403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.02.12.txt
 ## swap threshold exceeded
## server overview
2025-11-13.02.12 load[0] mem[69/71] mysql[4/8] httpd[35]
              total        used        free      shared  buff/cache   available
Mem:           2363        1581          74          23         708         596
Swap:          1999        1658         341
 02:12:01 up  6:09,  0 users,  load average: 0.46, 0.46, 0.68
## system overview
top - 02:12:01 up  6:09,  0 users,  load average: 0.46, 0.46, 0.68
Tasks: 230 total,   4 running, 225 sleeping,   0 stopped,   1 zombie
%Cpu(s): 74.3 us, 17.1 sy,  0.0 ni,  5.7 id,  0.0 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,    77396 free,  1617612 used,   725292 buff/cache
KiB Swap:  2047996 total,   349960 free,  1698036 used.   612136 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 214608   3644 S 105.9  8.9   5:18.73 /usr/sbin+
 94499 cloudw    20   0  572076 111076   6764 R  17.6  4.6   0:03.64 php-fpm: +
 94632 cloudw    20   0  229220  29856   8364 R   5.9  1.2   0:00.07 /usr/loca+
 94666 nigeria   20   0  400652  15936  10220 S   5.9  0.7   0:00.06 /opt/cpan+
 94704 root      20   0  160220   2064   1580 R   5.9  0.1   0:00.01 top -bcn1
 94712 cloudsms  20   0  396264  10796   7504 R   5.9  0.4   0:00.01 /opt/cpan+
     1 root      20   0   44428   3440   1516 S   0.0  0.1   0:31.16 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.57 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.09 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:23.07 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.01 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.37 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:25.94 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.48 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.58 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.40 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.09 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40240   6108   5864 S   0.0  0.3   0:12.83 /usr/lib/+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    108      0 S   0.0  0.0   0:02.04 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1432    800 S   0.0  0.1   0:05.05 /usr/lib/+
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.48 /usr/sbin+
   501 polkitd   20   0  612240    848    464 S   0.0  0.0   0:02.99 /usr/lib/+
   503 root      20   0  152780     72     28 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3060    800 S   0.0  0.1   0:00.30 queueproc+
   507 root      20   0   52852    244    156 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58596   1308    612 S   0.0  0.1   0:11.45 /usr/bin/+
   519 nscd      20   0 1062080   1348    608 S   0.0  0.1   0:18.90 /usr/sbin+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    852    416 S   0.0  0.0   0:00.62 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3816    880 S   0.0  0.2   0:00.86 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.24 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0  114016  13580   2544 S   0.0  0.6   0:05.40 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.46 pure-ftpd+
   931 root      20   0   51508    464    300 S   0.0  0.0   0:00.31 /usr/sbin+
   932 root      20   0  572372    612    140 S   0.0  0.0   0:01.96 /usr/bin/+
   933 telegraf  20   0 5654048  34256   5852 S   0.0  1.4   0:12.38 /usr/loca+
   935 memcach+  20   0  342400     56     56 S   0.0  0.0   0:00.50 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:02.90 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112    332    240 S   0.0  0.0   0:00.66 php-fpm: +
   961 named     20   0  636988  32556   1908 S   0.0  1.3   0:12.73 /usr/sbin+
   964 root      20   0  281936   5868   5344 S   0.0  0.2   0:06.03 /usr/sbin+
   981 root      20   0  436392    372    284 S   0.0  0.0   0:00.77 php-fpm: +
   984 root      20   0  385496    468    372 S   0.0  0.0   0:00.63 php-fpm: +
   985 root      20   0  261288   6248   1648 S   0.0  0.3   0:03.61 cpsrvd (S+
   989 root      20   0  392856    260    176 S   0.0  0.0   0:00.62 php-fpm: +
   992 root      20   0 1901916 232684    764 S   0.0  9.6   0:32.37 /usr/loca+
  1000 root      20   0  397344   1880    604 S   0.0  0.1   0:03.12 php-fpm: +
  1006 cpanelc+  20   0   10656   3696   2304 S   0.0  0.2   0:18.35 /usr/loca+
  1075 dovenull  20   0   47264   1992   1204 S   0.0  0.1   0:00.45 dovecot/p+
  1076 dovenull  20   0   48460   2844   1652 S   0.0  0.1   0:00.37 dovecot/i+
  1077 dovecot   20   0   10320    280    172 S   0.0  0.0   0:00.12 dovecot/a+
  1078 root      20   0   10452    568    376 S   0.0  0.0   0:00.27 dovecot/l+
  1079 dovenull  20   0   47112   2304   1556 S   0.0  0.1   0:00.34 dovecot/p+
  1080 dovenull  20   0   48000   2580   1540 S   0.0  0.1   0:00.27 dovecot/i+
  1084 root      20   0   24572   2276    504 S   0.0  0.1   0:00.15 dovecot/c+
  1088 dovecot   20   0   13568    596    392 S   0.0  0.0   0:00.05 dovecot/s+
  1121 systuser  20   0  157704   2932    928 S   0.0  0.1   0:00.11 SonarPush+
  1166 dovecot   20   0   41260   1560   1020 S   0.0  0.1   0:00.86 dovecot/a+
  1172 root      20   0  248152   5980   1220 S   0.0  0.2   0:05.49 /usr/loca+
  1173 wp-tool+  20   0  387556   3528   1660 S   0.0  0.1   0:00.24 /usr/bin/+
  1174 wp-tool+  20   0  410616  18240   1684 S   0.0  0.8   0:18.38 /usr/bin/+
  1232 root      20   0  209372  10192   2400 S   0.0  0.4   0:02.93 tailwatchd
  1234 root      20   0  167452   4168   2796 S   0.0  0.2   0:00.43 dnsadmin +
  1237 root      20   0  183900   6108   2872 S   0.0  0.3   0:01.15 cpdavd - +
  1642 root      20   0  299272    504    340 S   0.0  0.0   0:00.60 php-fpm: +
  1702 root      38  18  130416   1364    692 S   0.0  0.1   0:00.05 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:02.63 /usr/sbin+
  2063 root      20   0   12780    380    212 S   0.0  0.0   0:02.74 /usr/loca+
  2064 root      20   0   12732    288    208 S   0.0  0.0   0:02.32 /usr/loca+
  2065 root      20   0   12800    392    216 S   0.0  0.0   0:02.57 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  7883 root      20   0  294720 106640   2416 S   0.0  4.4   0:04.83 spamd chi+
  7886 root      20   0  261428  93272   2544 S   0.0  3.9   0:00.32 spamd chi+
 23292 root      20   0  183048   1388    860 S   0.0  0.1   0:00.00 /usr/sbin+
 23359 root      20   0  113284    620    440 S   0.0  0.0   0:00.00 /bin/sh -+
 23372 root      20   0  108056    276    204 S   0.0  0.0   0:00.00 sleep 2h +
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.35 [kworker]
 51986 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [kworker/+
 58816 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 66521 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 70517 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 72516 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 74479 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 76167 root      20   0  182216   9088   1104 S   0.0  0.4   0:07.64 lfd - sle+
 82518 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 82525 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 82830 root      20   0 1276100  10500    600 S   0.0  0.4   0:00.05 /usr/bin/+
 82872 root      20   0 1277312  11836    600 S   0.0  0.5   0:00.06 /usr/bin/+
 83762 root      20   0  123364    684    460 S   0.0  0.0   0:00.00 /usr/sbin+
 88739 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 89800 nobody    20   0  277924  17820   3748 S   0.0  0.7   0:00.40 /usr/sbin+
 89846 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 90523 nobody    20   0  277544  17728   3692 S   0.0  0.7   0:00.40 /usr/sbin+
 90558 nobody    20   0  277924  17652   3660 S   0.0  0.7   0:00.35 /usr/sbin+
 91412 nobody    20   0  277784  17564   3668 S   0.0  0.7   0:00.40 /usr/sbin+
 91488 nobody    20   0  277784  17388   3596 S   0.0  0.7   0:00.37 /usr/sbin+
 91868 nobody    20   0  277784  17500   3616 S   0.0  0.7   0:00.37 /usr/sbin+
 92414 nobody    20   0  277540  17492   3764 S   0.0  0.7   0:00.23 /usr/sbin+
 92415 nobody    20   0  277784  17628   3600 S   0.0  0.7   0:00.22 /usr/sbin+
 92423 nobody    20   0  277788  17764   3620 S   0.0  0.7   0:00.20 /usr/sbin+
 92444 nobody    20   0  277792  17244   3388 S   0.0  0.7   0:00.23 /usr/sbin+
 92446 nobody    20   0  277784  17756   3688 S   0.0  0.7   0:00.17 /usr/sbin+
 92447 nobody    20   0  277824  17300   3304 S   0.0  0.7   0:00.18 /usr/sbin+
 92449 nobody    20   0  277932  17664   3724 S   0.0  0.7   0:00.23 /usr/sbin+
 93502 nobody    20   0  277784  17060   3216 S   0.0  0.7   0:00.14 /usr/sbin+
 93515 nobody    20   0  277804  16984   3144 S   0.0  0.7   0:00.17 /usr/sbin+
 93620 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 93681 nobody    20   0  277784  16996   3280 S   0.0  0.7   0:00.11 /usr/sbin+
 93696 nobody    20   0  277784  17508   3564 S   0.0  0.7   0:00.07 /usr/sbin+
 93699 nobody    20   0  277784  17264   3548 S   0.0  0.7   0:00.14 /usr/sbin+
 93785 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 93787 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 94137 nobody    20   0  277944  17504   3448 S   0.0  0.7   0:00.02 /usr/sbin+
 94171 nobody    20   0  277824  17036   3164 S   0.0  0.7   0:00.05 /usr/sbin+
 94357 root      20   0  111304   4444   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 94358 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 94411 nigeria   20   0  397064   4472   2352 S   0.0  0.2   0:00.01 php-fpm: +
 94441 mailnull  20   0   89500   5672   2444 S   0.0  0.2   0:00.00 /usr/sbin+
 94478 nobody    20   0  277788  15872   2168 S   0.0  0.7   0:00.01 /usr/sbin+
 94481 nobody    20   0  277788  15872   2168 S   0.0  0.7   0:00.01 /usr/sbin+
 94482 nobody    20   0  277784  15692   2124 S   0.0  0.6   0:00.00 /usr/sbin+
 94491 nobody    20   0  277784  15692   2124 S   0.0  0.6   0:00.01 /usr/sbin+
 94492 nobody    20   0  277560  15580   2140 S   0.0  0.6   0:00.01 /usr/sbin+
 94493 nobody    20   0  277784  16752   3136 S   0.0  0.7   0:00.02 /usr/sbin+
 94494 nobody    20   0  277924  16972   3284 S   0.0  0.7   0:00.01 /usr/sbin+
 94539 root      20   0  111304   4448   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 94547 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 94554 nobody    20   0  277640  15528   2124 S   0.0  0.6   0:00.00 /usr/sbin+
 94574 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 94575 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 94578 mailnull  20   0   89504   4496   1320 S   0.0  0.2   0:00.00 /usr/sbin+
 94586 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
 94587 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 94588 nobody    20   0  277416  15268   2016 S   0.0  0.6   0:00.01 /usr/sbin+
 94589 nobody    20   0  277092  15116   2076 S   0.0  0.6   0:00.00 /usr/sbin+
 94603 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 94606 nobody    20   0  277640  15520   2116 S   0.0  0.6   0:00.00 /usr/sbin+
 94607 nobody    20   0  277364  14888   1832 S   0.0  0.6   0:00.00 /usr/sbin+
 94608 nobody    20   0  277092  13580    760 S   0.0  0.6   0:00.00 /usr/sbin+
 94609 nobody    20   0  277224  15144   2156 S   0.0  0.6   0:00.00 /usr/sbin+
 94610 nobody    20   0  277092  13584    764 S   0.0  0.6   0:00.00 /usr/sbin+
 94611 nobody    20   0  277092  13584    764 S   0.0  0.6   0:00.00 /usr/sbin+
 94612 nobody    20   0  277092  13584    764 S   0.0  0.6   0:00.00 /usr/sbin+
 94613 nobody    20   0  277092  13584    764 S   0.0  0.6   0:00.00 /usr/sbin+
 94614 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94615 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94616 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94618 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94619 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94621 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94622 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94623 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94624 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94625 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94626 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94627 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94629 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 94633 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 94634 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 94635 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 94637 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 94638 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 94639 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 94643 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 94644 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 94645 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 94646 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 94648 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 94649 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 94650 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 94653 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 94658 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 94660 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 94663 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 94665 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 94686 cloudw    20   0  352096  15496  10220 S   0.0  0.6   0:00.01 /opt/cpan+
 94707 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 94711 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov12   0:23  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:25  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      51986  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/1:3]
root      58816  0.0  0.0      0     0 ?        S    01:36   0:00  \_ [kworker/u200:0]
root      66521  0.0  0.0      0     0 ?        S    01:44   0:00  \_ [kworker/u200:1]
root      70517  0.0  0.0      0     0 ?        R    01:48   0:00  \_ [kworker/1:0]
root      72516  0.0  0.0      0     0 ?        S    01:50   0:00  \_ [kworker/0:0]
root      74479  0.0  0.0      0     0 ?        S    01:52   0:00  \_ [kworker/0:4]
root      82518  0.0  0.0      0     0 ?        S    02:00   0:00  \_ [kworker/1:2]
root      82525  0.0  0.0      0     0 ?        S    02:00   0:00  \_ [kworker/1:4]
root      88739  0.0  0.0      0     0 ?        S    02:06   0:00  \_ [kworker/0:3]
root      89846  0.0  0.0      0     0 ?        S    02:07   0:00  \_ [kworker/1:1]
root      93620  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/u200:2]
root      94658  0.0  0.0      0     0 ?        S    02:12   0:00  \_ [kworker/0:1]
root          1  0.1  0.1  44428  3440 ?        Ss   Nov12   0:31 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  40240  6108 ?        Ss   Nov12   0:12 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   108 ?        S<sl Nov12   0:02 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ss   Nov12   0:05 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   848 ?        Ssl  Nov12   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    72 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3060 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   244 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58596  1308 ?        Rs   Nov12   0:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1348 ?        Ssl  Nov12   0:18 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124512   852 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      23292  0.0  0.0 183048  1388 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      23359  0.0  0.0 113284   620 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      23372  0.0  0.0 108056   276 ?        S    01:00   0:00  |       \_ sleep 2h 2m
root      94614  0.0  0.1 183080  2428 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      94632  8.0  1.3 232468 31552 ?        Rs   02:12   0:00  |   \_ /usr/local/cpanel/bin/autossl_check_cpstore_queue
root      94615  0.0  0.1 183080  2428 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      94644  0.0  0.0 113284  1212 ?        Ss   02:12   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      94650  0.0  0.0 108052   360 ?        S    02:12   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      94653  0.0  0.0 113288  1516 ?        S    02:12   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      94713  0.0  0.0 153840  2096 ?        R    02:12   0:00  |               \_ ps auxf
root      94616  0.0  0.1 183076  2488 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      94618  0.0  0.1 183080  2428 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      94645  0.0  0.0  20164   808 ?        Ss   02:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      94619  0.0  0.1 183080  2428 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      94638  0.0  0.0  20164   804 ?        Ss   02:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      94621  0.0  0.1 183080  2428 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      94649  0.0  0.0  20164   804 ?        Ss   02:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      94622  0.0  0.1 183080  2428 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      94643  0.0  0.0  20164   804 ?        Ss   02:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      94623  0.0  0.1 183080  2424 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      94633  0.0  0.0  20164   808 ?        Ss   02:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      94624  0.0  0.1 183080  2424 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      94635  0.0  0.0  20164   808 ?        Ss   02:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      94625  0.0  0.1 183080  2424 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      94634  0.0  0.0  20164   804 ?        Ss   02:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      94626  0.0  0.0 183080  2420 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      94637  0.0  0.0  20164   804 ?        Ss   02:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      94627  0.0  0.0 183080  2420 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      94648  0.0  0.0  20164   964 ?        Ss   02:12   0:00  |   \_ jailshell (pactpay) [94660] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   94660  0.0  0.0  20164   260 ?        S    02:12   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   94665  2.0  0.7 476724 17484 ?        S    02:12   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      94629  0.0  0.0 183080  2420 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      94639  0.0  0.0  20164   960 ?        Ss   02:12   0:00      \_ jailshell (nigeria) [94663] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   94663  0.0  0.0  20164   256 ?        S    02:12   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   94666  7.0  0.6 400652 15936 ?        S    02:12   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3816 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  94441  0.0  0.2  89500  5672 ?        S    02:11   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  94578  0.0  0.1  89504  4496 ?        S    02:11   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13580 ?        Ssl  Nov12   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   464 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  47264  1992 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48460  2844 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   280 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   568 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  47112  2304 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  48000  2580 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24572  2276 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   596 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1560 ?        S    Nov12   0:00  \_ dovecot/auth
root      93785  0.0  0.1  60820  4512 ?        S    02:11   0:00  \_ dovecot/lmtp
root        932  0.0  0.0 572372   612 ?        Ssl  Nov12   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.4 5654048 34256 ?       SLsl Nov12   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400    56 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:02 /usr/sbin/sshd -D
root      93787  0.0  0.1 111304  4260 ?        Ss   02:11   0:00  \_ sshd: [accepted]
root      94357  0.0  0.1 111304  4444 ?        Ss   02:11   0:00  \_ sshd: [accepted]
sshd      94358  0.0  0.1 115644  2632 ?        S    02:11   0:00  |   \_ sshd: [net]
root      94539  0.0  0.1 111304  4448 ?        Ss   02:11   0:00  \_ sshd: [accepted]
sshd      94547  0.0  0.1 115644  2632 ?        S    02:11   0:00      \_ sshd: [net]
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268    68 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   332 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.3 636988 32556 ?        Ssl  Nov12   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.2 281936  5868 ?        Ssl  Nov12   0:06 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   372 ?        Rs   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   468 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.2 261288  6248 ?        Ss   Nov12   0:03 cpsrvd (SSL) - waiting for connections                   
root      94603  0.0  0.0      0     0 ?        Z    02:12   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   260 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1  9.6 1901916 232684 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1880 ?        Ss   Nov12   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   94411  0.0  0.1 397064  4472 ?        S    02:11   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    94499 45.6  4.6 574124 111600 ?       R    02:11   0:03  \_ php-fpm: pool cloudware_ng
cpanelc+   1006  0.0  0.1  10656  3696 ?        Ss   Nov12   0:18 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2932 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.2 248152  5980 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  4.4 294720 106640 ?       S    Nov12   0:04  \_ spamd child
root       7886  0.0  3.8 261428 93272 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3528 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.7 410616 18240 ?        Ss   Nov12   0:18 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.4 209372 10192 ?        Ss   Nov12   0:02 tailwatchd
root       1234  0.0  0.1 167452  4168 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  0.2 183900  6108 ?        Ss   Nov12   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1642  0.0  0.0 299272   504 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1364 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.4  8.8 1457796 214608 ?      Sl   Nov12   5:18 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:02 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12780   380 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   288 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12800   392 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    89800  0.1  0.7 277924 17820 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    90523  0.1  0.7 277544 17728 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    90558  0.1  0.7 277924 17652 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    91412  0.2  0.7 277784 17564 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
nobody    91488  0.2  0.7 277784 17388 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
nobody    91868  0.2  0.7 277784 17500 ?        S    02:09   0:00  \_ /usr/sbin/httpd -k start
nobody    92414  0.1  0.7 277540 17492 ?        S    02:09   0:00  \_ /usr/sbin/httpd -k start
nobody    92415  0.1  0.7 277784 17628 ?        S    02:09   0:00  \_ /usr/sbin/httpd -k start
nobody    92423  0.1  0.7 277788 17764 ?        S    02:09   0:00  \_ /usr/sbin/httpd -k start
nobody    92444  0.1  0.7 277792 17244 ?        S    02:09   0:00  \_ /usr/sbin/httpd -k start
nobody    92446  0.1  0.7 277784 17756 ?        S    02:09   0:00  \_ /usr/sbin/httpd -k start
nobody    92447  0.1  0.7 277824 17300 ?        S    02:09   0:00  \_ /usr/sbin/httpd -k start
nobody    92449  0.1  0.7 277932 17664 ?        S    02:09   0:00  \_ /usr/sbin/httpd -k start
nobody    93502  0.2  0.7 277784 17060 ?        S    02:10   0:00  \_ /usr/sbin/httpd -k start
nobody    93515  0.2  0.7 277804 16984 ?        S    02:10   0:00  \_ /usr/sbin/httpd -k start
nobody    93681  0.1  0.7 277784 16996 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    93696  0.1  0.7 277784 17508 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    93699  0.2  0.7 277784 17264 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    94137  0.0  0.7 277944 17504 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    94171  0.1  0.7 277824 17036 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    94478  0.1  0.6 277788 15872 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    94481  0.1  0.6 277788 15872 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    94482  0.0  0.6 277784 15692 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    94491  0.1  0.6 277784 15692 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    94492  0.1  0.6 277560 15580 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    94493  0.2  0.6 277784 16752 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    94494  0.1  0.7 277924 16972 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    94554  0.0  0.6 277640 15528 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    94574  0.0  0.6 277640 15520 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    94575  0.0  0.6 277640 15520 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    94586  0.0  0.6 277640 15524 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    94587  0.0  0.6 277640 15520 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    94588  0.5  0.6 277416 15268 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    94589  0.0  0.6 277092 15116 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    94606  0.0  0.6 277640 15520 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    94607  0.0  0.6 277640 15524 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    94608  0.0  0.5 277092 13580 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    94609  0.0  0.6 277224 15144 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    94610  0.0  0.5 277092 13584 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    94611  0.0  0.6 277364 14888 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
root      94714  0.0  0.0   6728   416 ?        S    02:12   0:00  |   \_ /usr/sbin/suexec 1029 1031 ea-php70
nobody    94612  0.0  0.5 277092 13584 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    94613  0.0  0.5 277092 13584 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.3 182216  9088 ?        Ss   00:00   0:07 lfd - sleeping
root      82830  0.0  0.4 1276100 10500 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      82872  0.0  0.4 1277312 11836 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
root      83762  0.0  0.0 123364   684 ?        Ss   02:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 22142  Threads: 4  Questions: 1939353  Slow queries: 0  Opens: 7138  Flush tables: 1  Open tables: 2000  Queries per second avg: 87.587
*************************** 1. row ***************************
     Id: 27571
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 27572
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 27581
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.210.140.128 TIME_WAIT
      1 104.210.140.142 TIME_WAIT
      1 114.119.128.10 TIME_WAIT
      1 114.119.132.202 TIME_WAIT
      1 114.119.140.48 TIME_WAIT
      1 15.235.27.169 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 192.178.4.104 TIME_WAIT
      1 199.47.82.18 TIME_WAIT
      1 ::1 TIME_WAIT
      1 54.39.203.235 TIME_WAIT
      1 66.249.64.171 TIME_WAIT
      1 66.249.70.192 TIME_WAIT
      1 66.249.70.38 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      4 151.236.241.146 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 02:12:02 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 8 minutes 58 seconds
   Server load: 0.46 0.46 0.68
   Total accesses: 122190 - Total Traffic: 3.2 GB - Total Duration: 62508705
   CPU Usage: u3.35 s3.81 cu1565.38 cs1263.12 - 12.8% CPU load
   5.52 requests/sec - 152.0 kB/second - 27.5 kB/request - 511.57 ms/request
   34 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

KKK_KK_KKKRKKKKKK_KKK_RKKKKKKKKKK_KK___WWW......................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU   SS  Req   Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  94137 1/6/5542  K 0.05 4    395 2821036 31.4  0.09  140.49 66.249.64.37  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1709656537 HTTP/1.1
   1-0  90523 1/65/5616 K 1.73 2    355 2668596 31.0  1.79  139.96 66.249.70.174 http/1.1 schoolplus.cloudware.ng:80 GET /?p=4103776426 HTTP/1.1
   2-0  91412 1/66/5510 K 2.05 4    345 2921245 31.0  1.81  159.05 66.249.64.103 http/1.1 schoolplus.cloudware.ng:80 GET /?p=597086779 HTTP/1.1
   3-0  92414 0/38/5540 _ 0.92 0    364 2939417 0.0   0.97  159.35 66.249.64.74  http/1.1 schoolplus.cloudware.ng:80 GET /?p=422819551 HTTP/1.1
   4-0  94171 1/9/5308  K 0.23 2    303 2653241 30.1  0.24  138.35 66.249.70.6   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1760610498 HTTP/1.1
   5-0  92415 1/38/5443 K 0.95 1    263 2824912 29.6  1.03  167.95 66.249.70.2   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2983507538 HTTP/1.1
   6-0  93502 0/23/5256 _ 0.61 0    351 2650174 0.0   0.64  138.09 192.178.4.105 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1623365091 HTTP/1.1
   7-0  92423 2/36/6002 K 0.87 1    270 2903507 63.5  0.91  160.80 66.249.70.69  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3214793133 HTTP/1.1
   8-0  94478 1/3/4718  K 0.03 3    367 2424657 31.0  0.06  121.99 66.249.64.66  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1060122636 HTTP/1.1
   9-0  94481 1/3/4949  K 0.02 3    398 2551291 31.2  0.06  131.28 66.249.64.233 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2072081330 HTTP/1.1
   10-0 90558 0/58/5004 R 1.52 26   284 2498369 0.0   1.59  137.42 27.95.180.8   http/1.1
   11-0 94482 1/2/5239  K 0.02 3    348 2706346 29.9  0.06  168.06 66.249.70.96  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1384715056 HTTP/1.1
   12-0 94491 1/2/4883  K 0.03 2    296 2410747 30.9  0.06  120.26 66.249.64.15  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3003056535 HTTP/1.1
   13-0 94492 1/2/4172  K 0.03 3    356 1964645 29.4  0.06  97.91  66.249.70.3   http/1.1 schoolplus.cloudware.ng:80 GET /?p=4218865333 HTTP/1.1
   14-0 94493 8/8/4261  K 0.02 0    898 2236145 145.2 0.14  128.29 199.47.82.18  http/1.1 cloudware.ng:443           GET /2019/08/23/airline-reservations-software-the-revolution-of
   15-0 93515 1/27/3626 K 0.74 0    356 1872022 30.5  0.78  95.18  66.249.70.32  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3395251348 HTTP/1.1
   16-0 91488 1/60/5302 K 1.60 1    417 2564165 30.8  1.65  137.16 66.249.64.11  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2595051822 HTTP/1.1
   17-0 92444 0/38/5446 _ 1.00 0    398 2831434 0.0   1.05  157.06 66.249.70.106 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1511089470 HTTP/1.1
   18-0 94494 2/3/2892  K 0.02 2    357 1598000 64.3  0.07  77.79  66.249.64.132 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1696827690 HTTP/1.1
   19-0 94554 1/1/3483  K 0.00 3    354 1887418 30.6  0.03  92.84  66.249.64.65  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2476108939 HTTP/1.1
   20-0 92446 1/33/2315 K 0.69 4    341 1177820 30.2  0.76  56.55  66.249.64.224 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2253634196 HTTP/1.1
   21-0 92447 0/29/2390 _ 0.80 0    304 1280338 0.0   0.83  65.44  66.249.70.70  http/1.1 schoolplus.cloudware.ng:80 GET /?p=141059843 HTTP/1.1
   22-0 93681 0/18/2341 R 0.47 7    301 1272017 0.0   0.52  70.40  199.47.82.18  http/1.1
   23-0 93696 1/14/1791 K 0.29 2    394 960215  32.6  0.32  41.21  66.249.70.109 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1960051275 HTTP/1.1
   24-0 92449 1/41/2579 K 1.02 0    23  1133681 11.1  1.08  59.03  102.89.85.239 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Kano&lga=Rano&ward=Rano HT
   25-0 94574 1/1/1709  K 0.00 2    407 920745  31.5  0.03  48.45  192.178.4.96  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3526550637 HTTP/1.1
   26-0 91868 1/61/933  K 1.66 4    356 506176  31.1  1.71  24.16  66.249.70.35  http/1.1 schoolplus.cloudware.ng:80 GET /?p=212082018 HTTP/1.1
   27-0 94575 1/1/1035  K 0.00 2    364 570624  30.1  0.03  27.43  66.249.70.33  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2799732181 HTTP/1.1
   28-0 93699 1/24/2010 K 0.63 1    269 919774  30.2  0.67  49.31  66.249.70.165 http/1.1 schoolplus.cloudware.ng:80 GET /?p=737432529 HTTP/1.1
   29-0 89800 1/66/680  K 1.82 3    359 378256  29.6  1.81  17.68  66.249.70.36  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2730146365 HTTP/1.1
   30-0 94586 1/1/1160  K 0.00 1    316 620546  29.8  0.03  27.72  66.249.64.42  http/1.1 schoolplus.cloudware.ng:80 GET /?p=570210787 HTTP/1.1
   31-0 94587 1/1/744   K 0.00 1    303 425151  29.9  0.03  19.82  66.249.64.172 http/1.1 schoolplus.cloudware.ng:80 GET /?p=559493162 HTTP/1.1
   32-0 94588 1/1/612   K 0.01 1    334 380301  33.1  0.03  14.98  66.249.64.108 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=908291
   33-0 94589 0/0/629   _ 0.00 0    0   366440  0.0   0.00  15.87  102.89.85.239 http/1.1
   34-0 94606 1/1/491   K 0.00 0    403 294022  30.3  0.03  12.48  66.249.64.170 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1587303069 HTTP/1.1
   35-0 94607 1/1/317   K 0.00 0    390 116140  33.1  0.03  6.28   66.249.70.4   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3578042601 HTTP/1.1
   36-0 94608 0/0/104   _ 0.00 1    0   54049   0.0   0.00  2.60   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 94609 0/1/224   _ 0.00 0    1   130667  0.0   0.02  5.63   ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   38-0 94610 0/0/106   _ 0.00 1    0   62326   0.0   0.00  2.38   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 94611 0/0/71    W 0.00 0    0   33332   0.0   0.00  1.45   66.249.64.107 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3694647518 HTTP/1.1
   40-0 94612 0/0/1120  W 0.00 0    0   651566  0.0   0.00  32.12  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   41-0 94613 0/0/11    W 0.00 0    0   1258    0.0   0.00  0.07   66.249.70.65  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2115544394 HTTP/1.1
   42-0 -     0/0/13    . 0.00 2766 0   4689    0.0   0.00  0.12   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/56    . 0.00 2734 0   30775   0.0   0.00  1.38   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/65    . 0.00 2699 0   29051   0.0   0.00  1.64   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/4     . 0.00 2762 0   2240    0.0   0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/6     . 0.00 2778 0   2519    0.0   0.00  0.09   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/272   . 0.00 1970 0   144675  0.0   0.00  6.70   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/2     . 0.00 2791 0   3773    0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/4     . 0.00 2785 0   2208    0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/55    . 0.00 2628 0   30413   0.0   0.00  3.67   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/4     . 0.00 2786 0   3961    0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/7     . 0.00 2781 0   2145    0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/31    . 0.00 2696 0   17077   0.0   0.00  0.64   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/54    . 0.00 2614 0   24170   0.0   0.00  1.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/7     . 0.00 2779 0   1791    0.0   0.00  0.05   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/9     . 0.00 2768 0   2519    0.0   0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/37    . 0.00 2700 0   23864   0.0   0.00  0.92   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 364
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 27 seconds, (range: 3...205)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 32114
   total entries replaced since starting: 0
   total entries expired since starting: 31732
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 173 miss
   total removes since starting: 22 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit