403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.03.42.txt
 ## mem threshold exceeded
## server overview
2025-11-13.03.42 load[0] mem[89/30] mysql[1/5] httpd[38]
              total        used        free      shared  buff/cache   available
Mem:           2363        2071          68          17         223         124
Swap:          1999         695        1304
 03:42:01 up 7 min,  0 users,  load average: 0.51, 1.12, 0.73
## system overview
top - 03:42:01 up 7 min,  0 users,  load average: 0.51, 1.12, 0.73
Tasks: 231 total,   1 running, 229 sleeping,   0 stopped,   1 zombie
%Cpu(s): 61.3 us, 32.3 sy,  0.0 ni,  0.0 id,  3.2 wa,  0.0 hi,  3.2 si,  0.0 st
KiB Mem :  2420300 total,    84112 free,  2108832 used,   227356 buff/cache
KiB Swap:  2047996 total,  1327868 free,   720128 used.   139436 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1753 mysql     20   0 1457276 182996   1880 S  93.8  7.6   0:07.55 /usr/sbin+
    36 root      20   0       0      0      0 S  18.8  0.0   0:04.54 [kswapd0]
 11535 cloudw    20   0  351952  15232  10128 S  12.5  0.6   0:00.02 /opt/cpan+
 11537 nigeria   20   0  400652  15840  10120 S  12.5  0.7   0:00.04 /opt/cpan+
   537 root      20   0   24564   1148    868 S   6.2  0.0   0:00.12 /usr/lib/+
  5459 nobody    20   0  277908  17476   2456 S   6.2  0.7   0:00.36 /usr/sbin+
 11523 pactpay   20   0  476724  17388  11628 S   6.2  0.7   0:00.03 /opt/cpan+
 11562 cloudw    20   0  352096  15236  10128 S   6.2  0.6   0:00.01 /opt/cpan+
 11563 root      20   0  160220   2324   1592 R   6.2  0.1   0:00.01 top -bcn1
 11568 cloudw    20   0  351952  15232  10128 S   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44268   3208   1436 S   0.0  0.1   0:01.56 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     3 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     5 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:00.62 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [ksoftirq+
    15 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    30 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
    31 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kauditd]
   227 root      20   0       0      0      0 S   0.0  0.0   0:00.26 [kworker/+
   231 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   239 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   245 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   259 root       0 -20       0      0      0 S   0.0  0.0   0:00.35 [kworker/+
   264 root       0 -20       0      0      0 S   0.0  0.0   0:00.29 [kworker/+
   267 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   39500   3892   3604 S   0.0  0.2   0:00.38 /usr/lib/+
   393 root      20   0   45352    368    228 S   0.0  0.0   0:00.34 /usr/lib/+
   411 root      16  -4   55532    252    140 S   0.0  0.0   0:00.05 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 polkitd   20   0  612240   3072    660 S   0.0  0.1   0:00.08 /usr/lib/+
   499 root      20   0   52852    236    232 S   0.0  0.0   0:00.00 /usr/sbin+
   501 root      20   0  224148   5472    772 S   0.0  0.2   0:00.09 queueproc+
   506 rpc       20   0   69256    176     68 S   0.0  0.0   0:00.01 /sbin/rpc+
   507 root      20   0  152780    172    164 S   0.0  0.0   0:00.00 /usr/sbin+
   508 dbus      20   0   58376   1292    728 S   0.0  0.1   0:00.28 /usr/bin/+
   512 nscd      20   0  861368   1188    644 S   0.0  0.0   0:00.58 /usr/sbin+
   524 root      20   0    4388     84     80 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0   21540    492    380 S   0.0  0.0   0:00.01 /usr/sbin+
   557 root      20   0  195208     32     32 S   0.0  0.0   0:00.00 /usr/sbin+
   586 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   588 root      20   0  124480    524    392 S   0.0  0.0   0:00.01 /usr/sbin+
   589 mailnull  20   0   88988   3296    336 S   0.0  0.1   0:00.04 /usr/sbin+
   593 root      20   0  114704    152    152 S   0.0  0.0   0:00.02 /bin/bash
   595 root      20   0  108296    140    136 S   0.0  0.0   0:00.00 /sbin/age+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   676 root       0 -20       0      0      0 S   0.0  0.0   0:00.09 [loop0]
   687 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   688 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   925 systuser  20   0  114016   9900    300 S   0.0  0.4   0:00.16 /usr/loca+
   926 root      20   0  153404    424    340 S   0.0  0.0   0:00.01 pure-ftpd+
   929 root      20   0 1689312 943828    116 S   0.0 39.0   0:13.78 /usr/loca+
   936 root      20   0  386112    520    432 S   0.0  0.0   0:00.08 php-fpm: +
   937 root      20   0  385496    356    272 S   0.0  0.0   0:00.08 php-fpm: +
   947 root      20   0  261020   5012   1204 S   0.0  0.2   0:00.21 cpsrvd (S+
   948 root      20   0  397344   3216    684 S   0.0  0.1   0:00.18 php-fpm: +
   949 named     20   0  646188  21336   1404 S   0.0  0.9   0:00.57 /usr/sbin+
   950 systuser  20   0   11348     40      0 S   0.0  0.0   0:00.00 /usr/loca+
   956 root      20   0  436392  11148  11060 S   0.0  0.5   0:00.13 php-fpm: +
   957 memcach+  20   0  342400     56     56 S   0.0  0.0   0:00.00 /usr/bin/+
   958 telegraf  20   0 5654048  32232     68 S   0.0  1.3   0:00.40 /usr/loca+
   961 root      20   0  111304    528    432 S   0.0  0.0   0:00.05 /usr/sbin+
   962 root      20   0  216400   3488   2944 S   0.0  0.1   0:00.18 /usr/sbin+
   970 systuser  20   0  111608     80      0 S   0.0  0.0   0:00.00 /usr/loca+
   975 cpanelc+  20   0    9832   2744   2292 S   0.0  0.1   0:00.47 /usr/loca+
   987 root      20   0  392856    552    452 S   0.0  0.0   0:00.08 php-fpm: +
   990 root      20   0  572372    928    464 S   0.0  0.0   0:00.14 /usr/bin/+
   991 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.00 /usr/loca+
   995 root      20   0  445028   2680   2680 S   0.0  0.1   0:00.05 sw-engine+
  1001 systuser  20   0  113932     72      0 S   0.0  0.0   0:00.00 /usr/loca+
  1003 root      20   0   51508    588    428 S   0.0  0.0   0:00.03 /usr/sbin+
  1123 dovenull  20   0   46904   1704   1088 S   0.0  0.1   0:00.01 dovecot/p+
  1124 dovenull  20   0   47056   1804   1068 S   0.0  0.1   0:00.00 dovecot/i+
  1125 dovecot   20   0   10320    268    160 S   0.0  0.0   0:00.00 dovecot/a+
  1126 root      20   0   10452    528    360 S   0.0  0.0   0:00.00 dovecot/l+
  1127 dovenull  20   0   46772    696    448 S   0.0  0.0   0:00.00 dovecot/p+
  1128 dovenull  20   0   46924   1296    720 S   0.0  0.1   0:00.00 dovecot/i+
  1131 root      20   0  248180 120536   3784 S   0.0  5.0   0:02.89 /usr/loca+
  1134 root      20   0   24528   1812    280 S   0.0  0.1   0:00.02 dovecot/c+
  1143 dovecot   20   0   13568    492    296 S   0.0  0.0   0:00.00 dovecot/s+
  1185 systuser  20   0  157708   2272    240 S   0.0  0.1   0:00.00 SonarPush+
  1199 root      20   0  183900    200    200 S   0.0  0.0   0:00.08 cpdavd - +
  1201 root      20   0  167452   1500    900 S   0.0  0.1   0:00.05 dnsadmin +
  1202 root      20   0  209176   9720   1236 S   0.0  0.4   0:00.26 tailwatchd
  1209 wp-tool+  20   0  410452  34652   1204 S   0.0  1.4   0:00.59 /usr/bin/+
  1210 wp-tool+  20   0  387528  11968   1312 S   0.0  0.5   0:00.08 /usr/bin/+
  1221 dovecot   20   0   41188   1068    636 S   0.0  0.0   0:00.02 dovecot/a+
  1627 root      20   0  299272    724    392 S   0.0  0.0   0:00.00 php-fpm: +
  1698 root      38  18  130416    768    148 S   0.0  0.0   0:00.00 cpanellog+
  1959 root      20   0  267036   8156    808 S   0.0  0.3   0:00.20 /usr/sbin+
  1960 root      20   0   12804    396    260 S   0.0  0.0   0:00.07 /usr/loca+
  1961 root      20   0   12732    120     56 S   0.0  0.0   0:00.06 /usr/loca+
  1962 root      20   0   12832    372    260 S   0.0  0.0   0:00.06 /usr/loca+
  1966 root      20   0   53252   5416    208 S   0.0  0.2   0:00.04 /usr/loca+
  1967 nobody    20   0  277952  11992   3348 S   0.0  0.5   0:00.80 /usr/sbin+
  1968 nobody    20   0  277804  11788   3180 S   0.0  0.5   0:00.81 /usr/sbin+
  1970 nobody    20   0  277944  11032   2408 S   0.0  0.5   0:00.65 /usr/sbin+
  1971 nobody    20   0  277568  11740   3324 S   0.0  0.5   0:00.65 /usr/sbin+
  2015 root      20   0  180956  27952   1204 S   0.0  1.2   0:00.53 lfd - sle+
  2084 nobody    20   0  277956  18424   3252 S   0.0  0.8   0:00.70 /usr/sbin+
  2355 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
  2444 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  2732 root      20   0 1341636  10760    160 S   0.0  0.4   0:00.05 /usr/bin/+
  2768 root      20   0 1277312  11696    120 S   0.0  0.5   0:00.06 /usr/bin/+
  3071 nobody    20   0  277940  18336   3292 S   0.0  0.8   0:00.69 /usr/sbin+
  3456 nobody    20   0  277924  18604   3428 S   0.0  0.8   0:00.56 /usr/sbin+
  3495 nobody    20   0  277804  18224   3088 S   0.0  0.8   0:00.58 /usr/sbin+
  5474 nobody    20   0  277904  18636   3532 S   0.0  0.8   0:00.33 /usr/sbin+
  5476 nobody    20   0  277568  17948   3144 S   0.0  0.7   0:00.36 /usr/sbin+
  5497 nobody    20   0  277784  18388   3324 S   0.0  0.8   0:00.33 /usr/sbin+
  5498 nobody    20   0  277568  17208   2404 S   0.0  0.7   0:00.33 /usr/sbin+
  5501 nobody    20   0  277568  18024   3164 S   0.0  0.7   0:00.35 /usr/sbin+
  6751 nobody    20   0  277568  18132   3328 S   0.0  0.7   0:00.24 /usr/sbin+
  6752 nobody    20   0  277784  18480   3412 S   0.0  0.8   0:00.27 /usr/sbin+
  6775 nobody    20   0  277568  18116   3252 S   0.0  0.7   0:00.28 /usr/sbin+
  7230 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  8072 nobody    20   0  277784  18164   3172 S   0.0  0.8   0:00.21 /usr/sbin+
  8083 nobody    20   0  277932  18152   3172 S   0.0  0.7   0:00.24 /usr/sbin+
  8097 nobody    20   0  277784  18148   3076 S   0.0  0.7   0:00.19 /usr/sbin+
  8098 nobody    20   0  277784  18152   3160 S   0.0  0.7   0:00.19 /usr/sbin+
  8099 nobody    20   0  277784  17860   2872 S   0.0  0.7   0:00.23 /usr/sbin+
  8100 nobody    20   0  277784  18184   3192 S   0.0  0.8   0:00.25 /usr/sbin+
  8124 nobody    20   0  277784  18136   3080 S   0.0  0.7   0:00.22 /usr/sbin+
  8126 nobody    20   0  277784  18568   3576 S   0.0  0.8   0:00.21 /usr/sbin+
  8129 nobody    20   0  277784  18436   3392 S   0.0  0.8   0:00.18 /usr/sbin+
  8404 nobody    20   0  277784  18312   3320 S   0.0  0.8   0:00.15 /usr/sbin+
  9115 nobody    20   0  277784  18056   3064 S   0.0  0.7   0:00.16 /usr/sbin+
  9583 nobody    20   0  277768  18328   3356 S   0.0  0.8   0:00.09 /usr/sbin+
  9590 root      20   0  248180 118104   1392 S   0.0  4.9   0:00.00 spamd chi+
  9591 root      20   0  249316 119500   1700 S   0.0  4.9   0:00.03 spamd chi+
  9630 root      20   0   60820   3128   2144 S   0.0  0.1   0:00.00 dovecot/l+
  9643 root      20   0   41052   1624    956 S   0.0  0.1   0:00.00 dovecot/a+
  9644 nobody    20   0  277788  18156   3112 S   0.0  0.8   0:00.15 /usr/sbin+
  9645 nobody    20   0  277784  18040   3044 S   0.0  0.7   0:00.12 /usr/sbin+
  9783 nobody    20   0  277784  18144   3156 S   0.0  0.7   0:00.10 /usr/sbin+
  9784 nobody    20   0  277784  18064   3064 S   0.0  0.7   0:00.11 /usr/sbin+
  9802 nobody    20   0  277784  18052   3060 S   0.0  0.7   0:00.11 /usr/sbin+
  9803 nobody    20   0  277784  17872   2884 S   0.0  0.7   0:00.09 /usr/sbin+
  9804 nobody    20   0  277784  18148   3160 S   0.0  0.7   0:00.08 /usr/sbin+
  9805 nobody    20   0  277784  16948   2028 S   0.0  0.7   0:00.13 /usr/sbin+
 10236 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 10432 root      20   0  111304   4260   3240 S   0.0  0.2   0:00.00 sshd: [ac+
 10492 sshd      20   0  115644   2528   1460 S   0.0  0.1   0:00.00 sshd: [ne+
 10927 nobody    20   0  277784  18324   3336 S   0.0  0.8   0:00.03 /usr/sbin+
 10944 nobody    20   0  277784  16956   2040 S   0.0  0.7   0:00.03 /usr/sbin+
 10945 nobody    20   0  277784  16960   2040 S   0.0  0.7   0:00.03 /usr/sbin+
 10977 nobody    20   0  277784  16956   2040 S   0.0  0.7   0:00.03 /usr/sbin+
 10978 nobody    20   0  277784  16956   2040 S   0.0  0.7   0:00.03 /usr/sbin+
 10979 nobody    20   0  277924  18360   3344 S   0.0  0.8   0:00.04 /usr/sbin+
 10980 nobody    20   0  277784  16960   2040 S   0.0  0.7   0:00.03 /usr/sbin+
 11183 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 11351 root      20   0  157100   4896   3604 S   0.0  0.2   0:00.00 sshd: unk+
 11355 sshd      20   0  115644   2508   1436 S   0.0  0.1   0:00.00 sshd: unk+
 11360 root      20   0  111304   4256   3240 S   0.0  0.2   0:00.00 sshd: [ac+
 11361 sshd      20   0  115644   2524   1460 S   0.0  0.1   0:00.00 sshd: [ne+
 11373 root      20   0  162436   5200   3704 S   0.0  0.2   0:00.02 sshd: roo+
 11375 sshd      20   0  115644   2508   1436 S   0.0  0.1   0:00.00 sshd: roo+
 11402 nigeria   20   0  397064   4612   1248 S   0.0  0.2   0:00.00 php-fpm: +
 11435 nobody    20   0  277640  16720   2032 S   0.0  0.7   0:00.00 /usr/sbin+
 11465 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 11471 root      20   0  183048   2124   1560 S   0.0  0.1   0:00.00 /usr/sbin+
 11473 root      20   0  183048   2128   1564 S   0.0  0.1   0:00.00 /usr/sbin+
 11474 root      20   0  183048   2124   1560 S   0.0  0.1   0:00.00 /usr/sbin+
 11475 root      20   0  183048   2124   1560 S   0.0  0.1   0:00.00 /usr/sbin+
 11476 root      20   0  183048   2128   1564 S   0.0  0.1   0:00.00 /usr/sbin+
 11477 root      20   0  183048   2120   1560 S   0.0  0.1   0:00.00 /usr/sbin+
 11478 root      20   0  183048   2120   1560 S   0.0  0.1   0:00.00 /usr/sbin+
 11479 root      20   0  183048   2116   1560 S   0.0  0.1   0:00.00 /usr/sbin+
 11480 root      20   0  183048   2116   1560 S   0.0  0.1   0:00.00 /usr/sbin+
 11481 root      20   0  183048   2116   1560 S   0.0  0.1   0:00.00 /usr/sbin+
 11482 root      20   0  183048   2120   1564 S   0.0  0.1   0:00.00 /usr/sbin+
 11483 root      20   0  183048   2124   1568 S   0.0  0.1   0:00.00 /usr/sbin+
 11485 root      20   0  183048   2120   1564 S   0.0  0.1   0:00.00 /usr/sbin+
 11489 root      20   0   20164    944    744 S   0.0  0.0   0:00.00 jailshell+
 11491 root      20   0   20164    780    608 S   0.0  0.0   0:00.00 /usr/loca+
 11492 root      20   0   20164    780    608 S   0.0  0.0   0:00.00 /usr/loca+
 11493 root      20   0   20164    780    608 S   0.0  0.0   0:00.00 /usr/loca+
 11495 root      20   0   20164    948    744 S   0.0  0.0   0:00.00 jailshell+
 11496 root      20   0   20164    784    608 S   0.0  0.0   0:00.00 /usr/loca+
 11497 root      20   0   20164    780    608 S   0.0  0.0   0:00.00 /usr/loca+
 11498 root      20   0   20164    784    608 S   0.0  0.0   0:00.00 /usr/loca+
 11500 root      20   0   20164    944    744 S   0.0  0.0   0:00.00 jailshell+
 11501 root      20   0   20164    784    608 S   0.0  0.0   0:00.00 /usr/loca+
 11502 root      20   0   20164    784    608 S   0.0  0.0   0:00.00 /usr/loca+
 11503 root      20   0   20164    784    608 S   0.0  0.0   0:00.00 /usr/loca+
 11504 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 11507 root      20   0  108052    576    484 S   0.0  0.0   0:00.00 /usr/bin/+
 11512 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 11518 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 11532 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 11533 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 11534 cloudsms  20   0  400652  15308   9900 S   0.0  0.6   0:00.02 /opt/cpan+
 11536 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 11546 cloudw    20   0  352096  15232  10128 S   0.0  0.6   0:00.02 /opt/cpan+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    03:34   0:00 [kthreadd]
root          3  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/0:0]
root          4  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/0:0H]
root          5  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/u200:0]
root          6  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    03:34   0:00  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [ksoftirqd/1]
root         15  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/1:0]
root         16  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [watchdogd]
root         30  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/0:1]
root         31  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/1:1]
root         36  0.9  0.0      0     0 ?        S    03:34   0:04  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   03:34   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   03:34   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kauditd]
root        227  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/u200:2]
root        231  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ata_sff]
root        239  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [scsi_eh_0]
root        240  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [scsi_tmf_0]
root        242  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [scsi_eh_1]
root        245  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [scsi_tmf_1]
root        252  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ttm_swap]
root        259  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/1:1H]
root        264  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kworker/0:1H]
root        267  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [kworker/0:2]
root        276  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [kvm-irqfd-clean]
root        676  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [loop0]
root        687  0.0  0.0      0     0 ?        S    03:34   0:00  \_ [jbd2/loop0-8]
root        688  0.0  0.0      0     0 ?        S<   03:34   0:00  \_ [ext4-rsv-conver]
root       2355  0.0  0.0      0     0 ?        S    03:35   0:00  \_ [kworker/1:3]
root       2444  0.0  0.0      0     0 ?        S    03:35   0:00  \_ [kworker/0:3]
root       7230  0.0  0.0      0     0 ?        S    03:39   0:00  \_ [kworker/0:4]
root      10236  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [kworker/1:2]
root          1  0.3  0.1  44268  3208 ?        Ss   03:34   0:01 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.1  39500  3892 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-journald
root        393  0.0  0.0  45352   368 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   252 ?        S<sl 03:34   0:00 /sbin/auditd
polkitd     497  0.0  0.1 612240  3072 ?        Ssl  03:34   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        499  0.0  0.0  52852   236 ?        Ss   03:34   0:00 /usr/sbin/smartd -n -q never
root        501  0.0  0.2 224148  5472 ?        Ss   03:34   0:00 queueprocd - waiting up to 60s to process a task
rpc         506  0.0  0.0  69256   176 ?        Ss   03:34   0:00 /sbin/rpcbind -w
root        507  0.0  0.0 152780   172 ?        Ss   03:34   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        508  0.0  0.0  58376  1292 ?        Ss   03:34   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        512  0.1  0.0 861368  1188 ?        Ssl  03:34   0:00 /usr/sbin/nscd
root        524  0.0  0.0   4388    84 ?        Ss   03:34   0:00 /usr/sbin/acpid
root        534  0.0  0.0  21540   492 ?        Ss   03:34   0:00 /usr/sbin/irqbalance --foreground
root        537  0.0  0.0  24564  1148 ?        Ss   03:34   0:00 /usr/lib/systemd/systemd-logind
root        557  0.0  0.0 195208    32 ?        Ssl  03:34   0:00 /usr/sbin/gssproxy -D
root        586  0.0  0.0  24208     0 ?        Ss   03:34   0:00 /usr/sbin/atd -f
root        588  0.0  0.0 124480   524 ?        Ss   03:34   0:00 /usr/sbin/crond -n
root      11471  0.0  0.0 183048  2124 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      11504  0.0  0.0 113284  1212 ?        Ss   03:42   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      11507  0.0  0.0 108052   576 ?        S    03:42   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      11512  0.0  0.0 113288  1516 ?        S    03:42   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      11571  0.0  0.0 153840  2096 ?        R    03:42   0:00  |               \_ ps auxf
root      11473  0.0  0.0 183048  2128 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      11501  0.0  0.0  20164   784 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      11474  0.0  0.0 183048  2124 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      11497  0.0  0.0  20164   780 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      11475  0.0  0.0 183048  2124 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      11496  0.0  0.0  20164   964 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      11572  0.0  0.0   4368     4 ?        R    03:42   0:00  |       \_ /usr/local/cpanel/bin/setupvirtfs 1014
root      11476  0.0  0.0 183048  2128 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      11503  0.0  0.0  20164   784 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      11477  0.0  0.0 183048  2120 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      11495  0.0  0.0  20164   948 ?        Ss   03:42   0:00  |   \_ jailshell (cloudsms) [11532] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  11532  0.0  0.0  20164   264 ?        S    03:42   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  11533  0.0  0.0 113284  1212 ?        S    03:42   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  11534  0.0  0.6 400652 15308 ?        S    03:42   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      11478  0.0  0.0 183048  2120 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      11498  0.0  0.0  20164   784 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      11479  0.0  0.0 183048  2116 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      11492  0.0  0.0  20164   780 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      11480  0.0  0.0 183048  2116 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      11493  0.0  0.0  20164   780 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      11481  0.0  0.0 183048  2116 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      11491  0.0  0.0  20164   780 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      11482  0.0  0.0 183048  2120 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      11502  0.0  0.0  20164   784 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      11483  0.0  0.0 183048  2124 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      11500  0.0  0.0  20164   944 ?        Ss   03:42   0:00  |   \_ jailshell (pactpay) [11518] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   11518  0.0  0.0  20164   260 ?        S    03:42   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   11523  0.0  0.7 476724 17388 ?        S    03:42   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      11485  0.0  0.0 183048  2120 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      11489  0.0  0.0  20164   944 ?        Ss   03:42   0:00      \_ jailshell (nigeria) [11536] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   11536  0.0  0.0  20164   256 ?        S    03:42   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   11537  0.0  0.6 400652 15840 ?        S    03:42   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
mailnull    589  0.0  0.1  88988  3296 ?        Ss   03:34   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        593  0.0  0.0 114704   152 ttyS0    Ss+  03:34   0:00 /bin/bash
root        595  0.0  0.0 108296   140 tty1     Ss+  03:34   0:00 /sbin/agetty --noclear tty1 linux
systuser    925  0.0  0.4 114016  9900 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        926  0.0  0.0 153404   424 ?        Ss   03:34   0:00 pure-ftpd (SERVER)
root        929  3.0 38.9 1689312 943828 ?      Ssl  03:34   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        936  0.0  0.0 386112   520 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        937  0.0  0.0 385496   356 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        947  0.0  0.2 261020  5012 ?        Ss   03:34   0:00 cpsrvd (SSL) - waiting for connections                   
root      11465  0.0  0.0      0     0 ?        Z    03:42   0:00  \_ [cpaneld - servi] <defunct>
root        948  0.0  0.1 397344  3216 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   11402  0.0  0.1 397064  4612 ?        S    03:41   0:00  \_ php-fpm: pool nigeriadecide_org
named       949  0.1  0.8 646188 21336 ?        Ssl  03:34   0:00 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
systuser    950  0.0  0.0  11348    40 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        956  0.0  0.4 436392 11148 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
memcach+    957  0.0  0.0 342400    56 ?        Ssl  03:34   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
telegraf    958  0.0  1.3 5654048 32232 ?       SLsl 03:34   0:00 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        961  0.0  0.0 111304   528 ?        Ss   03:34   0:00 /usr/sbin/sshd -D
root      10432  0.0  0.1 111304  4260 ?        Ss   03:41   0:00  \_ sshd: [accepted]
sshd      10492  0.0  0.1 115644  2528 ?        S    03:41   0:00  |   \_ sshd: [net]
root      11183  0.0  0.1 111304  4268 ?        Ss   03:41   0:00  \_ sshd: [accepted]
root      11351  0.0  0.2 157100  4896 ?        Ss   03:41   0:00  \_ sshd: unknown [priv]
sshd      11355  0.0  0.1 115644  2508 ?        S    03:41   0:00  |   \_ sshd: unknown [net]
root      11360  0.0  0.1 111304  4256 ?        Ss   03:41   0:00  \_ sshd: [accepted]
sshd      11361  0.0  0.1 115644  2524 ?        S    03:41   0:00  |   \_ sshd: [net]
root      11373  0.5  0.2 162436  5200 ?        Ss   03:41   0:00  \_ sshd: root [priv]
sshd      11375  0.0  0.1 115644  2508 ?        S    03:41   0:00      \_ sshd: root [net]
root        962  0.0  0.1 216400  3488 ?        Ssl  03:34   0:00 /usr/sbin/rsyslogd -n
systuser    970  0.0  0.0 111608    80 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
cpanelc+    975  0.1  0.1   9832  2744 ?        Rs   03:34   0:00 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        987  0.0  0.0 392856   552 ?        Ss   03:34   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        990  0.0  0.0 572372   928 ?        Ssl  03:34   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    991  0.0  0.0  10132    44 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        995  0.0  0.1 445028  2680 ?        Ss   03:34   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser   1001  0.0  0.0 113932    72 ?        Ssl  03:34   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1003  0.0  0.0  51508   588 ?        Ss   03:34   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1123  0.0  0.0  46904  1704 ?        S    03:34   0:00  \_ dovecot/pop3-login
dovenull   1124  0.0  0.0  47056  1804 ?        S    03:34   0:00  \_ dovecot/imap-login
dovecot    1125  0.0  0.0  10320   268 ?        S    03:34   0:00  \_ dovecot/anvil
root       1126  0.0  0.0  10452   528 ?        S    03:34   0:00  \_ dovecot/log
dovenull   1127  0.0  0.0  46772   696 ?        S    03:34   0:00  \_ dovecot/pop3-login
dovenull   1128  0.0  0.0  46924  1296 ?        S    03:34   0:00  \_ dovecot/imap-login
root       1134  0.0  0.0  24528  1812 ?        S    03:34   0:00  \_ dovecot/config
dovecot    1143  0.0  0.0  13568   492 ?        S    03:34   0:00  \_ dovecot/stats
dovecot    1221  0.0  0.0  41188  1068 ?        S    03:34   0:00  \_ dovecot/auth
root       9630  0.0  0.1  60820  3128 ?        S    03:40   0:00  \_ dovecot/lmtp
root       9643  0.0  0.0  41052  1624 ?        S    03:40   0:00  \_ dovecot/auth -w
root       1131  0.6  4.9 248180 120536 ?       Ss   03:34   0:02 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       9590  0.0  4.8 248180 118104 ?       S    03:40   0:00  \_ spamd child
root       9591  0.0  4.9 249316 119500 ?       S    03:40   0:00  \_ spamd child
systuser   1185  0.0  0.0 157708  2272 ?        S    03:34   0:00 SonarPush 0.6.12 [sleeping]
root       1199  0.0  0.0 183900   200 ?        Ss   03:34   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1201  0.0  0.0 167452  1500 ?        Ss   03:34   0:00 dnsadmin - dormant mode
root       1202  0.0  0.4 209176  9720 ?        Ss   03:34   0:00 tailwatchd
wp-tool+   1209  0.1  1.4 410452 34652 ?        Ss   03:34   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1210  0.0  0.4 387528 11968 ?        Ss   03:34   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1627  0.0  0.0 299272   724 ?        Ss   03:34   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1698  0.0  0.0 130416   768 ?        SN   03:34   0:00 cpanellogd - sleeping for logs
mysql      1753  1.6  7.5 1457276 182996 ?      Sl   03:34   0:07 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1959  0.0  0.3 267036  8156 ?        Ss   03:34   0:00 /usr/sbin/httpd -k start
root       1960  0.0  0.0  12804   396 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1961  0.0  0.0  12732   120 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1962  0.0  0.0  12832   372 ?        S    03:34   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1966  0.0  0.2  53252  5416 ?        S    03:34   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     1967  0.1  0.4 277952 11992 ?        S    03:34   0:00  \_ /usr/sbin/httpd -k start
nobody     1968  0.1  0.4 277804 11788 ?        S    03:34   0:00  \_ /usr/sbin/httpd -k start
nobody     1970  0.1  0.4 277944 11032 ?        S    03:34   0:00  \_ /usr/sbin/httpd -k start
cloudw    11535  0.0  0.6 352096 15232 ?        S    03:42   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody     1971  0.1  0.4 277568 11740 ?        S    03:34   0:00  \_ /usr/sbin/httpd -k start
nobody     2084  0.1  0.7 277956 18424 ?        S    03:34   0:00  \_ /usr/sbin/httpd -k start
nobody     3071  0.1  0.7 277940 18336 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
nobody     3456  0.1  0.7 277924 18604 ?        S    03:36   0:00  \_ /usr/sbin/httpd -k start
nobody     3495  0.1  0.7 277804 18224 ?        R    03:36   0:00  \_ /usr/sbin/httpd -k start
nobody     5459  0.1  0.7 277908 17476 ?        S    03:37   0:00  \_ /usr/sbin/httpd -k start
cloudw    11568  0.0  0.6 351952 15232 ?        S    03:42   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody     5474  0.1  0.7 277904 18636 ?        S    03:37   0:00  \_ /usr/sbin/httpd -k start
nobody     5476  0.1  0.7 277568 17948 ?        S    03:37   0:00  \_ /usr/sbin/httpd -k start
nobody     5497  0.1  0.7 277784 18388 ?        S    03:37   0:00  \_ /usr/sbin/httpd -k start
nobody     5498  0.1  0.7 277568 17208 ?        S    03:37   0:00  \_ /usr/sbin/httpd -k start
nobody     5501  0.1  0.7 277568 18024 ?        S    03:37   0:00  \_ /usr/sbin/httpd -k start
cloudw    11562  0.0  0.6 352096 15236 ?        S    03:42   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody     6751  0.1  0.7 277568 18132 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
nobody     6752  0.1  0.7 277784 18480 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
nobody     6775  0.1  0.7 277568 18116 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
nobody     8072  0.1  0.7 277784 18164 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody     8083  0.1  0.7 277932 18152 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody     8097  0.1  0.7 277784 18148 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody     8098  0.1  0.7 277784 18152 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody     8099  0.1  0.7 277784 17860 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody     8100  0.1  0.7 277784 18184 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody     8124  0.1  0.7 277784 18136 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody     8126  0.1  0.7 277784 18568 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody     8129  0.1  0.7 277784 18436 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody     8404  0.1  0.7 277784 18312 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody     9115  0.1  0.7 277784 18056 ?        S    03:40   0:00  \_ /usr/sbin/httpd -k start
nobody     9583  0.1  0.7 277768 18328 ?        S    03:40   0:00  \_ /usr/sbin/httpd -k start
nobody     9644  0.1  0.7 277788 18156 ?        S    03:40   0:00  \_ /usr/sbin/httpd -k start
nobody     9645  0.1  0.7 277784 18040 ?        S    03:40   0:00  \_ /usr/sbin/httpd -k start
nobody     9783  0.1  0.7 277784 18144 ?        S    03:40   0:00  \_ /usr/sbin/httpd -k start
nobody     9784  0.1  0.7 277784 18064 ?        S    03:40   0:00  \_ /usr/sbin/httpd -k start
nobody     9802  0.1  0.7 277784 18052 ?        S    03:40   0:00  \_ /usr/sbin/httpd -k start
nobody     9803  0.1  0.7 277784 17872 ?        S    03:40   0:00  \_ /usr/sbin/httpd -k start
nobody     9804  0.1  0.7 277784 18148 ?        S    03:40   0:00  \_ /usr/sbin/httpd -k start
nobody     9805  0.1  0.7 277784 16948 ?        S    03:40   0:00  \_ /usr/sbin/httpd -k start
nobody    10927  0.1  0.7 277784 18324 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    10944  0.1  0.7 277784 16956 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    10945  0.1  0.7 277784 16960 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    10977  0.1  0.7 277784 16956 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    10978  0.1  0.7 277784 16956 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    10979  0.1  0.7 277924 18360 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    10980  0.1  0.7 277784 16960 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
cloudw    11546  0.0  0.6 352096 15232 ?        S    03:42   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    11435  0.0  0.6 277640 16720 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
root       2015  0.1  1.1 180956 27952 ?        Ss   03:34   0:00 lfd - sleeping
root       2732  0.0  0.4 1341636 10760 ?       Ssl  03:35   0:00 /usr/bin/cspdaemon
root       2768  0.0  0.4 1277312 11696 ?       Ssl  03:35   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 454  Threads: 5  Questions: 40829  Slow queries: 0  Opens: 775  Flush tables: 1  Open tables: 762  Queries per second avg: 89.931
*************************** 1. row ***************************
     Id: 524
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `29` WHERE `phone`='2348032137277' LIMIT 1
*************************** 2. row ***************************
     Id: 525
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-13' LIMIT 1
*************************** 3. row ***************************
     Id: 532
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.102 TIME_WAIT
      1 114.119.128.10 TIME_WAIT
      1 114.119.128.143 TIME_WAIT
      1 142.147.218.221 TIME_WAIT
      1 15.235.27.19 TIME_WAIT
      1 170.23.5.119 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 66.249.64.106 TIME_WAIT
      1 66.249.64.107 TIME_WAIT
      1 66.249.64.109 TIME_WAIT
      1 66.249.64.128 TIME_WAIT
      1 66.249.64.130 TIME_WAIT
      1 66.249.64.173 TIME_WAIT
      1 66.249.64.230 TIME_WAIT
      1 66.249.64.231 TIME_WAIT
      1 66.249.64.35 TIME_WAIT
      1 66.249.64.76 TIME_WAIT
      1 66.249.64.8 TIME_WAIT
      1 66.249.70.106 TIME_WAIT
      1 66.249.70.162 TIME_WAIT
      1 66.249.70.164 TIME_WAIT
      1 66.249.70.170 TIME_WAIT
      1 66.249.70.193 TIME_WAIT
      1 66.249.70.194 TIME_WAIT
      1 66.249.70.199 TIME_WAIT
      1 66.249.70.32 TIME_WAIT
      1 66.249.70.4 TIME_WAIT
      1 66.249.70.68 TIME_WAIT
      1 88.216.102.64 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 192.178.4.97 TIME_WAIT
      2 66.249.64.67 TIME_WAIT
      2 66.249.70.195 TIME_WAIT
      2 66.249.70.69 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 03:42:01 WAT
   Restart Time: Thursday, 13-Nov-2025 03:34:33 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 7 minutes 28 seconds
   Server load: 0.51 1.12 0.73
   Total accesses: 3558 - Total Traffic: 93.4 MB - Total Duration: 2223420
   CPU Usage: u8.27 s3.63 cu38.93 cs36.6 - 19.5% CPU load
   7.94 requests/sec - 213.4 kB/second - 26.9 kB/request - 624.907 ms/request
   41 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

KKKWKWK_KKKKKKWKKKKK_KWKKKKKKKKKKKK_WK_KKKKK..K.................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU  SS  Req  Dur   Conn Child Slot    Client     Protocol           VHost                                        Request
   0-0  1967  1/144/144 K 3.45 3   353 101179 29.6 3.60  3.60 66.249.64.128 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3586402262 HTTP/1.1
   1-0  1968  1/131/131 K 3.59 4   361 89284  30.6 3.55  3.55 66.249.64.104 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2869590982 HTTP/1.1
   2-0  8072  1/33/122  K 0.88 1   317 81103  31.2 0.94  3.04 66.249.70.196 http/1.1 schoolplus.cloudware.ng:80 GET /?p=172111589 HTTP/1.1
   3-0  1970  0/118/118 W 2.63 0   0   76295  0.0  2.77  2.77 66.249.70.128 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1989169558 HTTP/1.1
   4-0  1971  1/119/119 K 2.62 1   31  90107  0.7  2.82  2.82 66.249.64.107 http/1.1 schoolplus.cloudware.ng:80 GET /format=auto/swappie-iphone-xs-max-gold.png HTTP/1.1
   5-0  9583  0/16/108  W 0.33 0   0   75338  0.0  0.39  2.78 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   6-0  2084  1/124/124 K 2.94 3   415 81774  31.7 4.13  4.13 66.249.70.66  http/1.1 schoolplus.cloudware.ng:80 GET /?p=583525913 HTTP/1.1
   7-0  9644  0/26/122  _ 0.62 0   282 81952  0.0  0.68  3.13 66.249.70.37  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3962956971 HTTP/1.1
   8-0  8083  1/39/110  K 1.04 0   328 70651  30.5 1.12  2.60 66.249.70.32  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2619862725 HTTP/1.1
   9-0  10927 1/7/114   K 0.11 1   302 78028  31.1 0.17  2.69 66.249.70.6   http/1.1 schoolplus.cloudware.ng:80 GET /fit%3Dcontain HTTP/1.1
   10-0 10944 1/5/94    K 0.11 2   316 57011  30.7 0.15  2.26 66.249.70.174 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1878924519 HTTP/1.1
   11-0 3071  1/119/119 K 2.91 3   312 76968  31.3 3.07  3.07 192.178.4.99  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4079721029 HTTP/1.1
   12-0 10945 3/6/111   K 0.14 3   313 69156  95.7 0.18  2.73 66.249.70.39  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1749086499 HTTP/1.1
   13-0 3456  1/93/93   K 2.30 2   294 58079  31.1 2.42  2.42 66.249.64.161 http/1.1 schoolplus.cloudware.ng:80 GET /?p=489072297 HTTP/1.1
   14-0 3495  0/99/99   W 2.50 0   0   65783  0.0  2.70  2.70 192.178.4.97  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4071042745 HTTP/1.1
   15-0 8097  3/31/80   K 0.84 4   395 51272  93.3 0.96  2.20 66.249.64.130 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3455749082 HTTP/1.1
   16-0 9645  1/20/103  K 0.54 2   313 50342  29.8 0.56  2.48 66.249.70.173 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2231312836 HTTP/1.1
   17-0 10977 1/5/77    K 0.11 3   339 48185  30.0 0.15  2.14 66.249.64.76  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3019424328 HTTP/1.1
   18-0 8098  2/30/54   K 0.81 3   371 32758  59.6 0.87  1.49 66.249.64.68  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2410900415 HTTP/1.1
   19-0 8099  1/37/65   K 1.01 3   398 38705  31.0 1.09  1.76 66.249.64.7   http/1.1 schoolplus.cloudware.ng:80 GET /?ctg/search/similarImageSearchResultView/?ctgItemCd=149862
   20-0 10978 0/5/50    _ 0.11 0   338 30657  0.0  0.15  1.29 66.249.64.99  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1408260246 HTTP/1.1
   21-0 9783  1/17/69   K 0.43 1   350 44262  31.0 0.49  1.93 66.249.70.96  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3273087238 HTTP/1.1
   22-0 5459  0/57/57   W 1.50 0   0   35002  0.0  1.59  1.59 66.249.70.110 http/1.1 schoolplus.cloudware.ng:80 GET /?p=783260064 HTTP/1.1
   23-0 8100  2/41/72   K 1.06 1   263 35151  59.7 1.12  1.76 66.249.70.66  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3993035822 HTTP/1.1
   24-0 10979 2/8/67    K 0.12 2   290 28597  59.5 0.18  1.59 66.249.70.198 http/1.1 schoolplus.cloudware.ng:80 GET /?p=346489409 HTTP/1.1
   25-0 5474  1/59/59   K 1.35 0   311 32148  28.7 1.53  1.53 66.249.70.195 http/1.1 schoolplus.cloudware.ng:80 GET /?p=4255826480 HTTP/1.1
   26-0 10980 2/6/53    K 0.13 0   443 31032  62.1 0.18  1.42 66.249.64.132 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3453016070 HTTP/1.1
   27-0 5476  2/58/58   K 1.53 1   263 35575  60.2 1.60  1.60 66.249.70.68  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4037874771 HTTP/1.1
   28-0 8124  3/36/55   K 0.92 0   267 31088  89.6 1.00  1.46 66.249.70.35  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1951181729 HTTP/1.1
   29-0 9784  1/18/56   K 0.46 4   367 32942  30.7 0.52  1.53 66.249.64.130 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2496555764 HTTP/1.1
   30-0 6751  2/38/43   K 1.00 2   264 27090  58.4 1.09  1.19 66.249.70.70  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1639588921 HTTP/1.1
   31-0 11435 1/1/63    K 0.00 1   277 37235  28.7 0.03  1.70 66.249.70.71  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4117928793 HTTP/1.1
   32-0 5497  1/54/54   K 1.44 0   411 32267  30.1 1.48  1.48 66.249.64.11  http/1.1 schoolplus.cloudware.ng:80 GET /?ctg/search/similarImageSearchResultView/?ctgItemCd=133955
   33-0 5498  1/53/53   K 1.46 2   299 33010  32.0 1.51  1.51 66.249.70.193 http/1.1 schoolplus.cloudware.ng:80 GET /?p=880035283 HTTP/1.1
   34-0 9802  2/17/55   K 0.44 1   270 32811  60.5 0.48  1.50 66.249.64.67  http/1.1 schoolplus.cloudware.ng:80 GET /?p=838686397 HTTP/1.1
   35-0 9803  0/17/61   _ 0.39 0   356 34956  0.0  0.45  1.64 66.249.64.172 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2729372913 HTTP/1.1
   36-0 5501  0/58/58   W 1.51 0   0   36533  0.0  1.56  1.56 66.249.64.65  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2820381071 HTTP/1.1
   37-0 6752  1/48/56   K 1.16 3   425 31218  31.0 1.24  1.43 66.249.64.224 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1756013649 HTTP/1.1
   38-0 8126  0/35/52   _ 0.90 0   4   29591  0.0  0.97  1.38 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   39-0 9804  1/15/42   K 0.37 4   355 24304  29.3 0.42  1.29 66.249.64.229 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3426628079 HTTP/1.1
   40-0 6775  1/45/52   K 1.21 3   379 37374  30.2 1.26  1.42 66.249.64.15  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3257807722 HTTP/1.1
   41-0 9805  1/20/57   K 0.55 0   266 35465  29.6 0.59  1.58 66.249.64.1   http/1.1 schoolplus.cloudware.ng:80 GET /?p=333253351 HTTP/1.1
   42-0 9115  1/26/54   K 0.72 2   272 32134  30.2 0.74  1.47 66.249.64.4   http/1.1 schoolplus.cloudware.ng:80 GET /?p=729760528 HTTP/1.1
   43-0 8129  1/32/46   K 0.78 1   259 25976  28.9 0.86  1.20 66.249.70.165 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2450562304 HTTP/1.1
   44-0 -     0/0/44    . 0.00 85  0   25427  0.0  0.00  1.25 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/16    . 0.00 121 0   7055   0.0  0.00  0.34 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 8404  1/24/30   K 0.62 0   289 18104  29.5 0.68  0.82 66.249.64.108 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1256751733 HTTP/1.1
   47-0 -     0/0/19    . 0.00 30  0   12423  0.0  0.00  0.54 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 300
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 25 seconds, (range: 0...66)
   index usage: 5%, cache usage: 7%
   total entries stored since starting: 442
   total entries replaced since starting: 0
   total entries expired since starting: 142
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 5 miss
   total removes since starting: 1 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit