403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-12.04.30.txt
 ## swap threshold exceeded
## server overview
2025-11-12.04.30 load[0] mem[74/52] mysql[3/11] httpd[34]
              total        used        free      shared  buff/cache   available
Mem:           2363        1681          77          30         604         490
Swap:          1999        1146         853
 04:30:02 up 48 min,  0 users,  load average: 0.63, 0.73, 0.56
## system overview
top - 04:30:02 up 48 min,  0 users,  load average: 0.63, 0.73, 0.56
Tasks: 235 total,   4 running, 230 sleeping,   0 stopped,   1 zombie
%Cpu(s): 64.5 us, 29.0 sy,  0.0 ni,  0.0 id,  6.5 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    75952 free,  1717456 used,   626892 buff/cache
KiB Swap:  2047996 total,   873724 free,  1174272 used.   505180 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1790 mysql     20   0 1461296 230192   3512 S  93.8  9.5   0:41.05 /usr/sbin+
 56491 root      20   0  188860  12952   5544 R  12.5  0.5   0:00.07 /usr/loca+
 56604 cloudw    20   0  351952  15236  10128 S  12.5  0.6   0:00.02 /opt/cpan+
    36 root      20   0       0      0      0 S   6.2  0.0   0:08.65 [kswapd0]
   257 root       0 -20       0      0      0 S   6.2  0.0   0:00.68 [kworker/+
 56500 pactpay   20   0  476724  17484  11728 S   6.2  0.7   0:00.02 /opt/cpan+
 56506 nigeria   20   0  400652  15932  10216 S   6.2  0.7   0:00.03 /opt/cpan+
 56559 root      20   0  160224   2380   1636 S   6.2  0.1   0:00.01 top -n 2 +
     1 root      20   0   44424   3444   1532 S   0.0  0.1   0:05.08 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.29 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.22 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:03.80 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.21 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.84 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   271 root       0 -20       0      0      0 S   0.0  0.0   0:00.78 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40244   2392   2080 S   0.0  0.1   0:01.44 /usr/lib/+
   393 root      20   0   45352    232     92 S   0.0  0.0   0:00.33 /usr/lib/+
   411 root      16  -4   55532    184     72 S   0.0  0.0   0:00.21 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   486 root      20   0   24712   1272    820 S   0.0  0.1   0:00.70 /usr/lib/+
   491 polkitd   20   0  610540    884    452 S   0.0  0.0   0:00.43 /usr/lib/+
   492 root      20   0  224144   5700   1008 S   0.0  0.2   0:00.11 queueproc+
   498 rpc       20   0   69256    180     72 S   0.0  0.0   0:00.01 /sbin/rpc+
   500 root      20   0   52852    236    176 S   0.0  0.0   0:00.00 /usr/sbin+
   501 dbus      20   0   56904   1380    688 S   0.0  0.1   0:01.57 /usr/bin/+
   504 nscd      20   0 1062080   1524    728 S   0.0  0.1   0:03.66 /usr/sbin+
   523 root      20   0    4388     32     28 S   0.0  0.0   0:00.00 /usr/sbin+
   531 root      20   0  152780    104     60 S   0.0  0.0   0:00.00 /usr/sbin+
   535 root      20   0   21540    408    296 S   0.0  0.0   0:00.06 /usr/sbin+
   549 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   573 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124476    436    308 S   0.0  0.0   0:00.08 /usr/sbin+
   584 root      20   0  114704     32     32 S   0.0  0.0   0:00.02 /bin/bash
   585 root      20   0  108296     48     44 S   0.0  0.0   0:00.00 /sbin/age+
   608 mailnull  20   0   89112   3536    592 S   0.0  0.1   0:00.09 /usr/sbin+
   643 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   666 root       0 -20       0      0      0 S   0.0  0.0   0:01.35 [loop0]
   750 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   751 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   937 systuser  20   0  112524   2096      0 S   0.0  0.1   0:00.00 /usr/loca+
   938 root      20   0  111304    408    308 S   0.0  0.0   0:00.28 /usr/sbin+
   939 systuser  20   0  113272   1836      0 S   0.0  0.1   0:00.00 /usr/loca+
   941 root      20   0  153404    300    216 S   0.0  0.0   0:00.06 pure-ftpd+
   942 systuser  20   0   11540     56      0 S   0.0  0.0   0:00.00 /usr/loca+
   943 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.06 /usr/bin/+
   945 systuser  20   0   12756     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   947 telegraf  20   0 5654304  39544   5656 S   0.0  1.6   0:01.87 /usr/loca+
   948 systuser  20   0  114016  12448   2480 S   0.0  0.5   0:00.82 /usr/loca+
   949 root      20   0   51508    492    332 S   0.0  0.0   0:00.06 /usr/sbin+
   951 root      20   0  572372    744    272 S   0.0  0.0   0:00.35 /usr/bin/+
   953 root      20   0  445028   2604   2604 S   0.0  0.1   0:00.05 sw-engine+
   960 root      20   0  436392  11268  11064 S   0.0  0.5   0:00.21 php-fpm: +
   963 root      20   0  397344   2896    648 S   0.0  0.1   0:00.58 php-fpm: +
   964 root      20   0 1689316 468704    152 S   0.0 19.4   0:13.66 /usr/loca+
   971 root      20   0  224592   2024   1456 S   0.0  0.1   0:00.74 /usr/sbin+
   988 root      20   0  385496    744    528 S   0.0  0.0   0:00.15 php-fpm: +
   996 root      20   0  392856    220    140 S   0.0  0.0   0:00.14 php-fpm: +
   998 named     20   0  785456  30316   1496 S   0.0  1.3   0:02.54 /usr/sbin+
  1004 root      20   0  386112    516    308 S   0.0  0.0   0:00.14 php-fpm: +
  1005 root      20   0  261556   8372   1720 S   0.0  0.3   0:01.32 cpsrvd (S+
  1010 cpanelc+  20   0    9956   2868   2308 S   0.0  0.1   0:02.72 /usr/loca+
  1087 dovenull  20   0   46912   1652    952 S   0.0  0.1   0:00.06 dovecot/p+
  1088 dovenull  20   0   47056   2400   1536 S   0.0  0.1   0:00.03 dovecot/i+
  1089 dovecot   20   0   10320    260    148 S   0.0  0.0   0:00.00 dovecot/a+
  1090 root      20   0   10452    484    308 S   0.0  0.0   0:00.03 dovecot/l+
  1095 dovenull  20   0   47012   1704    960 S   0.0  0.1   0:00.06 dovecot/p+
  1096 dovenull  20   0   47284   2524   1504 S   0.0  0.1   0:00.04 dovecot/i+
  1098 root      20   0   24528   2316    504 S   0.0  0.1   0:00.04 dovecot/c+
  1101 dovecot   20   0   13568    580    348 S   0.0  0.0   0:00.00 dovecot/s+
  1165 systuser  20   0  157704   2980    916 S   0.0  0.1   0:00.03 SonarPush+
  1171 root      20   0  248228 118400   1672 S   0.0  4.9   0:03.18 /usr/loca+
  1186 wp-tool+  20   0  410452  35512   1524 S   0.0  1.5   0:02.61 /usr/bin/+
  1187 wp-tool+  20   0  387528  13028   1404 S   0.0  0.5   0:00.11 /usr/bin/+
  1195 dovecot   20   0   41056   1432    996 S   0.0  0.1   0:00.07 dovecot/a+
  1244 root      20   0  183900   4968   1736 S   0.0  0.2   0:00.21 cpdavd - +
  1246 root      20   0  209256  10956   1400 S   0.0  0.5   0:00.45 tailwatchd
  1248 root      20   0  167452   1392    788 S   0.0  0.1   0:00.08 dnsadmin +
  1677 root      20   0  299272    824    444 S   0.0  0.0   0:00.07 php-fpm: +
  1711 root      38  18  130416   1428    704 S   0.0  0.1   0:00.00 cpanellog+
  1916 root      20   0  267036   8600    748 S   0.0  0.4   0:00.88 /usr/sbin+
  1917 root      20   0   12820    380    284 S   0.0  0.0   0:00.49 /usr/loca+
  1918 root      20   0   12732    344    264 S   0.0  0.0   0:00.43 /usr/loca+
  1919 root      20   0   12856    332    224 S   0.0  0.0   0:00.47 /usr/loca+
  1927 root      20   0   53268     88     88 S   0.0  0.0   0:00.05 /usr/loca+
  1997 root      20   0  181160   9912   1188 S   0.0  0.4   0:02.70 lfd - sle+
  7196 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  7644 root      20   0  249488 119144   1244 S   0.0  4.9   0:00.23 spamd chi+
  7645 root      20   0  248228 117184    492 S   0.0  4.8   0:00.00 spamd chi+
 22160 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
 22163 oysipao+  20   0    3152    420      0 S   0.0  0.0   0:00.02 [kworker]
 22408 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 22621 root      20   0 1276100  10516    592 S   0.0  0.4   0:00.07 /usr/bin/+
 22659 root      20   0 1277312  11672    592 S   0.0  0.5   0:00.06 /usr/bin/+
 26632 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 33048 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 35451 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 36382 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 40585 nobody    20   0  277696  20132   4380 S   0.0  0.8   0:01.46 /usr/sbin+
 42867 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 43880 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 43899 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 48321 nobody    20   0  277784  19540   3936 S   0.0  0.8   0:00.77 /usr/sbin+
 49690 nobody    20   0  277656  19304   3808 S   0.0  0.8   0:00.34 /usr/sbin+
 49770 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 49822 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 49923 nobody    20   0  277824  19680   3888 S   0.0  0.8   0:00.65 /usr/sbin+
 50710 nobody    20   0  277924  19444   3880 S   0.0  0.8   0:00.46 /usr/sbin+
 51863 nobody    20   0  277824  19400   3824 S   0.0  0.8   0:00.43 /usr/sbin+
 51865 nobody    20   0  277792  19292   3612 S   0.0  0.8   0:00.42 /usr/sbin+
 51882 nobody    20   0  277784  19232   3612 S   0.0  0.8   0:00.41 /usr/sbin+
 52065 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 52090 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 52986 nobody    20   0  277788  19404   3776 S   0.0  0.8   0:00.27 /usr/sbin+
 53072 nobody    20   0  277544  19268   3860 S   0.0  0.8   0:00.22 /usr/sbin+
 53133 nobody    20   0  277784  19268   3696 S   0.0  0.8   0:00.31 /usr/sbin+
 53134 nobody    20   0  277916  19280   3708 S   0.0  0.8   0:00.28 /usr/sbin+
 54088 nobody    20   0  277788  19136   3556 S   0.0  0.8   0:00.22 /usr/sbin+
 54089 nobody    20   0  277824  18868   3304 S   0.0  0.8   0:00.21 /usr/sbin+
 54140 nobody    20   0  277784  19440   3772 S   0.0  0.8   0:00.22 /usr/sbin+
 54167 nobody    20   0  277784  19160   3628 S   0.0  0.8   0:00.24 /usr/sbin+
 54168 nobody    20   0  277784  18784   3280 S   0.0  0.8   0:00.16 /usr/sbin+
 54169 nobody    20   0  277796  19488   3844 S   0.0  0.8   0:00.12 /usr/sbin+
 54188 nobody    20   0  277784  19308   3676 S   0.0  0.8   0:00.18 /usr/sbin+
 54189 nobody    20   0  277920  18804   3332 S   0.0  0.8   0:00.20 /usr/sbin+
 54750 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 55263 nobody    20   0  277824  18916   3308 S   0.0  0.8   0:00.05 /usr/sbin+
 55283 nobody    20   0  277784  19080   3492 S   0.0  0.8   0:00.07 /usr/sbin+
 55484 nobody    20   0  277784  18820   3316 S   0.0  0.8   0:00.06 /usr/sbin+
 55499 nobody    20   0  277784  18876   3380 S   0.0  0.8   0:00.12 /usr/sbin+
 55500 nobody    20   0  277784  18920   3380 S   0.0  0.8   0:00.10 /usr/sbin+
 55654 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 55655 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 55899 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 55908 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 56168 nigeria   20   0  494364  32632   4748 S   0.0  1.3   0:00.40 php-fpm: +
 56216 nobody    20   0  277784  17496   2132 S   0.0  0.7   0:00.01 /usr/sbin+
 56223 nobody    20   0  277784  17556   2128 S   0.0  0.7   0:00.02 /usr/sbin+
 56224 nobody    20   0  277784  17492   2128 S   0.0  0.7   0:00.01 /usr/sbin+
 56237 nobody    20   0  277784  18632   3128 S   0.0  0.8   0:00.02 /usr/sbin+
 56238 nobody    20   0  277784  18460   3076 S   0.0  0.8   0:00.01 /usr/sbin+
 56239 nobody    20   0  277784  17492   2128 S   0.0  0.7   0:00.01 /usr/sbin+
 56240 nobody    20   0  277784  17748   2320 S   0.0  0.7   0:00.01 /usr/sbin+
 56257 nobody    20   0  277784  17496   2124 S   0.0  0.7   0:00.01 /usr/sbin+
 56258 nobody    20   0  277504  18076   2912 S   0.0  0.7   0:00.00 /usr/sbin+
 56259 nobody    20   0  277784  17492   2128 S   0.0  0.7   0:00.01 /usr/sbin+
 56260 nobody    20   0  277792  17440   2128 S   0.0  0.7   0:00.01 /usr/sbin+
 56261 nobody    20   0  277784  17500   2136 S   0.0  0.7   0:00.02 /usr/sbin+
 56262 nobody    20   0  277784  17492   2128 S   0.0  0.7   0:00.01 /usr/sbin+
 56263 nobody    20   0  277792  17496   2128 S   0.0  0.7   0:00.01 /usr/sbin+
 56264 nobody    20   0  277784  17588   2160 S   0.0  0.7   0:00.01 /usr/sbin+
 56299 mailnull  20   0   89280   4184   1144 S   0.0  0.2   0:00.00 /usr/sbin+
 56336 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 56360 nigeria   20   0  486916  26464   6376 S   0.0  1.1   0:00.38 php-fpm: +
 56405 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 56422 root      20   0  183044   2144   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 56423 root      20   0  183044   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 56424 root      20   0  183044   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 56425 root      20   0  183044   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 56426 root      20   0  183044   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 56427 root      20   0  183044   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 56428 root      20   0  183044   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 56429 root      20   0  183044   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 56431 root      20   0  183044   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 56432 root      20   0  183044   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 56433 root      20   0  183044   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 56434 root      20   0  183044   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 56436 root      20   0  183044   2144   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 56437 root      20   0  183044   2144   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 56438 root      20   0  183044   2144   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 56440 root      20   0  183044   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 56443 mailnull  20   0   89280   4184   1144 S   0.0  0.2   0:00.00 /usr/sbin+
 56446 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 56450 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 56451 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 56452 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 56453 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 56454 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 56456 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 56459 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 56460 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
 56461 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 56463 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 56465 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 56466 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 56467 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 56468 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 56470 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 56472 root      20   0  188236  11120   5152 S   0.0  0.5   0:00.02 /usr/loca+
 56475 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 56486 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 56493 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 56499 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 56565 cloudw    20   0  352096  15232  10128 S   0.0  0.6   0:00.01 /opt/cpan+
 56603 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 56607 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 56608 cloudsms  20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /usr/loca+
 56609 cloudsms  20   0  170736   4044   2880 R   0.0  0.2   0:00.00 /opt/cpan+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    03:41   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    03:41   0:03  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    03:41   0:08  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   03:41   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   03:41   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [deferwq]
root        104  0.0  0.0      0     0 ?        R    03:41   0:00  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [ata_sff]
root        248  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [scsi_eh_0]
root        249  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [kworker/0:1H]
root        271  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [xprtiod]
root        643  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [kvm-irqfd-clean]
root        666  0.0  0.0      0     0 ?        S<   03:41   0:01  \_ [loop0]
root        750  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [jbd2/loop0-8]
root        751  0.0  0.0      0     0 ?        S<   03:41   0:00  \_ [ext4-rsv-conver]
root       7196  0.0  0.0      0     0 ?        S    03:47   0:00  \_ [kworker/0:1]
root      22408  0.0  0.0      0     0 ?        S    04:00   0:00  \_ [kworker/1:0]
root      26632  0.0  0.0      0     0 ?        S    04:04   0:00  \_ [kworker/u200:0]
root      33048  0.0  0.0      0     0 ?        S    04:09   0:00  \_ [kworker/u200:1]
root      35451  0.0  0.0      0     0 ?        S    04:11   0:00  \_ [kworker/1:3]
root      36382  0.0  0.0      0     0 ?        S    04:12   0:00  \_ [kworker/1:4]
root      42867  0.0  0.0      0     0 ?        S    04:18   0:00  \_ [kworker/0:2]
root      43880  0.0  0.0      0     0 ?        S    04:19   0:00  \_ [kworker/0:5]
root      43899  0.0  0.0      0     0 ?        S    04:19   0:00  \_ [kworker/1:2]
root      49770  0.0  0.0      0     0 ?        S    04:24   0:00  \_ [kworker/0:0]
root      49822  0.0  0.0      0     0 ?        S    04:24   0:00  \_ [kworker/0:3]
root      52065  0.0  0.0      0     0 ?        D    04:26   0:00  \_ [kworker/1:1]
root      52090  0.0  0.0      0     0 ?        S    04:26   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44424  3444 ?        Ss   03:41   0:05 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.0  40244  2392 ?        Ss   03:41   0:01 /usr/lib/systemd/systemd-journald
root        393  0.0  0.0  45352   232 ?        Ss   03:41   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   184 ?        S<sl 03:41   0:00 /sbin/auditd
root        486  0.0  0.0  24712  1272 ?        Ss   03:41   0:00 /usr/lib/systemd/systemd-logind
polkitd     491  0.0  0.0 610540   884 ?        Ssl  03:41   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        492  0.0  0.2 224144  5700 ?        Ss   03:41   0:00 queueprocd - waiting up to 60s to process a task
rpc         498  0.0  0.0  69256   180 ?        Ss   03:41   0:00 /sbin/rpcbind -w
root        500  0.0  0.0  52852   236 ?        Ss   03:41   0:00 /usr/sbin/smartd -n -q never
dbus        501  0.0  0.0  56904  1380 ?        Rs   03:41   0:01 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        504  0.1  0.0 1062080 1524 ?        Ssl  03:41   0:03 /usr/sbin/nscd
root        523  0.0  0.0   4388    32 ?        Ss   03:41   0:00 /usr/sbin/acpid
root        531  0.0  0.0 152780   104 ?        Ss   03:41   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        535  0.0  0.0  21540   408 ?        Ss   03:41   0:00 /usr/sbin/irqbalance --foreground
root        549  0.0  0.0 195208     0 ?        Ssl  03:41   0:00 /usr/sbin/gssproxy -D
root        573  0.0  0.0  24208     0 ?        Ss   03:41   0:00 /usr/sbin/atd -f
root        575  0.0  0.0 124476   436 ?        Ss   03:41   0:00 /usr/sbin/crond -n
root      56422  0.0  0.0 183044  2144 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      56446  0.0  0.0 113284  1208 ?        Ss   04:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      56475  0.0  0.0 108052   360 ?        S    04:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      56486  0.0  0.0 113288  1520 ?        S    04:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      56610  0.0  0.0 153840  2100 ?        R    04:30   0:00  |               \_ ps auxf
root      56423  0.0  0.0 183044  2140 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      56461  0.0  0.0  20164   808 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      56424  0.0  0.0 183044  2140 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      56467  0.0  0.0  20164   804 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      56425  0.0  0.0 183044  2140 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      56456  0.0  0.0  20164   808 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      56426  0.0  0.0 183044  2140 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      56452  0.0  0.0  20164   804 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      56427  0.0  0.0 183044  2140 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      56465  0.0  0.0  20164   804 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      56428  0.0  0.0 183040  2200 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      56429  0.0  0.0 183044  2140 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      56468  0.0  0.0  20164   808 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      56431  0.0  0.0 183044  2140 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      56459  0.0  0.0  20164   804 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      56432  0.0  0.0 183044  2140 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      56470  0.0  0.0  20164   804 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      56433  0.0  0.0 183044  2140 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      56454  0.0  0.0  20164   804 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      56434  0.0  0.0 183044  2140 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      56466  0.0  0.0  20164   808 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      56436  0.0  0.0 183044  2144 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      56451  0.0  0.0 113284  1212 ?        Ss   04:30   0:00  |   \_ /bin/sh -c /usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache
root      56491  0.0  0.5 188860 12952 ?        R    04:30   0:00  |       \_ /usr/local/cpanel/bin/update_db_cache
root      56437  0.0  0.0 183044  2144 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      56450  0.0  0.0 113284  1208 ?        Ss   04:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      56472  0.0  0.4 188236 11120 ?        S    04:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      56559  0.0  0.0 160224  2380 ?        S    04:30   0:00  |           \_ top -n 2 -b -c
root      56438  0.0  0.0 183044  2144 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      56453  0.0  0.0  20164   968 ?        Ss   04:30   0:00  |   \_ jailshell (pactpay) [56493] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   56493  0.0  0.0  20164   260 ?        S    04:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   56500  0.0  0.7 476724 17484 ?        S    04:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      56440  0.0  0.0 183044  2140 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      56463  0.0  0.0  20164   968 ?        Ss   04:30   0:00      \_ jailshell (nigeria) [56499] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   56499  0.0  0.0  20164   260 ?        S    04:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   56506  0.0  0.6 400652 15932 ?        S    04:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        584  0.0  0.0 114704    32 ttyS0    Ss+  03:41   0:00 /bin/bash
root        585  0.0  0.0 108296    48 tty1     Ss+  03:41   0:00 /sbin/agetty --noclear tty1 linux
mailnull    608  0.0  0.1  89112  3536 ?        Ss   03:41   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  56299  0.0  0.1  89280  4184 ?        S    04:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  56443  0.0  0.1  89280  4184 ?        S    04:30   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    937  0.0  0.0 112524  2096 ?        Ssl  03:41   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        938  0.0  0.0 111304   408 ?        Ss   03:41   0:00 /usr/sbin/sshd -D
root      55654  0.0  0.1 111304  4276 ?        Ss   04:29   0:00  \_ sshd: [accepted]
sshd      55655  0.0  0.1 115644  2632 ?        S    04:29   0:00  |   \_ sshd: [net]
root      55899  0.0  0.1 111304  4268 ?        Ss   04:29   0:00  \_ sshd: [accepted]
sshd      55908  0.0  0.1 115644  2628 ?        S    04:29   0:00  |   \_ sshd: [net]
root      56336  0.0  0.1 111304  4268 ?        Ss   04:29   0:00  \_ sshd: [accepted]
systuser    939  0.0  0.0 113272  1836 ?        Ssl  03:41   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        941  0.0  0.0 153404   300 ?        Ss   03:41   0:00 pure-ftpd (SERVER)
systuser    942  0.0  0.0  11540    56 ?        Ssl  03:41   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
memcach+    943  0.0  0.0 342400     0 ?        Ssl  03:41   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    945  0.0  0.0  12756    60 ?        Ssl  03:41   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    947  0.0  1.6 5654304 39544 ?       SLsl 03:41   0:01 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    948  0.0  0.5 114016 12448 ?        Ssl  03:41   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        949  0.0  0.0  51508   492 ?        Ss   03:41   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1087  0.0  0.0  46912  1652 ?        S    03:41   0:00  \_ dovecot/pop3-login
dovenull   1088  0.0  0.0  47056  2400 ?        S    03:41   0:00  \_ dovecot/imap-login
dovecot    1089  0.0  0.0  10320   260 ?        S    03:41   0:00  \_ dovecot/anvil
root       1090  0.0  0.0  10452   484 ?        S    03:41   0:00  \_ dovecot/log
dovenull   1095  0.0  0.0  47012  1704 ?        S    03:41   0:00  \_ dovecot/pop3-login
dovenull   1096  0.0  0.1  47284  2524 ?        S    03:41   0:00  \_ dovecot/imap-login
root       1098  0.0  0.0  24528  2316 ?        S    03:41   0:00  \_ dovecot/config
dovecot    1101  0.0  0.0  13568   580 ?        S    03:41   0:00  \_ dovecot/stats
dovecot    1195  0.0  0.0  41056  1432 ?        S    03:41   0:00  \_ dovecot/auth
root      54750  0.0  0.1  60820  4512 ?        S    04:28   0:00  \_ dovecot/lmtp
root        951  0.0  0.0 572372   744 ?        Ssl  03:41   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        953  0.0  0.1 445028  2604 ?        Ss   03:41   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        960  0.0  0.4 436392 11268 ?        Ss   03:41   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        963  0.0  0.1 397344  2896 ?        Ss   03:41   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   56168  2.8  1.3 494364 32632 ?        S    04:29   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria   56360 12.6  1.0 486916 26464 ?        S    04:29   0:00  \_ php-fpm: pool nigeriadecide_org
root        964  0.4 19.3 1689316 468704 ?      Ssl  03:41   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        971  0.0  0.0 224592  2024 ?        Ssl  03:41   0:00 /usr/sbin/rsyslogd -n
root        988  0.0  0.0 385496   744 ?        Ss   03:41   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        996  0.0  0.0 392856   220 ?        Ss   03:41   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
named       998  0.0  1.2 785456 30316 ?        Ssl  03:41   0:02 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1004  0.0  0.0 386112   516 ?        Ss   03:41   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1005  0.0  0.3 261556  8372 ?        Ss   03:41   0:01 cpsrvd (SSL) - waiting for connections                   
root      56405  0.0  0.0      0     0 ?        Z    04:30   0:00  \_ [cpaneld - servi] <defunct>
cpanelc+   1010  0.0  0.1   9956  2868 ?        Ss   03:41   0:02 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1165  0.0  0.1 157704  2980 ?        S    03:41   0:00 SonarPush 0.6.12 [sleeping]
root       1171  0.1  4.8 248228 118400 ?       Ss   03:41   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7644  0.0  4.9 249488 119144 ?       S    03:47   0:00  \_ spamd child
root       7645  0.0  4.8 248228 117184 ?       S    03:47   0:00  \_ spamd child
wp-tool+   1186  0.0  1.4 410452 35512 ?        Ss   03:41   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1187  0.0  0.5 387528 13028 ?        Ss   03:41   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1244  0.0  0.2 183900  4968 ?        Ss   03:41   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1246  0.0  0.4 209256 10956 ?        Ss   03:41   0:00 tailwatchd
root       1248  0.0  0.0 167452  1392 ?        Ss   03:41   0:00 dnsadmin - dormant mode
root       1677  0.0  0.0 299272   824 ?        Ss   03:41   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1711  0.0  0.0 130416  1428 ?        SN   03:41   0:00 cpanellogd - sleeping for logs
mysql      1790  1.4  9.5 1461296 230192 ?      Sl   03:41   0:41 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1916  0.0  0.3 267036  8600 ?        Ss   03:41   0:00 /usr/sbin/httpd -k start
root       1917  0.0  0.0  12820   380 ?        S    03:41   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1918  0.0  0.0  12732   344 ?        S    03:41   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1919  0.0  0.0  12856   332 ?        S    03:41   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1927  0.0  0.0  53268    88 ?        S    03:41   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    40585  0.1  0.8 277696 20132 ?        S    04:15   0:01  \_ /usr/sbin/httpd -k start
nobody    48321  0.1  0.8 277784 19540 ?        S    04:22   0:00  \_ /usr/sbin/httpd -k start
nobody    49690  0.0  0.7 277656 19304 ?        S    04:24   0:00  \_ /usr/sbin/httpd -k start
nobody    49923  0.1  0.8 277824 19680 ?        S    04:24   0:00  \_ /usr/sbin/httpd -k start
nobody    50710  0.1  0.8 277924 19444 ?        S    04:24   0:00  \_ /usr/sbin/httpd -k start
nobody    51863  0.1  0.8 277824 19400 ?        S    04:25   0:00  \_ /usr/sbin/httpd -k start
nobody    51865  0.1  0.7 277792 19292 ?        S    04:25   0:00  \_ /usr/sbin/httpd -k start
cloudw    56565  0.0  0.6 352096 15232 ?        S    04:30   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    51882  0.1  0.7 277784 19232 ?        S    04:25   0:00  \_ /usr/sbin/httpd -k start
nobody    52986  0.1  0.8 277788 19404 ?        S    04:26   0:00  \_ /usr/sbin/httpd -k start
nobody    53072  0.1  0.7 277544 19268 ?        S    04:26   0:00  \_ /usr/sbin/httpd -k start
nobody    53133  0.1  0.7 277784 19268 ?        S    04:27   0:00  \_ /usr/sbin/httpd -k start
nobody    53134  0.1  0.7 277916 19280 ?        S    04:27   0:00  \_ /usr/sbin/httpd -k start
nobody    54088  0.1  0.7 277788 19136 ?        S    04:27   0:00  \_ /usr/sbin/httpd -k start
nobody    54089  0.1  0.7 277824 18868 ?        S    04:27   0:00  \_ /usr/sbin/httpd -k start
nobody    54140  0.1  0.8 277784 19440 ?        S    04:27   0:00  \_ /usr/sbin/httpd -k start
nobody    54167  0.1  0.7 277784 19160 ?        S    04:27   0:00  \_ /usr/sbin/httpd -k start
nobody    54168  0.1  0.7 277784 18784 ?        S    04:27   0:00  \_ /usr/sbin/httpd -k start
nobody    54169  0.0  0.8 277796 19488 ?        S    04:27   0:00  \_ /usr/sbin/httpd -k start
nobody    54188  0.1  0.7 277784 19308 ?        S    04:27   0:00  \_ /usr/sbin/httpd -k start
nobody    54189  0.1  0.7 277920 18804 ?        S    04:27   0:00  \_ /usr/sbin/httpd -k start
nobody    55263  0.0  0.7 277824 18916 ?        S    04:28   0:00  \_ /usr/sbin/httpd -k start
nobody    55283  0.1  0.7 277784 19080 ?        S    04:28   0:00  \_ /usr/sbin/httpd -k start
cloudw    56604  0.0  0.6 352096 15236 ?        S    04:30   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    55484  0.1  0.7 277784 18820 ?        S    04:29   0:00  \_ /usr/sbin/httpd -k start
nobody    55499  0.2  0.7 277784 18876 ?        S    04:29   0:00  \_ /usr/sbin/httpd -k start
nobody    55500  0.1  0.7 277784 18920 ?        S    04:29   0:00  \_ /usr/sbin/httpd -k start
nobody    56216  0.0  0.7 277784 17496 ?        S    04:29   0:00  \_ /usr/sbin/httpd -k start
nobody    56223  0.2  0.7 277784 17556 ?        S    04:29   0:00  \_ /usr/sbin/httpd -k start
nobody    56224  0.1  0.7 277784 17492 ?        S    04:29   0:00  \_ /usr/sbin/httpd -k start
nobody    56237  0.2  0.7 277784 18632 ?        S    04:29   0:00  \_ /usr/sbin/httpd -k start
nobody    56238  0.1  0.7 277784 18460 ?        S    04:29   0:00  \_ /usr/sbin/httpd -k start
nobody    56239  0.1  0.7 277784 17492 ?        S    04:29   0:00  \_ /usr/sbin/httpd -k start
nobody    56240  0.1  0.7 277784 17748 ?        S    04:29   0:00  \_ /usr/sbin/httpd -k start
nobody    56257  0.1  0.7 277784 17496 ?        S    04:29   0:00  \_ /usr/sbin/httpd -k start
nobody    56258  0.0  0.7 277504 18076 ?        S    04:29   0:00  \_ /usr/sbin/httpd -k start
nobody    56259  0.1  0.7 277784 17492 ?        S    04:29   0:00  \_ /usr/sbin/httpd -k start
nobody    56260  0.1  0.7 277792 17440 ?        S    04:29   0:00  \_ /usr/sbin/httpd -k start
nobody    56261  0.2  0.7 277784 17500 ?        S    04:29   0:00  \_ /usr/sbin/httpd -k start
nobody    56262  0.1  0.7 277784 17492 ?        S    04:29   0:00  \_ /usr/sbin/httpd -k start
nobody    56263  0.1  0.7 277792 17496 ?        S    04:29   0:00  \_ /usr/sbin/httpd -k start
nobody    56264  0.1  0.7 277784 17588 ?        S    04:29   0:00  \_ /usr/sbin/httpd -k start
root       1997  0.0  0.4 181160  9912 ?        Ss   03:41   0:02 lfd - sleeping
oysipao+  22160  0.0  0.0   3148   412 ?        Ss   04:00   0:00 [kworker]
oysipao+  22163  0.0  0.0   3152   420 ?        S    04:00   0:00  \_ [kworker]
root      22621  0.0  0.4 1276100 10516 ?       Ssl  04:00   0:00 /usr/bin/cspdaemon
root      22659  0.0  0.4 1277312 11672 ?       Ssl  04:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 2915  Threads: 3  Questions: 203197  Slow queries: 0  Opens: 2293  Flush tables: 1  Open tables: 1942  Queries per second avg: 69.707
*************************** 1. row ***************************
     Id: 3345
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 3352
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 3358
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.97 TIME_WAIT
      1 192.178.4.99 TIME_WAIT
      1 ::1 TIME_WAIT
      1 217.113.194.206 TIME_WAIT
      1 45.153.101.181 TIME_WAIT
      1 51.222.95.212 TIME_WAIT
      1 66.249.64.102 TIME_WAIT
      1 66.249.64.161 TIME_WAIT
      1 66.249.64.234 TIME_WAIT
      1 66.249.64.36 TIME_WAIT
      1 66.249.70.107 TIME_WAIT
      1 66.249.70.170 TIME_WAIT
      1 66.249.70.197 TIME_WAIT
      1 66.249.70.199 TIME_WAIT
      1 66.249.70.35 TIME_WAIT
      1 74.7.230.2 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 185.231.154.128 TIME_WAIT
      3 102.89.85.179 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Wednesday, 12-Nov-2025 04:30:02 WAT
   Restart Time: Wednesday, 12-Nov-2025 03:41:32 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 48 minutes 30 seconds
   Server load: 0.63 0.73 0.56
   Total accesses: 23147 - Total Traffic: 618.4 MB - Total Duration: 12358285
   CPU Usage: u5.86 s3.15 cu331.45 cs267.26 - 20.9% CPU load
   7.95 requests/sec - 217.6 kB/second - 27.4 kB/request - 533.904 ms/request
   35 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

WKKKKW_KKWWKKKKKKKKKK_K_KKKKKKK_KKK_KKKK........................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU   SS  Req  Dur   Conn Child  Slot    Client     Protocol           VHost                                        Request
   0-0  56216 0/2/787   W 0.02 0    0   337728 0.0  0.06  17.34 66.249.64.39  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3091983919 HTTP/1.1
   1-0  56223 1/3/583   K 0.05 1    397 301763 31.0 0.09  14.48 66.249.70.198 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2361056662 HTTP/1.1
   2-0  40585 1/248/775 K 6.55 1    361 421245 30.3 7.16  20.63 66.249.70.102 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2405004755 HTTP/1.1
   3-0  55263 1/14/695  K 0.20 3    266 351606 30.0 0.21  16.94 66.249.64.11  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4193536741 HTTP/1.1
   4-0  54088 1/37/781  K 0.89 1    341 367173 28.7 1.50  19.22 66.249.64.130 http/1.1 schoolplus.cloudware.ng:80 GET /?p=802216042 HTTP/1.1
   5-0  56224 0/2/521   W 0.02 0    0   288342 0.0  0.06  20.90 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   6-0  51863 0/73/693  _ 1.90 0    287 312093 0.0  2.11  16.42 66.249.70.131 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3622827747 HTTP/1.1
   7-0  48321 2/124/741 K 3.43 2    261 383140 68.7 3.70  18.36 66.249.70.33  http/1.1 support.cloudware.ng:443   GET /?c=3525360312 HTTP/1.1
   8-0  54089 1/35/595  K 0.96 0    396 317841 31.3 1.08  15.66 66.249.70.134 http/1.1 schoolplus.cloudware.ng:80 GET /?p=469511715 HTTP/1.1
   9-0  55283 0/14/606  W 0.29 0    0   284125 0.0  0.27  17.31 66.249.64.110 http/1.1 schoolplus.cloudware.ng:80 GET /?p=777501470 HTTP/1.1
   10-0 51865 0/76/608  W 1.71 0    0   333274 0.0  2.02  15.88 66.249.64.104 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3715770198 HTTP/1.1
   11-0 56237 2/3/645   K 0.06 3    264 346954 67.6 0.10  21.11 66.249.70.38  http/1.1 support.cloudware.ng:443   GET /?c=3959349917 HTTP/1.1
   12-0 54140 1/40/598  K 0.92 3    305 331974 30.7 1.07  16.39 66.249.70.70  http/1.1 schoolplus.cloudware.ng:80 GET /?p=552954641 HTTP/1.1
   13-0 51882 1/72/698  K 1.79 0    308 393747 31.5 2.30  19.26 66.249.64.129 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2325159925 HTTP/1.1
   14-0 56238 1/3/609   K 0.03 2    204 299967 11.2 0.07  15.07 45.38.129.168 http/1.1 nigeriadecide.org:443      GET /blog/apcs-claim-of-registered-100000-non-indigenes-is-fals
   15-0 55484 1/16/590  K 0.19 3    259 341606 29.5 0.29  16.36 66.249.70.133 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3538614137 HTTP/1.1
   16-0 52986 1/47/590  K 1.16 0    352 331408 30.8 1.42  16.08 66.249.70.195 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2740063203 HTTP/1.1
   17-0 55499 1/20/584  K 0.51 0    516 329355 33.2 0.55  15.86 66.249.64.33  http/1.1 schoolplus.cloudware.ng:80 GET /?p=340475413 HTTP/1.1
   18-0 55500 1/18/705  K 0.44 4    270 362443 33.2 0.50  19.09 66.249.70.32  http/1.1 support.cloudware.ng:443   GET /?c=1006462955 HTTP/1.1
   19-0 56239 1/2/587   K 0.02 4    409 336901 30.7 0.06  16.47 66.249.70.33  http/1.1 schoolplus.cloudware.ng:80 GET /?p=373281207 HTTP/1.1
   20-0 54167 1/39/512  K 0.99 0    354 290186 30.5 1.10  13.85 66.249.64.10  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2575189236 HTTP/1.1
   21-0 54168 0/26/447  _ 0.73 0    17  248432 0.0  0.77  11.75 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   22-0 54169 1/26/518  K 0.53 1    354 295283 30.7 0.67  14.46 66.249.70.101 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2171402122 HTTP/1.1
   23-0 56240 0/3/566   _ 0.05 0    0   277236 0.0  0.08  13.96 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   24-0 54188 1/32/658  K 0.76 2    291 315992 30.6 0.81  15.89 66.249.64.41  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2324298527 HTTP/1.1
   25-0 56257 2/2/491   K 0.03 4    273 283506 62.3 0.06  13.73 66.249.70.197 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3720109129 HTTP/1.1
   26-0 56258 2/2/622   K 0.00 3    1   321015 17.2 0.02  16.19 102.89.85.179 http/1.1 health.oyostate.gov.ng:443 GET /wp-content/plugins/thegov-core/includes/elementor/assets/j
   27-0 54189 3/34/507  K 0.90 0    446 305535 93.2 0.99  13.64 66.249.64.71  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2181091124 HTTP/1.1
   28-0 56259 1/2/480   K 0.03 3    292 263927 31.8 0.06  13.15 66.249.70.3   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1042532437 HTTP/1.1
   29-0 56260 1/3/575   K 0.04 2    294 271444 31.8 0.04  14.40 66.249.64.73  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1945768347 HTTP/1.1
   30-0 56261 1/2/458   K 0.03 2    416 253595 30.8 0.06  12.18 66.249.64.12  http/1.1 schoolplus.cloudware.ng:80 GET /?p=361055696 HTTP/1.1
   31-0 53072 0/46/531  _ 0.86 0    288 304134 0.0  1.03  13.73 66.249.70.7   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2112387014 HTTP/1.1
   32-0 56262 1/2/338   K 0.03 1    406 193049 31.7 0.06  9.19  66.249.64.37  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2939832370 HTTP/1.1
   33-0 56263 1/2/478   K 0.02 2    302 269590 30.4 0.06  12.95 66.249.70.37  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3974712501 HTTP/1.1
   34-0 53133 1/53/552  K 1.32 1    376 258129 35.4 1.65  13.20 66.249.70.38  http/1.1 support.cloudware.ng:443   GET /?c=1389644181 HTTP/1.1
   35-0 53134 0/54/517  _ 1.28 0    3   301772 0.0  1.40  14.99 102.89.85.179 http/1.1 health.oyostate.gov.ng:443 GET /wp-content/plugins/elementor/assets/js/frontend-modules.mi
   36-0 49690 1/59/446  K 1.54 3    267 252311 30.7 1.70  11.98 66.249.64.36  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1164779194 HTTP/1.1
   37-0 49923 2/109/408 K 2.87 0    374 242285 63.3 3.05  11.07 66.249.70.34  http/1.1 support.cloudware.ng:443   GET /?c=2036960596 HTTP/1.1
   38-0 50710 1/82/335  K 2.05 3    337 201230 31.0 2.43  10.88 66.249.64.2   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2756659346 HTTP/1.1
   39-0 56264 1/3/195   K 0.03 1    397 121598 31.7 0.06  5.25  66.249.64.162 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3766668275 HTTP/1.1
   40-0 -     0/0/141   . 0.00 44   0   96755  0.0  0.00  3.96  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/104   . 0.00 101  0   53512  0.0  0.00  2.56  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/36    . 0.00 96   0   14643  0.0  0.00  0.72  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/55    . 0.00 108  340 22172  0.0  0.00  1.08  66.249.64.129 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3391160104 HTTP/1.1
   44-0 -     0/0/3     . 0.00 1362 0   1362   0.0  0.00  0.07  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/2     . 0.00 1363 0   601    0.0  0.00  0.03  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/24    . 0.00 1294 0   13196  0.0  0.00  0.63  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/157   . 0.00 721  4   113084 0.0  0.00  4.08  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 603
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 14 seconds, (range: 1...63)
   index usage: 10%, cache usage: 14%
   total entries stored since starting: 12449
   total entries replaced since starting: 0
   total entries expired since starting: 11841
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 15 miss
   total removes since starting: 7 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit