403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.16.33.txt
 ## swap threshold exceeded
## server overview
2025-11-20.16.33 load[0] mem[62/76] mysql[3/9] httpd[33]
              total        used        free      shared  buff/cache   available
Mem:           2363        1357         203          80         802         740
Swap:          1999        1608         391
 16:33:01 up  6:52,  0 users,  load average: 0.16, 0.23, 0.23
## system overview
top - 16:33:01 up  6:52,  0 users,  load average: 0.16, 0.23, 0.23
Tasks: 222 total,   2 running, 219 sleeping,   0 stopped,   1 zombie
%Cpu(s): 63.6 us, 24.2 sy,  0.0 ni, 12.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   207872 free,  1389952 used,   822476 buff/cache
KiB Swap:  2047996 total,   400636 free,  1647360 used.   758608 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1793 mysql     20   0 1463376 265924   3464 S  93.8 11.0   5:46.22 /usr/sbin+
 25914 nigeria   20   0  404052  16136  10380 S  18.8  0.7   0:00.05 /opt/cpan+
 25760 cloudw    20   0  366248  16792  10940 S   6.2  0.7   0:00.08 /opt/cpan+
 25944 cloudsms  20   0  404052  15880  10224 R   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44268   3320   1484 S   0.0  0.1   0:35.96 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.41 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.21 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:30.98 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.16 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.74 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:23.68 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.04 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.59 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:02.36 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:02.72 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.44 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   39500   2148   1912 S   0.0  0.1   0:14.31 /usr/lib/+
   387 root      20   0   45352    252    248 S   0.0  0.0   0:00.38 /usr/lib/+
   410 root      16  -4   55532    512    384 S   0.0  0.0   0:02.42 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0   24712   1176    832 S   0.0  0.0   0:05.92 /usr/lib/+
   471 root      20   0   52852    376    264 S   0.0  0.0   0:00.01 /usr/sbin+
   474 dbus      20   0   58644   1396    680 S   0.0  0.1   0:13.48 /usr/bin/+
   476 rpc       20   0   69256    208    148 S   0.0  0.0   0:00.02 /sbin/rpc+
   486 polkitd   20   0  612240    984    640 S   0.0  0.0   0:03.58 /usr/lib/+
   487 root      20   0   21540    408    320 S   0.0  0.0   0:00.53 /usr/sbin+
   492 root      20   0  152780    248    204 S   0.0  0.0   0:00.01 /usr/sbin+
   493 root      20   0  224280   5500   1320 S   0.0  0.2   0:00.43 queueproc+
   507 nscd      20   0  928956   1376    704 S   0.0  0.1   0:20.41 /usr/sbin+
   515 root      20   0  195208     68     68 S   0.0  0.0   0:00.00 /usr/sbin+
   516 root      20   0    4388    156    152 S   0.0  0.0   0:00.00 /usr/sbin+
   543 root      20   0   24208    116     92 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0  124480    516    384 S   0.0  0.0   0:00.72 /usr/sbin+
   562 root      20   0  108296    180    176 S   0.0  0.0   0:00.00 /sbin/age+
   563 root      20   0  114704    180    180 S   0.0  0.0   0:00.02 /bin/bash
   613 mailnull  20   0   89116   3764    904 S   0.0  0.2   0:00.66 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   675 root       0 -20       0      0      0 S   0.0  0.0   0:02.72 [loop0]
   735 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [jbd2/loo+
   736 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   931 root      20   0  153404    400    316 S   0.0  0.0   0:00.50 pure-ftpd+
   932 root      20   0  572372   1048    476 S   0.0  0.0   0:02.16 /usr/bin/+
   933 systuser  20   0  112268     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   935 systuser  20   0  114016  15060   2704 S   0.0  0.6   0:06.10 /usr/loca+
   936 root      20   0 1277056   6144    164 S   0.0  0.3   0:21.18 /usr/bin/+
   937 root      20   0  445028   1380   1268 S   0.0  0.1   0:00.91 sw-engine+
   938 systuser  20   0   11796     40      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.01 /usr/loca+
   942 root      20   0  111304    544    436 S   0.0  0.0   0:03.40 /usr/sbin+
   943 systuser  20   0   11348     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   944 root      20   0 1350088   8612    128 S   0.0  0.4   0:28.26 /usr/bin/+
   945 root      20   0   51508    604    428 S   0.0  0.0   0:00.34 /usr/sbin+
   946 telegraf  20   0 5654304  35532   5772 S   0.0  1.5   0:13.66 /usr/loca+
   947 memcach+  20   0  342400    232    232 S   0.0  0.0   0:00.54 /usr/bin/+
   948 root      20   0 1763312  81056    472 S   0.0  3.3   0:15.17 /usr/loca+
   949 root      20   0  389508    628    536 S   0.0  0.0   0:00.71 php-fpm: +
   950 root      20   0  261032  27136   4764 S   0.0  1.1   0:04.42 cpsrvd (S+
   953 root      20   0  388892    828    624 S   0.0  0.0   0:00.61 php-fpm: +
   958 root      20   0  298320   2996   1940 S   0.0  0.1   0:07.33 /usr/sbin+
   986 root      20   0  396248    612    520 S   0.0  0.0   0:00.63 php-fpm: +
   990 root      20   0  439788    920    828 S   0.0  0.0   0:00.78 php-fpm: +
   994 root      20   0  400740   3100    720 S   0.0  0.1   0:03.63 php-fpm: +
   996 named     20   0 1186868  40468   1684 S   0.0  1.7   0:16.16 /usr/sbin+
  1013 cpanelc+  20   0   10580   3840   2452 S   0.0  0.2   0:19.79 /usr/loca+
  1093 dovenull  20   0   47520   3260   2044 S   0.0  0.1   0:00.51 dovecot/p+
  1094 dovenull  20   0   48316   3132   1864 S   0.0  0.1   0:00.42 dovecot/i+
  1095 dovecot   20   0   10320    528    412 S   0.0  0.0   0:00.10 dovecot/a+
  1096 root      20   0   10452    460    280 S   0.0  0.0   0:00.31 dovecot/l+
  1097 dovenull  20   0   47308   3056   2032 S   0.0  0.1   0:00.39 dovecot/p+
  1098 dovenull  20   0   48268   3152   1928 S   0.0  0.1   0:00.43 dovecot/i+
  1104 root      20   0   24528   2456    372 S   0.0  0.1   0:00.17 dovecot/c+
  1110 dovecot   20   0   13568    524    324 S   0.0  0.0   0:00.06 dovecot/s+
  1145 systuser  20   0  157704   2928    944 S   0.0  0.1   0:00.13 SonarPush+
  1170 dovecot   20   0   41192   1620   1048 S   0.0  0.1   0:00.86 dovecot/a+
  1175 wp-tool+  20   0  412368  19644   1636 S   0.0  0.8   0:07.90 /usr/bin/+
  1176 wp-tool+  20   0  387528   5324   1560 S   0.0  0.2   0:00.28 /usr/bin/+
  1234 root      20   0  167452   1320    776 S   0.0  0.1   0:00.38 dnsadmin +
  1235 root      20   0  262224  23984   6140 S   0.0  1.0   0:03.40 cpdavd - +
  1237 root      20   0  209500  10444   2300 S   0.0  0.4   0:02.99 tailwatchd
  1669 root      20   0  299272    604    440 S   0.0  0.0   0:00.65 php-fpm: +
  1701 root      38  18  130416   1408    728 S   0.0  0.1   0:00.06 cpanellog+
  1959 root      20   0  266992   7380    740 S   0.0  0.3   0:02.18 /usr/sbin+
  1962 root      20   0   12848    404    296 S   0.0  0.0   0:02.95 /usr/loca+
  1963 root      20   0   12732    368    292 S   0.0  0.0   0:02.55 /usr/loca+
  1964 root      20   0   12888    420    296 S   0.0  0.0   0:02.76 /usr/loca+
  1968 root      20   0   53340    216    216 S   0.0  0.0   0:00.05 /usr/loca+
  2014 root      20   0  184248  12788   1168 S   0.0  0.5   0:22.54 lfd - sle+
  3184 nobody    20   0  277760  19292   4444 S   0.0  0.8   0:00.29 /usr/sbin+
  6920 nobody    20   0  277760  19800   4644 S   0.0  0.8   0:01.57 /usr/sbin+
  6929 nobody    20   0  277588  20232   4820 S   0.0  0.8   0:01.50 /usr/sbin+
  6937 nobody    20   0  277760  19632   4580 S   0.0  0.8   0:00.88 /usr/sbin+
  7447 nobody    20   0  277896  20420   4936 S   0.0  0.8   0:01.97 /usr/sbin+
  9526 nobody    20   0  277892  19640   4440 S   0.0  0.8   0:00.56 /usr/sbin+
  9829 nobody    20   0  277696  19120   4372 S   0.0  0.8   0:00.42 /usr/sbin+
 10008 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 10661 nobody    20   0  277512  18840   4504 S   0.0  0.8   0:01.06 /usr/sbin+
 10683 nobody    20   0  277760  19664   4764 S   0.0  0.8   0:01.14 /usr/sbin+
 11608 nobody    20   0  277524  19992   4812 S   0.0  0.8   0:01.90 /usr/sbin+
 12159 nobody    20   0  277768  19224   4468 S   0.0  0.8   0:00.66 /usr/sbin+
 16027 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 16079 nobody    20   0  277736  18936   4380 S   0.0  0.8   0:00.69 /usr/sbin+
 16080 nobody    20   0  277872  19008   4268 S   0.0  0.8   0:00.28 /usr/sbin+
 16575 nobody    20   0  277516  19376   4548 S   0.0  0.8   0:00.61 /usr/sbin+
 16592 nobody    20   0  277572  19044   4288 S   0.0  0.8   0:00.60 /usr/sbin+
 17856 nobody    20   0  277760  19060   4352 S   0.0  0.8   0:00.57 /usr/sbin+
 17875 nobody    20   0  277760  19112   4448 S   0.0  0.8   0:00.47 /usr/sbin+
 17896 nobody    20   0  277496  18552   4244 S   0.0  0.8   0:00.35 /usr/sbin+
 18294 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 18303 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.43 [kworker]
 18316 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 19704 nobody    20   0  277768  19600   4364 S   0.0  0.8   0:00.38 /usr/sbin+
 20456 nobody    20   0  277592  19620   4584 S   0.0  0.8   0:00.57 /usr/sbin+
 21307 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 21524 nobody    20   0  277756  19032   4220 S   0.0  0.8   0:00.60 /usr/sbin+
 21927 cloudw    20   0  367184  19008  12164 S   0.0  0.8   0:00.21 /opt/cpan+
 22192 cloudw    20   0  367184  19008  12164 S   0.0  0.8   0:00.21 /opt/cpan+
 22439 cloudw    20   0  367184  18964  12164 S   0.0  0.8   0:00.20 /opt/cpan+
 22455 nobody    20   0  277760  19100   4160 S   0.0  0.8   0:00.34 /usr/sbin+
 22640 cloudw    20   0  367184  19012  12164 S   0.0  0.8   0:00.21 /opt/cpan+
 22745 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 22909 nobody    20   0  277892  18160   3784 S   0.0  0.8   0:00.02 /usr/sbin+
 22938 cloudw    20   0  367184  19012  12164 S   0.0  0.8   0:00.21 /opt/cpan+
 23210 cloudw    20   0  367184  19012  12164 S   0.0  0.8   0:00.21 /opt/cpan+
 23476 cloudw    20   0  367184  19012  12164 S   0.0  0.8   0:00.21 /opt/cpan+
 23743 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 23927 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 24144 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 24341 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 24616 cloudw    20   0  367184  19148  12236 S   0.0  0.8   0:00.21 /opt/cpan+
 24771 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 24898 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 24996 nobody    20   0  277512  17984   3816 S   0.0  0.7   0:00.10 /usr/sbin+
 25013 nobody    20   0  277472  17432   3292 S   0.0  0.7   0:00.02 /usr/sbin+
 25020 nobody    20   0  277868  18324   3948 S   0.0  0.8   0:00.10 /usr/sbin+
 25021 nobody    20   0  277868  18148   3776 S   0.0  0.7   0:00.13 /usr/sbin+
 25022 nobody    20   0  277760  18332   3876 S   0.0  0.8   0:00.07 /usr/sbin+
 25119 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 25233 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25420 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 25591 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 25679 nigeria   20   0  400460   5828   2512 S   0.0  0.2   0:00.05 php-fpm: +
 25681 root      20   0  157100   5072   3784 S   0.0  0.2   0:00.00 sshd: unk+
 25682 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: unk+
 25707 mailnull  20   0   89496   5612   2452 S   0.0  0.2   0:00.00 /usr/sbin+
 25763 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 25799 nobody    20   0  277868  17928   3600 S   0.0  0.7   0:00.02 /usr/sbin+
 25816 nobody    20   0  277616  17288   3160 S   0.0  0.7   0:00.00 /usr/sbin+
 25817 nobody    20   0  277592  17284   3184 S   0.0  0.7   0:00.00 /usr/sbin+
 25842 nobody    20   0  277320  16964   3144 S   0.0  0.7   0:00.00 /usr/sbin+
 25843 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 25846 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25847 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25848 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25849 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25850 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25855 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25856 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 25858 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 25861 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 25862 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 25863 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 25864 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 25867 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 25869 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 25875 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 25877 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 25878 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 25883 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 25884 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 25886 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 25913 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 25917 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25918 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25935 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 25942 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 25943 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 56404 root      20   0  248036  97752   1248 S   0.0  4.0   0:05.16 /usr/loca+
 57556 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 64340 root      20   0  261952 117548   2588 S   0.0  4.9   0:02.53 spamd chi+
 64341 root      20   0  248036  96704    412 S   0.0  4.0   0:00.01 spamd chi+
 72512 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 75542 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 76068 nobody    20   0  277760  20324   4968 S   0.0  0.8   0:02.58 /usr/sbin+
 92468 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 95588 nobody    20   0  277696  19620   4772 S   0.0  0.8   0:01.34 /usr/sbin+
 96535 nobody    20   0  277524  19760   4808 S   0.0  0.8   0:01.65 /usr/sbin+
101971 nobody    20   0  277884  20544   5128 S   0.0  0.8   0:02.06 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:40   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:40   0:30  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:40   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    09:40   0:23  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kvm-irqfd-clean]
root        675  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [loop0]
root        735  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/loop0-8]
root        736  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root      57556  0.0  0.0      0     0 ?        S    15:00   0:00  \_ [kworker/u200:1]
root      72512  0.0  0.0      0     0 ?        S    15:20   0:00  \_ [kworker/0:1]
root      75542  0.0  0.0      0     0 ?        S    15:24   0:00  \_ [kworker/1:2]
root      92468  0.0  0.0      0     0 ?        S    15:46   0:00  \_ [kworker/1:4]
root      10008  0.0  0.0      0     0 ?        S    16:12   0:00  \_ [kworker/0:4]
root      16027  0.0  0.0      0     0 ?        S    16:20   0:00  \_ [kworker/u200:2]
root      18316  0.0  0.0      0     0 ?        S    16:23   0:00  \_ [kworker/0:3]
root      21307  0.0  0.0      0     0 ?        S    16:27   0:00  \_ [kworker/1:1]
root      22745  0.0  0.0      0     0 ?        S    16:29   0:00  \_ [kworker/0:0]
root      23743  0.0  0.0      0     0 ?        S    16:30   0:00  \_ [kworker/u200:0]
root      25233  0.0  0.0      0     0 ?        S    16:32   0:00  \_ [kworker/0:2]
root      25917  0.0  0.0      0     0 ?        S    16:33   0:00  \_ [kworker/1:0]
root      25918  0.0  0.0      0     0 ?        S    16:33   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44268  3320 ?        Ss   09:40   0:35 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.0  39500  2148 ?        Ss   09:40   0:14 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   252 ?        Ss   09:40   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   512 ?        S<sl 09:40   0:02 /sbin/auditd
root        470  0.0  0.0  24712  1176 ?        Ss   09:40   0:05 /usr/lib/systemd/systemd-logind
root        471  0.0  0.0  52852   376 ?        Ss   09:40   0:00 /usr/sbin/smartd -n -q never
dbus        474  0.0  0.0  58644  1396 ?        Ss   09:40   0:13 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         476  0.0  0.0  69256   208 ?        Ss   09:40   0:00 /sbin/rpcbind -w
polkitd     486  0.0  0.0 612240   984 ?        Ssl  09:40   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        487  0.0  0.0  21540   408 ?        Ss   09:40   0:00 /usr/sbin/irqbalance --foreground
root        492  0.0  0.0 152780   248 ?        Ss   09:40   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        493  0.0  0.2 224280  5500 ?        Ss   09:40   0:00 queueprocd - waiting up to 60s to process a task
nscd        507  0.0  0.0 928956  1376 ?        Ssl  09:40   0:20 /usr/sbin/nscd
root        515  0.0  0.0 195208    68 ?        Ssl  09:40   0:00 /usr/sbin/gssproxy -D
root        516  0.0  0.0   4388   156 ?        Ss   09:40   0:00 /usr/sbin/acpid
root        543  0.0  0.0  24208   116 ?        Ss   09:40   0:00 /usr/sbin/atd -f
root        545  0.0  0.0 124480   516 ?        Ss   09:40   0:00 /usr/sbin/crond -n
root      25846  0.0  0.0 183048  2152 ?        S    16:33   0:00  \_ /usr/sbin/CROND -n
root      25861  0.0  0.0 113284  1212 ?        Ss   16:33   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      25862  0.0  0.0 108052   356 ?        S    16:33   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      25869  0.0  0.0 113288  1520 ?        S    16:33   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      25945  0.0  0.0 153840  2096 ?        R    16:33   0:00  |               \_ ps auxf
root      25847  0.0  0.0 183048  2152 ?        S    16:33   0:00  \_ /usr/sbin/CROND -n
root      25886  0.0  0.0  20164   804 ?        Ss   16:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      25848  0.0  0.0 183048  2152 ?        S    16:33   0:00  \_ /usr/sbin/CROND -n
root      25864  0.0  0.0  20164   808 ?        Ss   16:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      25849  0.0  0.0 183048  2152 ?        S    16:33   0:00  \_ /usr/sbin/CROND -n
root      25883  0.0  0.0  20164   808 ?        Ss   16:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      25850  0.0  0.0 183048  2152 ?        S    16:33   0:00  \_ /usr/sbin/CROND -n
root      25863  0.0  0.0  20164   804 ?        Ss   16:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      25855  0.0  0.0 183048  2144 ?        S    16:33   0:00  \_ /usr/sbin/CROND -n
root      25884  0.0  0.0  20164   984 ?        Ss   16:33   0:00  |   \_ jailshell (cloudsms) [25942] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  25942  0.0  0.0      0     0 ?        D    16:33   0:00  |       \_ [jailshell]
root      25856  0.0  0.0 183048  2148 ?        S    16:33   0:00  \_ /usr/sbin/CROND -n
root      25867  0.0  0.0  20164   968 ?        Ss   16:33   0:00  |   \_ jailshell (pactpay) [25875] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   25875  0.0  0.0  20164   264 ?        S    16:33   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   25878  0.0  0.7 480124 17688 ?        S    16:33   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      25858  0.0  0.0 183048  2144 ?        S    16:33   0:00  \_ /usr/sbin/CROND -n
root      25877  0.0  0.0  20164   968 ?        Ss   16:33   0:00      \_ jailshell (nigeria) [25913] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   25913  0.0  0.0  20164   264 ?        S    16:33   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   25914  0.0  0.6 404052 16136 ?        S    16:33   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        562  0.0  0.0 108296   180 tty1     Ss+  09:40   0:00 /sbin/agetty --noclear tty1 linux
root        563  0.0  0.0 114704   180 ttyS0    Ss+  09:40   0:00 /bin/bash
mailnull    613  0.0  0.1  89116  3764 ?        Ss   09:40   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  25707  0.0  0.2  89496  5612 ?        S    16:32   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        931  0.0  0.0 153404   400 ?        Ss   09:40   0:00 pure-ftpd (SERVER)
root        932  0.0  0.0 572372  1048 ?        Ssl  09:40   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    933  0.0  0.0 112268    56 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.6 114016 15060 ?        Ssl  09:40   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        936  0.0  0.2 1277056 6144 ?        Ssl  09:40   0:21 /usr/bin/checkstatus
root        937  0.0  0.0 445028  1380 ?        Ss   09:40   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  25843  0.0  0.0 445028   320 ?        S    16:33   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    938  0.0  0.0  11796    40 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    939  0.0  0.0 111608    60 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        942  0.0  0.0 111304   544 ?        Ss   09:40   0:03 /usr/sbin/sshd -D
root      25681  0.0  0.2 157100  5072 ?        Ss   16:32   0:00  \_ sshd: unknown [priv]
sshd      25682  0.0  0.1 115644  2628 ?        S    16:32   0:00      \_ sshd: unknown [net]
systuser    943  0.0  0.0  11348    24 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        944  0.1  0.3 1350088 8612 ?        Ssl  09:40   0:28 /usr/bin/cspdaemon
root        945  0.0  0.0  51508   604 ?        Ss   09:40   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1093  0.0  0.1  47520  3260 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1094  0.0  0.1  48316  3132 ?        S    09:40   0:00  \_ dovecot/imap-login
dovecot    1095  0.0  0.0  10320   528 ?        S    09:40   0:00  \_ dovecot/anvil
root       1096  0.0  0.0  10452   460 ?        S    09:40   0:00  \_ dovecot/log
dovenull   1097  0.0  0.1  47308  3056 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  48268  3152 ?        S    09:40   0:00  \_ dovecot/imap-login
root       1104  0.0  0.1  24528  2456 ?        S    09:40   0:00  \_ dovecot/config
dovecot    1110  0.0  0.0  13568   524 ?        S    09:40   0:00  \_ dovecot/stats
dovecot    1170  0.0  0.0  41192  1620 ?        S    09:40   0:00  \_ dovecot/auth
root      24771  0.0  0.1  60820  4508 ?        S    16:31   0:00  \_ dovecot/lmtp
telegraf    946  0.0  1.4 5654304 35532 ?       SLsl 09:40   0:13 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    947  0.0  0.0 342400   232 ?        Ssl  09:40   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        948  0.0  3.3 1763312 81056 ?       Ssl  09:40   0:15 /usr/local/cpanel/3rdparty/bin/clamd -F
root        949  0.0  0.0 389508   628 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        950  0.0  1.1 261032 27136 ?        Ss   09:40   0:04 cpsrvd (SSL) - waiting for connections                   
root      25763  0.0  0.0      0     0 ?        Z    16:32   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.0 388892   828 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        958  0.0  0.1 298320  2996 ?        Ssl  09:40   0:07 /usr/sbin/rsyslogd -n
root        986  0.0  0.0 396248   612 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        990  0.0  0.0 439788   920 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        994  0.0  0.1 400740  3100 ?        Ss   09:40   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   25679  0.3  0.2 400460  5828 ?        S    16:32   0:00  \_ php-fpm: pool nigeriadecide_org
named       996  0.0  1.6 1186868 40468 ?       Ssl  09:40   0:16 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
cpanelc+   1013  0.0  0.1  10580  3840 ?        Ss   09:40   0:19 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1145  0.0  0.1 157704  2928 ?        S    09:40   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1175  0.0  0.8 412368 19644 ?        Ss   09:40   0:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1176  0.0  0.2 387528  5324 ?        Ss   09:40   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1234  0.0  0.0 167452  1320 ?        Ss   09:40   0:00 dnsadmin - dormant mode
root       1235  0.0  0.9 262224 23984 ?        Ss   09:40   0:03 cpdavd - accepting connections on: 2091, 2077, 2078
root       1237  0.0  0.4 209500 10444 ?        Ss   09:40   0:02 tailwatchd
root       1669  0.0  0.0 299272   604 ?        Ss   09:40   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1701  0.0  0.0 130416  1408 ?        SN   09:40   0:00 cpanellogd - sleeping for logs
mysql      1793  1.3 10.9 1463376 265924 ?      Sl   09:40   5:46 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1959  0.0  0.3 266992  7380 ?        Ss   09:40   0:02 /usr/sbin/httpd -k start
root       1962  0.0  0.0  12848   404 ?        S    09:40   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1963  0.0  0.0  12732   368 ?        S    09:40   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1964  0.0  0.0  12888   420 ?        S    09:40   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1968  0.0  0.0  53340   216 ?        S    09:40   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    76068  0.0  0.8 277760 20324 ?        R    15:24   0:02  \_ /usr/sbin/httpd -k start
nobody    95588  0.0  0.8 277696 19620 ?        S    15:50   0:01  \_ /usr/sbin/httpd -k start
cloudw    24144  0.1  0.7 367184 19032 ?        S    16:30   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    96535  0.0  0.8 277524 19760 ?        S    15:51   0:01  \_ /usr/sbin/httpd -k start
nobody   101971  0.1  0.8 277884 20544 ?        S    15:59   0:02  \_ /usr/sbin/httpd -k start
cloudw    21927  0.0  0.7 367184 19008 ?        S    16:27   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody     3184  0.0  0.7 277760 19292 ?        S    16:02   0:00  \_ /usr/sbin/httpd -k start
nobody     6920  0.1  0.8 277760 19800 ?        R    16:07   0:01  \_ /usr/sbin/httpd -k start
nobody     6929  0.0  0.8 277588 20232 ?        S    16:07   0:01  \_ /usr/sbin/httpd -k start
cloudw    24341  0.1  0.7 367184 19028 ?        S    16:30   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody     6937  0.0  0.8 277760 19632 ?        S    16:07   0:00  \_ /usr/sbin/httpd -k start
cloudw    23476  0.1  0.7 367184 19012 ?        S    16:29   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody     7447  0.1  0.8 277896 20420 ?        S    16:08   0:01  \_ /usr/sbin/httpd -k start
cloudw    25591  0.7  0.7 367184 19032 ?        S    16:32   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody     9526  0.0  0.8 277892 19640 ?        S    16:11   0:00  \_ /usr/sbin/httpd -k start
cloudw    24616  0.1  0.7 367184 19148 ?        S    16:31   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody     9829  0.0  0.7 277696 19120 ?        S    16:11   0:00  \_ /usr/sbin/httpd -k start
nobody    10661  0.0  0.7 277512 18840 ?        S    16:12   0:01  \_ /usr/sbin/httpd -k start
nobody    10683  0.0  0.8 277760 19664 ?        S    16:12   0:01  \_ /usr/sbin/httpd -k start
cloudw    23927  0.1  0.7 367184 19028 ?        S    16:30   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    11608  0.1  0.8 277524 19992 ?        S    16:14   0:01  \_ /usr/sbin/httpd -k start
nobody    12159  0.0  0.7 277768 19224 ?        S    16:15   0:00  \_ /usr/sbin/httpd -k start
nobody    16079  0.0  0.7 277736 18936 ?        S    16:20   0:00  \_ /usr/sbin/httpd -k start
nobody    16080  0.0  0.7 277872 19008 ?        S    16:20   0:00  \_ /usr/sbin/httpd -k start
cloudw    22640  0.0  0.7 367184 19012 ?        S    16:28   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    16575  0.0  0.8 277516 19376 ?        S    16:20   0:00  \_ /usr/sbin/httpd -k start
cloudw    22439  0.0  0.7 367184 18964 ?        S    16:28   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    16592  0.0  0.7 277572 19044 ?        S    16:20   0:00  \_ /usr/sbin/httpd -k start
cloudw    24898  0.2  0.7 367184 19032 ?        S    16:31   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    17856  0.0  0.7 277760 19060 ?        S    16:22   0:00  \_ /usr/sbin/httpd -k start
cloudw    22192  0.0  0.7 367184 19008 ?        S    16:28   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    17875  0.0  0.7 277760 19112 ?        S    16:22   0:00  \_ /usr/sbin/httpd -k start
nobody    17896  0.0  0.7 277496 18552 ?        S    16:22   0:00  \_ /usr/sbin/httpd -k start
nobody    19704  0.0  0.8 277768 19600 ?        S    16:25   0:00  \_ /usr/sbin/httpd -k start
cloudw    22938  0.0  0.7 367184 19012 ?        S    16:29   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    20456  0.1  0.8 277592 19620 ?        S    16:26   0:00  \_ /usr/sbin/httpd -k start
nobody    21524  0.1  0.7 277756 19032 ?        S    16:27   0:00  \_ /usr/sbin/httpd -k start
nobody    22455  0.1  0.7 277760 19100 ?        S    16:28   0:00  \_ /usr/sbin/httpd -k start
cloudw    25420  0.4  0.7 367184 19028 ?        S    16:32   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    22909  0.0  0.7 277892 18160 ?        S    16:29   0:00  \_ /usr/sbin/httpd -k start
cloudw    23210  0.1  0.7 367184 19012 ?        S    16:29   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    24996  0.1  0.7 277512 17984 ?        S    16:31   0:00  \_ /usr/sbin/httpd -k start
nobody    25013  0.0  0.7 277472 17432 ?        S    16:31   0:00  \_ /usr/sbin/httpd -k start
cloudw    25119  0.2  0.7 367184 19032 ?        S    16:31   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    25020  0.1  0.7 277868 18324 ?        S    16:31   0:00  \_ /usr/sbin/httpd -k start
nobody    25021  0.1  0.7 277868 18148 ?        S    16:31   0:00  \_ /usr/sbin/httpd -k start
nobody    25022  0.0  0.7 277760 18332 ?        S    16:31   0:00  \_ /usr/sbin/httpd -k start
cloudw    25760  1.1  0.6 366248 16792 ?        S    16:32   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    25799  0.4  0.7 277868 17928 ?        S    16:32   0:00  \_ /usr/sbin/httpd -k start
nobody    25816  0.0  0.7 277616 17288 ?        S    16:32   0:00  \_ /usr/sbin/httpd -k start
nobody    25817  0.0  0.7 277592 17284 ?        S    16:32   0:00  \_ /usr/sbin/httpd -k start
nobody    25842  0.0  0.7 277320 16964 ?        S    16:33   0:00  \_ /usr/sbin/httpd -k start
root       2014  0.0  0.5 184248 12788 ?        Ss   09:40   0:22 lfd - sleeping
oysipao+  18294  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+  18303  0.0  0.0   3152    36 ?        S    10:01   0:00  \_ [kworker]
root      56404  0.0  4.0 248036 97752 ?        Ss   10:49   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      64340  0.0  4.8 261952 117548 ?       S    11:00   0:02  \_ spamd child
root      64341  0.0  3.9 248036 96704 ?        S    11:00   0:00  \_ spamd child
## mysql stats
Uptime: 46465  Threads: 3  Questions: 1875240  Slow queries: 0  Opens: 9424  Flush tables: 1  Open tables: 2000  Queries per second avg: 40.358
*************************** 1. row ***************************
     Id: 30295
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 30300
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: statistics
   Info: SELECT * FROM `18` WHERE `phone`='2348170941208' LIMIT 1
*************************** 3. row ***************************
     Id: 30307
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.10 TIME_WAIT
      1 138.197.90.74 TIME_WAIT
      1 159.203.102.203 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.101 TIME_WAIT
      1 192.178.4.105 TIME_WAIT
      1 194.76.27.29 TIME_WAIT
      1 ::1 TIME_WAIT
      1 40.84.221.219 TIME_WAIT
      1 54.39.0.200 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 16:33:01 WAT
   Restart Time: Thursday, 20-Nov-2025 03:38:40 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 12 hours 54 minutes 21 seconds
   Server load: 0.16 0.23 0.23
   Total accesses: 131859 - Total Traffic: 3.2 GB - Total Duration: 525653695
   CPU Usage: u18.23 s9.43 cu1765.09 cs1341.79 - 6.75% CPU load
   2.84 requests/sec - 71.9 kB/second - 25.3 kB/request - 3986.48 ms/request
   28 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

LLWWWKKKWWW_KK_WL_LLL_LLLK_LW_.R.K.._K_W........................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS  Req   Dur    Conn  Child  Slot      Client      Protocol            VHost                                        Request
   0-0  22909  1/5/5179   L 0.08  206  0   12097669 5.3   0.11  136.87 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353631
   1-0  17856  1/95/4698  L 2.42  286  0   59099254 5.3   2.51  118.42 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353630
   2-0  7447   0/326/5491 W 8.81  26   0   12268922 0.0   8.80  141.42 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353633
   3-0  9526   0/95/5264  W 2.76  106  0   14548165 0.0   2.42  126.53 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353632
   4-0  22455  0/59/4805  W 1.37  46   0   15046617 0.0   1.45  137.05 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353633
   5-0  11608  2/386/5705 K 8.22  0    301 8815065  65.5  9.51  145.90 192.178.4.98    http/1.1 team.cloudware.ng:443       GET /ctg/search/similarImageSearchResultView/?ctgItemCd=585199
   6-0  25799  2/3/5039   K 0.04  1    262 12038385 66.4  0.07  124.12 192.178.4.99    http/1.1 team.cloudware.ng:443       GET /ctg/search/similarImageSearchResultView/?ctgItemCd=387092
   7-0  25816  1/1/5373   K 0.00  3    311 12905347 35.9  0.04  138.60 192.178.4.97    http/1.1 team.cloudware.ng:443       GET /?l=1171577778 HTTP/1.1
   8-0  24996  2/22/4444  W 0.35  0    0   15599163 64.5  0.47  126.57 192.178.4.96    http/1.1 team.cloudware.ng:443       GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2546912
   9-0  25013  0/2/4829   W 0.03  66   0   14387661 0.0   0.06  115.96 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353633
   10-0 9829   0/72/4258  W 2.44  0    0   16091738 0.0   2.52  102.73 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   11-0 21524  0/101/4525 _ 2.64  0    3   14131489 0.0   2.69  99.05  216.244.66.226  http/1.1 theforge.com.ng:80          GET /uploads/personal_info/tired@a/idImage/?C=D;O=D HTTP/1.1
   12-0 10661  1/174/4168 K 4.90  0    78  16102692 5.3   4.54  96.58  116.203.129.16  http/1.1 cloudsms.com.ng:443         GET /cron/process_queue5.php HTTP/1.1
   13-0 25817  1/1/3732   K 0.00  3    387 14670919 36.1  0.04  91.83  192.178.4.97    http/1.1 team.cloudware.ng:443       GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2188502
   14-0 6920   0/263/4143 _ 6.95  0    267 13531068 0.0   10.15 107.93 192.178.4.98    http/1.1 team.cloudware.ng:443       GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1399809
   15-0 16079  0/121/4458 W 3.09  0    0   11571495 0.0   2.86  103.44 116.203.129.16  http/1.1 cloudsms.com.ng:443         GET /cron/process_queue1.php HTTP/1.1
   16-0 6929   1/248/3806 L 6.98  126  0   12759187 5.3   6.75  93.81  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353632
   17-0 76068  0/571/3613 _ 12.50 0    262 16445641 0.0   10.65 88.63  192.178.4.104   http/1.1 team.cloudware.ng:443       GET /?l=140485415 HTTP/1.1
   18-0 19704  1/70/4182  L 1.65  226  0   10906899 5.3   1.63  93.51  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353631
   19-0 101971 1/346/3648 L 8.73  306  0   11699489 5.3   11.36 92.98  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353630
   20-0 95588  1/224/3234 L 6.73  146  0   16910162 5.3   6.01  75.89  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353632
   21-0 25842  0/1/2843   _ 0.00  0    6   10878515 0.0   0.01  66.55  123.20.139.60   http/1.1 nigeriadecide.org:443       GET /polling_unit_category.php?lga=Ohafia&state=Abia&ward=Amaek
   22-0 10683  1/194/2921 L 5.39  166  0   10959053 5.3   5.08  72.96  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353632
   23-0 6937   1/146/2412 L 4.28  186  0   12721639 5.3   3.74  60.39  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353631
   24-0 16080  1/55/2279  L 1.29  246  0   11334246 5.3   1.21  62.10  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353631
   25-0 12159  3/111/2578 K 3.10  2    267 10849629 97.4  2.81  61.07  192.178.4.103   http/1.1 team.cloudware.ng:443       GET /ctg/search/similarImageSearchResultView/?ctgItemCd=799306
   26-0 17875  0/77/1766  _ 2.16  0    262 9775222  0.0   1.96  43.41  192.178.4.104   http/1.1 team.cloudware.ng:443       GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2150082
   27-0 16575  1/132/2057 L 2.42  266  0   9314405  5.3   2.64  51.66  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353631
   28-0 16592  0/145/1966 W 2.87  86   0   10379084 0.0   2.70  38.72  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353632
   29-0 96535  0/273/2122 _ 8.45  0    252 10008897 0.0   7.17  49.89  192.178.4.105   http/1.1 team.cloudware.ng:443       GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1218508
   30-0 -      0/0/1863   . 0.00  17   0   7190679  0.0   0.00  39.26  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   31-0 17896  0/118/1504 R 1.71  102  388 6396839  0.0   1.25  43.19  192.178.4.99    http/1.1 team.cloudware.ng:443       GET /?l=1048403375 HTTP/1.1
   32-0 -      0/0/1853   . 0.00  56   0   9857373  0.0   0.00  54.19  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   33-0 20456  1/106/1007 K 2.26  0    26  9471720  5.3   2.51  23.66  116.203.129.16  http/1.1 cloudsms.com.ng:443         GET /cron/process_queue2.php HTTP/1.1
   34-0 -      0/0/994    . 0.00  61   0   10042357 0.0   0.00  21.60  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   35-0 -      0/0/968    . 0.00  58   0   8134420  0.0   0.00  23.68  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   36-0 25020  0/18/834   _ 0.35  0    0   4849703  0.0   0.41  18.03  ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   37-0 25021  5/22/1037  K 0.54  0    309 6248579  160.3 0.62  20.47  192.178.4.101   http/1.1 team.cloudware.ng:443       GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2188501
   38-0 3184   0/50/1011  _ 2.23  0    25  8076321  0.0   1.14  20.87  128.140.8.200   http/1.1 cloudsms.com.ng:443         GET /cron/process_queue3.php HTTP/1.1
   39-0 25022  0/16/1174  W 0.22  6    0   6354026  0.0   0.27  28.66  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336353633
   40-0 -      0/0/528    . 0.00  444  0   4085770  0.0   0.00  14.50  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   41-0 -      0/0/195    . 0.00  770  0   2035425  0.0   0.00  6.75   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   42-0 -      0/0/557    . 0.00  1798 0   941367   0.0   0.00  13.95  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   43-0 -      0/0/77     . 0.00  1799 0   674074   0.0   0.00  1.76   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   44-0 -      0/0/210    . 0.00  1795 0   751569   0.0   0.00  5.75   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   45-0 -      0/0/139    . 0.00  1697 0   1354703  0.0   0.00  3.87   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   46-0 -      0/0/85     . 0.00  1540 0   45363    0.0   0.00  2.01   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   47-0 -      0/0/18     . 0.00  8602 0   7379     0.0   0.00  0.28   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   48-0 -      0/0/89     . 0.00  7977 0   685444   0.0   0.00  2.19   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   49-0 -      0/0/951    . 0.00  2832 0   6256647  0.0   0.00  23.61  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   50-0 -      0/0/2      . 0.00  8640 0   616      0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   51-0 -      0/0/6      . 0.00  8620 0   2135     0.0   0.00  0.09   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   52-0 -      0/0/145    . 0.00  7918 0   691033   0.0   0.00  2.72   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   53-0 -      0/0/2      . 0.00  8650 0   661      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   54-0 -      0/0/34     . 0.00  8533 0   17885    0.0   0.00  0.93   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   55-0 -      0/0/2      . 0.00  8647 0   644      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   56-0 -      0/0/4      . 0.00  8638 0   1109     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   57-0 -      0/0/2      . 0.00  8649 0   760      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   58-0 -      0/0/13     . 0.00  8598 0   6527     0.0   0.00  0.26   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   59-0 -      0/0/86     . 0.00  8505 0   15729    0.0   0.00  0.68   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   60-0 -      0/0/196    . 0.00  7757 0   724637   0.0   0.00  3.98   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   61-0 -      0/0/7      . 0.00  8623 0   3153     0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   62-0 -      0/0/4      . 0.00  8637 0   1059     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   63-0 -      0/0/318    . 0.00  7301 0   758246   0.0   0.00  5.87   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   64-0 -      0/0/205    . 0.00  7631 0   754691   0.0   0.00  9.18   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   65-0 -      0/0/201    . 0.00  7304 0   1367301  0.0   0.00  4.25   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 973
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 11 seconds, (range: 0...62)
   index usage: 17%, cache usage: 23%
   total entries stored since starting: 81674
   total entries replaced since starting: 0
   total entries expired since starting: 80671
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 24 hit, 174 miss
   total removes since starting: 30 hit, 132 miss
Youez - 2016 - github.com/yon3zu
LinuXploit