403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.13.18.txt
 ## swap threshold exceeded
## server overview
2025-11-20.13.18 load[0] mem[68/63] mysql[1/9] httpd[26]
              total        used        free      shared  buff/cache   available
Mem:           2363        1559         114          53         689         582
Swap:          1999        1467         532
 13:18:01 up  3:37,  0 users,  load average: 0.12, 0.23, 0.33
## system overview
top - 13:18:01 up  3:37,  0 users,  load average: 0.12, 0.23, 0.33
Tasks: 235 total,   6 running, 228 sleeping,   0 stopped,   1 zombie
%Cpu(s): 56.2 us, 21.9 sy,  0.0 ni, 21.9 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   114476 free,  1599900 used,   705924 buff/cache
KiB Swap:  2047996 total,   545208 free,  1502788 used.   594236 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1793 mysql     20   0 1463376 230228   2808 S  81.2  9.5   2:56.98 /usr/sbin+
 76746 nigeria   20   0  404052  16140  10384 S  18.8  0.7   0:00.05 /opt/cpan+
   358 root      20   0   40244   6688   6452 S   6.2  0.3   0:08.22 /usr/lib/+
 76736 pactpay   20   0  480124  17684  11892 S   6.2  0.7   0:00.02 /opt/cpan+
 76752 cloudw    20   0  353712  15976  10492 S   6.2  0.7   0:00.01 /opt/cpan+
 76753 root      20   0  160220   2064   1580 R   6.2  0.1   0:00.01 top -bcn1
 76759 cloudw    20   0  284992  12040   8140 R   6.2  0.5   0:00.01 /opt/cpan+
     1 root      20   0   44268   3332   1476 S   0.0  0.1   0:19.55 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.74 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.65 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:13.81 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.61 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.49 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:18.94 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.34 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.78 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:02.04 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.78 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   387 root      20   0   45352    252    248 S   0.0  0.0   0:00.38 /usr/lib/+
   410 root      16  -4   55532    504    376 S   0.0  0.0   0:01.40 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0   24712   1180    836 S   0.0  0.0   0:03.15 /usr/lib/+
   471 root      20   0   52852    416    312 S   0.0  0.0   0:00.01 /usr/sbin+
   474 dbus      20   0   58644   1412    680 S   0.0  0.1   0:07.15 /usr/bin/+
   476 rpc       20   0   69256     72     12 S   0.0  0.0   0:00.01 /sbin/rpc+
   486 polkitd   20   0  612240   1088    740 S   0.0  0.0   0:01.91 /usr/lib/+
   487 root      20   0   21540    408    320 S   0.0  0.0   0:00.28 /usr/sbin+
   492 root      20   0  152780    248    204 S   0.0  0.0   0:00.00 /usr/sbin+
   493 root      20   0  224280   5440   1028 S   0.0  0.2   0:00.30 queueproc+
   507 nscd      20   0  928956   1384    712 S   0.0  0.1   0:10.91 /usr/sbin+
   515 root      20   0  195208     68     68 S   0.0  0.0   0:00.00 /usr/sbin+
   516 root      20   0    4388    156    152 S   0.0  0.0   0:00.00 /usr/sbin+
   543 root      20   0   24208    164    140 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0  124480    520    388 S   0.0  0.0   0:00.38 /usr/sbin+
   562 root      20   0  108296    180    176 S   0.0  0.0   0:00.00 /sbin/age+
   563 root      20   0  114704    180    180 S   0.0  0.0   0:00.02 /bin/bash
   613 mailnull  20   0   89116   3808    896 S   0.0  0.2   0:00.36 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   675 root       0 -20       0      0      0 S   0.0  0.0   0:02.56 [loop0]
   735 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   736 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   931 root      20   0  153404    396    316 S   0.0  0.0   0:00.26 pure-ftpd+
   932 root      20   0  572372   1052    480 S   0.0  0.0   0:01.20 /usr/bin/+
   933 systuser  20   0  112268     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   935 systuser  20   0  114016  15516   2752 S   0.0  0.6   0:03.41 /usr/loca+
   936 root      20   0 1277056   6144    164 S   0.0  0.3   0:21.14 /usr/bin/+
   937 root      20   0  445028   1384   1272 S   0.0  0.1   0:00.54 sw-engine+
   938 systuser  20   0   11796     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   942 root      20   0  111304    544    436 S   0.0  0.0   0:01.96 /usr/sbin+
   943 systuser  20   0   11348     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   944 root      20   0 1349832   8612    128 S   0.0  0.4   0:28.14 /usr/bin/+
   945 root      20   0   51508    608    428 S   0.0  0.0   0:00.20 /usr/sbin+
   946 telegraf  20   0 5654304  37344   5908 S   0.0  1.5   0:07.49 /usr/loca+
   947 memcach+  20   0  342400    232    232 S   0.0  0.0   0:00.28 /usr/bin/+
   948 root      20   0 1763312 305960    848 S   0.0 12.6   0:14.95 /usr/loca+
   949 root      20   0  389508    548    456 S   0.0  0.0   0:00.42 php-fpm: +
   950 root      20   0  261160   6976   2044 S   0.0  0.3   0:02.39 cpsrvd (S+
   953 root      20   0  388892    660    456 S   0.0  0.0   0:00.36 php-fpm: +
   958 root      20   0  257360   6412   5608 S   0.0  0.3   0:04.12 /usr/sbin+
   986 root      20   0  396248    508    416 S   0.0  0.0   0:00.38 php-fpm: +
   990 root      20   0  439788   1176   1084 S   0.0  0.0   0:00.49 php-fpm: +
   994 root      20   0  400740   3096    716 S   0.0  0.1   0:01.85 php-fpm: +
   996 named     20   0 1186868  36760   1828 S   0.0  1.5   0:08.67 /usr/sbin+
  1013 cpanelc+  20   0   10580   3684   2420 R   0.0  0.2   0:10.46 /usr/loca+
  1093 dovenull  20   0   47284   2584   1708 S   0.0  0.1   0:00.24 dovecot/p+
  1094 dovenull  20   0   48032   3212   1780 S   0.0  0.1   0:00.23 dovecot/i+
  1095 dovecot   20   0   10320    292    176 S   0.0  0.0   0:00.06 dovecot/a+
  1096 root      20   0   10452    488    308 S   0.0  0.0   0:00.16 dovecot/l+
  1097 dovenull  20   0   47308   2508   1716 S   0.0  0.1   0:00.19 dovecot/p+
  1098 dovenull  20   0   47996   3300   1936 S   0.0  0.1   0:00.23 dovecot/i+
  1104 root      20   0   24528   2580    544 S   0.0  0.1   0:00.11 dovecot/c+
  1110 dovecot   20   0   13568    624    424 S   0.0  0.0   0:00.04 dovecot/s+
  1145 systuser  20   0  157704   3068   1092 S   0.0  0.1   0:00.09 SonarPush+
  1170 dovecot   20   0   41192   1520   1004 S   0.0  0.1   0:00.49 dovecot/a+
  1175 wp-tool+  20   0  412368  27512   1612 S   0.0  1.1   0:04.30 /usr/bin/+
  1176 wp-tool+  20   0  387528   8692   1560 S   0.0  0.4   0:00.20 /usr/bin/+
  1234 root      20   0  167452   1320    776 S   0.0  0.1   0:00.23 dnsadmin +
  1235 root      20   0  262228  22732   4872 S   0.0  0.9   0:02.24 cpdavd - +
  1237 root      20   0  209456  19780   2300 S   0.0  0.8   0:01.79 tailwatchd
  1669 root      20   0  299272    604    440 S   0.0  0.0   0:00.34 php-fpm: +
  1701 root      38  18  130416   1392    720 S   0.0  0.1   0:00.03 cpanellog+
  1959 root      20   0  266992   7380    740 S   0.0  0.3   0:01.14 /usr/sbin+
  1962 root      20   0   12896    400    296 S   0.0  0.0   0:01.55 /usr/loca+
  1963 root      20   0   12732    368    292 S   0.0  0.0   0:01.33 /usr/loca+
  1964 root      20   0   12972    416    296 S   0.0  0.0   0:01.45 /usr/loca+
  1968 root      20   0   53340    216    216 S   0.0  0.0   0:00.05 /usr/loca+
  2014 root      20   0  182880  10756   1168 S   0.0  0.4   0:12.17 lfd - sle+
 18294 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 18303 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.21 [kworker]
 31542 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 35992 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 43239 nobody    20   0  277768  20512   5052 S   0.0  0.8   0:03.66 /usr/sbin+
 45300 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 47448 nobody    20   0  277884  20444   4916 S   0.0  0.8   0:02.59 /usr/sbin+
 47802 nobody    20   0  277640  19776   4768 S   0.0  0.8   0:01.43 /usr/sbin+
 48527 nobody    20   0  277892  20256   4968 S   0.0  0.8   0:01.80 /usr/sbin+
 48759 nobody    20   0  277772  20324   4916 S   0.0  0.8   0:01.53 /usr/sbin+
 50251 nobody    20   0  277904  19884   4644 S   0.0  0.8   0:00.93 /usr/sbin+
 50669 nobody    20   0  277896  20504   4940 S   0.0  0.8   0:01.81 /usr/sbin+
 54132 worencom  20   0   38480   2764   1708 S   0.0  0.1   0:00.00 dovecot/i+
 55196 nobody    20   0  278256  20468   4896 S   0.0  0.8   0:01.48 /usr/sbin+
 56404 root      20   0  248036 117144   1060 S   0.0  4.8   0:03.79 /usr/loca+
 60287 nobody    20   0  277592  19632   4656 S   0.0  0.8   0:00.95 /usr/sbin+
 61118 nobody    20   0  277736  19776   4764 S   0.0  0.8   0:01.20 /usr/sbin+
 61503 nobody    20   0  277760  19560   4648 S   0.0  0.8   0:01.36 /usr/sbin+
 61529 nobody    20   0  278196  19980   4428 S   0.0  0.8   0:00.36 /usr/sbin+
 62813 nobody    20   0  277760  19620   4632 S   0.0  0.8   0:00.92 /usr/sbin+
 64340 root      20   0  260788 127760   3364 S   0.0  5.3   0:00.93 spamd chi+
 64341 root      20   0  248036 116460    416 S   0.0  4.8   0:00.00 spamd chi+
 65204 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65950 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 65953 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66735 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 67149 nobody    20   0  277760  19292   4532 S   0.0  0.8   0:00.84 /usr/sbin+
 67729 nobody    20   0  277892  18608   4016 S   0.0  0.8   0:00.11 /usr/sbin+
 68641 nobody    20   0  277496  18908   4368 S   0.0  0.8   0:00.43 /usr/sbin+
 69321 nobody    20   0  277940  19560   4480 S   0.0  0.8   0:00.45 /usr/sbin+
 69362 nobody    20   0  277488  18776   4080 S   0.0  0.8   0:00.23 /usr/sbin+
 69624 nobody    20   0  277884  18644   4096 S   0.0  0.8   0:00.14 /usr/sbin+
 69723 nobody    20   0  277760  19012   4428 S   0.0  0.8   0:00.57 /usr/sbin+
 69899 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 70170 nobody    20   0  277760  18800   4192 S   0.0  0.8   0:00.33 /usr/sbin+
 70474 nobody    20   0  277912  19084   4348 S   0.0  0.8   0:00.52 /usr/sbin+
 70827 nobody    20   0  277760  18852   4212 S   0.0  0.8   0:00.25 /usr/sbin+
 72501 nobody    20   0  277892  19948   4656 S   0.0  0.8   0:00.55 /usr/sbin+
 72818 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 72998 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 73111 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 73128 nobody    20   0  277760  17836   3408 S   0.0  0.7   0:00.16 /usr/sbin+
 73148 nobody    20   0  277896  18620   3992 S   0.0  0.8   0:00.17 /usr/sbin+
 73194 nobody    20   0  277760  19496   4340 S   0.0  0.8   0:00.48 /usr/sbin+
 73225 nobody    20   0  277348  17828   3568 S   0.0  0.7   0:00.00 /usr/sbin+
 73233 nobody    20   0  277892  18832   4168 S   0.0  0.8   0:00.25 /usr/sbin+
 73386 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 73601 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 73908 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 74131 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 74321 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 74709 cloudw    20   0  367184  19148  12236 S   0.0  0.8   0:00.21 /opt/cpan+
 74930 nobody    20   0  277496  18616   4244 S   0.0  0.8   0:00.23 /usr/sbin+
 74950 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 75039 nobody    20   0  277760  18320   3864 S   0.0  0.8   0:00.16 /usr/sbin+
 75040 nobody    20   0  277760  17860   3408 S   0.0  0.7   0:00.09 /usr/sbin+
 75169 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 75350 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 75470 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 75667 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 75825 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 76101 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 76136 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 76261 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 76393 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 76416 wp-tool+  20   0  445028    324    196 S   0.0  0.0   0:00.00 sw-engine+
 76556 cloudw    20   0  366248  16796  10940 S   0.0  0.7   0:00.13 /opt/cpan+
 76578 nigeria   20   0  400460   5572   2328 S   0.0  0.2   0:00.00 php-fpm: +
 76587 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 76600 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 76615 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 76624 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 76662 root      20   0  111304   4264   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 76665 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 76666 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 76671 nobody    20   0  277188  16824   3060 S   0.0  0.7   0:00.00 /usr/sbin+
 76677 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 76678 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76679 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76680 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76681 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76682 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76683 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76684 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76685 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76686 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76687 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76689 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76691 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 76693 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 76694 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 76695 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 76710 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 76711 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 76712 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 76714 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 76715 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 76716 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 76717 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 76718 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 76719 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 76720 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 76721 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 76722 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 76731 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 76742 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 76744 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 76760 cloudsms  20   0       0      0      0 R   0.0  0.0   0:00.00 [jailshel+
 76764 root      20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
 76765 nobody    20   0  277736  15012      0 R   0.0  0.6   0:00.00 /usr/sbin+
100665 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:40   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:40   0:13  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:40   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:40   0:18  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        R    09:40   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   09:40   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kvm-irqfd-clean]
root        675  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [loop0]
root        735  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/loop0-8]
root        736  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root     100665  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/u200:2]
root      31542  0.0  0.0      0     0 ?        R    12:25   0:00  \_ [kworker/1:1]
root      35992  0.0  0.0      0     0 ?        S    12:30   0:00  \_ [kworker/0:2]
root      45300  0.0  0.0      0     0 ?        S    12:40   0:00  \_ [kworker/1:2]
root      65204  0.0  0.0      0     0 ?        S    13:03   0:00  \_ [kworker/u200:0]
root      65950  0.0  0.0      0     0 ?        S    13:04   0:00  \_ [kworker/1:0]
root      65953  0.0  0.0      0     0 ?        S    13:04   0:00  \_ [kworker/1:4]
root      66735  0.0  0.0      0     0 ?        S    13:05   0:00  \_ [kworker/0:0]
root      69899  0.0  0.0      0     0 ?        S    13:09   0:00  \_ [kworker/0:3]
root      72998  0.0  0.0      0     0 ?        S    13:13   0:00  \_ [kworker/1:3]
root      75350  0.0  0.0      0     0 ?        S    13:16   0:00  \_ [kworker/0:1]
root          1  0.1  0.1  44268  3332 ?        Ss   09:40   0:19 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  40244  6688 ?        Ss   09:40   0:08 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   252 ?        Ss   09:40   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   504 ?        S<sl 09:40   0:01 /sbin/auditd
root        470  0.0  0.0  24712  1180 ?        Ss   09:40   0:03 /usr/lib/systemd/systemd-logind
root        471  0.0  0.0  52852   416 ?        Ss   09:40   0:00 /usr/sbin/smartd -n -q never
dbus        474  0.0  0.0  58644  1412 ?        Rs   09:40   0:07 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         476  0.0  0.0  69256    72 ?        Ss   09:40   0:00 /sbin/rpcbind -w
polkitd     486  0.0  0.0 612240  1088 ?        Ssl  09:40   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        487  0.0  0.0  21540   408 ?        Ss   09:40   0:00 /usr/sbin/irqbalance --foreground
root        492  0.0  0.0 152780   248 ?        Ss   09:40   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        493  0.0  0.2 224280  5440 ?        Ss   09:40   0:00 queueprocd - waiting up to 60s to process a task
nscd        507  0.0  0.0 928956  1384 ?        Ssl  09:40   0:10 /usr/sbin/nscd
root        515  0.0  0.0 195208    68 ?        Ssl  09:40   0:00 /usr/sbin/gssproxy -D
root        516  0.0  0.0   4388   156 ?        Ss   09:40   0:00 /usr/sbin/acpid
root        543  0.0  0.0  24208   164 ?        Ss   09:40   0:00 /usr/sbin/atd -f
root        545  0.0  0.0 124480   520 ?        Ss   09:40   0:00 /usr/sbin/crond -n
root      76677  0.0  0.0 183048  2156 ?        S    13:18   0:00  \_ /usr/sbin/CROND -n
root      76693  0.0  0.0 113284  1212 ?        Ss   13:18   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      76694  0.0  0.0 108052   356 ?        S    13:18   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      76695  0.0  0.0 113288  1516 ?        S    13:18   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      76766  0.0  0.0 153840  2092 ?        R    13:18   0:00  |               \_ ps auxf
root      76678  0.0  0.0 183048  2152 ?        S    13:18   0:00  \_ /usr/sbin/CROND -n
root      76722  0.0  0.0  20164   808 ?        Ss   13:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      76679  0.0  0.0 183048  2152 ?        S    13:18   0:00  \_ /usr/sbin/CROND -n
root      76714  0.0  0.0  20164   808 ?        Ss   13:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      76680  0.0  0.0 183044  2216 ?        S    13:18   0:00  \_ /usr/sbin/CROND -n
root      76681  0.0  0.0 183048  2152 ?        S    13:18   0:00  \_ /usr/sbin/CROND -n
root      76719  0.0  0.0  20164   804 ?        Ss   13:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      76682  0.0  0.0 183048  2152 ?        S    13:18   0:00  \_ /usr/sbin/CROND -n
root      76717  0.0  0.0  20164   808 ?        Ss   13:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      76683  0.0  0.0 183048  2148 ?        S    13:18   0:00  \_ /usr/sbin/CROND -n
root      76718  0.0  0.0  20164   808 ?        Ss   13:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      76684  0.0  0.0 183048  2148 ?        S    13:18   0:00  \_ /usr/sbin/CROND -n
root      76716  0.0  0.0  20164   808 ?        Ss   13:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      76685  0.0  0.0 183048  2148 ?        S    13:18   0:00  \_ /usr/sbin/CROND -n
root      76715  0.0  0.0  20164   808 ?        Ss   13:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      76686  0.0  0.0 183048  2144 ?        S    13:18   0:00  \_ /usr/sbin/CROND -n
root      76712  0.0  0.0  20164   808 ?        Ss   13:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      76687  0.0  0.0 183048  2144 ?        S    13:18   0:00  \_ /usr/sbin/CROND -n
root      76721  0.0  0.0  20164   988 ?        Ss   13:18   0:00  |   \_ jailshell (cloudsms) [76764] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  76764  0.0  0.0  20164   260 ?        S    13:18   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  76768  0.0  0.0 113284  1212 ?        S    13:18   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      76689  0.0  0.0 183048  2144 ?        S    13:18   0:00  \_ /usr/sbin/CROND -n
root      76710  0.0  0.0  20164   968 ?        Ss   13:18   0:00  |   \_ jailshell (pactpay) [76731] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   76731  0.0  0.0  20164   256 ?        S    13:18   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   76736  0.0  0.7 480124 17684 ?        S    13:18   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      76691  0.0  0.0 183048  2140 ?        S    13:18   0:00  \_ /usr/sbin/CROND -n
root      76720  0.0  0.0  20164   972 ?        Ss   13:18   0:00      \_ jailshell (nigeria) [76742] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   76742  0.0  0.0  20164   264 ?        S    13:18   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   76746  0.0  0.6 404052 16140 ?        R    13:18   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        562  0.0  0.0 108296   180 tty1     Ss+  09:40   0:00 /sbin/agetty --noclear tty1 linux
root        563  0.0  0.0 114704   180 ttyS0    Ss+  09:40   0:00 /bin/bash
mailnull    613  0.0  0.1  89116  3808 ?        Ss   09:40   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        931  0.0  0.0 153404   396 ?        Ss   09:40   0:00 pure-ftpd (SERVER)
root        932  0.0  0.0 572372  1052 ?        Ssl  09:40   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    933  0.0  0.0 112268    56 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.6 114016 15516 ?        Ssl  09:40   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        936  0.1  0.2 1277056 6144 ?        Ssl  09:40   0:21 /usr/bin/checkstatus
root        937  0.0  0.0 445028  1384 ?        Ss   09:40   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  76416  0.0  0.0 445028   324 ?        S    13:17   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    938  0.0  0.0  11796    32 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    939  0.0  0.0 111608    60 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        942  0.0  0.0 111304   544 ?        Ss   09:40   0:01 /usr/sbin/sshd -D
root      76136  0.0  0.1 111304  4272 ?        Ss   13:17   0:00  \_ sshd: [accepted]
root      76587  0.0  0.1 111304  4268 ?        Ss   13:17   0:00  \_ sshd: [accepted]
root      76600  0.0  0.1 111304  4272 ?        Ss   13:17   0:00  \_ sshd: [accepted]
sshd      76615  0.0  0.1 115644  2632 ?        S    13:17   0:00  |   \_ sshd: [net]
root      76662  0.0  0.1 111304  4264 ?        Ss   13:17   0:00  \_ sshd: [accepted]
sshd      76744  0.0  0.1 115644  2624 ?        S    13:18   0:00  |   \_ sshd: [net]
root      76665  0.0  0.1 111304  4268 ?        Ss   13:17   0:00  \_ sshd: [accepted]
sshd      76666  0.0  0.1 115644  2628 ?        S    13:17   0:00      \_ sshd: [net]
systuser    943  0.0  0.0  11348    24 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        944  0.2  0.3 1349832 8612 ?        Ssl  09:40   0:28 /usr/bin/cspdaemon
root        945  0.0  0.0  51508   608 ?        Ss   09:40   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1093  0.0  0.1  47284  2584 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1094  0.0  0.1  48032  3212 ?        S    09:40   0:00  \_ dovecot/imap-login
dovecot    1095  0.0  0.0  10320   292 ?        S    09:40   0:00  \_ dovecot/anvil
root       1096  0.0  0.0  10452   488 ?        S    09:40   0:00  \_ dovecot/log
dovenull   1097  0.0  0.1  47308  2508 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47996  3300 ?        S    09:40   0:00  \_ dovecot/imap-login
root       1104  0.0  0.1  24528  2580 ?        S    09:40   0:00  \_ dovecot/config
dovecot    1110  0.0  0.0  13568   624 ?        S    09:40   0:00  \_ dovecot/stats
dovecot    1170  0.0  0.0  41192  1520 ?        S    09:40   0:00  \_ dovecot/auth
worencom  54132  0.0  0.1  38480  2764 ?        S    12:50   0:00  \_ dovecot/imap
root      76261  0.0  0.1  60820  4508 ?        S    13:17   0:00  \_ dovecot/lmtp
telegraf    946  0.0  1.5 5654304 37344 ?       SLsl 09:40   0:07 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    947  0.0  0.0 342400   232 ?        Ssl  09:40   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        948  0.1 12.6 1763312 305960 ?      Ssl  09:40   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        949  0.0  0.0 389508   548 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        950  0.0  0.2 261160  6976 ?        Ss   09:40   0:02 cpsrvd (SSL) - waiting for connections                   
root      76624  0.0  0.0      0     0 ?        Z    13:17   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.0 388892   660 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        958  0.0  0.2 257360  6412 ?        Ssl  09:40   0:04 /usr/sbin/rsyslogd -n
root        986  0.0  0.0 396248   508 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        990  0.0  0.0 439788  1176 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        994  0.0  0.1 400740  3096 ?        Ss   09:40   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   76578  0.0  0.2 400460  5572 ?        S    13:17   0:00  \_ php-fpm: pool nigeriadecide_org
named       996  0.0  1.5 1186868 36760 ?       Ssl  09:40   0:08 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
cpanelc+   1013  0.0  0.1  10580  3684 ?        Ss   09:40   0:10 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1145  0.0  0.1 157704  3068 ?        S    09:40   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1175  0.0  1.1 412368 27512 ?        Ss   09:40   0:04 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1176  0.0  0.3 387528  8692 ?        Ss   09:40   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1234  0.0  0.0 167452  1320 ?        Rs   09:40   0:00 dnsadmin - dormant mode
root       1235  0.0  0.9 262228 22732 ?        Ss   09:40   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1237  0.0  0.8 209456 19780 ?        Ss   09:40   0:01 tailwatchd
root       1669  0.0  0.0 299272   604 ?        Ss   09:40   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1701  0.0  0.0 130416  1392 ?        SN   09:40   0:00 cpanellogd - sleeping for logs
mysql      1793  1.3  9.5 1463376 230228 ?      Sl   09:40   2:57 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1959  0.0  0.3 266992  7380 ?        Ss   09:40   0:01 /usr/sbin/httpd -k start
root       1962  0.0  0.0  12896   400 ?        S    09:40   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1963  0.0  0.0  12732   368 ?        S    09:40   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1964  0.0  0.0  12972   416 ?        S    09:40   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1968  0.0  0.0  53340   216 ?        S    09:40   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    43239  0.1  0.8 277768 20512 ?        S    12:37   0:03  \_ /usr/sbin/httpd -k start
nobody    47448  0.1  0.8 277884 20444 ?        S    12:42   0:02  \_ /usr/sbin/httpd -k start
nobody    47802  0.0  0.8 277640 19776 ?        S    12:42   0:01  \_ /usr/sbin/httpd -k start
cloudw    72818  0.0  0.7 367184 19032 ?        S    13:12   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    48527  0.0  0.8 277892 20256 ?        S    12:43   0:01  \_ /usr/sbin/httpd -k start
nobody    48759  0.0  0.8 277772 20324 ?        S    12:44   0:01  \_ /usr/sbin/httpd -k start
cloudw    75169  0.1  0.7 367184 19032 ?        S    13:15   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    50251  0.0  0.8 277904 19884 ?        S    12:45   0:00  \_ /usr/sbin/httpd -k start
cloudw    73601  0.0  0.7 367184 19028 ?        S    13:13   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    50669  0.0  0.8 277896 20504 ?        S    12:46   0:01  \_ /usr/sbin/httpd -k start
nobody    55196  0.0  0.8 278256 20468 ?        S    12:52   0:01  \_ /usr/sbin/httpd -k start
cloudw    74131  0.0  0.7 367184 19032 ?        S    13:14   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    60287  0.0  0.8 277592 19632 ?        S    12:58   0:00  \_ /usr/sbin/httpd -k start
cloudw    76752  0.0  0.6 353712 15976 ?        R    13:18   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    61118  0.1  0.8 277736 19776 ?        S    12:59   0:01  \_ /usr/sbin/httpd -k start
root      76765  0.0  0.0   6516   416 ?        S    13:18   0:00  |   \_ /usr/sbin/suexec 1029 1031 ea-php72
nobody    61503  0.1  0.8 277760 19560 ?        S    12:59   0:01  \_ /usr/sbin/httpd -k start
cloudw    76556  1.0  0.6 366248 16796 ?        S    13:17   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    61529  0.0  0.8 278196 19980 ?        S    12:59   0:00  \_ /usr/sbin/httpd -k start
cloudw    74321  0.1  0.7 367184 19028 ?        S    13:14   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    62813  0.0  0.8 277760 19620 ?        S    13:01   0:00  \_ /usr/sbin/httpd -k start
cloudw    75470  0.1  0.7 367184 19028 ?        S    13:16   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    67149  0.1  0.7 277760 19292 ?        S    13:05   0:00  \_ /usr/sbin/httpd -k start
nobody    67729  0.0  0.7 277892 18608 ?        S    13:06   0:00  \_ /usr/sbin/httpd -k start
cloudw    76759  0.0  0.6 288176 15952 ?        Rl   13:18   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    68641  0.0  0.7 277496 18908 ?        S    13:07   0:00  \_ /usr/sbin/httpd -k start
cloudw    76101  0.3  0.7 367184 19032 ?        S    13:17   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    69321  0.0  0.8 277940 19560 ?        S    13:08   0:00  \_ /usr/sbin/httpd -k start
cloudw    76393  0.6  0.7 367184 19032 ?        S    13:17   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    69362  0.0  0.7 277488 18776 ?        S    13:08   0:00  \_ /usr/sbin/httpd -k start
nobody    69624  0.0  0.7 277884 18644 ?        S    13:08   0:00  \_ /usr/sbin/httpd -k start
cloudw    73111  0.0  0.7 367184 19032 ?        S    13:13   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    69723  0.1  0.7 277760 19012 ?        S    13:08   0:00  \_ /usr/sbin/httpd -k start
cloudw    74709  0.1  0.7 367184 19148 ?        S    13:15   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    70170  0.0  0.7 277760 18800 ?        S    13:09   0:00  \_ /usr/sbin/httpd -k start
nobody    70474  0.1  0.7 277912 19084 ?        S    13:09   0:00  \_ /usr/sbin/httpd -k start
nobody    70827  0.0  0.7 277760 18852 ?        S    13:10   0:00  \_ /usr/sbin/httpd -k start
nobody    72501  0.1  0.8 277892 19948 ?        S    13:12   0:00  \_ /usr/sbin/httpd -k start
nobody    73128  0.0  0.7 277760 17836 ?        S    13:13   0:00  \_ /usr/sbin/httpd -k start
cloudw    73908  0.0  0.7 367184 19032 ?        S    13:14   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    73148  0.0  0.7 277896 18620 ?        S    13:13   0:00  \_ /usr/sbin/httpd -k start
cloudw    75825  0.2  0.7 367184 19028 ?        S    13:16   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    73194  0.1  0.8 277760 19496 ?        S    13:13   0:00  \_ /usr/sbin/httpd -k start
nobody    73225  0.0  0.7 277348 17828 ?        S    13:13   0:00  \_ /usr/sbin/httpd -k start
cloudw    73386  0.0  0.7 367184 19032 ?        S    13:13   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    73233  0.0  0.7 277892 18832 ?        S    13:13   0:00  \_ /usr/sbin/httpd -k start
cloudw    74950  0.1  0.7 367184 19028 ?        S    13:15   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    74930  0.1  0.7 277496 18616 ?        S    13:15   0:00  \_ /usr/sbin/httpd -k start
nobody    75039  0.1  0.7 277760 18320 ?        S    13:15   0:00  \_ /usr/sbin/httpd -k start
nobody    75040  0.0  0.7 277760 17860 ?        S    13:15   0:00  \_ /usr/sbin/httpd -k start
cloudw    75667  0.2  0.7 367184 19032 ?        S    13:16   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    76671  0.0  0.6 277188 16824 ?        S    13:18   0:00  \_ /usr/sbin/httpd -k start
root       2014  0.0  0.4 182880 10756 ?        Ss   09:40   0:12 lfd - sleeping
oysipao+  18294  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+  18303  0.0  0.0   3152    36 ?        S    10:01   0:00  \_ [kworker]
root      56404  0.0  4.8 248036 117144 ?       Ss   10:49   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      64340  0.0  5.2 260788 127760 ?       S    11:00   0:00  \_ spamd child
root      64341  0.0  4.8 248036 116460 ?       S    11:00   0:00  \_ spamd child
## mysql stats
Uptime: 34765  Threads: 4  Questions: 950135  Slow queries: 0  Opens: 5534  Flush tables: 1  Open tables: 2000  Queries per second avg: 27.330
*************************** 1. row ***************************
     Id: 15439
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-20' LIMIT 1
*************************** 2. row ***************************
     Id: 15440
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `osun_official_polling_unit` WHERE `pu_code`='29/18/06/007timeofarrivalofinec=7:15allt
*************************** 3. row ***************************
     Id: 15447
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.150.65 TIME_WAIT
      1 142.44.225.49 TIME_WAIT
      1 ::1 TIME_WAIT
      1 35.193.134.7 TIME_WAIT
      1 51.222.168.126 TIME_WAIT
      1 74.7.241.147 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 167.99.15.20 TIME_WAIT
     48 20.243.53.228 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 13:18:01 WAT
   Restart Time: Thursday, 20-Nov-2025 03:38:40 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 9 hours 39 minutes 21 seconds
   Server load: 0.12 0.23 0.33
   Total accesses: 68217 - Total Traffic: 1.7 GB - Total Duration: 121414867
   CPU Usage: u18.71 s8.39 cu869.05 cs683.91 - 4.55% CPU load
   1.96 requests/sec - 50.0 kB/second - 25.5 kB/request - 1779.83 ms/request
   27 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

_WLKL__WKLW_L._W_LWRWLK..LRWW.KWLW.L.KL.........................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur    Conn  Child  Slot     Client      Protocol            VHost                                        Request
   0-0  74930 0/59/3224  _ 0.88  0     0   2883576  0.0   0.90  92.30 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   1-0  62813 0/149/3204 W 4.03  112   0   46215964 0.0   3.87  81.81 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343435
   2-0  47802 1/267/3054 L 6.85  312   0   3446503  5.3   6.29  84.40 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343433
   3-0  70827 1/47/3577  K 1.19  0     26  3494341  5.3   1.07  83.86 128.140.8.200   http/1.1 cloudsms.com.ng:443         GET /cron/process_queue3.php HTTP/1.1
   4-0  69624 1/27/3262  L 0.55  292   0   2212751  5.3   0.59  81.76 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343433
   5-0  76671 0/1/3300   _ 0.00  0     23  2003622  0.0   0.01  73.79 116.203.129.16  http/1.1 cloudsms.com.ng:443         GET /cron/process_queue1.php HTTP/1.1
   6-0  72501 0/96/2919  _ 2.25  0     22  2755437  0.0   2.60  73.45 116.203.134.67  http/1.1 cloudsms.com.ng:443         GET /cron/process_queue4.php HTTP/1.1
   7-0  61118 1/213/3163 W 4.94  0     0   2729263  33.8  6.48  81.85 192.178.4.100   http/1.1 team.cloudware.ng:443       GET /?l=2506595135 HTTP/1.1
   8-0  43239 2/633/2934 K 16.77 2     342 2170726  64.0  16.96 94.12 192.178.4.105   http/1.1 team.cloudware.ng:443       GET /?l=2382991540 HTTP/1.1
   9-0  50251 1/186/3053 L 4.54  252   0   3300282  5.3   3.82  72.53 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343434
   10-0 61503 0/231/2861 W 5.83  12    0   2636557  0.0   5.97  68.77 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343436
   11-0 67149 0/139/2952 _ 3.84  0     309 2594124  0.0   3.71  66.52 192.178.4.96    http/1.1 team.cloudware.ng:443       GET /?l=573963907 HTTP/1.1
   12-0 73128 1/24/2760  L 0.69  232   0   2665033  5.3   0.70  66.98 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343434
   13-0 -     0/0/2338   . 0.00  80    0   2458769  0.0   0.00  57.33 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   14-0 47448 0/474/2463 _ 11.63 0     1   2519618  0.0   11.12 64.89 20.243.53.228   http/1.1 trainings.cloudware.ng:80   GET /mah.php HTTP/1.1
   15-0 67729 3/24/2330  W 0.78  0     0   2913671  94.1  0.39  53.74 192.178.4.97    http/1.1 team.cloudware.ng:443       GET /?l=2646039272 HTTP/1.1
   16-0 48527 0/324/2192 _ 8.23  0     342 2975496  0.0   7.99  54.11 192.178.4.97    http/1.1 team.cloudware.ng:443       GET /?l=3838687333 HTTP/1.1
   17-0 48759 1/296/2014 L 6.85  132   0   2934641  5.3   8.62  53.22 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343435
   18-0 68641 0/94/2321  W 1.83  52    0   2313848  0.0   2.05  46.86 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343436
   19-0 50669 0/354/2611 R 7.88  0     24  2242867  0.0   8.20  57.29 80.233.72.249   http/1.1 nigeriadecide.org:443
   20-0 69321 0/93/2087  W 2.31  32    0   2786163  0.0   1.87  47.33 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343436
   21-0 69723 1/95/1586  L 2.54  172   0   1338957  5.3   2.88  35.82 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343435
   22-0 70170 3/60/1475  K 1.52  4     404 2540206  96.5  1.42  35.66 192.178.4.98    http/1.1 team.cloudware.ng:443       GET /?l=3750345149 HTTP/1.1
   23-0 -     0/0/823    . 0.00  79    0   1670182  0.0   0.00  19.85 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   24-0 -     0/0/954    . 0.00  140   0   1748298  0.0   0.00  23.44 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   25-0 55196 1/275/822  L 6.28  212   0   1039296  5.3   6.89  20.90 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343434
   26-0 75039 0/32/221   R 0.64  8     1   1387705  0.0   0.69  5.30  114.10.134.223  http/1.1
   27-0 73148 0/29/600   W 0.70  72    0   1585043  0.0   1.19  16.68 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343436
   28-0 75040 0/15/425   W 0.41  92    0   1504829  0.0   0.43  10.32 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343435
   29-0 -     0/0/697    . 0.00  220   0   987614   0.0   0.00  18.16 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   30-0 73194 13/81/314  K 2.23  2     289 786508   400.7 2.06  6.80  192.178.4.99    http/1.1 team.cloudware.ng:443       GET /?l=2520151079 HTTP/1.1
   31-0 70474 0/92/251   W 2.12  0     0   750013   0.0   9.09  12.44 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   32-0 73225 1/3/252    L 0.00  272   0   773609   5.3   0.02  6.17  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343434
   33-0 60287 6/161/167  W 4.45  0     0   1372169  190.9 4.03  4.06  192.178.4.104   http/1.1 team.cloudware.ng:443       GET /?l=2460087013 HTTP/1.1
   34-0 -     0/0/190    . 0.00  134   0   1384292  0.0   0.00  4.57  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   35-0 61529 1/71/75    L 1.72  192   0   1308844  5.3   1.51  1.61  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343434
   36-0 -     0/0/88     . 0.00  177   0   29587    0.0   0.00  1.86  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   37-0 69362 8/45/53    K 1.83  3     348 662303   246.1 0.84  1.03  192.178.4.101   http/1.1 team.cloudware.ng:443       GET /?l=1694054094 HTTP/1.1
   38-0 73233 1/42/87    L 1.26  152   0   30481    5.3   1.05  1.76  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343435
   39-0 -     0/0/84     . 0.00  176   0   37708    0.0   0.00  1.89  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   40-0 -     0/0/28     . 0.00  236   0   15783    0.0   0.00  0.75  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   41-0 -     0/0/3      . 0.00  34528 0   840      0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   42-0 -     0/0/227    . 0.00  33634 0   110452   0.0   0.00  5.70  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   43-0 -     0/0/9      . 0.00  34531 0   4927     0.0   0.00  0.24  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   44-0 -     0/0/154    . 0.00  34010 0   84969    0.0   0.00  4.58  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   45-0 -     0/0/13     . 0.00  34498 0   6975     0.0   0.00  0.32  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1003
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 0...46)
   index usage: 17%, cache usage: 23%
   total entries stored since starting: 42052
   total entries replaced since starting: 0
   total entries expired since starting: 41035
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 24 hit, 73 miss
   total removes since starting: 18 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit