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   4996   4756 S   0.0  0.2   0:12.13 /usr/lib/+
   387 root      20   0   45352    252    248 S   0.0  0.0   0:00.38 /usr/lib/+
   410 root      16  -4   55532    524    396 S   0.0  0.0   0:02.06 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0   24712   1180    836 S   0.0  0.0   0:04.89 /usr/lib/+
   471 root      20   0   52852    496    384 S   0.0  0.0   0:00.01 /usr/sbin+
   474 dbus      20   0   58644   1412    680 S   0.0  0.1   0:11.14 /usr/bin/+
   476 rpc       20   0   69256    208    148 S   0.0  0.0   0:00.02 /sbin/rpc+
   486 polkitd   20   0  612240    988    640 S   0.0  0.0   0:02.96 /usr/lib/+
   487 root      20   0   21540    408    320 S   0.0  0.0   0:00.44 /usr/sbin+
   492 root      20   0  152780    248    204 S   0.0  0.0   0:00.01 /usr/sbin+
   493 root      20   0  224280   5392    980 S   0.0  0.2   0:00.36 queueproc+
   507 nscd      20   0  928956   1384    712 S   0.0  0.1   0:16.97 /usr/sbin+
   515 root      20   0  195208     68     68 S   0.0  0.0   0:00.00 /usr/sbin+
   516 root      20   0    4388    156    152 S   0.0  0.0   0:00.00 /usr/sbin+
   543 root      20   0   24208    132    108 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0  124480    520    388 S   0.0  0.0   0:00.61 /usr/sbin+
   562 root      20   0  108296    180    176 S   0.0  0.0   0:00.00 /sbin/age+
   563 root      20   0  114704    180    180 S   0.0  0.0   0:00.02 /bin/bash
   613 mailnull  20   0   89116   3864    928 S   0.0  0.2   0:00.55 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   675 root       0 -20       0      0      0 S   0.0  0.0   0:02.67 [loop0]
   735 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   736 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   931 root      20   0  153404    396    316 S   0.0  0.0   0:00.42 pure-ftpd+
   932 root      20   0  572372   1048    476 S   0.0  0.0   0:01.80 /usr/bin/+
   933 systuser  20   0  112268     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   935 systuser  20   0  114016  14992   2588 S   0.0  0.6   0:05.11 /usr/loca+
   936 root      20   0 1277056   6144    164 S   0.0  0.3   0:21.16 /usr/bin/+
   937 root      20   0  445028   1384   1272 S   0.0  0.1   0:00.72 sw-engine+
   938 systuser  20   0   11796     40      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.01 /usr/loca+
   942 root      20   0  111304    544    436 S   0.0  0.0   0:02.90 /usr/sbin+
   943 systuser  20   0   11348     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   944 root      20   0 1350088   8612    128 S   0.0  0.4   0:28.21 /usr/bin/+
   945 root      20   0   51508    612    428 S   0.0  0.0   0:00.28 /usr/sbin+
   946 telegraf  20   0 5654304  35480   6092 S   0.0  1.5   0:11.40 /usr/loca+
   947 memcach+  20   0  342400    232    232 S   0.0  0.0   0:00.44 /usr/bin/+
   948 root      20   0 1763312 104812    408 S   0.0  4.3   0:15.15 /usr/loca+
   949 root      20   0  389508    628    536 S   0.0  0.0   0:00.60 php-fpm: +
   950 root      20   0  261160   6944   1860 S   0.0  0.3   0:03.84 cpsrvd (S+
   953 root      20   0  388892    668    464 S   0.0  0.0   0:00.51 php-fpm: +
   958 root      20   0  281936   5204   4216 S   0.0  0.2   0:06.21 /usr/sbin+
   986 root      20   0  396248    568    476 S   0.0  0.0   0:00.54 php-fpm: +
   990 root      20   0  439788   1176   1084 S   0.0  0.0   0:00.66 php-fpm: +
   994 root      20   0  400740   3100    720 S   0.0  0.1   0:02.97 php-fpm: +
   996 named     20   0 1186868  39340   1744 S   0.0  1.6   0:13.29 /usr/sbin+
  1013 cpanelc+  20   0   10580   3656   2392 S   0.0  0.2   0:16.39 /usr/loca+
  1093 dovenull  20   0   47424   3120   2016 S   0.0  0.1   0:00.40 dovecot/p+
  1094 dovenull  20   0   48316   3200   1920 S   0.0  0.1   0:00.38 dovecot/i+
  1095 dovecot   20   0   10320    528    412 S   0.0  0.0   0:00.08 dovecot/a+
  1096 root      20   0   10452    460    280 S   0.0  0.0   0:00.25 dovecot/l+
  1097 dovenull  20   0   47308   2804   1808 S   0.0  0.1   0:00.31 dovecot/p+
  1098 dovenull  20   0   48140   3104   1940 S   0.0  0.1   0:00.33 dovecot/i+
  1104 root      20   0   24528   2456    372 S   0.0  0.1   0:00.15 dovecot/c+
  1110 dovecot   20   0   13568    524    324 S   0.0  0.0   0:00.05 dovecot/s+
  1145 systuser  20   0  157704   2928    944 S   0.0  0.1   0:00.11 SonarPush+
  1170 dovecot   20   0   41192   1620   1048 S   0.0  0.1   0:00.73 dovecot/a+
  1175 wp-tool+  20   0  412368  27512   1612 S   0.0  1.1   0:06.57 /usr/bin/+
  1176 wp-tool+  20   0  387528   8692   1560 S   0.0  0.4   0:00.25 /usr/bin/+
  1234 root      20   0  167452   1320    776 S   0.0  0.1   0:00.32 dnsadmin +
  1235 root      20   0  262224  24616   6760 S   0.0  1.0   0:02.69 cpdavd - +
  1237 root      20   0  209500  20068   2548 S   0.0  0.8   0:02.56 tailwatchd
  1669 root      20   0  299272    604    440 S   0.0  0.0   0:00.54 php-fpm: +
  1701 root      38  18  130416   1408    728 S   0.0  0.1   0:00.05 cpanellog+
  1959 root      20   0  266992   7380    740 S   0.0  0.3   0:01.78 /usr/sbin+
  1962 root      20   0   12808    400    296 S   0.0  0.0   0:02.46 /usr/loca+
  1963 root      20   0   12732    368    292 S   0.0  0.0   0:02.12 /usr/loca+
  1964 root      20   0   12828    420    296 S   0.0  0.0   0:02.30 /usr/loca+
  1968 root      20   0   53340    216    216 S   0.0  0.0   0:00.05 /usr/loca+
  2014 root      20   0  183704  12140   1168 S   0.0  0.5   0:18.83 lfd - sle+
 16101 nobody    20   0  277704  20864   5068 S   0.0  0.9   0:03.72 /usr/sbin+
 18294 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 18303 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.34 [kworker]
 20318 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 34913 nobody    20   0  277696  20312   4888 S   0.0  0.8   0:01.70 /usr/sbin+
 35040 nobody    20   0  277892  20640   5072 S   0.0  0.9   0:02.16 /usr/sbin+
 35076 nobody    20   0  277768  20656   4984 S   0.0  0.9   0:02.70 /usr/sbin+
 35708 nobody    20   0  277760  20316   4932 S   0.0  0.8   0:02.10 /usr/sbin+
 41278 nobody    20   0  277884  21088   5100 S   0.0  0.9   0:02.54 /usr/sbin+
 41783 nobody    20   0  277756  19928   4736 S   0.0  0.8   0:01.55 /usr/sbin+
 43651 nobody    20   0  277936  20256   4924 S   0.0  0.8   0:02.27 /usr/sbin+
 44946 nobody    20   0  277760  20548   5000 S   0.0  0.8   0:02.19 /usr/sbin+
 45477 nobody    20   0  277644  20692   4932 S   0.0  0.9   0:01.98 /usr/sbin+
 47546 nobody    20   0  277760  19976   4904 S   0.0  0.8   0:01.32 /usr/sbin+
 50559 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 51766 nobody    20   0  277760  20068   4920 S   0.0  0.8   0:01.53 /usr/sbin+
 54062 nobody    20   0  277760  20424   5076 S   0.0  0.8   0:02.12 /usr/sbin+
 55755 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 56404 root      20   0  248036 117108   1024 S   0.0  4.8   0:04.65 /usr/loca+
 57556 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 58007 nobody    20   0  277760  19448   4668 S   0.0  0.8   0:00.76 /usr/sbin+
 58363 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 58786 nobody    20   0  277764  19876   4560 S   0.0  0.8   0:00.52 /usr/sbin+
 58789 nobody    20   0  277900  19220   4540 S   0.0  0.8   0:00.60 /usr/sbin+
 58795 nobody    20   0  277760  18876   4256 S   0.0  0.8   0:00.32 /usr/sbin+
 60228 nobody    20   0  277900  19272   4524 S   0.0  0.8   0:00.91 /usr/sbin+
 60895 nobody    20   0  277888  20560   4900 S   0.0  0.8   0:01.09 /usr/sbin+
 61723 nobody    20   0  277760  19456   4460 S   0.0  0.8   0:00.48 /usr/sbin+
 61831 nobody    20   0  277900  20152   4744 S   0.0  0.8   0:00.71 /usr/sbin+
 63407 nobody    20   0  277900  19344   4552 S   0.0  0.8   0:00.79 /usr/sbin+
 64340 root      20   0  261952 128156   2544 S   0.0  5.3   0:02.03 spamd chi+
 64341 root      20   0  248036 116456    412 S   0.0  4.8   0:00.01 spamd chi+
 64501 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 65269 nobody    20   0  277760  19116   4392 S   0.0  0.8   0:00.54 /usr/sbin+
 65343 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 65362 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 65804 nobody    20   0  277784  19480   4416 S   0.0  0.8   0:00.61 /usr/sbin+
 66204 nobody    20   0  277760  19424   4480 S   0.0  0.8   0:00.56 /usr/sbin+
 67029 nobody    20   0  277892  18940   4300 S   0.0  0.8   0:00.36 /usr/sbin+
 67397 nobody    20   0  277932  18904   4216 S   0.0  0.8   0:00.25 /usr/sbin+
 68104 nobody    20   0  277892  19308   4380 S   0.0  0.8   0:00.58 /usr/sbin+
 68438 nobody    20   0  277760  19424   4384 S   0.0  0.8   0:00.64 /usr/sbin+
 69526 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 69794 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 69934 nobody    20   0  277800  19088   4164 S   0.0  0.8   0:00.40 /usr/sbin+
 70016 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 70190 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 70476 cloudw    20   0  367184  19032  12188 S   0.0  0.8   0:00.21 /opt/cpan+
 70681 cloudw    20   0  367184  19144  12236 S   0.0  0.8   0:00.21 /opt/cpan+
 70854 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 70960 nobody    20   0  277740  18448   3640 S   0.0  0.8   0:00.07 /usr/sbin+
 71191 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 71421 nobody    20   0  277324  17080   3196 S   0.0  0.7   0:00.01 /usr/sbin+
 71423 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 71605 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 71781 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 71862 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 72078 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 72145 nobody    20   0  277868  18212   3812 S   0.0  0.8   0:00.12 /usr/sbin+
 72317 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 72512 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72600 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 72770 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 72967 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 72972 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 73041 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 73139 mailnull  20   0   89288   4364   1232 S   0.0  0.2   0:00.00 /usr/sbin+
 73163 cloudw    20   0  366248  16796  10940 S   0.0  0.7   0:00.12 /opt/cpan+
 73181 mailnull  20   0   89288   4364   1232 S   0.0  0.2   0:00.00 /usr/sbin+
 73227 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 73250 nigeria   20   0  400460   5572   2328 S   0.0  0.2   0:00.00 php-fpm: +
 73287 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 73290 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 73291 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 73292 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 73295 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 73296 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 73297 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 73299 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 73304 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 73305 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 73307 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 73309 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 73310 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 73312 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 73314 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 73315 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 73316 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 73319 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 73331 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 73332 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 73367 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 73368 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 73378 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.00 /opt/cpan+
 73381 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:40   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:40   0:24  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:40   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:40   0:22  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kvm-irqfd-clean]
root        675  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [loop0]
root        735  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/loop0-8]
root        736  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root      20318  0.0  0.0      0     0 ?        S    14:14   0:00  \_ [kworker/0:4]
root      50559  0.0  0.0      0     0 ?        S    14:51   0:00  \_ [kworker/0:0]
root      55755  0.0  0.0      0     0 ?        S    14:58   0:00  \_ [kworker/1:4]
root      57556  0.0  0.0      0     0 ?        S    15:00   0:00  \_ [kworker/u200:1]
root      58363  0.0  0.0      0     0 ?        S    15:01   0:00  \_ [kworker/0:2]
root      64501  0.0  0.0      0     0 ?        S    15:09   0:00  \_ [kworker/1:1]
root      65343  0.0  0.0      0     0 ?        S    15:10   0:00  \_ [kworker/u200:0]
root      65362  0.0  0.0      0     0 ?        S    15:10   0:00  \_ [kworker/1:3]
root      71781  0.0  0.0      0     0 ?        S    15:19   0:00  \_ [kworker/1:0]
root      72512  0.0  0.0      0     0 ?        S    15:20   0:00  \_ [kworker/0:1]
root          1  0.1  0.1  44268  3344 ?        Ss   09:40   0:29 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  40244  4996 ?        Ss   09:40   0:12 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   252 ?        Ss   09:40   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   524 ?        S<sl 09:40   0:02 /sbin/auditd
root        470  0.0  0.0  24712  1180 ?        Ss   09:40   0:04 /usr/lib/systemd/systemd-logind
root        471  0.0  0.0  52852   496 ?        Ss   09:40   0:00 /usr/sbin/smartd -n -q never
dbus        474  0.0  0.0  58644  1412 ?        Ss   09:40   0:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         476  0.0  0.0  69256   208 ?        Ss   09:40   0:00 /sbin/rpcbind -w
polkitd     486  0.0  0.0 612240   988 ?        Ssl  09:40   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        487  0.0  0.0  21540   408 ?        Ss   09:40   0:00 /usr/sbin/irqbalance --foreground
root        492  0.0  0.0 152780   248 ?        Ss   09:40   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        493  0.0  0.2 224280  5392 ?        Ss   09:40   0:00 queueprocd - waiting up to 60s to process a task
nscd        507  0.0  0.0 928956  1384 ?        Ssl  09:40   0:16 /usr/sbin/nscd
root        515  0.0  0.0 195208    68 ?        Ssl  09:40   0:00 /usr/sbin/gssproxy -D
root        516  0.0  0.0   4388   156 ?        Ss   09:40   0:00 /usr/sbin/acpid
root        543  0.0  0.0  24208   132 ?        Ss   09:40   0:00 /usr/sbin/atd -f
root        545  0.0  0.0 124480   520 ?        Ss   09:40   0:00 /usr/sbin/crond -n
root      73287  0.0  0.0 183048  2152 ?        S    15:21   0:00  \_ /usr/sbin/CROND -n
root      73304  0.0  0.0 113284  1212 ?        Ss   15:21   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      73305  0.0  0.0 108052   360 ?        S    15:21   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      73307  0.0  0.0 113288  1516 ?        S    15:21   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      73382  0.0  0.0 153840  2092 ?        R    15:21   0:00  |               \_ ps auxf
root      73290  0.0  0.0 183048  2152 ?        S    15:21   0:00  \_ /usr/sbin/CROND -n
root      73309  0.0  0.0  20164   808 ?        Ss   15:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      73291  0.0  0.0 183048  2152 ?        S    15:21   0:00  \_ /usr/sbin/CROND -n
root      73314  0.0  0.0  20164   808 ?        Ss   15:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      73292  0.0  0.0 183048  2148 ?        S    15:21   0:00  \_ /usr/sbin/CROND -n
root      73310  0.0  0.0  20164   804 ?        Ss   15:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      73295  0.0  0.0 183048  2144 ?        S    15:21   0:00  \_ /usr/sbin/CROND -n
root      73316  0.0  0.0  20164   808 ?        Ss   15:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      73296  0.0  0.0 183048  2144 ?        S    15:21   0:00  \_ /usr/sbin/CROND -n
root      73312  0.0  0.0  20164   808 ?        Ss   15:21   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      73297  0.0  0.0 183048  2144 ?        S    15:21   0:00  \_ /usr/sbin/CROND -n
root      73319  0.0  0.0  20164   964 ?        Ss   15:21   0:00  |   \_ jailshell (pactpay) [73331] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   73331  0.0  0.0  20164   260 ?        S    15:21   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   73334  0.0  0.7 480124 17312 ?        S    15:21   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      73299  0.0  0.0 183048  2144 ?        S    15:21   0:00  \_ /usr/sbin/CROND -n
root      73315  0.0  0.0  20164   964 ?        Ss   15:21   0:00      \_ jailshell (nigeria) [73332] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   73332  0.0  0.0  20164   260 ?        S    15:21   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   73336  0.0  0.6 404052 16136 ?        R    15:21   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        562  0.0  0.0 108296   180 tty1     Ss+  09:40   0:00 /sbin/agetty --noclear tty1 linux
root        563  0.0  0.0 114704   180 ttyS0    Ss+  09:40   0:00 /bin/bash
mailnull    613  0.0  0.1  89116  3864 ?        Ss   09:40   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  73139  0.0  0.1  89288  4364 ?        S    15:20   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  73181  0.0  0.1  89288  4364 ?        S    15:20   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        931  0.0  0.0 153404   396 ?        Ss   09:40   0:00 pure-ftpd (SERVER)
root        932  0.0  0.0 572372  1048 ?        Ssl  09:40   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    933  0.0  0.0 112268    56 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.6 114016 14992 ?        Ssl  09:40   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        936  0.1  0.2 1277056 6144 ?        Ssl  09:40   0:21 /usr/bin/checkstatus
root        937  0.0  0.0 445028  1384 ?        Ss   09:40   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  73041  0.0  0.0 445028   320 ?        S    15:20   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    938  0.0  0.0  11796    40 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    939  0.0  0.0 111608    60 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        942  0.0  0.0 111304   544 ?        Ss   09:40   0:02 /usr/sbin/sshd -D
root      72967  0.0  0.1 111304  4268 ?        Ss   15:20   0:00  \_ sshd: [accepted]
root      73368  0.0  0.1 111304  4268 ?        Ss   15:21   0:00  \_ sshd: [accepted]
sshd      73381  0.0  0.1 115644  2628 ?        S    15:21   0:00      \_ sshd: [net]
systuser    943  0.0  0.0  11348    24 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        944  0.1  0.3 1350088 8612 ?        Ssl  09:40   0:28 /usr/bin/cspdaemon
root        945  0.0  0.0  51508   612 ?        Ss   09:40   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1093  0.0  0.1  47424  3120 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1094  0.0  0.1  48316  3200 ?        S    09:40   0:00  \_ dovecot/imap-login
dovecot    1095  0.0  0.0  10320   528 ?        S    09:40   0:00  \_ dovecot/anvil
root       1096  0.0  0.0  10452   460 ?        S    09:40   0:00  \_ dovecot/log
dovenull   1097  0.0  0.1  47308  2804 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  48140  3104 ?        S    09:40   0:00  \_ dovecot/imap-login
root       1104  0.0  0.1  24528  2456 ?        S    09:40   0:00  \_ dovecot/config
dovecot    1110  0.0  0.0  13568   524 ?        S    09:40   0:00  \_ dovecot/stats
dovecot    1170  0.0  0.0  41192  1620 ?        S    09:40   0:00  \_ dovecot/auth
root      72600  0.0  0.1  60820  4508 ?        S    15:20   0:00  \_ dovecot/lmtp
telegraf    946  0.0  1.4 5654304 35480 ?       SLsl 09:40   0:11 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    947  0.0  0.0 342400   232 ?        Ssl  09:40   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        948  0.0  4.3 1763312 104812 ?      Ssl  09:40   0:15 /usr/local/cpanel/3rdparty/bin/clamd -F
root        949  0.0  0.0 389508   628 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        950  0.0  0.2 261160  6944 ?        Ss   09:40   0:03 cpsrvd (SSL) - waiting for connections                   
root      73227  0.0  0.0      0     0 ?        Z    15:20   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.0 388892   668 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        958  0.0  0.2 281936  5204 ?        Ssl  09:40   0:06 /usr/sbin/rsyslogd -n
root        986  0.0  0.0 396248   568 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        990  0.0  0.0 439788  1176 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        994  0.0  0.1 400740  3100 ?        Ss   09:40   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   73250  0.0  0.2 400460  5572 ?        S    15:20   0:00  \_ php-fpm: pool nigeriadecide_org
named       996  0.0  1.6 1186868 39340 ?       Ssl  09:40   0:13 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
cpanelc+   1013  0.0  0.1  10580  3656 ?        Ss   09:40   0:16 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1145  0.0  0.1 157704  2928 ?        S    09:40   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1175  0.0  1.1 412368 27512 ?        Ss   09:40   0:06 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1176  0.0  0.3 387528  8692 ?        Ss   09:40   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1234  0.0  0.0 167452  1320 ?        Ss   09:40   0:00 dnsadmin - dormant mode
root       1235  0.0  1.0 262224 24616 ?        Ss   09:40   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1237  0.0  0.8 209500 20068 ?        Ss   09:40   0:02 tailwatchd
root       1669  0.0  0.0 299272   604 ?        Ss   09:40   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1701  0.0  0.0 130416  1408 ?        SN   09:40   0:00 cpanellogd - sleeping for logs
mysql      1793  1.4 10.3 1463376 250200 ?      Sl   09:40   4:48 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1959  0.0  0.3 266992  7380 ?        Ss   09:40   0:01 /usr/sbin/httpd -k start
root       1962  0.0  0.0  12808   400 ?        S    09:40   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1963  0.0  0.0  12732   368 ?        S    09:40   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1964  0.0  0.0  12828   420 ?        S    09:40   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1968  0.0  0.0  53340   216 ?        S    09:40   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    16101  0.0  0.8 277704 20864 ?        S    14:08   0:03  \_ /usr/sbin/httpd -k start
nobody    34913  0.0  0.8 277696 20312 ?        S    14:31   0:01  \_ /usr/sbin/httpd -k start
cloudw    70854  0.1  0.7 367184 19028 ?        S    15:17   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    35040  0.0  0.8 277892 20640 ?        S    14:31   0:02  \_ /usr/sbin/httpd -k start
cloudw    71862  0.1  0.7 367184 19028 ?        S    15:19   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    35076  0.0  0.8 277768 20656 ?        S    14:31   0:02  \_ /usr/sbin/httpd -k start
nobody    35708  0.0  0.8 277760 20316 ?        S    14:32   0:02  \_ /usr/sbin/httpd -k start
cloudw    72317  0.2  0.7 367184 19028 ?        S    15:19   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    41278  0.1  0.8 277884 21088 ?        S    14:39   0:02  \_ /usr/sbin/httpd -k start
cloudw    72770  0.4  0.7 367184 19032 ?        S    15:20   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    41783  0.0  0.8 277756 19928 ?        S    14:40   0:01  \_ /usr/sbin/httpd -k start
cloudw    72972  0.6  0.7 367184 19028 ?        S    15:20   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    43651  0.0  0.8 277936 20256 ?        S    14:42   0:02  \_ /usr/sbin/httpd -k start
nobody    44946  0.0  0.8 277760 20548 ?        S    14:44   0:02  \_ /usr/sbin/httpd -k start
nobody    45477  0.0  0.8 277644 20692 ?        S    14:44   0:01  \_ /usr/sbin/httpd -k start
nobody    47546  0.0  0.8 277760 19976 ?        S    14:47   0:01  \_ /usr/sbin/httpd -k start
cloudw    69794  0.0  0.7 367184 19032 ?        S    15:16   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    51766  0.0  0.8 277760 20068 ?        S    14:52   0:01  \_ /usr/sbin/httpd -k start
cloudw    71191  0.1  0.7 367184 19028 ?        S    15:18   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    54062  0.1  0.8 277760 20424 ?        S    14:55   0:02  \_ /usr/sbin/httpd -k start
cloudw    70681  0.0  0.7 367184 19144 ?        S    15:17   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    58007  0.0  0.8 277760 19448 ?        S    15:00   0:00  \_ /usr/sbin/httpd -k start
nobody    58786  0.0  0.8 277764 19876 ?        S    15:01   0:00  \_ /usr/sbin/httpd -k start
nobody    58789  0.0  0.7 277900 19220 ?        S    15:01   0:00  \_ /usr/sbin/httpd -k start
cloudw    72078  0.2  0.7 367184 19028 ?        S    15:19   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    58795  0.0  0.7 277760 18876 ?        S    15:01   0:00  \_ /usr/sbin/httpd -k start
cloudw    69526  0.0  0.7 367184 19032 ?        S    15:15   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    60228  0.0  0.7 277900 19272 ?        S    15:03   0:00  \_ /usr/sbin/httpd -k start
cloudw    70190  0.0  0.7 367184 19028 ?        S    15:16   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    60895  0.1  0.8 277888 20560 ?        S    15:04   0:01  \_ /usr/sbin/httpd -k start
nobody    61723  0.0  0.8 277760 19456 ?        S    15:05   0:00  \_ /usr/sbin/httpd -k start
nobody    61831  0.0  0.8 277900 20152 ?        S    15:05   0:00  \_ /usr/sbin/httpd -k start
nobody    63407  0.0  0.7 277900 19344 ?        S    15:07   0:00  \_ /usr/sbin/httpd -k start
nobody    65269  0.0  0.7 277760 19116 ?        R    15:10   0:00  \_ /usr/sbin/httpd -k start
nobody    65804  0.0  0.8 277784 19480 ?        S    15:10   0:00  \_ /usr/sbin/httpd -k start
cloudw    70476  0.0  0.7 367184 19032 ?        S    15:17   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    66204  0.0  0.8 277760 19424 ?        S    15:11   0:00  \_ /usr/sbin/httpd -k start
cloudw    70016  0.0  0.7 367184 19032 ?        S    15:16   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    67029  0.0  0.7 277892 18940 ?        S    15:12   0:00  \_ /usr/sbin/httpd -k start
nobody    67397  0.0  0.7 277932 18904 ?        S    15:13   0:00  \_ /usr/sbin/httpd -k start
nobody    68104  0.1  0.7 277892 19308 ?        S    15:14   0:00  \_ /usr/sbin/httpd -k start
nobody    68438  0.1  0.8 277760 19424 ?        S    15:14   0:00  \_ /usr/sbin/httpd -k start
cloudw    73163  1.0  0.6 366248 16796 ?        R    15:20   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    69934  0.1  0.7 277800 19088 ?        S    15:16   0:00  \_ /usr/sbin/httpd -k start
nobody    70960  0.0  0.7 277740 18448 ?        S    15:17   0:00  \_ /usr/sbin/httpd -k start
cloudw    71605  0.1  0.7 367184 19032 ?        S    15:18   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    71421  0.0  0.7 277324 17080 ?        S    15:18   0:00  \_ /usr/sbin/httpd -k start
cloudw    71423  0.1  0.7 367184 19028 ?        S    15:18   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    72145  0.1  0.7 277868 18212 ?        S    15:19   0:00  \_ /usr/sbin/httpd -k start
cloudw    73378  0.0  0.6 353712 15976 ?        S    15:21   0:00      \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
root       2014  0.0  0.5 183704 12140 ?        Ss   09:40   0:18 lfd - sleeping
oysipao+  18294  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+  18303  0.0  0.0   3152    36 ?        S    10:01   0:00  \_ [kworker]
root      56404  0.0  4.8 248036 117108 ?       Ss   10:49   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      64340  0.0  5.2 261952 128156 ?       S    11:00   0:02  \_ spamd child
root      64341  0.0  4.8 248036 116456 ?       S    11:00   0:00  \_ spamd child
## mysql stats
Uptime: 42145  Threads: 3  Questions: 1564437  Slow queries: 0  Opens: 7815  Flush tables: 1  Open tables: 2000  Queries per second avg: 37.120
*************************** 1. row ***************************
     Id: 25211
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: statistics
   Info: SELECT * FROM `18` WHERE `phone`='2348030852137' LIMIT 1
*************************** 2. row ***************************
     Id: 25212
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 25222
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.156.74 TIME_WAIT
      1 15.235.27.215 TIME_WAIT
      1 167.114.139.14 TIME_WAIT
      1 185.150.190.249 TIME_WAIT
      1 192.178.4.97 TIME_WAIT
      1 192.178.4.98 TIME_WAIT
      1 ::1 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 15:21:01 WAT
   Restart Time: Thursday, 20-Nov-2025 03:38:40 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 11 hours 42 minutes 21 seconds
   Server load: 0.09 0.18 0.30
   Total accesses: 109896 - Total Traffic: 2.6 GB - Total Duration: 376662506
   CPU Usage: u27.23 s12.73 cu1436.3 cs1103.82 - 6.12% CPU load
   2.61 requests/sec - 65.8 kB/second - 25.2 kB/request - 3427.45 ms/request
   27 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

LL_KKLLKWLW.WK__KWLLKW_W.WW.LL_.W.L_...K.........K..............
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS  Req   Dur    Conn  Child  Slot      Client      Protocol            VHost                                        Request
   0-0  66204 1/88/4477  L 2.59  271  0   8563233  5.3   2.42  119.60 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353137
   1-0  34913 1/308/4058 L 8.37  191  0   54880176 5.3   8.89  102.09 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353138
   2-0  44946 0/461/4689 _ 9.77  0    0   8705341  0.0   9.15  122.93 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   3-0  60895 9/176/4713 K 4.68  0    348 11067201 278.9 4.59  112.38 192.178.4.104   http/1.1 team.cloudware.ng:443       GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2337533
   4-0  58786 1/89/4413  K 2.41  1    392 10375273 33.9  2.13  126.71 192.178.4.99    http/1.1 team.cloudware.ng:443       GET /ctg/search/similarImageSearchResultView/?ctgItemCd=629107
   5-0  54062 1/355/4621 L 8.95  211  0   6471884  5.3   8.97  121.25 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353138
   6-0  65804 1/108/4561 L 2.38  231  0   7302201  5.3   3.01  112.22 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353138
   7-0  45477 3/334/4652 K 9.33  3    361 8506093  97.6  8.34  122.35 192.178.4.105   http/1.1 team.cloudware.ng:443       GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1022111
   8-0  35708 0/347/3958 W 9.96  71   0   10296071 0.0   8.62  116.78 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353139
   9-0  51766 1/253/4366 L 6.93  171  0   10340196 5.3   6.73  105.46 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353138
   10-0 41783 0/262/3803 W 7.97  31   0   11388102 0.0   6.57  90.97  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353230
   11-0 -     0/0/3957   . 0.00  48   0   10690834 0.0   0.00  87.26  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   12-0 65269 3/82/3735  W 2.43  0    0   10757600 95.6  2.31  85.15  192.178.4.102   http/1.1 team.cloudware.ng:443       GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1856909
   13-0 63407 1/124/3140 K 3.58  2    274 10533506 34.3  3.49  76.93  192.178.4.96    http/1.1 team.cloudware.ng:443       GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1224276
   14-0 69934 0/73/3476  _ 1.59  0    23  10047285 0.0   1.72  88.91  116.203.129.16  http/1.1 cloudsms.com.ng:443         GET /cron/process_queue5.php HTTP/1.1
   15-0 43651 0/454/3662 _ 12.92 0    413 9243865  0.0   8.10  81.81  192.178.4.103   http/1.1 team.cloudware.ng:443       GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2233981
   16-0 67397 1/42/3021  K 1.21  4    342 10406081 33.7  1.09  72.40  192.178.4.98    http/1.1 team.cloudware.ng:443       GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1014992
   17-0 67029 0/56/3011  W 1.70  0    0   11083951 0.0   1.60  76.76  ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   18-0 70960 1/15/3534  L 0.29  131  0   7385370  5.3   0.24  75.77  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353139
   19-0 71421 1/1/3144   L 0.01  151  0   9539335  5.3   0.01  70.25  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353139
   20-0 58007 1/145/2841 K 3.48  0    402 11468255 35.9  3.33  65.79  192.178.4.100   http/1.1 team.cloudware.ng:443       GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1606270
   21-0 68438 0/110/2499 W 2.72  11   0   8796063  0.0   2.77  58.10  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353230
   22-0 68104 0/98/2438  _ 2.42  0    26  6872856  0.0   2.57  59.87  128.140.8.200   http/1.1 cloudsms.com.ng:443         GET /cron/process_queue3.php HTTP/1.1
   23-0 72145 1/19/1924  W 0.48  0    0   8647338  33.7  0.53  45.75  192.178.4.99    http/1.1 team.cloudware.ng:443       GET /?l=1172763826 HTTP/1.1
   24-0 -     0/0/1713   . 0.00  382  0   9157603  0.0   0.00  48.82  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   25-0 58789 0/105/2034 W 3.08  91   0   6743014  0.0   2.38  47.19  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353139
   26-0 41278 0/416/1245 W 11.11 51   0   6333068  0.0   10.69 31.25  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353230
   27-0 -     0/0/1525   . 0.00  295  0   7128516  0.0   0.00  37.29  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   28-0 47546 1/311/1477 L 6.44  291  0   7650907  5.3   5.19  28.56  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353137
   29-0 60228 1/141/1539 L 4.13  251  0   5911526  5.3   4.00  37.48  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353138
   30-0 61723 0/90/1355  _ 2.66  0    24  4372350  0.0   1.82  25.38  116.203.129.16  http/1.1 cloudsms.com.ng:443         GET /cron/process_queue1.php HTTP/1.1
   31-0 -     0/0/991    . 0.00  468  0   3604854  0.0   0.00  30.45  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   32-0 35040 0/440/1433 W 9.60  111  0   7137012  0.0   18.06 46.14  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353139
   33-0 -     0/0/722    . 0.00  897  0   6784163  0.0   0.00  16.96  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   34-0 58795 1/54/559   L 1.68  311  0   4062022  5.3   1.30  10.81  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353137
   35-0 61831 0/126/591  _ 3.07  0    23  5424195  0.0   2.89  15.79  116.203.129.16  http/1.1 cloudsms.com.ng:443         GET /cron/process_queue2.php HTTP/1.1
   36-0 -     0/0/462    . 0.00  670  0   2101519  0.0   0.00  9.03   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   37-0 -     0/0/612    . 0.00  2242 0   4751593  0.0   0.00  9.83   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   38-0 -     0/0/709    . 0.00  2097 0   2819988  0.0   0.00  13.66  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   39-0 35076 3/445/1074 K 12.36 1    406 5667156  94.3  11.69 26.39  192.178.4.98    http/1.1 team.cloudware.ng:443       GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1349805
   40-0 -     0/0/205    . 0.00  1676 0   2015962  0.0   0.00  5.95   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   41-0 -     0/0/92     . 0.00  1687 0   679018   0.0   0.00  1.68   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   42-0 -     0/0/502    . 0.00  3090 0   889223   0.0   0.00  12.26  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   43-0 -     0/0/14     . 0.00  4332 0   5926     0.0   0.00  0.25   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   44-0 -     0/0/207    . 0.00  4326 0   751463   0.0   0.00  5.74   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   45-0 -     0/0/19     . 0.00  4315 0   12183    0.0   0.00  0.41   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   46-0 -     0/0/8      . 0.00  4328 0   3836     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   47-0 -     0/0/18     . 0.00  4282 0   7379     0.0   0.00  0.28   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   48-0 -     0/0/89     . 0.00  3657 0   685444   0.0   0.00  2.19   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   49-0 16101 1/781/781  K 18.77 2    368 4248253  34.2  19.31 19.31  192.178.4.96    http/1.1 team.cloudware.ng:443       GET /ctg/search/similarImageSearchResultView/?ctgItemCd=315060
   50-0 -     0/0/2      . 0.00  4320 0   616      0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   51-0 -     0/0/6      . 0.00  4300 0   2135     0.0   0.00  0.09   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   52-0 -     0/0/145    . 0.00  3598 0   691033   0.0   0.00  2.72   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   53-0 -     0/0/2      . 0.00  4330 0   661      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   54-0 -     0/0/34     . 0.00  4213 0   17885    0.0   0.00  0.93   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   55-0 -     0/0/2      . 0.00  4327 0   644      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   56-0 -     0/0/4      . 0.00  4318 0   1109     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   57-0 -     0/0/2      . 0.00  4329 0   760      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   58-0 -     0/0/13     . 0.00  4278 0   6527     0.0   0.00  0.26   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   59-0 -     0/0/86     . 0.00  4185 0   15729    0.0   0.00  0.68   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   60-0 -     0/0/196    . 0.00  3437 0   724637   0.0   0.00  3.98   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   61-0 -     0/0/7      . 0.00  4303 0   3153     0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   62-0 -     0/0/4      . 0.00  4317 0   1059     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   63-0 -     0/0/318    . 0.00  2981 0   758246   0.0   0.00  5.87   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   64-0 -     0/0/205    . 0.00  3311 0   754691   0.0   0.00  9.18   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   65-0 -     0/0/201    . 0.00  2984 0   1367301  0.0   0.00  4.25   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 924
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 8 seconds, (range: 3...25)
   index usage: 16%, cache usage: 22%
   total entries stored since starting: 66953
   total entries replaced since starting: 0
   total entries expired since starting: 66005
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 24 hit, 123 miss
   total removes since starting: 24 hit, 100 miss
Youez - 2016 - github.com/yon3zu
LinuXploit