403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-14.00.15.txt
 ## swap threshold exceeded
## server overview
2025-11-14.00.15 load[0] mem[59/81] mysql[5/12] httpd[43]
              total        used        free      shared  buff/cache   available
Mem:           2363        1322          93          98         947         769
Swap:          1999        1681         318
 00:15:01 up 13:58,  0 users,  load average: 0.52, 0.54, 0.64
## system overview
top - 00:15:02 up 13:58,  0 users,  load average: 0.64, 0.57, 0.65
Tasks: 228 total,   4 running, 223 sleeping,   0 stopped,   1 zombie
%Cpu(s): 71.0 us, 25.8 sy,  0.0 ni,  3.2 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    94192 free,  1354532 used,   971576 buff/cache
KiB Swap:  2047996 total,   325856 free,  1722140 used.   787928 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1731 mysql     20   0 1458860 295628   3064 S  87.5 12.2  11:34.02 /usr/sbin+
 88972 nigeria   20   0  404052  16140  10384 S  12.5  0.7   0:00.04 /opt/cpan+
   525 polkitd   20   0  612240    936    544 S   6.2  0.0   0:06.87 /usr/lib/+
 88978 pactpay   20   0  480124  17684  11892 S   6.2  0.7   0:00.02 /opt/cpan+
 88990 root      20   0  160224   2384   1636 S   6.2  0.1   0:00.01 top -n 2 +
 89031 cloudw    20   0  355492  15428  10292 S   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0  192956   4868   1632 S   0.0  0.2   1:13.97 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:04.17 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:03.11 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:54.15 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.14 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.12 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:02.99 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:11.80 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:24.16 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.10 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.99 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:02.76 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:03.10 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:02.68 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   39500   6092   5832 S   0.0  0.3   0:26.90 /usr/lib/+
   379 root      20   0   45352    100     96 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    512    380 S   0.0  0.0   0:04.23 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   488 dbus      20   0   58716   1360    628 S   0.0  0.1   0:26.94 /usr/bin/+
   512 rpc       20   0   69256     80     20 S   0.0  0.0   0:00.05 /sbin/rpc+
   518 root      20   0  152780    144    100 S   0.0  0.0   0:00.02 /usr/sbin+
   520 root      20   0   24712   1256    824 S   0.0  0.1   0:11.80 /usr/lib/+
   521 root      20   0  224148   4564   1096 S   0.0  0.2   0:00.56 queueproc+
   524 root      20   0   21540    380    292 S   0.0  0.0   0:01.11 /usr/sbin+
   533 root      20   0   52852    344    244 S   0.0  0.0   0:00.01 /usr/sbin+
   535 nscd      20   0 1129668   1736    828 S   0.0  0.1   0:51.84 /usr/sbin+
   540 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124480    460    328 S   0.0  0.0   0:01.37 /usr/sbin+
   574 root      20   0   24208     24      0 S   0.0  0.0   0:00.00 /usr/sbin+
   577 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   585 root      20   0  108296     60     56 S   0.0  0.0   0:00.00 /sbin/age+
   586 root      20   0  114704     32     32 S   0.0  0.0   0:00.02 /bin/bash
   615 mailnull  20   0   89112   3828    876 S   0.0  0.2   0:00.90 /usr/sbin+
   677 root       0 -20       0      0      0 S   0.0  0.0   0:02.79 [loop0]
   714 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [jbd2/loo+
   717 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   925 root      20   0 1763044  78480    868 S   0.0  3.2   0:14.12 /usr/loca+
   931 named     20   0  711724  39028   1600 S   0.0  1.6   0:28.25 /usr/sbin+
   933 root      20   0  445028      0      0 S   0.0  0.0   0:00.06 sw-engine+
   941 systuser  20   0  114016  14060   2300 S   0.0  0.6   0:11.76 /usr/loca+
   945 cpanelc+  20   0   10568   3652   2360 R   0.0  0.2   0:42.42 /usr/loca+
   948 memcach+  20   0  342400     72     72 S   0.0  0.0   0:01.11 /usr/bin/+
   950 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.02 /usr/loca+
   952 systuser  20   0  112524     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   957 systuser  20   0   14068     40      0 S   0.0  0.0   0:00.02 /usr/loca+
   960 root      20   0  153404    312    228 S   0.0  0.0   0:01.06 pure-ftpd+
   963 systuser  20   0  111608     68      0 S   0.0  0.0   0:00.02 /usr/loca+
   989 root      20   0  261296   6784   1764 S   0.0  0.3   0:11.30 cpsrvd (S+
   990 root      20   0  572372    952    408 S   0.0  0.0   0:04.28 /usr/bin/+
   991 telegraf  20   0 5654048  37200   5812 S   0.0  1.5   0:27.56 /usr/loca+
   998 root      20   0  111304    416    316 S   0.0  0.0   0:05.64 /usr/sbin+
  1000 root      20   0  331088   7108   5856 S   0.0  0.3   0:13.42 /usr/sbin+
  1001 root      20   0   51508    632    456 S   0.0  0.0   0:00.56 /usr/sbin+
  1125 dovenull  20   0   47048   2396   1628 S   0.0  0.1   0:00.86 dovecot/p+
  1126 dovenull  20   0   48664   2828   1416 S   0.0  0.1   0:00.66 dovecot/i+
  1127 dovecot   20   0   10320    404    288 S   0.0  0.0   0:00.14 dovecot/a+
  1128 root      20   0   10452    568    376 S   0.0  0.0   0:00.55 dovecot/l+
  1129 dovenull  20   0   47052   2388   1684 S   0.0  0.1   0:00.65 dovecot/p+
  1130 dovenull  20   0   48568   3116   1596 S   0.0  0.1   0:00.53 dovecot/i+
  1133 root      20   0   24564   2236    512 S   0.0  0.1   0:00.29 dovecot/c+
  1137 dovecot   20   0   13568    676    456 S   0.0  0.0   0:00.11 dovecot/s+
  1147 root      20   0  248176  24968    668 S   0.0  1.0   0:08.75 /usr/loca+
  1164 systuser  20   0  157708   3016   1024 S   0.0  0.1   0:00.22 SonarPush+
  1165 wp-tool+  20   0  410480  13528   2024 S   0.0  0.6   0:42.73 /usr/bin/+
  1166 wp-tool+  20   0  387556   4032   1952 S   0.0  0.2   0:00.45 /usr/bin/+
  1208 dovecot   20   0   41156   1532   1028 S   0.0  0.1   0:01.15 dovecot/a+
  1236 root      20   0  183900   6104   2872 S   0.0  0.3   0:03.91 cpdavd - +
  1239 root      20   0  208784  21148   4032 S   0.0  0.9   0:04.69 tailwatchd
  1241 root      20   0  167452   1252    704 S   0.0  0.1   0:00.73 dnsadmin +
  1631 root      20   0  299272    532    368 S   0.0  0.0   0:01.37 php-fpm: +
  1677 root      38  18  130416   1404    720 S   0.0  0.1   0:00.12 cpanellog+
  5511 root      20   0  271880 101352   3268 S   0.0  4.2   0:07.76 spamd chi+
  5512 root      20   0  261652  23652    336 S   0.0  1.0   0:00.40 spamd chi+
 22875 root      20   0       0      0      0 S   0.0  0.0   0:00.29 [kworker/+
 34743 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 34754 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.87 [kworker]
 54373 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 59466 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 68024 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 71096 root      20   0  180932  29168   2376 S   0.0  1.2   0:00.93 lfd - sle+
 71479 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 71692 root      20   0 1276100  11036    600 S   0.0  0.5   0:00.07 /usr/bin/+
 71726 root      20   0 1277312  11916    600 S   0.0  0.5   0:00.07 /usr/bin/+
 72069 root      20   0  266980  28844   3152 S   0.0  1.2   0:00.44 /usr/sbin+
 72072 root      20   0   12792   1392   1188 S   0.0  0.1   0:00.15 /usr/loca+
 72073 root      20   0   12732   1368   1188 S   0.0  0.1   0:00.13 /usr/loca+
 72074 root      20   0   12812   1400   1188 S   0.0  0.1   0:00.13 /usr/loca+
 72075 root      20   0   53272  11888   2512 S   0.0  0.5   0:00.05 /usr/loca+
 72127 root      20   0  400740  15176   9904 S   0.0  0.6   0:00.14 php-fpm: +
 72132 root      20   0  388892  13144   8064 S   0.0  0.5   0:00.06 php-fpm: +
 72145 root      20   0  396248  12068   6448 S   0.0  0.5   0:00.02 php-fpm: +
 72153 root      20   0  389508  12808   8152 S   0.0  0.5   0:00.03 php-fpm: +
 72158 root      20   0  439788  24776  17244 S   0.0  1.0   0:00.04 php-fpm: +
 76303 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 77518 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 79804 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 82861 nobody    20   0  277492  35540   3916 S   0.0  1.5   0:00.53 /usr/sbin+
 84158 nobody    20   0  277476  35488   3876 S   0.0  1.5   0:00.35 /usr/sbin+
 84184 nobody    20   0  277616  35404   3652 S   0.0  1.5   0:00.55 /usr/sbin+
 84402 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 84774 nobody    20   0  277824  35548   3784 S   0.0  1.5   0:00.37 /usr/sbin+
 85170 nobody    20   0  277476  35472   3856 S   0.0  1.5   0:00.28 /usr/sbin+
 85232 nobody    20   0  277476  35376   3764 S   0.0  1.5   0:00.26 /usr/sbin+
 85238 nobody    20   0  277492  35024   3396 S   0.0  1.4   0:00.33 /usr/sbin+
 86371 nobody    20   0  277500  35096   3464 S   0.0  1.5   0:00.22 /usr/sbin+
 86405 nobody    20   0  277516  35288   3640 S   0.0  1.5   0:00.22 /usr/sbin+
 86430 nobody    20   0  277476  35092   3484 S   0.0  1.4   0:00.19 /usr/sbin+
 86531 nobody    20   0  277476  35220   3612 S   0.0  1.5   0:00.20 /usr/sbin+
 86619 nobody    20   0  277476  35272   3660 S   0.0  1.5   0:00.16 /usr/sbin+
 87492 nobody    20   0  277476  35312   3704 S   0.0  1.5   0:00.08 /usr/sbin+
 87542 nobody    20   0  277480  34892   3280 S   0.0  1.4   0:00.13 /usr/sbin+
 87567 nobody    20   0  277476  35392   3784 S   0.0  1.5   0:00.09 /usr/sbin+
 87586 nobody    20   0  277476  35036   3428 S   0.0  1.4   0:00.09 /usr/sbin+
 87617 nobody    20   0  277484  33868   2252 S   0.0  1.4   0:00.15 /usr/sbin+
 87619 nobody    20   0  277476  33784   2176 S   0.0  1.4   0:00.20 /usr/sbin+
 87620 nobody    20   0  277476  35256   3648 S   0.0  1.5   0:00.08 /usr/sbin+
 87641 nobody    20   0  277476  35024   3416 S   0.0  1.4   0:00.13 /usr/sbin+
 87643 nobody    20   0  277476  34916   3308 S   0.0  1.4   0:00.15 /usr/sbin+
 87644 nobody    20   0  277476  33812   2204 S   0.0  1.4   0:00.14 /usr/sbin+
 87647 nobody    20   0  277476  35036   3428 S   0.0  1.4   0:00.09 /usr/sbin+
 87648 nobody    20   0  277476  34888   3280 S   0.0  1.4   0:00.07 /usr/sbin+
 88025 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 88072 root      20   0  111304   4376   3336 S   0.0  0.2   0:00.00 sshd: [ac+
 88073 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 88111 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 88569 nobody    20   0  277476  34060   2452 S   0.0  1.4   0:00.02 /usr/sbin+
 88578 nobody    20   0  277480  34760   3212 S   0.0  1.4   0:00.02 /usr/sbin+
 88579 nobody    20   0  277476  34808   3196 S   0.0  1.4   0:00.02 /usr/sbin+
 88596 nobody    20   0  277476  33796   2188 S   0.0  1.4   0:00.02 /usr/sbin+
 88597 nobody    20   0  277816  35160   3412 S   0.0  1.5   0:00.02 /usr/sbin+
 88598 nobody    20   0  277476  33824   2216 S   0.0  1.4   0:00.03 /usr/sbin+
 88599 nobody    20   0  277476  34808   3200 S   0.0  1.4   0:00.02 /usr/sbin+
 88657 nobody    20   0  277680  34988   3368 S   0.0  1.4   0:00.01 /usr/sbin+
 88667 nigeria   20   0  400460   8240   2448 S   0.0  0.3   0:00.00 php-fpm: +
 88670 nobody    20   0  277476  34932   3324 S   0.0  1.4   0:00.01 /usr/sbin+
 88671 nobody    20   0  277476  33780   2172 S   0.0  1.4   0:00.01 /usr/sbin+
 88690 nobody    20   0  277476  33780   2172 S   0.0  1.4   0:00.01 /usr/sbin+
 88691 nobody    20   0  277476  33784   2176 S   0.0  1.4   0:00.00 /usr/sbin+
 88692 nobody    20   0  277476  33788   2176 S   0.0  1.4   0:00.02 /usr/sbin+
 88694 nobody    20   0  277476  33780   2172 S   0.0  1.4   0:00.01 /usr/sbin+
 88714 nobody    20   0  277476  33780   2172 S   0.0  1.4   0:00.01 /usr/sbin+
 88715 nobody    20   0  277476  33796   2188 S   0.0  1.4   0:00.01 /usr/sbin+
 88716 nobody    20   0  277476  33780   2172 S   0.0  1.4   0:00.01 /usr/sbin+
 88717 nobody    20   0  277476  33784   2176 S   0.0  1.4   0:00.00 /usr/sbin+
 88718 nobody    20   0  277476  33780   2172 S   0.0  1.4   0:00.01 /usr/sbin+
 88719 nobody    20   0  277476  33812   2204 S   0.0  1.4   0:00.01 /usr/sbin+
 88720 nobody    20   0  277476  33780   2172 S   0.0  1.4   0:00.01 /usr/sbin+
 88721 nobody    20   0  277476  33780   2172 S   0.0  1.4   0:00.01 /usr/sbin+
 88886 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 88906 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 88907 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 88909 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 88910 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 88911 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 88912 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 88913 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 88915 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 88916 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 88918 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 88919 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 88920 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 88922 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 88933 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 88934 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 88937 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 88938 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 88939 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 88940 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 88941 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 88942 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 88944 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 88947 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 88949 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 88950 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 88951 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 88956 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 88960 root      20   0  158288  12856   2824 S   0.0  0.5   0:00.05 /usr/loca+
 88962 root      20   0  188216  11096   5148 S   0.0  0.5   0:00.01 /usr/loca+
 88963 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 88964 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 88965 cloudw    20   0  355492  15428  10292 R   0.0  0.6   0:00.00 /opt/cpan+
 88967 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 88969 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 88975 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 88982 cloudw    20   0  355492  15428  10292 S   0.0  0.6   0:00.01 /opt/cpan+
 88986 cloudsms  20   0  404052  15344  10008 S   0.0  0.6   0:00.01 /opt/cpan+
 89018 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 97917 root      20   0       0      0      0 S   0.0  0.0   0:00.36 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov13   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov13   0:04  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov13   0:03  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov13   0:54  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov13   0:02  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov13   0:11  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov13   0:24  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov13   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov13   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [deferwq]
root        104  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   Nov13   0:02  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   Nov13   0:03  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    Nov13   0:02  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [ext4-rsv-conver]
root        413  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [xprtiod]
root        577  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [kvm-irqfd-clean]
root        677  0.0  0.0      0     0 ?        S<   Nov13   0:02  \_ [loop0]
root        714  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [jbd2/loop0-8]
root        717  0.0  0.0      0     0 ?        S<   Nov13   0:00  \_ [ext4-rsv-conver]
root      22875  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [kworker/0:0]
root      97917  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [kworker/u200:2]
root      54373  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [kworker/1:3]
root      59466  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [kworker/0:4]
root      68024  0.0  0.0      0     0 ?        S    Nov13   0:00  \_ [kworker/1:0]
root      71479  0.0  0.0      0     0 ?        S    00:00   0:00  \_ [kworker/u200:1]
root      76303  0.0  0.0      0     0 ?        S    00:04   0:00  \_ [kworker/0:2]
root      77518  0.0  0.0      0     0 ?        S    00:05   0:00  \_ [kworker/1:1]
root      79804  0.0  0.0      0     0 ?        S    00:07   0:00  \_ [kworker/1:2]
root      84402  0.0  0.0      0     0 ?        S    00:11   0:00  \_ [kworker/0:1]
root          1  0.1  0.2 192956  4868 ?        Ss   Nov13   1:13 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  39500  6092 ?        Ss   Nov13   0:26 /usr/lib/systemd/systemd-journald
root        379  0.0  0.0  45352   100 ?        Ss   Nov13   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   512 ?        S<sl Nov13   0:04 /sbin/auditd
dbus        488  0.0  0.0  58716  1360 ?        Ss   Nov13   0:26 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         512  0.0  0.0  69256    80 ?        Ss   Nov13   0:00 /sbin/rpcbind -w
root        518  0.0  0.0 152780   144 ?        Ss   Nov13   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        520  0.0  0.0  24712  1256 ?        Ss   Nov13   0:11 /usr/lib/systemd/systemd-logind
root        521  0.0  0.1 224148  4564 ?        Ss   Nov13   0:00 queueprocd - waiting up to 60s to process a task
root        524  0.0  0.0  21540   380 ?        Ss   Nov13   0:01 /usr/sbin/irqbalance --foreground
polkitd     525  0.0  0.0 612240   936 ?        Ssl  Nov13   0:06 /usr/lib/polkit-1/polkitd --no-debug
root        533  0.0  0.0  52852   344 ?        Ss   Nov13   0:00 /usr/sbin/smartd -n -q never
nscd        535  0.1  0.0 1129668 1736 ?        Ssl  Nov13   0:51 /usr/sbin/nscd
root        540  0.0  0.0   4388    36 ?        Ss   Nov13   0:00 /usr/sbin/acpid
root        542  0.0  0.0 195208     0 ?        Ssl  Nov13   0:00 /usr/sbin/gssproxy -D
root        571  0.0  0.0 124480   460 ?        Ss   Nov13   0:01 /usr/sbin/crond -n
root      88906  0.0  0.0 183048  2144 ?        S    00:15   0:00  \_ /usr/sbin/CROND -n
root      88938  0.0  0.0 113284  1212 ?        Ss   00:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      88956  0.0  0.0 108052   356 ?        S    00:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      88963  0.0  0.0 113288  1516 ?        S    00:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      89069  0.0  0.0 153840  2092 ?        R    00:15   0:00  |               \_ ps auxf
root      88907  0.0  0.0 183048  2148 ?        S    00:15   0:00  \_ /usr/sbin/CROND -n
root      88934  0.0  0.0  20164   804 ?        Ss   00:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      88909  0.0  0.0 183048  2144 ?        S    00:15   0:00  \_ /usr/sbin/CROND -n
root      88941  0.0  0.0  20164   804 ?        Ss   00:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      88910  0.0  0.0 183048  2148 ?        S    00:15   0:00  \_ /usr/sbin/CROND -n
root      88942  0.0  0.0  20164   804 ?        Ss   00:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      88911  0.0  0.0 183048  2144 ?        S    00:15   0:00  \_ /usr/sbin/CROND -n
root      88939  0.0  0.0  20164   804 ?        Ss   00:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      88912  0.0  0.0 183048  2148 ?        S    00:15   0:00  \_ /usr/sbin/CROND -n
root      88944  0.0  0.0  20164   972 ?        Ss   00:15   0:00  |   \_ jailshell (cloudsms) [88969] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  88969  0.0  0.0  20164   264 ?        S    00:15   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  88975  0.0  0.0 113284  1212 ?        S    00:15   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  88986  1.0  0.6 404052 15344 ?        S    00:15   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      88913  0.0  0.0 183048  2144 ?        S    00:15   0:00  \_ /usr/sbin/CROND -n
root      88937  0.0  0.0  20164   808 ?        Ss   00:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      88915  0.0  0.0 183048  2140 ?        S    00:15   0:00  \_ /usr/sbin/CROND -n
root      88949  0.0  0.0  20164   804 ?        Ss   00:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      88916  0.0  0.0 183048  2140 ?        S    00:15   0:00  \_ /usr/sbin/CROND -n
root      88940  0.0  0.0  20164   808 ?        Ss   00:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      88918  0.0  0.0 183048  2136 ?        S    00:15   0:00  \_ /usr/sbin/CROND -n
root      88951  0.0  0.0 113284  1212 ?        Ss   00:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      88962  1.0  0.4 188216 11096 ?        S    00:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      88990  1.0  0.0 160224  2384 ?        S    00:15   0:00  |           \_ top -n 2 -b -c
root      88919  0.0  0.0 183048  2136 ?        S    00:15   0:00  \_ /usr/sbin/CROND -n
root      88950  0.0  0.0 113284  1208 ?        Ss   00:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1
root      88960  5.0  0.5 158288 12856 ?        S    00:15   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/autorepair recoverymgmt
root      88920  0.0  0.0 183048  2144 ?        S    00:15   0:00  \_ /usr/sbin/CROND -n
root      88947  0.0  0.0  20164   972 ?        Ss   00:15   0:00  |   \_ jailshell (pactpay) [88967] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   88967  0.0  0.0      0     0 ?        D    00:15   0:00  |       \_ [jailshell]
root      88922  0.0  0.0 183048  2140 ?        S    00:15   0:00  \_ /usr/sbin/CROND -n
root      88933  0.0  0.0  20164   968 ?        Ss   00:15   0:00      \_ jailshell (nigeria) [88964] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   88964  0.0  0.0  20164   256 ?        S    00:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   88972  4.0  0.6 404052 16140 ?        R    00:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        574  0.0  0.0  24208    24 ?        Ss   Nov13   0:00 /usr/sbin/atd -f
root        585  0.0  0.0 108296    60 tty1     Ss+  Nov13   0:00 /sbin/agetty --noclear tty1 linux
root        586  0.0  0.0 114704    32 ttyS0    Ss+  Nov13   0:00 /bin/bash
mailnull    615  0.0  0.1  89112  3828 ?        Ss   Nov13   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        925  0.0  3.2 1763044 78480 ?       Ssl  Nov13   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
named       931  0.0  1.6 711724 39028 ?        Ssl  Nov13   0:28 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        933  0.0  0.0 445028     0 ?        Ss   Nov13   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    941  0.0  0.5 114016 14060 ?        Ssl  Nov13   0:11 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
cpanelc+    945  0.0  0.1  10568  3652 ?        Ss   Nov13   0:42 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
memcach+    948  0.0  0.0 342400    72 ?        Ssl  Nov13   0:01 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    950  0.0  0.0  10132    44 ?        Ssl  Nov13   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    952  0.0  0.0 112524    68 ?        Ssl  Nov13   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    957  0.0  0.0  14068    40 ?        Ssl  Nov13   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        960  0.0  0.0 153404   312 ?        Ss   Nov13   0:01 pure-ftpd (SERVER)
systuser    963  0.0  0.0 111608    68 ?        Ssl  Nov13   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        989  0.0  0.2 261296  6784 ?        Ss   Nov13   0:11 cpsrvd (SSL) - waiting for connections                   
root      88886  0.0  0.0      0     0 ?        Z    00:14   0:00  \_ [cpaneld - servi] <defunct>
root        990  0.0  0.0 572372   952 ?        Ssl  Nov13   0:04 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    991  0.0  1.5 5654048 37200 ?       SLsl Nov13   0:27 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        998  0.0  0.0 111304   416 ?        Ss   Nov13   0:05 /usr/sbin/sshd -D
root      88025  0.0  0.1 111304  4268 ?        Ss   00:14   0:00  \_ sshd: [accepted]
root      88072  0.0  0.1 111304  4376 ?        Ss   00:14   0:00  \_ sshd: [accepted]
sshd      88073  0.0  0.1 115644  2624 ?        S    00:14   0:00  |   \_ sshd: [net]
root      88111  0.0  0.1 111304  4268 ?        Ss   00:14   0:00  \_ sshd: [accepted]
root       1000  0.0  0.2 331088  7108 ?        Ssl  Nov13   0:13 /usr/sbin/rsyslogd -n
root       1001  0.0  0.0  51508   632 ?        Ss   Nov13   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1125  0.0  0.0  47048  2396 ?        S    Nov13   0:00  \_ dovecot/pop3-login
dovenull   1126  0.0  0.1  48664  2828 ?        S    Nov13   0:00  \_ dovecot/imap-login
dovecot    1127  0.0  0.0  10320   404 ?        S    Nov13   0:00  \_ dovecot/anvil
root       1128  0.0  0.0  10452   568 ?        S    Nov13   0:00  \_ dovecot/log
dovenull   1129  0.0  0.0  47052  2388 ?        S    Nov13   0:00  \_ dovecot/pop3-login
dovenull   1130  0.0  0.1  48568  3116 ?        S    Nov13   0:00  \_ dovecot/imap-login
root       1133  0.0  0.0  24564  2236 ?        S    Nov13   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   676 ?        S    Nov13   0:00  \_ dovecot/stats
dovecot    1208  0.0  0.0  41156  1532 ?        S    Nov13   0:01  \_ dovecot/auth
root       1147  0.0  1.0 248176 24968 ?        Ss   Nov13   0:08 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5511  0.0  4.1 271880 101352 ?       S    Nov13   0:07  \_ spamd child
root       5512  0.0  0.9 261652 23652 ?        S    Nov13   0:00  \_ spamd child
systuser   1164  0.0  0.1 157708  3016 ?        S    Nov13   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1165  0.0  0.5 410480 13528 ?        Ss   Nov13   0:42 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1166  0.0  0.1 387556  4032 ?        Ss   Nov13   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1236  0.0  0.2 183900  6104 ?        Ss   Nov13   0:03 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1239  0.0  0.8 208784 21148 ?        Ss   Nov13   0:04 tailwatchd
root       1241  0.0  0.0 167452  1252 ?        Ss   Nov13   0:00 dnsadmin - dormant mode
root       1631  0.0  0.0 299272   532 ?        Ss   Nov13   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1677  0.0  0.0 130416  1404 ?        SN   Nov13   0:00 cpanellogd - sleeping for logs
mysql      1731  1.3 12.2 1458860 295628 ?      Sl   Nov13  11:34 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  34743  0.0  0.0   3148     8 ?        Ss   Nov13   0:00 [kworker]
oysipao+  34754  0.0  0.0   3152    36 ?        S    Nov13   0:00  \_ [kworker]
root      71096  0.1  1.2 180932 29168 ?        Ss   00:00   0:00 lfd - sleeping
root      71692  0.0  0.4 1276100 11036 ?       Ssl  00:00   0:00 /usr/bin/cspdaemon
root      71726  0.0  0.4 1277312 11916 ?       Ssl  00:00   0:00 /usr/bin/checkstatus
root      72069  0.0  1.1 266980 28844 ?        Ss   00:00   0:00 /usr/sbin/httpd -k start
root      72072  0.0  0.0  12792  1392 ?        S    00:00   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      72073  0.0  0.0  12732  1368 ?        S    00:00   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      72074  0.0  0.0  12812  1400 ?        S    00:00   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      72075  0.0  0.4  53272 11888 ?        S    00:00   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    82861  0.1  1.4 277492 35540 ?        S    00:09   0:00  \_ /usr/sbin/httpd -k start
nobody    84158  0.1  1.4 277476 35488 ?        S    00:10   0:00  \_ /usr/sbin/httpd -k start
nobody    84184  0.2  1.4 277616 35404 ?        S    00:10   0:00  \_ /usr/sbin/httpd -k start
nobody    84774  0.1  1.4 277824 35548 ?        S    00:11   0:00  \_ /usr/sbin/httpd -k start
nobody    85170  0.1  1.4 277476 35472 ?        S    00:11   0:00  \_ /usr/sbin/httpd -k start
nobody    85232  0.1  1.4 277476 35376 ?        S    00:11   0:00  \_ /usr/sbin/httpd -k start
nobody    85238  0.1  1.4 277492 35024 ?        S    00:11   0:00  \_ /usr/sbin/httpd -k start
nobody    86371  0.1  1.4 277500 35096 ?        S    00:12   0:00  \_ /usr/sbin/httpd -k start
nobody    86405  0.1  1.4 277516 35288 ?        S    00:12   0:00  \_ /usr/sbin/httpd -k start
nobody    86430  0.1  1.4 277476 35092 ?        S    00:12   0:00  \_ /usr/sbin/httpd -k start
nobody    86531  0.1  1.4 277476 35220 ?        S    00:12   0:00  \_ /usr/sbin/httpd -k start
nobody    86619  0.1  1.4 277476 35272 ?        S    00:12   0:00  \_ /usr/sbin/httpd -k start
nobody    87492  0.1  1.4 277476 35312 ?        S    00:13   0:00  \_ /usr/sbin/httpd -k start
nobody    87542  0.1  1.4 277480 34892 ?        S    00:13   0:00  \_ /usr/sbin/httpd -k start
nobody    87567  0.1  1.4 277476 35392 ?        S    00:13   0:00  \_ /usr/sbin/httpd -k start
nobody    87586  0.1  1.4 277476 35036 ?        S    00:13   0:00  \_ /usr/sbin/httpd -k start
nobody    87617  0.2  1.3 277484 33868 ?        S    00:13   0:00  \_ /usr/sbin/httpd -k start
nobody    87619  0.2  1.3 277476 33784 ?        S    00:13   0:00  \_ /usr/sbin/httpd -k start
nobody    87620  0.1  1.4 277476 35256 ?        S    00:13   0:00  \_ /usr/sbin/httpd -k start
nobody    87641  0.1  1.4 277476 35024 ?        S    00:13   0:00  \_ /usr/sbin/httpd -k start
nobody    87643  0.2  1.4 277476 34916 ?        S    00:13   0:00  \_ /usr/sbin/httpd -k start
nobody    87644  0.2  1.3 277476 33812 ?        S    00:13   0:00  \_ /usr/sbin/httpd -k start
nobody    87647  0.1  1.4 277476 35036 ?        S    00:13   0:00  \_ /usr/sbin/httpd -k start
cloudw    88982  1.0  0.6 355492 15428 ?        S    00:15   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    87648  0.1  1.4 277476 34888 ?        S    00:13   0:00  \_ /usr/sbin/httpd -k start
cloudw    88965  0.0  0.6 355492 15428 ?        S    00:15   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    88569  0.1  1.4 277476 34060 ?        S    00:14   0:00  \_ /usr/sbin/httpd -k start
nobody    88578  0.1  1.4 277480 34760 ?        S    00:14   0:00  \_ /usr/sbin/httpd -k start
cloudw    89031  1.0  0.6 355492 15428 ?        S    00:15   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    88579  0.1  1.4 277476 34808 ?        S    00:14   0:00  \_ /usr/sbin/httpd -k start
nobody    88596  0.1  1.3 277476 33796 ?        S    00:14   0:00  \_ /usr/sbin/httpd -k start
nobody    88597  0.1  1.4 277816 35160 ?        S    00:14   0:00  \_ /usr/sbin/httpd -k start
nobody    88598  0.1  1.3 277476 33824 ?        S    00:14   0:00  \_ /usr/sbin/httpd -k start
nobody    88599  0.1  1.4 277476 34808 ?        S    00:14   0:00  \_ /usr/sbin/httpd -k start
nobody    88657  0.0  1.4 277680 34988 ?        S    00:14   0:00  \_ /usr/sbin/httpd -k start
nobody    88670  0.0  1.4 277476 34932 ?        S    00:14   0:00  \_ /usr/sbin/httpd -k start
nobody    88671  0.0  1.3 277476 33780 ?        S    00:14   0:00  \_ /usr/sbin/httpd -k start
nobody    88690  0.1  1.3 277476 33780 ?        S    00:14   0:00  \_ /usr/sbin/httpd -k start
nobody    88691  0.0  1.3 277476 33784 ?        S    00:14   0:00  \_ /usr/sbin/httpd -k start
nobody    88692  0.2  1.3 277476 33788 ?        S    00:14   0:00  \_ /usr/sbin/httpd -k start
nobody    88694  0.1  1.3 277476 33780 ?        S    00:14   0:00  \_ /usr/sbin/httpd -k start
nobody    88714  0.1  1.3 277476 33780 ?        S    00:14   0:00  \_ /usr/sbin/httpd -k start
nobody    88715  0.1  1.3 277476 33796 ?        S    00:14   0:00  \_ /usr/sbin/httpd -k start
nobody    88716  0.1  1.3 277476 33780 ?        S    00:14   0:00  \_ /usr/sbin/httpd -k start
nobody    88717  0.0  1.3 277476 33784 ?        S    00:14   0:00  \_ /usr/sbin/httpd -k start
nobody    88718  0.1  1.3 277476 33780 ?        S    00:14   0:00  \_ /usr/sbin/httpd -k start
nobody    88719  0.1  1.3 277476 33812 ?        S    00:14   0:00  \_ /usr/sbin/httpd -k start
nobody    88720  0.1  1.3 277476 33780 ?        S    00:14   0:00  \_ /usr/sbin/httpd -k start
nobody    88721  0.1  1.3 277476 33780 ?        S    00:14   0:00  \_ /usr/sbin/httpd -k start
root      72127  0.0  0.6 400740 15176 ?        Ss   00:00   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   88667  0.0  0.3 400460  8240 ?        S    00:14   0:00  \_ php-fpm: pool nigeriadecide_org
root      72132  0.0  0.5 388892 13144 ?        Ss   00:00   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root      72145  0.0  0.4 396248 12068 ?        Ss   00:00   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root      72153  0.0  0.5 389508 12808 ?        Ss   00:00   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root      72158  0.0  1.0 439788 24776 ?        Ss   00:00   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
## mysql stats
Uptime: 50295  Threads: 2  Questions: 4147332  Slow queries: 0  Opens: 15053  Flush tables: 1  Open tables: 2000  Queries per second avg: 82.460
*************************** 1. row ***************************
     Id: 57259
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 57268
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.35 TIME_WAIT
      1 ::1 TIME_WAIT
      1 45.8.25.11 TIME_WAIT
      1 45.8.25.16 TIME_WAIT
      1 45.8.25.32 TIME_WAIT
      1 45.8.25.34 TIME_WAIT
      1 45.8.25.37 TIME_WAIT
      1 45.8.25.43 TIME_WAIT
      1 45.8.25.47 TIME_WAIT
      1 45.8.25.49 TIME_WAIT
      1 45.8.25.51 TIME_WAIT
      1 45.8.25.8 TIME_WAIT
      1 45.8.25.9 TIME_WAIT
      1 51.161.65.1 TIME_WAIT
      1 66.249.64.128 TIME_WAIT
      1 66.249.64.131 TIME_WAIT
      1 66.249.64.15 TIME_WAIT
      1 66.249.64.1 TIME_WAIT
      1 66.249.70.129 TIME_WAIT
      1 66.249.70.162 TIME_WAIT
      1 66.249.70.194 TIME_WAIT
      1 66.249.70.199 TIME_WAIT
      1 66.249.70.200 TIME_WAIT
      1 66.249.70.71 TIME_WAIT
      1 92.205.186.4 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 20.222.232.51 TIME_WAIT
      2 45.8.25.53 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 14-Nov-2025 00:15:02 WAT
   Restart Time: Friday, 14-Nov-2025 00:00:24 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 14 minutes 37 seconds
   Server load: 0.64 0.57 0.65
   Total accesses: 7344 - Total Traffic: 195.3 MB - Total Duration: 4752416
   CPU Usage: u3.82 s1.97 cu96.39 cs80.47 - 20.8% CPU load
   8.37 requests/sec - 228.1 kB/second - 27.2 kB/request - 647.115 ms/request
   41 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

K_WKKKKKK_KKKK_.KKW_K_KKKKKKKKKKKKKKKKKKWKKKKKK.................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU  SS  Req  Dur   Conn Child Slot    Client     Protocol           VHost                                        Request
   0-0  86371 1/36/192  K 0.93 4   350 149110 29.5 1.00  5.45 66.249.70.141 http/1.1 schoolplus.cloudware.ng:80 GET /?p=876665101 HTTP/1.1
   1-0  88569 0/5/160   _ 0.08 0   0   107138 0.0  0.12  4.39 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   2-0  88578 0/3/174   W 0.06 0   0   133025 0.0  0.46  5.38 66.249.64.74  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1001018702 HTTP/1.1
   3-0  87492 1/15/198  K 0.32 1   287 145755 32.0 0.38  5.39 66.249.64.132 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3397271087 HTTP/1.1
   4-0  88579 1/4/167   K 0.08 2   308 122135 31.7 0.13  4.88 66.249.64.170 http/1.1 schoolplus.cloudware.ng:80 GET /?p=4090608246 HTTP/1.1
   5-0  84774 2/63/193  K 1.61 4   349 139906 59.0 1.69  5.29 66.249.70.37  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3015386528 HTTP/1.1
   6-0  88596 1/4/185   K 0.08 1   317 139925 30.9 0.12  5.10 66.249.64.227 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3469502855 HTTP/1.1
   7-0  85170 3/49/169  K 1.11 3   353 101796 92.7 1.31  4.52 66.249.70.67  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3638423151 HTTP/1.1
   8-0  88597 1/4/164   K 0.05 2   376 123395 29.0 0.10  4.18 66.249.64.107 http/1.1 schoolplus.cloudware.ng:80 GET /?p=4288451225 HTTP/1.1
   9-0  87542 0/111/276 _ 0.30 0   0   127204 0.0  0.26  5.05 20.222.232.51 http/1.1 oysipa.oyostate.gov.ng:80  GET /st.php HTTP/1.1
   10-0 87567 2/16/153  K 0.35 2   267 103670 60.4 0.42  4.06 66.249.64.100 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2354730508 HTTP/1.1
   11-0 88598 2/6/158   K 0.08 0   309 110820 62.0 0.12  4.28 66.249.70.173 http/1.1 schoolplus.cloudware.ng:80 GET /?p=4279643968 HTTP/1.1
   12-0 84158 2/62/181  K 1.47 1   319 147516 62.3 1.58  5.00 66.249.64.225 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1472493225 HTTP/1.1
   13-0 86405 1/41/172  K 0.94 3   357 102068 29.9 1.19  4.70 66.249.64.128 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2059251625 HTTP/1.1
   14-0 82861 0/86/199  _ 2.19 0   394 135730 0.0  2.36  5.40 66.249.64.160 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3456544191 HTTP/1.1
   15-0 -     0/0/172   . 0.00 2   0   138520 0.0  0.00  5.14 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 88599 1/4/155   K 0.08 0   0   111676 5.7  0.10  4.65 45.8.25.29    http/1.1 oysipa.oyostate.gov.ng:443 GET /users HTTP/1.1
   17-0 87586 2/16/174  K 0.38 0   296 116950 61.9 0.43  4.36 66.249.64.33  http/1.1 schoolplus.cloudware.ng:80 GET /?p=225977717 HTTP/1.1
   18-0 87617 0/112/248 W 0.37 0   0   106990 0.0  0.38  4.28 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   19-0 88657 0/4/178   _ 0.01 0   384 126515 0.0  0.04  4.70 66.249.70.134 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1085962434 HTTP/1.1
   20-0 88670 1/3/175   K 0.02 2   420 139649 32.8 0.07  4.88 66.249.64.173 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2565452627 HTTP/1.1
   21-0 85232 0/45/168  _ 1.06 0   405 118753 0.0  1.25  4.30 66.249.64.104 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2427340191 HTTP/1.1
   22-0 87619 1/32/197  K 0.88 1   404 127371 34.7 0.96  5.49 66.249.64.131 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1175198587 HTTP/1.1
   23-0 87620 1/15/120  K 0.27 3   343 69961  30.7 0.34  3.29 66.249.70.163 http/1.1 schoolplus.cloudware.ng:80 GET /?p=148922804 HTTP/1.1
   24-0 84184 1/89/181  K 2.69 1   274 117676 29.8 2.74  5.18 66.249.64.106 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1977279698 HTTP/1.1
   25-0 87641 1/21/114  K 0.55 4   389 65245  30.0 0.61  2.94 66.249.70.192 http/1.1 schoolplus.cloudware.ng:80 GET /?p=813891966 HTTP/1.1
   26-0 88671 1/3/142   K 0.05 4   413 76732  31.4 0.09  3.35 66.249.64.13  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2072158639 HTTP/1.1
   27-0 87643 1/23/154  K 0.61 2   313 92699  31.6 0.67  4.10 66.249.64.130 http/1.1 schoolplus.cloudware.ng:80 GET /?p=617119758 HTTP/1.1
   28-0 87644 1/23/196  K 0.60 1   321 125329 30.7 0.66  5.52 66.249.64.234 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2395200646 HTTP/1.1
   29-0 88690 1/2/162   K 0.02 3   406 95290  31.2 0.06  4.28 66.249.64.66  http/1.1 schoolplus.cloudware.ng:80 GET /?p=535738426 HTTP/1.1
   30-0 88691 1/2/122   K 0.01 3   288 74522  28.9 0.06  3.15 66.249.70.71  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3391573138 HTTP/1.1
   31-0 86430 1/33/141  K 0.83 4   279 83759  30.5 0.91  3.94 66.249.64.2   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3717031519 HTTP/1.1
   32-0 88692 1/3/129   K 0.06 3   347 77473  29.9 0.09  3.51 66.249.70.33  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2702641744 HTTP/1.1
   33-0 88694 1/2/143   K 0.02 3   406 88015  31.9 0.06  3.85 66.249.64.4   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1747996536 HTTP/1.1
   34-0 88714 1/2/167   K 0.02 2   343 77892  30.5 0.06  3.92 66.249.70.133 http/1.1 schoolplus.cloudware.ng:80 GET /?p=405109404 HTTP/1.1
   35-0 86531 1/31/157  K 0.86 0   266 102228 29.5 0.91  4.60 66.249.70.103 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3824488506 HTTP/1.1
   36-0 88715 1/2/101   K 0.02 3   313 59383  30.5 0.06  2.57 66.249.70.142 http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1239836
   37-0 88716 1/2/147   K 0.02 2   268 90652  29.8 0.06  4.07 66.249.70.100 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1515076510 HTTP/1.1
   38-0 85238 1/55/124  K 1.47 2   432 78016  31.5 1.56  3.48 66.249.64.1   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2070260132 HTTP/1.1
   39-0 86619 1/27/164  K 0.92 0   350 102533 29.6 0.72  4.59 66.249.64.37  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2156422891 HTTP/1.1
   40-0 87647 0/15/101  W 0.37 0   0   58239  0.0  0.50  2.71 66.249.64.172 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2417697961 HTTP/1.1
   41-0 87648 1/14/138  K 0.34 0   476 85655  28.9 0.36  3.90 66.249.64.98  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3896745700 HTTP/1.1
   42-0 88717 1/2/56    K 0.01 2   262 32101  30.1 0.06  1.47 66.249.64.105 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2396076614 HTTP/1.1
   43-0 88718 1/2/81    K 0.03 2   363 49577  30.4 0.06  2.17 66.249.70.96  http/1.1 schoolplus.cloudware.ng:80 GET /?p=611473853 HTTP/1.1
   44-0 88719 1/3/56    K 0.03 1   320 33504  31.9 0.06  1.51 66.249.70.199 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3545248351 HTTP/1.1
   45-0 88720 1/2/75    K 0.02 1   274 43756  30.1 0.06  2.02 66.249.70.38  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2254288106 HTTP/1.1
   46-0 88721 1/2/79    K 0.03 2   391 48760  29.5 0.06  2.18 66.249.64.15  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1305382136 HTTP/1.1
   47-0 -     0/0/17    . 0.00 630 0   9576   0.0  0.00  0.44 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/16    . 0.00 651 0   9821   0.0  0.00  0.41 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/17    . 0.00 634 0   9127   0.0  0.00  0.43 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/8     . 0.00 629 0   4697   0.0  0.00  0.21 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/26    . 0.00 572 0   13967  0.0  0.00  0.66 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/2     . 0.00 671 0   589    0.0  0.00  0.03 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 403
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 18 seconds, (range: 0...69)
   index usage: 7%, cache usage: 9%
   total entries stored since starting: 1185
   total entries replaced since starting: 0
   total entries expired since starting: 782
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 75 miss
   total removes since starting: 0 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit