403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.13.12.txt
 ## swap threshold exceeded
## server overview
2025-11-20.13.12 load[0] mem[69/62] mysql[1/9] httpd[28]
              total        used        free      shared  buff/cache   available
Mem:           2363        1559         103          53         700         581
Swap:          1999        1466         533
 13:12:01 up  3:31,  0 users,  load average: 0.24, 0.30, 0.38
## system overview
top - 13:12:02 up  3:31,  0 users,  load average: 0.24, 0.30, 0.38
Tasks: 230 total,  12 running, 217 sleeping,   0 stopped,   1 zombie
%Cpu(s): 53.1 us, 43.8 sy,  0.0 ni,  3.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    87856 free,  1612756 used,   719688 buff/cache
KiB Swap:  2047996 total,   546016 free,  1501980 used.   579844 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1793 mysql     20   0 1463376 231228   2976 S  26.7  9.6   2:52.10 /usr/sbin+
 72166 nigeria   20   0  404052  16140  10384 R  13.3  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44268   3340   1484 R   6.7  0.1   0:19.02 /usr/lib/+
   470 root      20   0   24712   1180    836 D   6.7  0.0   0:03.07 /usr/lib/+
 72151 cloudw    20   0  353712  15976  10492 S   6.7  0.7   0:00.01 /opt/cpan+
 72160 pactpay   20   0  479860  16172  10576 S   6.7  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.72 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.63 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:13.29 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.59 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:02.42 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:18.80 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.33 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.75 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:02.02 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.77 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   5776   5540 S   0.0  0.2   0:08.01 /usr/lib/+
   387 root      20   0   45352    252    248 S   0.0  0.0   0:00.38 /usr/lib/+
   410 root      16  -4   55532    504    376 S   0.0  0.0   0:01.36 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   471 root      20   0   52852    456    352 S   0.0  0.0   0:00.01 /usr/sbin+
   474 dbus      20   0   58644   1412    680 R   0.0  0.1   0:06.96 /usr/bin/+
   476 rpc       20   0   69256     72     12 S   0.0  0.0   0:00.01 /sbin/rpc+
   486 polkitd   20   0  612240   1088    740 S   0.0  0.0   0:01.87 /usr/lib/+
   487 root      20   0   21540    408    320 S   0.0  0.0   0:00.27 /usr/sbin+
   492 root      20   0  152780    248    204 S   0.0  0.0   0:00.00 /usr/sbin+
   493 root      20   0  224280   5440   1028 S   0.0  0.2   0:00.29 queueproc+
   507 nscd      20   0  928956   1340    668 S   0.0  0.1   0:10.63 /usr/sbin+
   515 root      20   0  195208     68     68 S   0.0  0.0   0:00.00 /usr/sbin+
   516 root      20   0    4388    156    152 S   0.0  0.0   0:00.00 /usr/sbin+
   543 root      20   0   24208    164    140 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0  124480    520    388 S   0.0  0.0   0:00.37 /usr/sbin+
   562 root      20   0  108296    180    176 S   0.0  0.0   0:00.00 /sbin/age+
   563 root      20   0  114704    180    180 S   0.0  0.0   0:00.02 /bin/bash
   613 mailnull  20   0   89116   3812    900 S   0.0  0.2   0:00.35 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   675 root       0 -20       0      0      0 S   0.0  0.0   0:02.56 [loop0]
   735 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   736 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   931 root      20   0  153404    396    316 S   0.0  0.0   0:00.25 pure-ftpd+
   932 root      20   0  572372   1052    480 S   0.0  0.0   0:01.16 /usr/bin/+
   933 systuser  20   0  112268     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   935 systuser  20   0  114016  15152   2404 S   0.0  0.6   0:03.33 /usr/loca+
   936 root      20   0 1277056   6144    164 S   0.0  0.3   0:21.14 /usr/bin/+
   937 root      20   0  445028   1384   1272 S   0.0  0.1   0:00.52 sw-engine+
   938 systuser  20   0   11796     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   942 root      20   0  111304    544    436 S   0.0  0.0   0:01.92 /usr/sbin+
   943 systuser  20   0   11348     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   944 root      20   0 1349832   8612    128 S   0.0  0.4   0:28.13 /usr/bin/+
   945 root      20   0   51508    608    428 S   0.0  0.0   0:00.18 /usr/sbin+
   946 telegraf  20   0 5654304  36280   6040 S   0.0  1.5   0:07.31 /usr/loca+
   947 memcach+  20   0  342400    232    232 S   0.0  0.0   0:00.27 /usr/bin/+
   948 root      20   0 1763312 319524    848 S   0.0 13.2   0:14.95 /usr/loca+
   949 root      20   0  389508    548    456 S   0.0  0.0   0:00.41 php-fpm: +
   950 root      20   0  261160   6988   2060 S   0.0  0.3   0:02.36 cpsrvd (S+
   953 root      20   0  388892    660    456 S   0.0  0.0   0:00.35 php-fpm: +
   958 root      20   0  257360   5608   4812 S   0.0  0.2   0:04.01 /usr/sbin+
   986 root      20   0  396248    508    416 S   0.0  0.0   0:00.36 php-fpm: +
   990 root      20   0  439788   1172   1080 S   0.0  0.0   0:00.47 php-fpm: +
   994 root      20   0  400740   3096    716 S   0.0  0.1   0:01.80 php-fpm: +
   996 named     20   0 1186868  36728   1800 S   0.0  1.5   0:08.46 /usr/sbin+
  1013 cpanelc+  20   0   10580   3684   2420 R   0.0  0.2   0:10.18 /usr/loca+
  1093 dovenull  20   0   47284   2588   1712 R   0.0  0.1   0:00.24 dovecot/p+
  1094 dovenull  20   0   48032   3220   1788 S   0.0  0.1   0:00.23 dovecot/i+
  1095 dovecot   20   0   10320    292    176 S   0.0  0.0   0:00.06 dovecot/a+
  1096 root      20   0   10452    488    308 S   0.0  0.0   0:00.15 dovecot/l+
  1097 dovenull  20   0   47308   2512   1720 R   0.0  0.1   0:00.19 dovecot/p+
  1098 dovenull  20   0   47996   2816   1544 S   0.0  0.1   0:00.23 dovecot/i+
  1104 root      20   0   24528   2580    544 S   0.0  0.1   0:00.11 dovecot/c+
  1110 dovecot   20   0   13568    624    424 S   0.0  0.0   0:00.04 dovecot/s+
  1145 systuser  20   0  157704   3068   1092 S   0.0  0.1   0:00.09 SonarPush+
  1170 dovecot   20   0   41192   1548   1032 S   0.0  0.1   0:00.47 dovecot/a+
  1175 wp-tool+  20   0  412368  27528   1628 S   0.0  1.1   0:04.19 /usr/bin/+
  1176 wp-tool+  20   0  387528   8696   1564 S   0.0  0.4   0:00.19 /usr/bin/+
  1234 root      20   0  167452   1308    764 S   0.0  0.1   0:00.22 dnsadmin +
  1235 root      20   0  262228  24008   6148 S   0.0  1.0   0:02.24 cpdavd - +
  1237 root      20   0  209456  19776   2296 S   0.0  0.8   0:01.76 tailwatchd
  1669 root      20   0  299272    524    360 S   0.0  0.0   0:00.33 php-fpm: +
  1701 root      38  18  130416   1400    728 S   0.0  0.1   0:00.03 cpanellog+
  1959 root      20   0  266992   7380    740 S   0.0  0.3   0:01.11 /usr/sbin+
  1962 root      20   0   12872    400    296 S   0.0  0.0   0:01.51 /usr/loca+
  1963 root      20   0   12732    368    292 S   0.0  0.0   0:01.29 /usr/loca+
  1964 root      20   0   12932    416    296 S   0.0  0.0   0:01.41 /usr/loca+
  1968 root      20   0   53340    216    216 S   0.0  0.0   0:00.05 /usr/loca+
  2014 root      20   0  182880  10688   1168 S   0.0  0.4   0:11.87 lfd - sle+
 18294 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 18303 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.21 [kworker]
 31256 nobody    20   0  277760  20672   4988 S   0.0  0.9   0:03.44 /usr/sbin+
 31542 root      20   0       0      0      0 R   0.0  0.0   0:00.05 [kworker/+
 35992 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 43239 nobody    20   0  277768  20348   5004 S   0.0  0.8   0:03.16 /usr/sbin+
 45300 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 47448 nobody    20   0  277884  20204   4768 S   0.0  0.8   0:02.06 /usr/sbin+
 47802 nobody    20   0  277640  19756   4756 S   0.0  0.8   0:01.34 /usr/sbin+
 47936 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 48527 nobody    20   0  277892  19892   4704 S   0.0  0.8   0:01.36 /usr/sbin+
 48759 nobody    20   0  277772  20288   4884 S   0.0  0.8   0:01.48 /usr/sbin+
 50251 nobody    20   0  277904  19836   4596 S   0.0  0.8   0:00.69 /usr/sbin+
 50669 nobody    20   0  277896  20376   4868 S   0.0  0.8   0:01.62 /usr/sbin+
 52940 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 54132 worencom  20   0   38480   2764   1708 S   0.0  0.1   0:00.00 dovecot/i+
 54729 nobody    20   0  277684  19780   4636 S   0.0  0.8   0:00.99 /usr/sbin+
 55196 nobody    20   0  278256  20460   4888 S   0.0  0.8   0:01.45 /usr/sbin+
 56174 nobody    20   0  277868  19376   4588 S   0.0  0.8   0:00.90 /usr/sbin+
 56404 root      20   0  248036 117144   1060 S   0.0  4.8   0:03.75 /usr/loca+
 56510 nobody    20   0  277868  19364   4636 S   0.0  0.8   0:00.79 /usr/sbin+
 60272 nobody    20   0  277868  19608   4552 S   0.0  0.8   0:00.91 /usr/sbin+
 60287 nobody    20   0  277592  19612   4636 S   0.0  0.8   0:00.86 /usr/sbin+
 61118 nobody    20   0  277736  19236   4468 S   0.0  0.8   0:00.74 /usr/sbin+
 61503 nobody    20   0  277760  19108   4340 S   0.0  0.8   0:00.91 /usr/sbin+
 61529 nobody    20   0  278196  19880   4372 S   0.0  0.8   0:00.34 /usr/sbin+
 62813 nobody    20   0  277760  19064   4276 S   0.0  0.8   0:00.49 /usr/sbin+
 64340 root      20   0  260572 127560   3408 S   0.0  5.3   0:00.88 spamd chi+
 64341 root      20   0  248036 116460    416 S   0.0  4.8   0:00.00 spamd chi+
 64695 nobody    20   0  277508  18612   4192 S   0.0  0.8   0:00.42 /usr/sbin+
 65204 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65950 root      20   0       0      0      0 D   0.0  0.0   0:00.04 [kworker/+
 65953 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66735 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 67149 nobody    20   0  277760  19116   4384 S   0.0  0.8   0:00.62 /usr/sbin+
 67729 nobody    20   0  277892  18460   3932 S   0.0  0.8   0:00.06 /usr/sbin+
 68088 cloudw    20   0  367184  19028  12180 S   0.0  0.8   0:00.20 /opt/cpan+
 68407 cloudw    20   0  367184  19024  12180 S   0.0  0.8   0:00.21 /opt/cpan+
 68641 nobody    20   0  277488  18348   4024 S   0.0  0.8   0:00.21 /usr/sbin+
 68704 cloudw    20   0  367184  19024  12180 S   0.0  0.8   0:00.21 /opt/cpan+
 68907 cloudw    20   0  367184  19024  12180 S   0.0  0.8   0:00.21 /opt/cpan+
 69178 cloudw    20   0  367184  19028  12180 S   0.0  0.8   0:00.21 /opt/cpan+
 69321 nobody    20   0  277940  19448   4440 S   0.0  0.8   0:00.38 /usr/sbin+
 69340 nobody    20   0  277464  18364   3804 S   0.0  0.8   0:00.02 /usr/sbin+
 69361 nobody    20   0  278100  19368   4200 S   0.0  0.8   0:00.13 /usr/sbin+
 69362 nobody    20   0  277480  18540   3992 S   0.0  0.8   0:00.15 /usr/sbin+
 69438 nobody    20   0  277480  18396   3804 S   0.0  0.8   0:00.19 /usr/sbin+
 69450 cloudw    20   0  367184  19024  12180 S   0.0  0.8   0:00.20 /opt/cpan+
 69624 nobody    20   0  277884  18320   3884 S   0.0  0.8   0:00.12 /usr/sbin+
 69648 cloudw    20   0  367184  19028  12180 S   0.0  0.8   0:00.20 /opt/cpan+
 69723 nobody    20   0  277760  18636   4148 S   0.0  0.8   0:00.26 /usr/sbin+
 69899 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 69982 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 70158 nobody    20   0  277760  18420   3904 S   0.0  0.8   0:00.29 /usr/sbin+
 70170 nobody    20   0  277760  18392   3960 S   0.0  0.8   0:00.07 /usr/sbin+
 70199 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 70392 cloudw    20   0  367184  19148  12236 S   0.0  0.8   0:00.21 /opt/cpan+
 70474 nobody    20   0  277912  18452   4032 S   0.0  0.8   0:00.16 /usr/sbin+
 70801 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 70827 nobody    20   0  277760  18320   3880 S   0.0  0.8   0:00.10 /usr/sbin+
 71030 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 71225 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 71273 nobody    20   0  277760  18332   3828 S   0.0  0.8   0:00.08 /usr/sbin+
 71516 cloudsms  20   0   61816   6176   4440 S   0.0  0.3   0:00.00 dovecot/l+
 71517 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 71521 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 71758 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 71955 cloudw    20   0  366248  16796  10940 S   0.0  0.7   0:00.13 /opt/cpan+
 71975 root      20   0  111304   4448   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 71977 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 71982 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 71985 nigeria   20   0  400460   5576   2332 S   0.0  0.2   0:00.00 php-fpm: +
 72037 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 72089 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 72090 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 72091 root      20   0  183048   2160   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 72092 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72093 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72094 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72095 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72096 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72097 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72098 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72099 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72100 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72102 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72103 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72105 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72108 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 72109 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 72110 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 72132 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 72133 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72134 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72135 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72136 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72137 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72138 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 72141 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72142 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72143 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72145 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72146 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 72148 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 72156 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 72163 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 72172 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
100665 root      20   0       0      0      0 D   0.0  0.0   0:00.13 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:40   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:40   0:13  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:40   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:40   0:18  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   09:40   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kvm-irqfd-clean]
root        675  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [loop0]
root        735  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/loop0-8]
root        736  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root     100665  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/u200:2]
root      31542  0.0  0.0      0     0 ?        S    12:25   0:00  \_ [kworker/1:1]
root      35992  0.0  0.0      0     0 ?        S    12:30   0:00  \_ [kworker/0:2]
root      45300  0.0  0.0      0     0 ?        S    12:40   0:00  \_ [kworker/1:2]
root      47936  0.0  0.0      0     0 ?        S    12:43   0:00  \_ [kworker/0:4]
root      52940  0.0  0.0      0     0 ?        S    12:49   0:00  \_ [kworker/0:1]
root      65204  0.0  0.0      0     0 ?        S    13:03   0:00  \_ [kworker/u200:0]
root      65950  0.0  0.0      0     0 ?        S    13:04   0:00  \_ [kworker/1:0]
root      65953  0.0  0.0      0     0 ?        S    13:04   0:00  \_ [kworker/1:4]
root      66735  0.0  0.0      0     0 ?        D    13:05   0:00  \_ [kworker/0:0]
root      69899  0.0  0.0      0     0 ?        S    13:09   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44268  3340 ?        Ss   09:40   0:19 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  40244  5776 ?        Ss   09:40   0:08 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   252 ?        Ss   09:40   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   504 ?        S<sl 09:40   0:01 /sbin/auditd
root        470  0.0  0.0  24712  1180 ?        Ss   09:40   0:03 /usr/lib/systemd/systemd-logind
root        471  0.0  0.0  52852   456 ?        Ss   09:40   0:00 /usr/sbin/smartd -n -q never
dbus        474  0.0  0.0  58644  1412 ?        Ss   09:40   0:06 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         476  0.0  0.0  69256    72 ?        Ss   09:40   0:00 /sbin/rpcbind -w
polkitd     486  0.0  0.0 612240  1088 ?        Ssl  09:40   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        487  0.0  0.0  21540   408 ?        Ss   09:40   0:00 /usr/sbin/irqbalance --foreground
root        492  0.0  0.0 152780   248 ?        Ss   09:40   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        493  0.0  0.2 224280  5440 ?        Ss   09:40   0:00 queueprocd - waiting up to 60s to process a task
nscd        507  0.0  0.0 928956  1340 ?        Ssl  09:40   0:10 /usr/sbin/nscd
root        515  0.0  0.0 195208    68 ?        Ssl  09:40   0:00 /usr/sbin/gssproxy -D
root        516  0.0  0.0   4388   156 ?        Ss   09:40   0:00 /usr/sbin/acpid
root        543  0.0  0.0  24208   164 ?        Ss   09:40   0:00 /usr/sbin/atd -f
root        545  0.0  0.0 124480   520 ?        Ss   09:40   0:00 /usr/sbin/crond -n
root      72091  0.0  0.0 183048  2160 ?        S    13:12   0:00  \_ /usr/sbin/CROND -n
root      72108  0.0  0.0 113284  1212 ?        Ss   13:12   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      72109  0.0  0.0 108052   356 ?        S    13:12   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      72110  0.0  0.0 113288  1520 ?        S    13:12   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      72173  0.0  0.0 153840  2096 ?        R    13:12   0:00  |               \_ ps auxf
root      72092  0.0  0.0 183048  2156 ?        S    13:12   0:00  \_ /usr/sbin/CROND -n
root      72136  0.0  0.0  20164   808 ?        Ss   13:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      72093  0.0  0.0 183048  2156 ?        S    13:12   0:00  \_ /usr/sbin/CROND -n
root      72142  0.0  0.0  20164   808 ?        Ss   13:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      72094  0.0  0.0 183048  2156 ?        S    13:12   0:00  \_ /usr/sbin/CROND -n
root      72134  0.0  0.0  20164   808 ?        Ss   13:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      72095  0.0  0.0 183048  2156 ?        S    13:12   0:00  \_ /usr/sbin/CROND -n
root      72143  0.0  0.0  20164   808 ?        Ss   13:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      72096  0.0  0.0 183048  2156 ?        S    13:12   0:00  \_ /usr/sbin/CROND -n
root      72133  0.0  0.0  20164   808 ?        Ss   13:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      72097  0.0  0.0 183048  2156 ?        S    13:12   0:00  \_ /usr/sbin/CROND -n
root      72141  0.0  0.0  20164   808 ?        Ss   13:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      72098  0.0  0.0 183048  2152 ?        S    13:12   0:00  \_ /usr/sbin/CROND -n
root      72137  0.0  0.0  20164   808 ?        Ss   13:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      72099  0.0  0.0 183048  2152 ?        S    13:12   0:00  \_ /usr/sbin/CROND -n
root      72145  0.0  0.0  20164   808 ?        Ss   13:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      72100  0.0  0.0 183048  2148 ?        S    13:12   0:00  \_ /usr/sbin/CROND -n
root      72138  0.0  0.0  20164   804 ?        Ss   13:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      72102  0.0  0.0 183048  2148 ?        S    13:12   0:00  \_ /usr/sbin/CROND -n
root      72135  0.0  0.0  20164   808 ?        Ss   13:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      72103  0.0  0.0 183048  2144 ?        S    13:12   0:00  \_ /usr/sbin/CROND -n
root      72148  0.0  0.0  20164   968 ?        Ss   13:12   0:00  |   \_ jailshell (pactpay) [72156] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   72156  0.0  0.0  20164   260 ?        S    13:12   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   72160  0.0  0.6 479860 16172 ?        Sl   13:12   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      72105  0.0  0.0 183048  2148 ?        S    13:12   0:00  \_ /usr/sbin/CROND -n
root      72146  0.0  0.0  20164   968 ?        Ss   13:12   0:00      \_ jailshell (nigeria) [72163] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   72163  0.0  0.0  20164   260 ?        S    13:12   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   72166  0.0  0.6 404052 16140 ?        S    13:12   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        562  0.0  0.0 108296   180 tty1     Ss+  09:40   0:00 /sbin/agetty --noclear tty1 linux
root        563  0.0  0.0 114704   180 ttyS0    Ss+  09:40   0:00 /bin/bash
mailnull    613  0.0  0.1  89116  3812 ?        Ss   09:40   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        931  0.0  0.0 153404   396 ?        Ss   09:40   0:00 pure-ftpd (SERVER)
root        932  0.0  0.0 572372  1052 ?        Ssl  09:40   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    933  0.0  0.0 112268    56 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.6 114016 15152 ?        Ssl  09:40   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        936  0.1  0.2 1277056 6144 ?        Ssl  09:40   0:21 /usr/bin/checkstatus
root        937  0.0  0.0 445028  1384 ?        Ss   09:40   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  71982  0.0  0.0 445028   320 ?        S    13:11   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    938  0.0  0.0  11796    32 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    939  0.0  0.0 111608    60 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        942  0.0  0.0 111304   544 ?        Ss   09:40   0:01 /usr/sbin/sshd -D
root      71975  0.0  0.1 111304  4448 ?        Ss   13:11   0:00  \_ sshd: [accepted]
sshd      71977  0.0  0.1 115644  2624 ?        S    13:11   0:00  |   \_ sshd: [net]
root      72089  0.0  0.1 111304  4268 ?        Ss   13:12   0:00  \_ sshd: [accepted]
sshd      72090  0.0  0.1 115644  2624 ?        S    13:12   0:00      \_ sshd: [net]
systuser    943  0.0  0.0  11348    24 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        944  0.2  0.3 1349832 8612 ?        Ssl  09:40   0:28 /usr/bin/cspdaemon
root        945  0.0  0.0  51508   608 ?        Ss   09:40   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1093  0.0  0.1  47284  2588 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1094  0.0  0.1  48032  3220 ?        S    09:40   0:00  \_ dovecot/imap-login
dovecot    1095  0.0  0.0  10320   292 ?        S    09:40   0:00  \_ dovecot/anvil
root       1096  0.0  0.0  10452   488 ?        S    09:40   0:00  \_ dovecot/log
dovenull   1097  0.0  0.1  47308  2512 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47996  2816 ?        S    09:40   0:00  \_ dovecot/imap-login
root       1104  0.0  0.1  24528  2580 ?        S    09:40   0:00  \_ dovecot/config
dovecot    1110  0.0  0.0  13568   624 ?        S    09:40   0:00  \_ dovecot/stats
dovecot    1170  0.0  0.0  41192  1548 ?        S    09:40   0:00  \_ dovecot/auth
worencom  54132  0.0  0.1  38480  2764 ?        S    12:50   0:00  \_ dovecot/imap
cloudsms  71516  0.0  0.2  61816  6176 ?        S    13:11   0:00  \_ dovecot/lmtp
root      71517  0.0  0.1  41052  2724 ?        S    13:11   0:00  \_ dovecot/auth -w
telegraf    946  0.0  1.4 5654304 36280 ?       SLsl 09:40   0:07 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    947  0.0  0.0 342400   232 ?        Ssl  09:40   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        948  0.1 13.2 1763312 319524 ?      Ssl  09:40   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        949  0.0  0.0 389508   548 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        950  0.0  0.2 261160  6988 ?        Ss   09:40   0:02 cpsrvd (SSL) - waiting for connections                   
root      72037  0.0  0.0      0     0 ?        Z    13:11   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.0 388892   660 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        958  0.0  0.2 257360  5608 ?        Ssl  09:40   0:04 /usr/sbin/rsyslogd -n
root        986  0.0  0.0 396248   508 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        990  0.0  0.0 439788  1172 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        994  0.0  0.1 400740  3096 ?        Ss   09:40   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   71985  0.0  0.2 400460  5576 ?        S    13:11   0:00  \_ php-fpm: pool nigeriadecide_org
named       996  0.0  1.5 1186868 36728 ?       Ssl  09:40   0:08 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
cpanelc+   1013  0.0  0.1  10580  3684 ?        Ss   09:40   0:10 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1145  0.0  0.1 157704  3068 ?        S    09:40   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1175  0.0  1.1 412368 27528 ?        Ss   09:40   0:04 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1176  0.0  0.3 387528  8696 ?        Ss   09:40   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1234  0.0  0.0 167452  1308 ?        Ss   09:40   0:00 dnsadmin - dormant mode
root       1235  0.0  0.9 262228 24008 ?        Ss   09:40   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1237  0.0  0.8 209456 19776 ?        Ss   09:40   0:01 tailwatchd
root       1669  0.0  0.0 299272   524 ?        Ss   09:40   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1701  0.0  0.0 130416  1400 ?        SN   09:40   0:00 cpanellogd - sleeping for logs
mysql      1793  1.3  9.5 1463376 231228 ?      Sl   09:40   2:52 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1959  0.0  0.3 266992  7380 ?        Ss   09:40   0:01 /usr/sbin/httpd -k start
root       1962  0.0  0.0  12872   400 ?        S    09:40   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1963  0.0  0.0  12732   368 ?        S    09:40   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1964  0.0  0.0  12932   416 ?        S    09:40   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1968  0.0  0.0  53340   216 ?        S    09:40   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    31256  0.1  0.8 277760 20672 ?        S    12:24   0:03  \_ /usr/sbin/httpd -k start
nobody    43239  0.1  0.8 277768 20348 ?        S    12:37   0:03  \_ /usr/sbin/httpd -k start
nobody    47448  0.1  0.8 277884 20204 ?        S    12:42   0:02  \_ /usr/sbin/httpd -k start
nobody    47802  0.0  0.8 277640 19756 ?        S    12:42   0:01  \_ /usr/sbin/httpd -k start
nobody    48527  0.0  0.8 277892 19892 ?        S    12:43   0:01  \_ /usr/sbin/httpd -k start
cloudw    69178  0.0  0.7 367184 19028 ?        S    13:08   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    48759  0.0  0.8 277772 20288 ?        S    12:44   0:01  \_ /usr/sbin/httpd -k start
cloudw    70392  0.1  0.7 367184 19148 ?        S    13:09   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    50251  0.0  0.8 277904 19836 ?        S    12:45   0:00  \_ /usr/sbin/httpd -k start
nobody    50669  0.1  0.8 277896 20376 ?        S    12:46   0:01  \_ /usr/sbin/httpd -k start
cloudw    70801  0.1  0.7 367184 19028 ?        S    13:10   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    54729  0.0  0.8 277684 19780 ?        S    12:51   0:00  \_ /usr/sbin/httpd -k start
cloudw    68088  0.0  0.7 367184 19028 ?        S    13:06   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    55196  0.1  0.8 278256 20460 ?        S    12:52   0:01  \_ /usr/sbin/httpd -k start
cloudw    69648  0.1  0.7 367184 19028 ?        S    13:08   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    56174  0.0  0.8 277868 19376 ?        S    12:53   0:00  \_ /usr/sbin/httpd -k start
cloudw    68704  0.0  0.7 367184 19024 ?        S    13:07   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    56510  0.0  0.8 277868 19364 ?        S    12:53   0:00  \_ /usr/sbin/httpd -k start
nobody    60272  0.1  0.8 277868 19608 ?        S    12:58   0:00  \_ /usr/sbin/httpd -k start
nobody    60287  0.1  0.8 277592 19612 ?        S    12:58   0:00  \_ /usr/sbin/httpd -k start
nobody    61118  0.0  0.7 277736 19236 ?        S    12:59   0:00  \_ /usr/sbin/httpd -k start
cloudw    68407  0.0  0.7 367184 19024 ?        S    13:07   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    61503  0.1  0.7 277760 19108 ?        S    12:59   0:00  \_ /usr/sbin/httpd -k start
cloudw    68907  0.0  0.7 367184 19024 ?        S    13:07   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    61529  0.0  0.8 278196 19880 ?        S    12:59   0:00  \_ /usr/sbin/httpd -k start
cloudw    69982  0.1  0.7 367184 19028 ?        S    13:09   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    62813  0.0  0.7 277760 19064 ?        S    13:01   0:00  \_ /usr/sbin/httpd -k start
nobody    64695  0.0  0.7 277508 18612 ?        S    13:02   0:00  \_ /usr/sbin/httpd -k start
cloudw    72151  0.0  0.6 353712 15976 ?        S    13:12   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    67149  0.1  0.7 277760 19116 ?        S    13:05   0:00  \_ /usr/sbin/httpd -k start
cloudw    71225  0.2  0.7 367184 19028 ?        S    13:10   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    67729  0.0  0.7 277892 18460 ?        S    13:06   0:00  \_ /usr/sbin/httpd -k start
nobody    68641  0.0  0.7 277488 18348 ?        S    13:07   0:00  \_ /usr/sbin/httpd -k start
cloudw    70199  0.1  0.7 367184 19032 ?        S    13:09   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    69321  0.1  0.8 277940 19448 ?        S    13:08   0:00  \_ /usr/sbin/httpd -k start
cloudw    71758  0.6  0.7 367184 19032 ?        S    13:11   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    69340  0.0  0.7 277464 18364 ?        S    13:08   0:00  \_ /usr/sbin/httpd -k start
cloudw    69450  0.0  0.7 367184 19024 ?        S    13:08   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    69361  0.0  0.8 278100 19368 ?        S    13:08   0:00  \_ /usr/sbin/httpd -k start
nobody    69362  0.0  0.7 277480 18540 ?        S    13:08   0:00  \_ /usr/sbin/httpd -k start
cloudw    71955  1.0  0.6 366248 16796 ?        R    13:11   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    69438  0.0  0.7 277480 18396 ?        S    13:08   0:00  \_ /usr/sbin/httpd -k start
nobody    69624  0.0  0.7 277884 18320 ?        S    13:08   0:00  \_ /usr/sbin/httpd -k start
nobody    69723  0.1  0.7 277760 18636 ?        S    13:08   0:00  \_ /usr/sbin/httpd -k start
nobody    70158  0.1  0.7 277760 18420 ?        S    13:09   0:00  \_ /usr/sbin/httpd -k start
nobody    70170  0.0  0.7 277760 18392 ?        S    13:09   0:00  \_ /usr/sbin/httpd -k start
cloudw    71030  0.2  0.7 367184 19028 ?        S    13:10   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    70474  0.1  0.7 277912 18452 ?        S    13:09   0:00  \_ /usr/sbin/httpd -k start
nobody    70827  0.0  0.7 277760 18320 ?        S    13:10   0:00  \_ /usr/sbin/httpd -k start
cloudw    71521  0.3  0.7 367184 19032 ?        S    13:11   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    71273  0.1  0.7 277760 18332 ?        S    13:10   0:00  \_ /usr/sbin/httpd -k start
root       2014  0.0  0.4 182880 10688 ?        Ss   09:40   0:11 lfd - sleeping
oysipao+  18294  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+  18303  0.0  0.0   3152    36 ?        S    10:01   0:00  \_ [kworker]
root      56404  0.0  4.8 248036 117144 ?       Ss   10:49   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      64340  0.0  5.2 260572 127560 ?       S    11:00   0:00  \_ spamd child
root      64341  0.0  4.8 248036 116460 ?       S    11:00   0:00  \_ spamd child
## mysql stats
Uptime: 34406  Threads: 3  Questions: 919424  Slow queries: 0  Opens: 5459  Flush tables: 1  Open tables: 2000  Queries per second avg: 26.722
*************************** 1. row ***************************
     Id: 14977
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 14978
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: init
   Info: SELECT * FROM `23` WHERE `phone`='2347030224119' LIMIT 1
*************************** 3. row ***************************
     Id: 14980
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 142.44.228.63 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.101 TIME_WAIT
      1 192.178.4.102 TIME_WAIT
      1 ::1 TIME_WAIT
      1 47.82.11.18 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 159.203.171.249 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 13:12:02 WAT
   Restart Time: Thursday, 20-Nov-2025 03:38:40 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 9 hours 33 minutes 21 seconds
   Server load: 0.24 0.30 0.38
   Total accesses: 66404 - Total Traffic: 1.6 GB - Total Duration: 109007067
   CPU Usage: u19.34 s8.51 cu841.92 cs663.69 - 4.46% CPU load
   1.93 requests/sec - 49.0 kB/second - 25.4 kB/request - 1641.57 ms/request
   28 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

K_KWKW_L_KLW..KKLLLWWKW_LLL.KL._.KWLKW._........................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur    Conn  Child  Slot     Client      Protocol            VHost                                        Request
   0-0  31256 3/618/3142 K 15.42 0     409 2847667  98.0  15.21 90.95 192.178.4.99    http/1.1 team.cloudware.ng:443       GET /?l=1955120830 HTTP/1.1
   1-0  62813 0/82/3137  _ 2.23  0     25  46180580 0.0   2.04  79.98 116.203.134.67  http/1.1 cloudsms.com.ng:443         GET /cron/process_queue4.php HTTP/1.1
   2-0  47802 1/250/3037 K 6.45  0     411 3439439  36.6  5.93  84.04 192.178.4.100   http/1.1 team.cloudware.ng:443       GET /?l=38959015 HTTP/1.1
   3-0  70827 0/17/3547  W 0.38  53    0   2843144  0.0   0.44  83.23 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343432
   4-0  69624 1/21/3256  K 0.50  0     10  2211347  5.6   0.52  81.69 66.249.66.42    http/1.1 oysipa.oyostate.gov.ng:443  GET /admin/sectoruploads/uchibadan.jpg HTTP/1.1
   5-0  60272 0/155/3225 W 3.99  0     0   1974019  0.0   3.83  72.26 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   6-0  70158 0/49/2821  _ 1.21  0     23  2708058  0.0   1.25  70.85 128.140.8.200   http/1.1 cloudsms.com.ng:443         GET /cron/process_queue3.php HTTP/1.1
   7-0  61118 1/128/3078 L 2.98  293   0   2040444  5.3   4.66  80.04 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343430
   8-0  43239 0/548/2849 _ 14.78 0     0   2128434  0.0   14.83 91.99 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   9-0  50251 6/145/3012 K 3.47  2     271 3278282  189.3 2.77  71.48 192.178.4.104   http/1.1 team.cloudware.ng:443       GET /?l=1168336511 HTTP/1.1
   10-0 61503 1/147/2777 L 3.86  253   0   1954157  5.3   3.97  66.77 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343430
   11-0 67149 0/101/2914 W 2.61  73    0   1932957  0.0   2.68  65.49 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343432
   12-0 -     0/0/2736   . 0.00  19    0   2650472  0.0   0.00  66.28 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   13-0 -     0/0/2280   . 0.00  57    0   2429477  0.0   0.00  55.96 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   14-0 47448 1/379/2368 K 9.25  0     0   2477607  5.8   8.91  62.68 66.249.66.197   http/1.1 oysipa.oyostate.gov.ng:443  GET /robots.txt HTTP/1.1
   15-0 67729 1/12/2318  K 0.38  2     358 2270134  35.0  0.22  53.57 192.178.4.103   http/1.1 team.cloudware.ng:443       GET /?l=564565365 HTTP/1.1
   16-0 48527 1/248/2116 L 6.20  233   0   2297359  5.3   5.95  52.07 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343430
   17-0 48759 1/287/2005 L 6.41  133   0   2291002  5.3   8.44  53.04 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343431
   18-0 68641 1/47/2274  L 0.80  153   0   1658558  5.3   0.82  45.62 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343431
   19-0 50669 0/314/2571 W 6.93  113   0   1590943  0.0   6.93  56.01 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343432
   20-0 69321 0/80/2074  W 1.83  33    0   2141102  0.0   1.62  47.08 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343432
   21-0 69723 1/48/1539  K 1.25  0     349 1312991  33.9  1.57  34.51 192.178.4.105   http/1.1 team.cloudware.ng:443       GET /?l=3579066757 HTTP/1.1
   22-0 70170 0/15/1430  W 0.25  93    0   1877606  0.0   0.32  34.56 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343432
   23-0 71273 0/14/774   _ 0.25  1     24  1643113  0.0   0.32  18.56 116.203.129.16  http/1.1 cloudsms.com.ng:443         GET /cron/process_queue5.php HTTP/1.1
   24-0 54729 1/166/923  L 4.39  313   0   1101653  5.3   4.50  23.09 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343430
   25-0 55196 1/271/818  L 5.96  193   0   397038   5.3   6.79  20.80 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343431
   26-0 56174 1/156/170  L 3.87  273   0   725170   5.3   3.89  4.15  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343430
   27-0 -     0/0/571    . 0.00  117   0   1558392  0.0   0.00  15.49 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   28-0 56510 1/141/372  K 3.63  0     396 1475657  36.3  3.49  8.90  192.178.4.99    http/1.1 team.cloudware.ng:443       GET /?l=202115233 HTTP/1.1
   29-0 69340 1/8/688    L 0.62  213   0   342450   5.3   0.03  17.91 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343431
   30-0 -     0/0/233    . 0.00  77    0   741652   0.0   0.00  4.74  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   31-0 70474 0/28/187   _ 0.65  1     24  721870   0.0   0.71  4.06  116.203.129.16  http/1.1 cloudsms.com.ng:443         GET /cron/process_queue1.php HTTP/1.1
   32-0 -     0/0/249    . 0.00  58    0   773594   0.0   0.00  6.15  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   33-0 60287 1/148/154  K 3.88  3     362 724751   35.5  3.67  3.71  192.178.4.101   http/1.1 team.cloudware.ng:443       GET /?l=1904318866 HTTP/1.1
   34-0 64695 5/74/115   W 1.91  0     0   1336007  156.0 1.80  2.75  192.178.4.97    http/1.1 team.cloudware.ng:443       GET /?l=4191078450 HTTP/1.1
   35-0 61529 1/68/72    L 1.44  173   0   667798   5.3   1.47  1.56  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343431
   36-0 69361 2/38/40    K 0.43  2     364 8685     65.1  0.59  0.63  192.178.4.103   http/1.1 team.cloudware.ng:443       GET /?l=2097245875 HTTP/1.1
   37-0 69362 0/29/37    W 1.28  13    0   13647    0.0   0.47  0.66  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343433
   38-0 -     0/0/45     . 0.00  116   0   11125    0.0   0.00  0.71  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   39-0 69438 0/36/38    _ 0.85  0     8   17442    0.0   0.84  0.88  34.203.111.15   http/1.1 nigeriadecide.org:443       GET /polling_unit_category.php/blog/blog/assets/css/polling_uni
   40-0 -     0/0/6      . 0.00  34172 0   3057     0.0   0.00  0.15  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   41-0 -     0/0/3      . 0.00  34168 0   840      0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   42-0 -     0/0/227    . 0.00  33274 0   110452   0.0   0.00  5.70  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   43-0 -     0/0/9      . 0.00  34171 0   4927     0.0   0.00  0.24  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   44-0 -     0/0/154    . 0.00  33650 0   84969    0.0   0.00  4.58  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   45-0 -     0/0/13     . 0.00  34138 0   6975     0.0   0.00  0.32  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1018
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 0...40)
   index usage: 17%, cache usage: 24%
   total entries stored since starting: 40849
   total entries replaced since starting: 0
   total entries expired since starting: 39817
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 24 hit, 63 miss
   total removes since starting: 14 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit