403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.17.57.txt
 ## swap threshold exceeded
## server overview
2025-11-20.17.57 load[0] mem[56/79] mysql[3/10] httpd[24]
              total        used        free      shared  buff/cache   available
Mem:           2363        1272         180          96         910         828
Swap:          1999        1670         329
 17:57:01 up  8:16,  0 users,  load average: 0.09, 0.16, 0.23
## system overview
top - 17:57:01 up  8:16,  0 users,  load average: 0.09, 0.16, 0.23
Tasks: 225 total,   3 running, 221 sleeping,   0 stopped,   1 zombie
%Cpu(s): 59.4 us, 18.8 sy,  0.0 ni, 18.8 id,  0.0 wa,  0.0 hi,  3.1 si,  0.0 st
KiB Mem :  2420300 total,   183504 free,  1303972 used,   932824 buff/cache
KiB Swap:  2047996 total,   336940 free,  1711056 used.   846572 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1793 mysql     20   0 1463640 265996   3224 S  81.2 11.0   6:50.16 /usr/sbin+
 92981 nigeria   20   0  404052  16144  10384 R  12.5  0.7   0:00.05 /opt/cpan+
     1 root      20   0   44268   3324   1484 S   0.0  0.1   0:43.01 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.67 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.46 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:38.33 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.40 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:05.71 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:25.59 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.72 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:02.59 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:03.02 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.72 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   39500   3320   3084 S   0.0  0.1   0:17.51 /usr/lib/+
   387 root      20   0   45352    252    248 S   0.0  0.0   0:00.38 /usr/lib/+
   410 root      16  -4   55532    512    384 S   0.0  0.0   0:02.98 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0   24712   1180    836 S   0.0  0.0   0:07.10 /usr/lib/+
   471 root      20   0   52852    496    384 S   0.0  0.0   0:00.01 /usr/sbin+
   474 dbus      20   0   58644   1392    680 S   0.0  0.1   0:16.19 /usr/bin/+
   476 rpc       20   0   69256    208    148 S   0.0  0.0   0:00.02 /sbin/rpc+
   486 polkitd   20   0  612240    984    640 S   0.0  0.0   0:04.27 /usr/lib/+
   487 root      20   0   21540    408    320 S   0.0  0.0   0:00.64 /usr/sbin+
   492 root      20   0  152780    248    204 S   0.0  0.0   0:00.02 /usr/sbin+
   493 root      20   0  224280   5260   1080 S   0.0  0.2   0:00.47 queueproc+
   507 nscd      20   0  994492   1412    720 S   0.0  0.1   0:24.53 /usr/sbin+
   515 root      20   0  195208     68     68 S   0.0  0.0   0:00.00 /usr/sbin+
   516 root      20   0    4388    156    152 S   0.0  0.0   0:00.00 /usr/sbin+
   543 root      20   0   24208    100     76 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0  124480    520    388 S   0.0  0.0   0:00.88 /usr/sbin+
   562 root      20   0  108296    180    176 S   0.0  0.0   0:00.00 /sbin/age+
   563 root      20   0  114704    180    180 S   0.0  0.0   0:00.02 /bin/bash
   613 mailnull  20   0   89116   3812    872 S   0.0  0.2   0:00.83 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   675 root       0 -20       0      0      0 S   0.0  0.0   0:02.78 [loop0]
   735 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [jbd2/loo+
   736 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   931 root      20   0  153404    400    316 S   0.0  0.0   0:00.61 pure-ftpd+
   932 root      20   0  572372   1048    476 S   0.0  0.0   0:02.59 /usr/bin/+
   933 systuser  20   0  112268     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   935 systuser  20   0  114016  15188   2680 S   0.0  0.6   0:07.21 /usr/loca+
   936 root      20   0 1277056   6144    164 S   0.0  0.3   0:21.20 /usr/bin/+
   937 root      20   0  445028   1380   1268 S   0.0  0.1   0:01.11 sw-engine+
   938 systuser  20   0   11796     40      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.01 /usr/loca+
   942 root      20   0  111304    544    436 S   0.0  0.0   0:04.25 /usr/sbin+
   943 systuser  20   0   11348     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   944 root      20   0 1350088   8612    128 S   0.0  0.4   0:28.32 /usr/bin/+
   945 root      20   0   51508    604    428 S   0.0  0.0   0:00.40 /usr/sbin+
   946 telegraf  20   0 5654304  36192   6176 S   0.0  1.5   0:16.30 /usr/loca+
   947 memcach+  20   0  342400    232    232 S   0.0  0.0   0:00.65 /usr/bin/+
   948 root      20   0 1763312  83496   1100 S   0.0  3.4   0:15.29 /usr/loca+
   949 root      20   0  389508    584    492 S   0.0  0.0   0:00.84 php-fpm: +
   950 root      20   0  261032  26976   4564 S   0.0  1.1   0:05.52 cpsrvd (S+
   953 root      20   0  388892    760    556 S   0.0  0.0   0:00.73 php-fpm: +
   958 root      20   0  314704   4556   3336 S   0.0  0.2   0:08.95 /usr/sbin+
   986 root      20   0  396248    608    516 S   0.0  0.0   0:00.76 php-fpm: +
   990 root      20   0  439788    916    824 S   0.0  0.0   0:00.90 php-fpm: +
   994 root      20   0  400740   3100    720 S   0.0  0.1   0:04.37 php-fpm: +
   996 named     20   0 1186868  42456   1900 S   0.0  1.8   0:19.15 /usr/sbin+
  1013 cpanelc+  20   0   10580   3832   2444 S   0.0  0.2   0:23.90 /usr/loca+
  1093 dovenull  20   0   47520   3204   1988 S   0.0  0.1   0:00.61 dovecot/p+
  1094 dovenull  20   0   48452   3292   1912 S   0.0  0.1   0:00.53 dovecot/i+
  1095 dovecot   20   0   10320    528    412 S   0.0  0.0   0:00.12 dovecot/a+
  1096 root      20   0   10452    460    280 S   0.0  0.0   0:00.38 dovecot/l+
  1097 dovenull  20   0   47308   3000   1976 S   0.0  0.1   0:00.47 dovecot/p+
  1098 dovenull  20   0   48268   3308   1960 S   0.0  0.1   0:00.54 dovecot/i+
  1104 root      20   0   24528   2588    544 S   0.0  0.1   0:00.21 dovecot/c+
  1110 dovecot   20   0   13568    524    324 S   0.0  0.0   0:00.08 dovecot/s+
  1145 systuser  20   0  157704   2928    944 S   0.0  0.1   0:00.15 SonarPush+
  1170 dovecot   20   0   41192   1624   1052 S   0.0  0.1   0:01.03 dovecot/a+
  1175 wp-tool+  20   0  412368  10000   1612 S   0.0  0.4   0:09.44 /usr/bin/+
  1176 wp-tool+  20   0  387528   3556   1560 S   0.0  0.1   0:00.31 /usr/bin/+
  1234 root      20   0  167452   1320    776 S   0.0  0.1   0:00.44 dnsadmin +
  1235 root      20   0  262228  24088   6224 S   0.0  1.0   0:04.09 cpdavd - +
  1237 root      20   0  209500  10764   2600 S   0.0  0.4   0:03.61 tailwatchd
  1669 root      20   0  299272    604    440 S   0.0  0.0   0:00.78 php-fpm: +
  1701 root      38  18  130416   1408    728 S   0.0  0.1   0:00.07 cpanellog+
  1959 root      20   0  266992   7380    740 S   0.0  0.3   0:02.76 /usr/sbin+
  1962 root      20   0   12820    452    296 S   0.0  0.0   0:03.54 /usr/loca+
  1963 root      20   0   12732    368    292 S   0.0  0.0   0:03.06 /usr/loca+
  1964 root      20   0   12848    472    296 S   0.0  0.0   0:03.31 /usr/loca+
  1968 root      20   0   53340    216    216 S   0.0  0.0   0:00.05 /usr/loca+
  2014 root      20   0  185024  13704   1168 S   0.0  0.6   0:26.91 lfd - sle+
 18294 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 18303 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.52 [kworker]
 23743 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 52291 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 56404 root      20   0  248036  42552   1248 S   0.0  1.8   0:05.75 /usr/loca+
 60751 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 64340 root      20   0  263124  98656   3092 S   0.0  4.1   0:04.31 spamd chi+
 64341 root      20   0  248036  40824    412 S   0.0  1.7   0:00.01 spamd chi+
 65618 nobody    20   0  277824  20672   4956 S   0.0  0.9   0:01.70 /usr/sbin+
 66515 nobody    20   0  277696  20360   4824 S   0.0  0.8   0:00.93 /usr/sbin+
 68303 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 68941 nobody    20   0  277952  20892   4888 S   0.0  0.9   0:01.49 /usr/sbin+
 68962 nobody    20   0  277960  20528   4844 S   0.0  0.8   0:01.53 /usr/sbin+
 72719 nobody    20   0  277892  19584   4640 S   0.0  0.8   0:01.12 /usr/sbin+
 72900 nobody    20   0  277768  19216   4392 S   0.0  0.8   0:00.33 /usr/sbin+
 72914 nobody    20   0  277764  19600   4684 S   0.0  0.8   0:00.88 /usr/sbin+
 73477 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 74458 nobody    20   0  277900  19004   4408 S   0.0  0.8   0:00.89 /usr/sbin+
 78264 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 78269 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 80726 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 81321 nobody    20   0  277760  19468   4512 S   0.0  0.8   0:00.97 /usr/sbin+
 83187 nobody    20   0  277628  19312   4576 S   0.0  0.8   0:00.51 /usr/sbin+
 83201 nobody    20   0  277696  18984   4464 S   0.0  0.8   0:00.33 /usr/sbin+
 83203 nobody    20   0  277892  19284   4660 S   0.0  0.8   0:00.67 /usr/sbin+
 83204 nobody    20   0  277736  18696   4096 S   0.0  0.8   0:00.16 /usr/sbin+
 83522 nobody    20   0  277760  19072   4384 S   0.0  0.8   0:00.28 /usr/sbin+
 83531 nobody    20   0  277760  19176   4380 S   0.0  0.8   0:00.57 /usr/sbin+
 85323 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 86498 nobody    20   0  277760  18980   4356 S   0.0  0.8   0:00.82 /usr/sbin+
 87115 nobody    20   0  277476  18148   3948 S   0.0  0.7   0:00.42 /usr/sbin+
 87116 nobody    20   0  277492  18556   4284 S   0.0  0.8   0:00.85 /usr/sbin+
 87123 nobody    20   0  277892  18644   4092 S   0.0  0.8   0:00.17 /usr/sbin+
 87513 nobody    20   0  277588  18272   3964 S   0.0  0.8   0:00.23 /usr/sbin+
 87523 nobody    20   0  277760  18488   3992 S   0.0  0.8   0:00.16 /usr/sbin+
 88595 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 89174 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 89297 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 89476 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 89654 nobody    20   0  277492  18512   4104 S   0.0  0.8   0:00.33 /usr/sbin+
 89664 nobody    20   0  277576  18288   3944 S   0.0  0.8   0:00.06 /usr/sbin+
 89674 nobody    20   0  277904  18384   3868 S   0.0  0.8   0:00.15 /usr/sbin+
 89680 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 89897 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 89992 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 90250 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 90369 nobody    20   0  277760  18768   4260 S   0.0  0.8   0:00.28 /usr/sbin+
 90381 nobody    20   0  277764  18644   4076 S   0.0  0.8   0:00.12 /usr/sbin+
 90382 nobody    20   0  277760  18600   4140 S   0.0  0.8   0:00.31 /usr/sbin+
 90397 nobody    20   0  277760  18344   3900 S   0.0  0.8   0:00.08 /usr/sbin+
 90399 nobody    20   0  277756  18560   3936 S   0.0  0.8   0:00.07 /usr/sbin+
 90400 nobody    20   0  277760  18376   3944 S   0.0  0.8   0:00.32 /usr/sbin+
 90510 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 90704 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 91041 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 91252 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 91383 nobody    20   0  277892  18268   3840 S   0.0  0.8   0:00.24 /usr/sbin+
 91456 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 91806 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 91938 nobody    20   0  277760  18460   3980 S   0.0  0.8   0:00.11 /usr/sbin+
 92031 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 92231 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 92504 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 92698 cloudw    20   0  367184  19144  12236 S   0.0  0.8   0:00.21 /opt/cpan+
 92785 root      20   0  261032  23844   1408 S   0.0  1.0   0:00.00 cpaneld -+
 92810 nigeria   20   0  400460   5572   2328 S   0.0  0.2   0:00.00 php-fpm: +
 92828 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 92880 cloudw    20   0  366248  16792  10940 S   0.0  0.7   0:00.07 /opt/cpan+
 92882 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 92920 root      20   0  111304   4444   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 92921 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 92922 root      20   0  111304   4444   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 92923 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 92935 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 92936 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 92937 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 92938 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 92939 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 92940 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 92942 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 92943 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 92944 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 92946 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 92948 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 92951 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 92952 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 92953 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 92955 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 92956 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 92957 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 92958 root      20   0   20164    964    768 S   0.0  0.0   0:00.00 jailshell+
 92961 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 92962 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 92963 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 92964 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 92965 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 92969 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 92979 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 92982 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 92985 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 93009 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 93011 cloudsms  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 93015 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 93016 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 93017 cloudsms  20   0  404052  15612  10164 S   0.0  0.6   0:00.00 /opt/cpan+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:40   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:40   0:38  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:40   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    09:40   0:25  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   09:40   0:03  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kvm-irqfd-clean]
root        675  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [loop0]
root        735  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/loop0-8]
root        736  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root      23743  0.0  0.0      0     0 ?        D    16:30   0:00  \_ [kworker/u200:0]
root      52291  0.0  0.0      0     0 ?        S    17:07   0:00  \_ [kworker/0:1]
root      60751  0.0  0.0      0     0 ?        D    17:17   0:00  \_ [kworker/1:4]
root      68303  0.0  0.0      0     0 ?        S    17:26   0:00  \_ [kworker/0:2]
root      73477  0.0  0.0      0     0 ?        D    17:32   0:00  \_ [kworker/1:0]
root      78264  0.0  0.0      0     0 ?        S    17:38   0:00  \_ [kworker/u200:1]
root      78269  0.0  0.0      0     0 ?        S    17:38   0:00  \_ [kworker/0:0]
root      80726  0.0  0.0      0     0 ?        S    17:41   0:00  \_ [kworker/1:2]
root      85323  0.0  0.0      0     0 ?        S    17:47   0:00  \_ [kworker/0:4]
root      88595  0.0  0.0      0     0 ?        S    17:51   0:00  \_ [kworker/1:1]
root      89297  0.0  0.0      0     0 ?        S    17:52   0:00  \_ [kworker/1:3]
root      89992  0.0  0.0      0     0 ?        S    17:53   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44268  3324 ?        Ss   09:40   0:43 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.1  39500  3320 ?        Ss   09:40   0:17 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   252 ?        Ss   09:40   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   512 ?        S<sl 09:40   0:02 /sbin/auditd
root        470  0.0  0.0  24712  1180 ?        Ss   09:40   0:07 /usr/lib/systemd/systemd-logind
root        471  0.0  0.0  52852   496 ?        Ss   09:40   0:00 /usr/sbin/smartd -n -q never
dbus        474  0.0  0.0  58644  1392 ?        Ss   09:40   0:16 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         476  0.0  0.0  69256   208 ?        Ss   09:40   0:00 /sbin/rpcbind -w
polkitd     486  0.0  0.0 612240   984 ?        Ssl  09:40   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        487  0.0  0.0  21540   408 ?        Ss   09:40   0:00 /usr/sbin/irqbalance --foreground
root        492  0.0  0.0 152780   248 ?        Ss   09:40   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        493  0.0  0.2 224280  5260 ?        Ss   09:40   0:00 queueprocd - waiting up to 60s to process a task
nscd        507  0.0  0.0 994492  1412 ?        Ssl  09:40   0:24 /usr/sbin/nscd
root        515  0.0  0.0 195208    68 ?        Ssl  09:40   0:00 /usr/sbin/gssproxy -D
root        516  0.0  0.0   4388   156 ?        Ss   09:40   0:00 /usr/sbin/acpid
root        543  0.0  0.0  24208   100 ?        Ss   09:40   0:00 /usr/sbin/atd -f
root        545  0.0  0.0 124480   520 ?        Ss   09:40   0:00 /usr/sbin/crond -n
root      92935  0.0  0.0 183048  2152 ?        S    17:57   0:00  \_ /usr/sbin/CROND -n
root      92961  0.0  0.0 113284  1212 ?        Ss   17:57   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      92962  0.0  0.0 108052   356 ?        S    17:57   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      92969  0.0  0.0 113288  1516 ?        S    17:57   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      93018  0.0  0.0 153840  2096 ?        R    17:57   0:00  |               \_ ps auxf
root      92936  0.0  0.0      0     0 ?        Z    17:57   0:00  \_ [crond] <defunct>
root      92937  0.0  0.0 183048  2156 ?        S    17:57   0:00  \_ /usr/sbin/CROND -n
root      92963  0.0  0.0  20164   804 ?        Ss   17:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      92938  0.0  0.0 183048  2156 ?        S    17:57   0:00  \_ /usr/sbin/CROND -n
root      92952  0.0  0.0  20164   804 ?        Ss   17:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      92939  0.0  0.0 183048  2156 ?        S    17:57   0:00  \_ /usr/sbin/CROND -n
root      92964  0.0  0.0  20164   984 ?        Ss   17:57   0:00  |   \_ jailshell (cloudsms) [93015] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  93015  0.0  0.0      0     0 ?        D    17:57   0:00  |       \_ [jailshell]
root      92940  0.0  0.0 183048  2152 ?        S    17:57   0:00  \_ /usr/sbin/CROND -n
root      92951  0.0  0.0  20164   808 ?        Ss   17:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      92942  0.0  0.0 183048  2148 ?        S    17:57   0:00  \_ /usr/sbin/CROND -n
root      92955  0.0  0.0  20164   808 ?        Ss   17:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      92943  0.0  0.0 183048  2148 ?        S    17:57   0:00  \_ /usr/sbin/CROND -n
root      92965  0.0  0.0  20164   804 ?        Ss   17:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      92944  0.0  0.0 183048  2148 ?        S    17:57   0:00  \_ /usr/sbin/CROND -n
root      92956  0.0  0.0  20164   808 ?        Ss   17:57   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      92946  0.0  0.0 183048  2148 ?        S    17:57   0:00  \_ /usr/sbin/CROND -n
root      92957  0.0  0.0  20164   968 ?        Ss   17:57   0:00  |   \_ jailshell (pactpay) [92982] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   92982  0.0  0.0  20164   260 ?        S    17:57   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   92985  0.0  0.7 480124 17688 ?        S    17:57   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      92948  0.0  0.0 183048  2148 ?        S    17:57   0:00  \_ /usr/sbin/CROND -n
root      92958  0.0  0.0  20164   964 ?        Ss   17:57   0:00      \_ jailshell (nigeria) [92979] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   92979  0.0  0.0  20164   256 ?        S    17:57   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   92981  0.0  0.6 404052 16144 ?        S    17:57   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        562  0.0  0.0 108296   180 tty1     Ss+  09:40   0:00 /sbin/agetty --noclear tty1 linux
root        563  0.0  0.0 114704   180 ttyS0    Ss+  09:40   0:00 /bin/bash
mailnull    613  0.0  0.1  89116  3812 ?        Ss   09:40   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        931  0.0  0.0 153404   400 ?        Ss   09:40   0:00 pure-ftpd (SERVER)
root        932  0.0  0.0 572372  1048 ?        Ssl  09:40   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    933  0.0  0.0 112268    56 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.6 114016 15188 ?        Ssl  09:40   0:07 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        936  0.0  0.2 1277056 6144 ?        Ssl  09:40   0:21 /usr/bin/checkstatus
root        937  0.0  0.0 445028  1380 ?        Ss   09:40   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  92828  0.0  0.0 445028   320 ?        S    17:56   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    938  0.0  0.0  11796    40 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    939  0.0  0.0 111608    60 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        942  0.0  0.0 111304   544 ?        Ss   09:40   0:04 /usr/sbin/sshd -D
root      92920  0.0  0.1 111304  4444 ?        Ss   17:56   0:00  \_ sshd: [accepted]
sshd      92921  0.0  0.1 115644  2624 ?        S    17:56   0:00  |   \_ sshd: [net]
root      92922  0.0  0.1 111304  4444 ?        Ss   17:56   0:00  \_ sshd: [accepted]
sshd      92923  0.0  0.1 115644  2632 ?        S    17:56   0:00      \_ sshd: [net]
systuser    943  0.0  0.0  11348    24 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        944  0.0  0.3 1350088 8612 ?        Ssl  09:40   0:28 /usr/bin/cspdaemon
root        945  0.0  0.0  51508   604 ?        Ss   09:40   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1093  0.0  0.1  47520  3204 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1094  0.0  0.1  48452  3292 ?        S    09:40   0:00  \_ dovecot/imap-login
dovecot    1095  0.0  0.0  10320   528 ?        S    09:40   0:00  \_ dovecot/anvil
root       1096  0.0  0.0  10452   460 ?        S    09:40   0:00  \_ dovecot/log
dovenull   1097  0.0  0.1  47308  3000 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  48268  3308 ?        S    09:40   0:00  \_ dovecot/imap-login
root       1104  0.0  0.1  24528  2588 ?        S    09:40   0:00  \_ dovecot/config
dovecot    1110  0.0  0.0  13568   524 ?        S    09:40   0:00  \_ dovecot/stats
dovecot    1170  0.0  0.0  41192  1624 ?        S    09:40   0:01  \_ dovecot/auth
telegraf    946  0.0  1.4 5654304 36192 ?       SLsl 09:40   0:16 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    947  0.0  0.0 342400   232 ?        Ssl  09:40   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        948  0.0  3.4 1763312 83496 ?       Ssl  09:40   0:15 /usr/local/cpanel/3rdparty/bin/clamd -F
root        949  0.0  0.0 389508   584 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        950  0.0  1.1 261032 26976 ?        Ss   09:40   0:05 cpsrvd (SSL) - waiting for connections                   
root      92785  0.0  0.9 261032 23844 ?        S    17:56   0:00  \_ cpaneld - serving 162.142.125.205
root      92882  0.0  0.0      0     0 ?        Z    17:56   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.0 388892   760 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        958  0.0  0.1 314704  4556 ?        Ssl  09:40   0:08 /usr/sbin/rsyslogd -n
root        986  0.0  0.0 396248   608 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        990  0.0  0.0 439788   916 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        994  0.0  0.1 400740  3100 ?        Ss   09:40   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   92810  0.0  0.2 400460  5572 ?        S    17:56   0:00  \_ php-fpm: pool nigeriadecide_org
named       996  0.0  1.7 1186868 42456 ?       Ssl  09:40   0:19 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
cpanelc+   1013  0.0  0.1  10580  3832 ?        Ss   09:40   0:23 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1145  0.0  0.1 157704  2928 ?        S    09:40   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1175  0.0  0.4 412368 10000 ?        Ss   09:40   0:09 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1176  0.0  0.1 387528  3556 ?        Ss   09:40   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1234  0.0  0.0 167452  1320 ?        Ss   09:40   0:00 dnsadmin - dormant mode
root       1235  0.0  0.9 262228 24088 ?        Ss   09:40   0:04 cpdavd - accepting connections on: 2091, 2077, 2078
root       1237  0.0  0.4 209500 10764 ?        Ss   09:40   0:03 tailwatchd
root       1669  0.0  0.0 299272   604 ?        Ss   09:40   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1701  0.0  0.0 130416  1408 ?        SN   09:40   0:00 cpanellogd - sleeping for logs
mysql      1793  1.3 10.9 1463640 265996 ?      Sl   09:40   6:50 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1959  0.0  0.3 266992  7380 ?        Ss   09:40   0:02 /usr/sbin/httpd -k start
root       1962  0.0  0.0  12820   452 ?        S    09:40   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1963  0.0  0.0  12732   368 ?        S    09:40   0:03  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1964  0.0  0.0  12848   472 ?        S    09:40   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1968  0.0  0.0  53340   216 ?        S    09:40   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    65618  0.0  0.8 277824 20672 ?        S    17:22   0:01  \_ /usr/sbin/httpd -k start
nobody    66515  0.0  0.8 277696 20360 ?        S    17:24   0:00  \_ /usr/sbin/httpd -k start
cloudw    92880  1.0  0.6 366248 16792 ?        R    17:56   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    68941  0.0  0.8 277952 20892 ?        S    17:26   0:01  \_ /usr/sbin/httpd -k start
nobody    68962  0.0  0.8 277960 20528 ?        S    17:26   0:01  \_ /usr/sbin/httpd -k start
nobody    72719  0.0  0.8 277892 19584 ?        S    17:31   0:01  \_ /usr/sbin/httpd -k start
cloudw    89897  0.0  0.7 367184 19028 ?        S    17:52   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    72900  0.0  0.7 277768 19216 ?        S    17:31   0:00  \_ /usr/sbin/httpd -k start
nobody    72914  0.0  0.8 277764 19600 ?        S    17:31   0:00  \_ /usr/sbin/httpd -k start
nobody    74458  0.0  0.7 277900 19004 ?        S    17:33   0:00  \_ /usr/sbin/httpd -k start
cloudw    89174  0.0  0.7 367184 19032 ?        S    17:51   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    81321  0.1  0.8 277760 19468 ?        S    17:41   0:00  \_ /usr/sbin/httpd -k start
cloudw    92504  0.4  0.7 367184 19028 ?        S    17:56   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    83187  0.0  0.7 277628 19312 ?        S    17:44   0:00  \_ /usr/sbin/httpd -k start
cloudw    92031  0.2  0.7 367184 19032 ?        S    17:55   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    83201  0.0  0.7 277696 18984 ?        S    17:44   0:00  \_ /usr/sbin/httpd -k start
cloudw    90250  0.0  0.7 367184 19028 ?        S    17:53   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    83203  0.0  0.7 277892 19284 ?        S    17:44   0:00  \_ /usr/sbin/httpd -k start
nobody    83204  0.0  0.7 277736 18696 ?        S    17:44   0:00  \_ /usr/sbin/httpd -k start
cloudw    90704  0.1  0.7 367184 19032 ?        S    17:53   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    83522  0.0  0.7 277760 19072 ?        S    17:44   0:00  \_ /usr/sbin/httpd -k start
cloudw    89680  0.0  0.7 367184 19032 ?        S    17:52   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    83531  0.0  0.7 277760 19176 ?        S    17:44   0:00  \_ /usr/sbin/httpd -k start
cloudw    92231  0.3  0.7 367184 19028 ?        S    17:55   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    86498  0.1  0.7 277760 18980 ?        S    17:48   0:00  \_ /usr/sbin/httpd -k start
nobody    87115  0.0  0.7 277476 18148 ?        S    17:49   0:00  \_ /usr/sbin/httpd -k start
cloudw    89476  0.0  0.7 367184 19028 ?        S    17:52   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    87116  0.1  0.7 277492 18556 ?        S    17:49   0:00  \_ /usr/sbin/httpd -k start
nobody    87123  0.0  0.7 277892 18644 ?        S    17:49   0:00  \_ /usr/sbin/httpd -k start
cloudw    92698  0.7  0.7 367184 19144 ?        S    17:56   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    87513  0.0  0.7 277588 18272 ?        S    17:49   0:00  \_ /usr/sbin/httpd -k start
nobody    87523  0.0  0.7 277760 18488 ?        S    17:49   0:00  \_ /usr/sbin/httpd -k start
nobody    89654  0.1  0.7 277492 18512 ?        S    17:52   0:00  \_ /usr/sbin/httpd -k start
nobody    89664  0.0  0.7 277576 18288 ?        S    17:52   0:00  \_ /usr/sbin/httpd -k start
cloudw    90510  0.1  0.7 367184 19028 ?        S    17:53   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    89674  0.0  0.7 277904 18384 ?        S    17:52   0:00  \_ /usr/sbin/httpd -k start
cloudw    91806  0.1  0.7 367184 19032 ?        S    17:55   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    90369  0.1  0.7 277760 18768 ?        S    17:53   0:00  \_ /usr/sbin/httpd -k start
nobody    90381  0.0  0.7 277764 18644 ?        S    17:53   0:00  \_ /usr/sbin/httpd -k start
cloudw    91456  0.1  0.7 367184 19028 ?        S    17:54   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    90382  0.1  0.7 277760 18600 ?        S    17:53   0:00  \_ /usr/sbin/httpd -k start
nobody    90397  0.0  0.7 277760 18344 ?        S    17:53   0:00  \_ /usr/sbin/httpd -k start
cloudw    91041  0.1  0.7 367184 19032 ?        S    17:54   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    90399  0.0  0.7 277756 18560 ?        S    17:53   0:00  \_ /usr/sbin/httpd -k start
cloudw    91252  0.1  0.7 367184 19032 ?        S    17:54   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    90400  0.1  0.7 277760 18376 ?        S    17:53   0:00  \_ /usr/sbin/httpd -k start
nobody    91383  0.1  0.7 277892 18268 ?        S    17:54   0:00  \_ /usr/sbin/httpd -k start
nobody    91938  0.1  0.7 277760 18460 ?        S    17:55   0:00  \_ /usr/sbin/httpd -k start
root       2014  0.0  0.5 185024 13704 ?        Ss   09:40   0:26 lfd - sleeping
oysipao+  18294  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+  18303  0.0  0.0   3152    36 ?        S    10:01   0:00  \_ [kworker]
root      56404  0.0  1.7 248036 42552 ?        Ss   10:49   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      64340  0.0  4.0 263124 98656 ?        S    11:00   0:04  \_ spamd child
root      64341  0.0  1.6 248036 40824 ?        S    11:00   0:00  \_ spamd child
## mysql stats
Uptime: 51505  Threads: 3  Questions: 2229665  Slow queries: 0  Opens: 10869  Flush tables: 1  Open tables: 2000  Queries per second avg: 43.290
*************************** 1. row ***************************
     Id: 36368
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 36370
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-20' LIMIT 1
*************************** 3. row ***************************
     Id: 36377
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.134.212 TIME_WAIT
      1 170.23.9.50 TIME_WAIT
      1 192.178.4.101 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.222.95.19 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 17:57:01 WAT
   Restart Time: Thursday, 20-Nov-2025 03:38:40 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 14 hours 18 minutes 21 seconds
   Server load: 0.09 0.16 0.23
   Total accesses: 157657 - Total Traffic: 3.8 GB - Total Duration: 699258722
   CPU Usage: u12.4 s7.42 cu2143.18 cs1617.92 - 7.34% CPU load
   3.06 requests/sec - 77.1 kB/second - 25.2 kB/request - 4435.32 ms/request
   24 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

W.WWK_KKL_L.K_LKL._WW_.KLL_LW.WLW.L.__L.........................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur    Conn  Child  Slot      Client      Protocol            VHost                                        Request
   0-0  72900 0/62/5697  W 2.11 0     0   18102096 0.0   1.43  149.47 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   1-0  -     0/0/5466   . 0.00 90    0   64532184 0.0   0.00  137.45 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   2-0  66515 0/178/5940 W 4.60 6     0   18887413 0.0   3.78  151.98 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363134
   3-0  81321 0/155/5869 W 4.40 46    0   19988195 0.0   4.29  142.51 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363133
   4-0  87513 7/39/5468  K 1.24 2     393 20427106 219.0 1.06  150.96 192.178.4.96    http/1.1 team.cloudware.ng:443       GET /?l=3403226593 HTTP/1.1
   5-0  90369 0/50/6269  _ 1.09 0     0   14230054 0.0   1.24  161.78 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   6-0  87523 2/28/5632  K 0.88 1     266 16825442 65.6  0.72  139.42 192.178.4.102   http/1.1 team.cloudware.ng:443       GET /?l=872678952 HTTP/1.1
   7-0  91383 6/42/6107  K 1.11 3     398 17085167 185.8 1.10  156.77 192.178.4.103   http/1.1 team.cloudware.ng:443       GET /?l=3474369198 HTTP/1.1
   8-0  87115 1/69/5306  L 1.87 286   0   19848518 5.3   1.92  146.68 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363131
   9-0  91938 0/22/5572  _ 0.38 1     31  18617357 0.0   0.40  134.18 116.203.129.16  http/1.1 cloudsms.com.ng:443         GET /cron/process_queue1.php HTTP/1.1
   10-0 90381 1/23/5135  L 0.42 126   0   19673000 5.3   0.50  123.15 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363132
   11-0 -     0/0/5212   . 0.00 57    0   18312818 0.0   0.00  115.77 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   12-0 68941 6/252/4775 K 7.13 0     357 22155239 185.9 6.53  111.16 192.178.4.100   http/1.1 team.cloudware.ng:443       GET /?l=892513042 HTTP/1.1
   13-0 68962 0/344/4528 _ 7.08 1     29  19489757 0.0   6.24  109.83 116.203.129.16  http/1.1 cloudsms.com.ng:443         GET /cron/process_queue5.php HTTP/1.1
   14-0 83522 1/47/4748  L 1.34 266   0   18329987 5.3   1.17  124.35 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363131
   15-0 90382 2/52/5238  K 1.30 4     410 15151706 65.6  1.44  123.06 192.178.4.97    http/1.1 team.cloudware.ng:443       GET /?l=876907262 HTTP/1.1
   16-0 90397 1/14/4593  L 0.31 166   0   15704976 5.3   0.34  113.24 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363132
   17-0 -     0/0/4541   . 0.00 114   0   19424667 0.0   0.00  108.53 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   18-0 89654 0/56/5113  _ 1.36 0     24  14508496 0.0   1.43  113.77 128.140.8.200   http/1.1 cloudsms.com.ng:443         GET /cron/process_queue3.php HTTP/1.1
   19-0 86498 1/142/4369 W 3.39 0     0   17114858 35.3  3.54  109.14 192.178.4.101   http/1.1 team.cloudware.ng:443       GET /?l=881092403 HTTP/1.1
   20-0 83531 0/96/3941  W 2.62 66    0   21745458 0.0   2.76  93.06  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363133
   21-0 65618 0/291/3588 _ 8.13 0     22  13825601 0.0   7.70  85.00  116.203.129.16  http/1.1 cloudsms.com.ng:443         GET /cron/process_queue2.php HTTP/1.1
   22-0 -     0/0/3376   . 0.00 207   0   15604691 0.0   0.00  82.48  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   23-0 72914 1/150/2861 K 4.33 0     265 16774889 34.7  3.85  70.76  192.178.4.99    http/1.1 team.cloudware.ng:443       GET /?l=2386764961 HTTP/1.1
   24-0 74458 1/141/2767 L 4.23 306   0   16040782 5.3   4.12  73.72  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363131
   25-0 89664 1/13/3129  L 0.21 206   0   13036081 5.3   0.25  74.10  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363132
   26-0 87116 0/137/2606 _ 3.68 0     22  12785433 0.0   3.85  63.84  116.203.134.67  http/1.1 cloudsms.com.ng:443         GET /cron/process_queue4.php HTTP/1.1
   27-0 72719 1/183/2650 L 5.21 246   0   13451104 5.3   4.86  66.40  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363131
   28-0 87123 0/32/2310  W 0.85 26    0   15028889 0.0   0.71  46.98  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363133
   29-0 -     0/0/2515   . 0.00 209   0   13406718 0.0   0.00  59.22  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   30-0 83187 0/87/2449  W 2.22 86    0   9999082  0.0   2.31  52.54  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363133
   31-0 90399 1/16/1936  L 0.24 146   0   9804457  5.3   3.82  56.59  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363132
   32-0 89674 0/28/2331  W 0.60 106   0   13303294 0.0   0.55  66.26  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363133
   33-0 -     0/0/1347   . 0.00 58    0   10936564 0.0   0.00  32.04  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   34-0 83201 1/62/1228  L 1.49 226   0   11424871 5.3   1.58  26.82  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363131
   35-0 -     0/0/1077   . 0.00 204   0   8829523  0.0   0.00  25.92  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   36-0 90400 0/57/1443  _ 1.41 1     261 8349457  0.0   1.36  32.69  192.178.4.104   http/1.1 team.cloudware.ng:443       GET /?l=3382580324 HTTP/1.1
   37-0 83203 0/117/1895 _ 2.96 2     2   8567318  0.0   2.96  38.67  34.206.249.188  http/1.1 nigeriadecide.org:443       GET /polling_unit_category.php/2019elections/blog/images/images
   38-0 83204 1/26/1262  L 0.85 186   0   10760074 5.3   0.66  26.62  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363132
   39-0 -     0/0/1487   . 0.00 1529  0   10364973 0.0   0.00  36.02  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   40-0 -     0/0/785    . 0.00 776   0   5487198  0.0   0.00  20.60  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   41-0 -     0/0/392    . 0.00 2354  0   2781829  0.0   0.00  11.81  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   42-0 -     0/0/680    . 0.00 2365  0   2285353  0.0   0.00  16.74  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   43-0 -     0/0/250    . 0.00 1361  0   2690856  0.0   0.00  5.98   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   44-0 -     0/0/778    . 0.00 193   0   4855287  0.0   0.00  18.18  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   45-0 -     0/0/306    . 0.00 2369  0   2076497  0.0   0.00  8.08   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   46-0 -     0/0/257    . 0.00 2352  0   3342075  0.0   0.00  6.37   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   47-0 -     0/0/105    . 0.00 2058  0   686585   0.0   0.00  2.22   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   48-0 -     0/0/150    . 0.00 1532  0   2001878  0.0   0.00  3.45   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   49-0 -     0/0/951    . 0.00 7872  0   6256647  0.0   0.00  23.61  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   50-0 -     0/0/2      . 0.00 13680 0   616      0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   51-0 -     0/0/6      . 0.00 13660 0   2135     0.0   0.00  0.09   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   52-0 -     0/0/145    . 0.00 12958 0   691033   0.0   0.00  2.72   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   53-0 -     0/0/2      . 0.00 13690 0   661      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   54-0 -     0/0/34     . 0.00 13573 0   17885    0.0   0.00  0.93   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   55-0 -     0/0/2      . 0.00 13687 0   644      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   56-0 -     0/0/4      . 0.00 13678 0   1109     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   57-0 -     0/0/2      . 0.00 13689 0   760      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   58-0 -     0/0/13     . 0.00 13638 0   6527     0.0   0.00  0.26   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   59-0 -     0/0/86     . 0.00 13545 0   15729    0.0   0.00  0.68   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   60-0 -     0/0/196    . 0.00 12797 0   724637   0.0   0.00  3.98   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   61-0 -     0/0/7      . 0.00 13663 0   3153     0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   62-0 -     0/0/4      . 0.00 13677 0   1059     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   63-0 -     0/0/318    . 0.00 12341 0   758246   0.0   0.00  5.87   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   64-0 -     0/0/205    . 0.00 12672 0   754691   0.0   0.00  9.18   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   65-0 -     0/0/201    . 0.00 12344 0   1367301  0.0   0.00  4.25   ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1042
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 0...30)
   index usage: 18%, cache usage: 24%
   total entries stored since starting: 100124
   total entries replaced since starting: 0
   total entries expired since starting: 99046
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 24 hit, 229 miss
   total removes since starting: 36 hit, 200 miss
Youez - 2016 - github.com/yon3zu
LinuXploit