403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.18.18.txt
 ## swap threshold exceeded
## server overview
2025-11-20.18.18 load[0] mem[56/79] mysql[1/10] httpd[27]
              total        used        free      shared  buff/cache   available
Mem:           2363        1254         163          94         945         846
Swap:          1999        1671         328
 18:18:01 up  8:37,  0 users,  load average: 0.22, 0.29, 0.27
## system overview
top - 18:18:02 up  8:37,  0 users,  load average: 0.22, 0.29, 0.27
Tasks: 222 total,   1 running, 220 sleeping,   0 stopped,   1 zombie
%Cpu(s): 48.6 us, 37.1 sy,  0.0 ni, 14.3 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   162584 free,  1289592 used,   968124 buff/cache
KiB Swap:  2047996 total,   336892 free,  1711104 used.   862572 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1793 mysql     20   0 1463640 265908   3196 S  47.1 11.0   7:06.43 /usr/sbin+
     1 root      20   0   44268   3320   1484 S  11.8  0.1   0:44.91 /usr/lib/+
  8286 nigeria   20   0  404052  16140  10384 S  11.8  0.7   0:00.02 /opt/cpan+
   470 root      20   0   24712   1180    836 S   5.9  0.0   0:07.42 /usr/lib/+
   474 dbus      20   0   58644   1384    680 S   5.9  0.1   0:16.93 /usr/bin/+
  8275 root      20   0  160220   2060   1580 R   5.9  0.1   0:00.01 top -bcn1
  8285 pactpay   20   0  480124  16792  11088 S   5.9  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.74 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.52 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:40.43 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.08 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.46 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:05.97 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:26.00 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.75 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:02.65 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:03.08 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.81 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   6416   6176 S   0.0  0.3   0:18.15 /usr/lib/+
   387 root      20   0   45352    252    248 S   0.0  0.0   0:00.38 /usr/lib/+
   410 root      16  -4   55532    512    384 S   0.0  0.0   0:03.07 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   471 root      20   0   52852    456    344 S   0.0  0.0   0:00.01 /usr/sbin+
   476 rpc       20   0   69256    208    148 S   0.0  0.0   0:00.03 /sbin/rpc+
   486 polkitd   20   0  612240    984    640 S   0.0  0.0   0:04.46 /usr/lib/+
   487 root      20   0   21540    408    320 S   0.0  0.0   0:00.67 /usr/sbin+
   492 root      20   0  152780    248    204 S   0.0  0.0   0:00.02 /usr/sbin+
   493 root      20   0  224280   5268   1120 S   0.0  0.2   0:00.47 queueproc+
   507 nscd      20   0  994492   1404    720 S   0.0  0.1   0:25.64 /usr/sbin+
   515 root      20   0  195208     68     68 S   0.0  0.0   0:00.00 /usr/sbin+
   516 root      20   0    4388    156    152 S   0.0  0.0   0:00.00 /usr/sbin+
   543 root      20   0   24208     84     60 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0  124480    520    388 S   0.0  0.0   0:00.91 /usr/sbin+
   562 root      20   0  108296    180    176 S   0.0  0.0   0:00.00 /sbin/age+
   563 root      20   0  114704    180    180 S   0.0  0.0   0:00.02 /bin/bash
   613 mailnull  20   0   89116   3896    952 S   0.0  0.2   0:00.85 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   675 root       0 -20       0      0      0 S   0.0  0.0   0:02.79 [loop0]
   735 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [jbd2/loo+
   736 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   931 root      20   0  153404    400    316 S   0.0  0.0   0:00.63 pure-ftpd+
   932 root      20   0  572372   1048    476 S   0.0  0.0   0:02.69 /usr/bin/+
   933 systuser  20   0  112268     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   935 systuser  20   0  114016  15028   2528 S   0.0  0.6   0:07.51 /usr/loca+
   936 root      20   0 1277056   6144    164 S   0.0  0.3   0:21.20 /usr/bin/+
   937 root      20   0  445028   1380   1268 S   0.0  0.1   0:01.17 sw-engine+
   938 systuser  20   0   11796     40      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.01 /usr/loca+
   942 root      20   0  111304    544    436 S   0.0  0.0   0:04.39 /usr/sbin+
   943 systuser  20   0   11348     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   944 root      20   0 1350088   8612    128 S   0.0  0.4   0:28.33 /usr/bin/+
   945 root      20   0   51508    600    428 S   0.0  0.0   0:00.42 /usr/sbin+
   946 telegraf  20   0 5654304  36748   6036 S   0.0  1.5   0:16.95 /usr/loca+
   947 memcach+  20   0  342400    232    232 S   0.0  0.0   0:00.69 /usr/bin/+
   948 root      20   0 1763312  85792   1040 S   0.0  3.5   0:15.33 /usr/loca+
   949 root      20   0  389508    628    536 S   0.0  0.0   0:00.87 php-fpm: +
   950 root      20   0  261032  26968   4556 S   0.0  1.1   0:05.70 cpsrvd (S+
   953 root      20   0  388892    852    644 S   0.0  0.0   0:00.76 php-fpm: +
   958 root      20   0  314704   7240   6020 S   0.0  0.3   0:09.30 /usr/sbin+
   986 root      20   0  396248    556    464 S   0.0  0.0   0:00.79 php-fpm: +
   990 root      20   0  439788    916    824 S   0.0  0.0   0:00.93 php-fpm: +
   994 root      20   0  400740   3100    720 S   0.0  0.1   0:04.53 php-fpm: +
   996 named     20   0 1186868  42456   1796 S   0.0  1.8   0:19.87 /usr/sbin+
  1013 cpanelc+  20   0   10580   3832   2444 S   0.0  0.2   0:24.94 /usr/loca+
  1093 dovenull  20   0   47520   3204   1988 S   0.0  0.1   0:00.64 dovecot/p+
  1094 dovenull  20   0   48452   3232   1908 S   0.0  0.1   0:00.54 dovecot/i+
  1095 dovecot   20   0   10320    528    412 S   0.0  0.0   0:00.14 dovecot/a+
  1096 root      20   0   10452    460    280 S   0.0  0.0   0:00.39 dovecot/l+
  1097 dovenull  20   0   47308   2988   1976 S   0.0  0.1   0:00.49 dovecot/p+
  1098 dovenull  20   0   48268   3304   1956 S   0.0  0.1   0:00.56 dovecot/i+
  1104 root      20   0   24556   2584    544 S   0.0  0.1   0:00.21 dovecot/c+
  1110 dovecot   20   0   13568    524    324 S   0.0  0.0   0:00.08 dovecot/s+
  1145 systuser  20   0  157704   2928    944 S   0.0  0.1   0:00.15 SonarPush+
  1170 dovecot   20   0   41192   1624   1052 S   0.0  0.1   0:01.05 dovecot/a+
  1175 wp-tool+  20   0  412368  10312   1924 S   0.0  0.4   0:09.83 /usr/bin/+
  1176 wp-tool+  20   0  387528   3788   1792 S   0.0  0.2   0:00.32 /usr/bin/+
  1234 root      20   0  167452   1320    776 S   0.0  0.1   0:00.46 dnsadmin +
  1235 root      20   0  183900   6692   3460 S   0.0  0.3   0:04.12 cpdavd - +
  1237 root      20   0  209500  10796   2600 S   0.0  0.4   0:03.72 tailwatchd
  1421 nobody    20   0  277484  18700   4284 S   0.0  0.8   0:00.31 /usr/sbin+
  1669 root      20   0  299272    604    440 S   0.0  0.0   0:00.82 php-fpm: +
  1701 root      38  18  130416   1408    728 S   0.0  0.1   0:00.07 cpanellog+
  1959 root      20   0  266992   7380    740 S   0.0  0.3   0:02.89 /usr/sbin+
  1962 root      20   0   12812    452    296 S   0.0  0.0   0:03.71 /usr/loca+
  1963 root      20   0   12732    368    292 S   0.0  0.0   0:03.19 /usr/loca+
  1964 root      20   0   12832    472    296 S   0.0  0.0   0:03.46 /usr/loca+
  1968 root      20   0   53340    216    216 S   0.0  0.0   0:00.05 /usr/loca+
  2014 root      20   0  185128  13600   1168 S   0.0  0.6   0:28.11 lfd - sle+
  2106 nobody    20   0  277768  19052   4104 S   0.0  0.8   0:00.27 /usr/sbin+
  3543 nobody    20   0  277492  19048   4424 S   0.0  0.8   0:00.32 /usr/sbin+
  4315 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
  4451 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  4613 nobody    20   0  277760  18308   3860 S   0.0  0.8   0:00.09 /usr/sbin+
  4625 nobody    20   0  277760  18452   4000 S   0.0  0.8   0:00.27 /usr/sbin+
  4626 nobody    20   0  277336  17752   3732 S   0.0  0.7   0:00.00 /usr/sbin+
  4647 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
  4854 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
  5141 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.20 /opt/cpan+
  5200 nobody    20   0  277760  18584   3864 S   0.0  0.8   0:00.08 /usr/sbin+
  5317 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  5480 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
  5693 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
  5905 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
  6379 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
  6608 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.20 /opt/cpan+
  6800 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
  7026 nescrow+  20   0   29148   2732   2236 S   0.0  0.1   0:00.00 dovecot/q+
  7095 cloudw    20   0  367184  19032  12188 S   0.0  0.8   0:00.21 /opt/cpan+
  7302 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
  7373 nobody    20   0  277936  18588   4032 S   0.0  0.8   0:00.08 /usr/sbin+
  7382 nobody    20   0  277760  18520   3808 S   0.0  0.8   0:00.17 /usr/sbin+
  7502 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
  7570 nobody    20   0  277760  18424   3788 S   0.0  0.8   0:00.09 /usr/sbin+
  7627 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  7754 nobody    20   0  277760  18472   3836 S   0.0  0.8   0:00.06 /usr/sbin+
  7801 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
  7950 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
  7963 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  7966 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.20 /opt/cpan+
  8102 nigeria   20   0  400460   5572   2324 S   0.0  0.2   0:00.00 php-fpm: +
  8141 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
  8151 cloudw    20   0  366248  17052  11084 S   0.0  0.7   0:00.07 /opt/cpan+
  8155 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  8208 cloudw    20   0  353712  16240  10612 S   0.0  0.7   0:00.01 /opt/cpan+
  8210 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8212 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8213 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8214 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8215 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8216 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8217 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8219 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8220 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8221 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8222 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8224 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8226 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  8227 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
  8228 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
  8253 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8254 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8255 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8256 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8257 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8259 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8261 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8262 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  8263 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8264 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
  8266 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8283 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
  8284 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 18294 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 18303 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.55 [kworker]
 23743 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kworker/+
 56404 root      20   0  248036  42552   1248 S   0.0  1.8   0:05.89 /usr/loca+
 60751 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 64340 root      20   0  266516 103524   3788 S   0.0  4.3   0:05.07 spamd chi+
 64341 root      20   0  248036  40824    412 S   0.0  1.7   0:00.01 spamd chi+
 72719 nobody    20   0  277892  19992   4804 S   0.0  0.8   0:02.18 /usr/sbin+
 72900 nobody    20   0  277704  20184   5000 S   0.0  0.8   0:01.23 /usr/sbin+
 78264 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 83203 nobody    20   0  277892  20304   4984 S   0.0  0.8   0:01.65 /usr/sbin+
 85323 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 87115 nobody    20   0  277500  19912   4956 S   0.0  0.8   0:02.00 /usr/sbin+
 87513 nobody    20   0  277588  19288   4628 S   0.0  0.8   0:01.01 /usr/sbin+
 87523 nobody    20   0  277760  19292   4524 S   0.0  0.8   0:01.08 /usr/sbin+
 89664 nobody    20   0  277604  20356   4868 S   0.0  0.8   0:01.68 /usr/sbin+
 89992 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 90397 nobody    20   0  277760  19508   4704 S   0.0  0.8   0:00.91 /usr/sbin+
 90400 nobody    20   0  277760  20124   5004 S   0.0  0.8   0:01.83 /usr/sbin+
 93776 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 94068 nobody    20   0  277892  20008   4808 S   0.0  0.8   0:01.35 /usr/sbin+
 94088 nobody    20   0  277768  19860   4796 S   0.0  0.8   0:00.99 /usr/sbin+
 97178 nobody    20   0  277760  18812   4128 S   0.0  0.8   0:00.23 /usr/sbin+
 97204 nobody    20   0  277760  20160   4856 S   0.0  0.8   0:01.09 /usr/sbin+
 98318 nobody    20   0  277892  18928   4296 S   0.0  0.8   0:00.64 /usr/sbin+
 98581 nobody    20   0  277768  19256   4308 S   0.0  0.8   0:00.43 /usr/sbin+
 99088 nobody    20   0  277760  19532   4712 S   0.0  0.8   0:00.80 /usr/sbin+
 99103 nobody    20   0  277528  19508   4716 S   0.0  0.8   0:00.85 /usr/sbin+
 99105 nobody    20   0  277836  19188   4292 S   0.0  0.8   0:00.31 /usr/sbin+
 99106 nobody    20   0  277768  18732   4080 S   0.0  0.8   0:00.18 /usr/sbin+
 99219 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 99250 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
100103 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
100565 nobody    20   0  277696  19808   4792 S   0.0  0.8   0:01.19 /usr/sbin+
101944 nobody    20   0  277896  19444   4520 S   0.0  0.8   0:00.47 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:40   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:40   0:40  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:40   0:05  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    09:40   0:26  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   09:40   0:03  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kvm-irqfd-clean]
root        675  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [loop0]
root        735  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/loop0-8]
root        736  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root      23743  0.0  0.0      0     0 ?        S    16:30   0:00  \_ [kworker/u200:0]
root      60751  0.0  0.0      0     0 ?        S    17:17   0:00  \_ [kworker/1:4]
root      78264  0.0  0.0      0     0 ?        S    17:38   0:00  \_ [kworker/u200:1]
root      85323  0.0  0.0      0     0 ?        S    17:47   0:00  \_ [kworker/0:4]
root      89992  0.0  0.0      0     0 ?        S    17:53   0:00  \_ [kworker/0:3]
root      93776  0.0  0.0      0     0 ?        S    17:58   0:00  \_ [kworker/1:1]
root      99219  0.0  0.0      0     0 ?        S    18:04   0:00  \_ [kworker/1:2]
root      99250  0.0  0.0      0     0 ?        S    18:04   0:00  \_ [kworker/0:0]
root     100103  0.0  0.0      0     0 ?        S    18:05   0:00  \_ [kworker/0:2]
root       4451  0.0  0.0      0     0 ?        S    18:13   0:00  \_ [kworker/0:1]
root       5317  0.0  0.0      0     0 ?        S    18:14   0:00  \_ [kworker/1:0]
root       7627  0.0  0.0      0     0 ?        S    18:17   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44268  3320 ?        Ss   09:40   0:44 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  40244  6416 ?        Ss   09:40   0:18 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   252 ?        Ss   09:40   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   512 ?        S<sl 09:40   0:03 /sbin/auditd
root        470  0.0  0.0  24712  1180 ?        Ss   09:40   0:07 /usr/lib/systemd/systemd-logind
root        471  0.0  0.0  52852   456 ?        Ss   09:40   0:00 /usr/sbin/smartd -n -q never
dbus        474  0.0  0.0  58644  1384 ?        Ss   09:40   0:16 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         476  0.0  0.0  69256   208 ?        Ss   09:40   0:00 /sbin/rpcbind -w
polkitd     486  0.0  0.0 612240   984 ?        Ssl  09:40   0:04 /usr/lib/polkit-1/polkitd --no-debug
root        487  0.0  0.0  21540   408 ?        Ss   09:40   0:00 /usr/sbin/irqbalance --foreground
root        492  0.0  0.0 152780   248 ?        Ss   09:40   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        493  0.0  0.2 224280  5268 ?        Ss   09:40   0:00 queueprocd - waiting up to 60s to process a task
nscd        507  0.0  0.0 994492  1404 ?        Ssl  09:40   0:25 /usr/sbin/nscd
root        515  0.0  0.0 195208    68 ?        Ssl  09:40   0:00 /usr/sbin/gssproxy -D
root        516  0.0  0.0   4388   156 ?        Ss   09:40   0:00 /usr/sbin/acpid
root        543  0.0  0.0  24208    84 ?        Ss   09:40   0:00 /usr/sbin/atd -f
root        545  0.0  0.0 124480   520 ?        Ss   09:40   0:00 /usr/sbin/crond -n
root       8210  0.0  0.0 183048  2152 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root       8226  0.0  0.0 113284  1212 ?        Ss   18:18   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       8227  0.0  0.0 108052   356 ?        S    18:18   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       8228  0.0  0.0 113288  1516 ?        S    18:18   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       8291  0.0  0.0 153840  2092 ?        R    18:18   0:00  |               \_ ps auxf
root       8212  0.0  0.0 183048  2152 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root       8253  0.0  0.0  20164   808 ?        Ss   18:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root       8213  0.0  0.0 183048  2152 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root       8255  0.0  0.0  20164   808 ?        Ss   18:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root       8214  0.0  0.0 183048  2152 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root       8259  0.0  0.0  20164   804 ?        Ss   18:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       8215  0.0  0.0 183048  2152 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root       8266  0.0  0.0  20164   808 ?        Ss   18:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       8216  0.0  0.0 183048  2148 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root       8263  0.0  0.0  20164   804 ?        Ss   18:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root       8217  0.0  0.0 183048  2148 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root       8261  0.0  0.0  20164   808 ?        Ss   18:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       8219  0.0  0.0 183048  2144 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root       8254  0.0  0.0  20164   804 ?        Ss   18:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       8220  0.0  0.0 183048  2144 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root       8256  0.0  0.0  20164   808 ?        Ss   18:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       8221  0.0  0.0 183048  2144 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root       8257  0.0  0.0  20164   808 ?        Ss   18:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       8222  0.0  0.0 183048  2144 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root       8264  0.0  0.0  20164   960 ?        Ss   18:18   0:00  |   \_ jailshell (pactpay) [8283] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    8283  0.0  0.0  20164   256 ?        S    18:18   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    8285  1.0  0.7 480124 17320 ?        S    18:18   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       8224  0.0  0.0 183048  2144 ?        S    18:18   0:00  \_ /usr/sbin/CROND -n
root       8262  0.0  0.0  20164   964 ?        Ss   18:18   0:00      \_ jailshell (nigeria) [8284] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    8284  0.0  0.0  20164   260 ?        S    18:18   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    8286  2.0  0.6 404052 16140 ?        S    18:18   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        562  0.0  0.0 108296   180 tty1     Ss+  09:40   0:00 /sbin/agetty --noclear tty1 linux
root        563  0.0  0.0 114704   180 ttyS0    Ss+  09:40   0:00 /bin/bash
mailnull    613  0.0  0.1  89116  3896 ?        Ss   09:40   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        931  0.0  0.0 153404   400 ?        Ss   09:40   0:00 pure-ftpd (SERVER)
root        932  0.0  0.0 572372  1048 ?        Ssl  09:40   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    933  0.0  0.0 112268    56 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.6 114016 15028 ?        Ssl  09:40   0:07 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        936  0.0  0.2 1277056 6144 ?        Ssl  09:40   0:21 /usr/bin/checkstatus
root        937  0.0  0.0 445028  1380 ?        Ss   09:40   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+   7950  0.0  0.0 445028   320 ?        S    18:17   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    938  0.0  0.0  11796    40 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    939  0.0  0.0 111608    60 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        942  0.0  0.0 111304   544 ?        Ss   09:40   0:04 /usr/sbin/sshd -D
root       7963  0.0  0.1 111304  4264 ?        Ss   18:17   0:00  \_ sshd: [accepted]
systuser    943  0.0  0.0  11348    24 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        944  0.0  0.3 1350088 8612 ?        Ssl  09:40   0:28 /usr/bin/cspdaemon
root        945  0.0  0.0  51508   600 ?        Ss   09:40   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1093  0.0  0.1  47520  3204 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1094  0.0  0.1  48452  3232 ?        S    09:40   0:00  \_ dovecot/imap-login
dovecot    1095  0.0  0.0  10320   528 ?        S    09:40   0:00  \_ dovecot/anvil
root       1096  0.0  0.0  10452   460 ?        S    09:40   0:00  \_ dovecot/log
dovenull   1097  0.0  0.1  47308  2988 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  48268  3304 ?        S    09:40   0:00  \_ dovecot/imap-login
root       1104  0.0  0.1  24556  2584 ?        S    09:40   0:00  \_ dovecot/config
dovecot    1110  0.0  0.0  13568   524 ?        S    09:40   0:00  \_ dovecot/stats
dovecot    1170  0.0  0.0  41192  1624 ?        S    09:40   0:01  \_ dovecot/auth
nescrow+   7026  0.0  0.1  29148  2732 ?        S    18:16   0:00  \_ dovecot/quota-status -p postfix
root       8141  0.0  0.1  41052  2728 ?        S    18:17   0:00  \_ dovecot/auth -w
telegraf    946  0.0  1.5 5654304 36748 ?       SLsl 09:40   0:16 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    947  0.0  0.0 342400   232 ?        Ssl  09:40   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        948  0.0  3.5 1763312 85792 ?       Ssl  09:40   0:15 /usr/local/cpanel/3rdparty/bin/clamd -F
root        949  0.0  0.0 389508   628 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        950  0.0  1.1 261032 26968 ?        Ss   09:40   0:05 cpsrvd (SSL) - waiting for connections                   
root       8155  0.0  0.0      0     0 ?        Z    18:17   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.0 388892   852 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        958  0.0  0.2 314704  7240 ?        Ssl  09:40   0:09 /usr/sbin/rsyslogd -n
root        986  0.0  0.0 396248   556 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        990  0.0  0.0 439788   916 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        994  0.0  0.1 400740  3100 ?        Ss   09:40   0:04 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria    8102  0.0  0.2 400460  5572 ?        S    18:17   0:00  \_ php-fpm: pool nigeriadecide_org
named       996  0.0  1.7 1186868 42456 ?       Ssl  09:40   0:19 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
cpanelc+   1013  0.0  0.1  10580  3832 ?        Ss   09:40   0:24 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1145  0.0  0.1 157704  2928 ?        S    09:40   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1175  0.0  0.4 412368 10312 ?        Ss   09:40   0:09 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1176  0.0  0.1 387528  3788 ?        Ss   09:40   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1234  0.0  0.0 167452  1320 ?        Ss   09:40   0:00 dnsadmin - dormant mode
root       1235  0.0  0.2 183900  6692 ?        Ss   09:40   0:04 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1237  0.0  0.4 209500 10796 ?        Ss   09:40   0:03 tailwatchd
root       1669  0.0  0.0 299272   604 ?        Ss   09:40   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1701  0.0  0.0 130416  1408 ?        SN   09:40   0:00 cpanellogd - sleeping for logs
mysql      1793  1.3 10.9 1463640 265908 ?      Sl   09:40   7:06 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1959  0.0  0.3 266992  7380 ?        Ss   09:40   0:02 /usr/sbin/httpd -k start
root       1962  0.0  0.0  12812   452 ?        S    09:40   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1963  0.0  0.0  12732   368 ?        S    09:40   0:03  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1964  0.0  0.0  12832   472 ?        S    09:40   0:03  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1968  0.0  0.0  53340   216 ?        S    09:40   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    72719  0.0  0.8 277892 19992 ?        S    17:31   0:02  \_ /usr/sbin/httpd -k start
nobody    72900  0.0  0.8 277704 20184 ?        S    17:31   0:01  \_ /usr/sbin/httpd -k start
nobody    83203  0.0  0.8 277892 20304 ?        S    17:44   0:01  \_ /usr/sbin/httpd -k start
cloudw     7302  0.2  0.7 367184 19032 ?        S    18:16   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    87115  0.1  0.8 277500 19912 ?        S    17:49   0:02  \_ /usr/sbin/httpd -k start
nobody    87513  0.0  0.7 277588 19288 ?        S    17:49   0:01  \_ /usr/sbin/httpd -k start
cloudw     7095  0.1  0.7 367184 19032 ?        S    18:16   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    87523  0.0  0.7 277760 19292 ?        S    17:49   0:01  \_ /usr/sbin/httpd -k start
cloudw     7502  0.3  0.7 367184 19032 ?        S    18:16   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    89664  0.1  0.8 277604 20356 ?        S    17:52   0:01  \_ /usr/sbin/httpd -k start
cloudw     6379  0.1  0.7 367184 19032 ?        S    18:15   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    90397  0.0  0.8 277760 19508 ?        S    17:53   0:00  \_ /usr/sbin/httpd -k start
nobody    90400  0.1  0.8 277760 20124 ?        S    17:53   0:01  \_ /usr/sbin/httpd -k start
nobody    94068  0.1  0.8 277892 20008 ?        S    17:58   0:01  \_ /usr/sbin/httpd -k start
nobody    94088  0.0  0.8 277768 19860 ?        S    17:58   0:00  \_ /usr/sbin/httpd -k start
cloudw     4854  0.0  0.7 367184 19028 ?        S    18:13   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    97178  0.0  0.7 277760 18812 ?        S    18:01   0:00  \_ /usr/sbin/httpd -k start
cloudw     5693  0.1  0.7 367184 19032 ?        S    18:14   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    97204  0.1  0.8 277760 20160 ?        S    18:01   0:01  \_ /usr/sbin/httpd -k start
nobody    98318  0.0  0.7 277892 18928 ?        S    18:03   0:00  \_ /usr/sbin/httpd -k start
cloudw     5141  0.0  0.7 367184 19028 ?        S    18:13   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    98581  0.0  0.7 277768 19256 ?        S    18:03   0:00  \_ /usr/sbin/httpd -k start
cloudw     4315  0.0  0.7 367184 19028 ?        S    18:12   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    99088  0.0  0.8 277760 19532 ?        S    18:03   0:00  \_ /usr/sbin/httpd -k start
cloudw     7801  0.4  0.7 367184 19032 ?        S    18:17   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    99103  0.1  0.8 277528 19508 ?        S    18:03   0:00  \_ /usr/sbin/httpd -k start
nobody    99105  0.0  0.7 277836 19188 ?        S    18:03   0:00  \_ /usr/sbin/httpd -k start
nobody    99106  0.0  0.7 277768 18732 ?        S    18:03   0:00  \_ /usr/sbin/httpd -k start
nobody   100565  0.1  0.8 277696 19808 ?        S    18:05   0:01  \_ /usr/sbin/httpd -k start
cloudw     8151  0.8  0.7 366248 17052 ?        R    18:17   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody   101944  0.0  0.8 277896 19444 ?        S    18:07   0:00  \_ /usr/sbin/httpd -k start
nobody     1421  0.0  0.7 277484 18700 ?        S    18:09   0:00  \_ /usr/sbin/httpd -k start
nobody     2106  0.0  0.7 277768 19052 ?        S    18:10   0:00  \_ /usr/sbin/httpd -k start
nobody     3543  0.0  0.7 277492 19048 ?        S    18:11   0:00  \_ /usr/sbin/httpd -k start
cloudw     6608  0.1  0.7 367184 19028 ?        S    18:15   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody     4613  0.0  0.7 277760 18308 ?        S    18:13   0:00  \_ /usr/sbin/httpd -k start
cloudw     5480  0.0  0.7 367184 19032 ?        S    18:14   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody     4625  0.0  0.7 277760 18452 ?        S    18:13   0:00  \_ /usr/sbin/httpd -k start
cloudw     6800  0.1  0.7 367184 19028 ?        S    18:15   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody     4626  0.0  0.7 277336 17752 ?        S    18:13   0:00  \_ /usr/sbin/httpd -k start
cloudw     4647  0.0  0.7 367184 19028 ?        S    18:13   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody     5200  0.0  0.7 277760 18584 ?        S    18:14   0:00  \_ /usr/sbin/httpd -k start
cloudw     5905  0.1  0.7 367184 19032 ?        S    18:14   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody     7373  0.0  0.7 277936 18588 ?        S    18:16   0:00  \_ /usr/sbin/httpd -k start
cloudw     7966  0.7  0.7 367184 19032 ?        S    18:17   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody     7382  0.2  0.7 277760 18520 ?        S    18:16   0:00  \_ /usr/sbin/httpd -k start
cloudw     8208  1.0  0.6 353712 16240 ?        S    18:18   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     7570  0.1  0.7 277760 18424 ?        S    18:17   0:00  \_ /usr/sbin/httpd -k start
nobody     7754  0.1  0.7 277760 18472 ?        S    18:17   0:00  \_ /usr/sbin/httpd -k start
root       2014  0.0  0.5 185128 13600 ?        Ss   09:40   0:28 lfd - sleeping
oysipao+  18294  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+  18303  0.0  0.0   3152    36 ?        S    10:01   0:00  \_ [kworker]
root      56404  0.0  1.7 248036 42552 ?        Ss   10:49   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      64340  0.0  4.2 266516 103524 ?       S    11:00   0:05  \_ spamd child
root      64341  0.0  1.6 248036 40824 ?        S    11:00   0:00  \_ spamd child
## mysql stats
Uptime: 52766  Threads: 3  Questions: 2322739  Slow queries: 0  Opens: 11152  Flush tables: 1  Open tables: 2000  Queries per second avg: 44.019
*************************** 1. row ***************************
     Id: 38240
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 38241
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 38243
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.143.119 TIME_WAIT
      1 167.114.139.117 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.97 TIME_WAIT
      1 194.164.126.55 TIME_WAIT
      1 ::1 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 45.156.131.17 TIME_WAIT
      5 45.156.131.18 TIME_WAIT
      5 45.156.131.19 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 18:18:02 WAT
   Restart Time: Thursday, 20-Nov-2025 03:38:40 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 14 hours 39 minutes 21 seconds
   Server load: 0.22 0.29 0.27
   Total accesses: 165499 - Total Traffic: 4.0 GB - Total Duration: 742706592
   CPU Usage: u17.07 s9.65 cu2242.18 cs1692.7 - 7.51% CPU load
   3.14 requests/sec - 78.5 kB/second - 25.0 kB/request - 4487.68 ms/request
   28 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

KLLLW_WW_LWWLKKWK..KK.LLKLLKKL....._KW._R.......................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS    Req     Dur    Conn  Child  Slot      Client      Protocol              VHost                                          Request
   0-0  72900  1/227/5862 K 6.62  0     348    19453155 33.8  5.19  153.24 192.178.4.98    http/1.1 team.cloudware.ng:443           GET /?l=2012614317 HTTP/1.1
   1-0  3543   1/61/5656  L 1.30  147   0      65265176 5.3   1.31  142.20 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363235
   2-0  5200   1/13/6036  L 0.30  187   0      20213913 5.3   0.33  154.44 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363234
   3-0  98318  1/104/5975 L 2.97  247   0      21323473 5.3   2.87  145.39 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363234
   4-0  87513  0/167/5596 W 4.81  107   0      21774701 0.0   4.34  154.24 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363235
   5-0  7754   0/11/6560  _ 0.22  0     32     14954080 0.0   0.25  166.45 88.210.52.107   http/1.1
   6-0  87523  0/180/5784 W 5.12  67    0      18185850 0.0   4.67  143.37 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363236
   7-0  99088  0/136/6355 W 3.82  47    0      17858584 0.0   3.44  163.80 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363236
   8-0  87115  0/418/5655 _ 9.13  0     350    21262758 0.0   8.72  153.48 192.178.4.99    http/1.1 team.cloudware.ng:443           GET /?l=4165522428 HTTP/1.1
   9-0  98581  1/78/5801  L 1.97  307   0      19401553 5.3   1.94  146.53 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363233
   10-0 100565 0/204/5394 W 4.98  7     0      20449644 0.0   5.66  130.15 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363236
   11-0 99103  0/161/5436 W 3.61  0     0      19051662 0.0   3.67  120.84 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   12-0 97178  1/39/4886  L 1.37  207   0      23497175 5.3   0.99  114.09 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363234
   13-0 2106   3/53/4807  K 1.33  3     406    20245545 93.2  1.18  115.63 192.178.4.101   http/1.1 team.cloudware.ng:443           GET /?l=2236262963 HTTP/1.1
   14-0 101944 1/79/4876  K 2.38  1     352    20316859 34.0  2.04  127.62 192.178.4.96    http/1.1 team.cloudware.ng:443           GET /?l=81780428 HTTP/1.1
   15-0 7373   0/14/5575  W 0.30  27    0      15857117 0.0   0.37  127.16 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363236
   16-0 90397  1/153/4732 K 4.67  4     4      17699490 11.6  3.92  116.81 47.82.14.62     http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php?lga=Umuahia+north&state=Abia HTT
   17-0 -      0/0/4659   . 0.00  56    0      20759176 0.0   0.00  111.20 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-0 -      0/0/5295   . 0.00  32    0      15207971 0.0   0.00  116.82 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   19-0 7382   1/28/4746  K 0.75  0     404    17239837 34.5  0.78  115.93 192.178.4.99    http/1.1 team.cloudware.ng:443           GET /?l=2181702744 HTTP/1.1
   20-0 1421   1/54/4045  K 1.45  0     355    23072598 33.1  1.35  95.52  192.178.4.99    http/1.1 team.cloudware.ng:443           GET /?l=3908959472 HTTP/1.1
   21-0 -      0/0/3722   . 0.00  19    0      14530461 0.0   0.00  88.48  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   22-0 4613   1/15/3406  L 0.35  227   0      16259062 5.3   0.39  83.08  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363234
   23-0 4625   1/45/3230  L 1.15  127   0      17493538 5.3   1.20  75.16  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363235
   24-0 94068  1/242/3014 K 5.63  1     347    17442773 35.6  5.96  79.78  192.178.4.105   http/1.1 team.cloudware.ng:443           GET /?l=1596448088 HTTP/1.1
   25-0 89664  1/416/3532 L 7.49  167   0      13798521 5.3   7.46  81.31  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363235
   26-0 4626   1/3/2787   L 0.01  286   0      14102212 5.3   0.01  66.05  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363233
   27-0 72719  4/411/2878 K 11.69 3     346    15444344 126.5 8.97  70.51  192.178.4.102   http/1.1 team.cloudware.ng:443           GET /?l=2777300245 HTTP/1.1
   28-0 7570   1/18/2636  K 0.36  0     1      15785669 6.0   0.39  53.09  45.156.131.17   http/1.1 mydealtracker.staging.cloudware GET /favicon.ico HTTP/1.1
   29-0 94088  1/258/2773 L 4.40  267   0      14139031 5.3   5.42  64.64  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363234
   30-0 -      0/0/2508   . 0.00  273   0      10668034 0.0   0.00  53.96  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -      0/0/2078   . 0.00  140   0      10498665 0.0   0.00  59.22  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -      0/0/2468   . 0.00  220   0      14645489 0.0   0.00  69.32  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -      0/0/1604   . 0.00  263   0      11654962 0.0   0.00  36.26  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -      0/0/1267   . 0.00  252   0      12717760 0.0   0.00  27.46  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 99105  0/66/1154  _ 2.03  0     22     10139224 0.0   1.38  27.55  45.156.131.17   http/1.1
   36-0 90400  5/318/1704 K 7.90  2     262    9123489  152.0 7.97  39.31  192.178.4.104   http/1.1 team.cloudware.ng:443           GET /?l=4012743064 HTTP/1.1
   37-0 83203  0/351/2129 W 8.57  87    0      9913832  0.0   6.18  41.89  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443     GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336363235
   38-0 -      0/0/1282   . 0.00  283   0      12049254 0.0   0.00  27.02  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 97204  0/186/1673 _ 4.95  0     0      11103116 0.0   4.75  40.77  ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   40-0 99106  0/32/827   R 0.99  107   320091 6783611  0.0   0.83  21.47  182.3.100.32    http/1.1
   41-0 -      0/0/392    . 0.00  3615  0      2781829  0.0   0.00  11.81  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -      0/0/680    . 0.00  3626  0      2285353  0.0   0.00  16.74  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -      0/0/250    . 0.00  2622  0      2690856  0.0   0.00  5.98   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -      0/0/778    . 0.00  1454  0      4855287  0.0   0.00  18.18  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -      0/0/306    . 0.00  3629  0      2076497  0.0   0.00  8.08   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -      0/0/257    . 0.00  3613  0      3342075  0.0   0.00  6.37   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -      0/0/105    . 0.00  3319  0      686585   0.0   0.00  2.22   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -      0/0/150    . 0.00  2792  0      2001878  0.0   0.00  3.45   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -      0/0/951    . 0.00  9133  0      6256647  0.0   0.00  23.61  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -      0/0/2      . 0.00  14940 0      616      0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -      0/0/6      . 0.00  14920 0      2135     0.0   0.00  0.09   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -      0/0/145    . 0.00  14218 0      691033   0.0   0.00  2.72   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -      0/0/2      . 0.00  14950 0      661      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -      0/0/34     . 0.00  14833 0      17885    0.0   0.00  0.93   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-0 -      0/0/2      . 0.00  14947 0      644      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-0 -      0/0/4      . 0.00  14938 0      1109     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-0 -      0/0/2      . 0.00  14949 0      760      0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   58-0 -      0/0/13     . 0.00  14898 0      6527     0.0   0.00  0.26   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   59-0 -      0/0/86     . 0.00  14805 0      15729    0.0   0.00  0.68   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-0 -      0/0/196    . 0.00  14057 0      724637   0.0   0.00  3.98   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-0 -      0/0/7      . 0.00  14923 0      3153     0.0   0.00  0.13   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   62-0 -      0/0/4      . 0.00  14937 0      1059     0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   63-0 -      0/0/318    . 0.00  13602 0      758246   0.0   0.00  5.87   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   64-0 -      0/0/205    . 0.00  13932 0      754691   0.0   0.00  9.18   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   65-0 -      0/0/201    . 0.00  13605 0      1367301  0.0   0.00  4.25   ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 972
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 12 seconds, (range: 0...50)
   index usage: 17%, cache usage: 23%
   total entries stored since starting: 104491
   total entries replaced since starting: 0
   total entries expired since starting: 103481
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 24 hit, 229 miss
   total removes since starting: 38 hit, 230 miss
Youez - 2016 - github.com/yon3zu
LinuXploit