403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.13.30.txt
 ## swap threshold exceeded
## server overview
2025-11-20.13.30 load[0] mem[67/65] mysql[3/9] httpd[27]
              total        used        free      shared  buff/cache   available
Mem:           2363        1524          78          61         760         611
Swap:          1999        1477         522
 13:30:01 up  3:49,  0 users,  load average: 0.29, 0.42, 0.41
## system overview
top - 13:30:01 up  3:49,  0 users,  load average: 0.29, 0.42, 0.41
Tasks: 232 total,   3 running, 227 sleeping,   0 stopped,   2 zombie
%Cpu(s): 69.7 us, 24.2 sy,  0.0 ni,  3.0 id,  3.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    82648 free,  1557524 used,   780128 buff/cache
KiB Swap:  2047996 total,   534780 free,  1513216 used.   629012 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1793 mysql     20   0 1463376 231392   3260 S 106.2  9.6   3:06.24 /usr/sbin+
 86636 nigeria   20   0  404052  16140  10384 R  18.8  0.7   0:00.05 /opt/cpan+
   474 dbus      20   0   58644   1412    680 S   6.2  0.1   0:07.54 /usr/bin/+
 86655 root      20   0  160224   2384   1636 S   6.2  0.1   0:00.01 top -n 2 +
 86664 root      20   0  160220   2060   1580 R   6.2  0.1   0:00.01 top -bcn1
 86699 cloudsms  20   0       0      0      0 Z   6.2  0.0   0:00.01 [php-cgi]+
     1 root      20   0   44268   3332   1476 S   0.0  0.1   0:20.50 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.78 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.69 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:14.86 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.64 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.64 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:19.30 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.35 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.83 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:02.07 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.82 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   1412   1176 S   0.0  0.1   0:08.55 /usr/lib/+
   387 root      20   0   45352    252    248 S   0.0  0.0   0:00.38 /usr/lib/+
   410 root      16  -4   55532    504    376 S   0.0  0.0   0:01.45 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0   24712   1180    836 S   0.0  0.0   0:03.31 /usr/lib/+
   471 root      20   0   52852    416    312 S   0.0  0.0   0:00.01 /usr/sbin+
   476 rpc       20   0   69256     72     12 S   0.0  0.0   0:00.01 /sbin/rpc+
   486 polkitd   20   0  612240   1088    740 S   0.0  0.0   0:02.01 /usr/lib/+
   487 root      20   0   21540    408    320 S   0.0  0.0   0:00.30 /usr/sbin+
   492 root      20   0  152780    248    204 S   0.0  0.0   0:00.01 /usr/sbin+
   493 root      20   0  224280   5440   1028 S   0.0  0.2   0:00.30 queueproc+
   507 nscd      20   0  928956   1380    708 S   0.0  0.1   0:11.46 /usr/sbin+
   515 root      20   0  195208     68     68 S   0.0  0.0   0:00.00 /usr/sbin+
   516 root      20   0    4388    156    152 S   0.0  0.0   0:00.00 /usr/sbin+
   543 root      20   0   24208    164    140 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0  124480    520    388 S   0.0  0.0   0:00.41 /usr/sbin+
   562 root      20   0  108296    180    176 S   0.0  0.0   0:00.00 /sbin/age+
   563 root      20   0  114704    180    180 S   0.0  0.0   0:00.02 /bin/bash
   613 mailnull  20   0   89116   3912    980 S   0.0  0.2   0:00.37 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   675 root       0 -20       0      0      0 S   0.0  0.0   0:02.59 [loop0]
   735 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   736 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   931 root      20   0  153404    396    316 S   0.0  0.0   0:00.28 pure-ftpd+
   932 root      20   0  572372   1052    480 S   0.0  0.0   0:01.26 /usr/bin/+
   933 systuser  20   0  112268     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   935 systuser  20   0  114016  15276   2520 S   0.0  0.6   0:03.58 /usr/loca+
   936 root      20   0 1277056   6144    164 S   0.0  0.3   0:21.14 /usr/bin/+
   937 root      20   0  445028   1384   1272 S   0.0  0.1   0:00.57 sw-engine+
   938 systuser  20   0   11796     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.01 /usr/loca+
   942 root      20   0  111304    544    436 S   0.0  0.0   0:02.05 /usr/sbin+
   943 systuser  20   0   11348     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   944 root      20   0 1349832   8612    128 S   0.0  0.4   0:28.14 /usr/bin/+
   945 root      20   0   51508    612    428 S   0.0  0.0   0:00.20 /usr/sbin+
   946 telegraf  20   0 5654304  35140   5868 S   0.0  1.5   0:07.87 /usr/loca+
   947 memcach+  20   0  342400    232    232 S   0.0  0.0   0:00.30 /usr/bin/+
   948 root      20   0 1763312 262956    904 S   0.0 10.9   0:14.97 /usr/loca+
   949 root      20   0  389508    548    456 S   0.0  0.0   0:00.44 php-fpm: +
   950 root      20   0  261160   7048   2080 S   0.0  0.3   0:02.74 cpsrvd (S+
   953 root      20   0  388892    660    456 S   0.0  0.0   0:00.37 php-fpm: +
   958 root      20   0  265552   1816   1000 S   0.0  0.1   0:04.30 /usr/sbin+
   986 root      20   0  396248    568    476 S   0.0  0.0   0:00.39 php-fpm: +
   990 root      20   0  439788   1176   1084 S   0.0  0.0   0:00.50 php-fpm: +
   994 root      20   0  400740   3096    716 S   0.0  0.1   0:01.94 php-fpm: +
   996 named     20   0 1186868  37056   1820 S   0.0  1.5   0:09.08 /usr/sbin+
  1013 cpanelc+  20   0   10580   3680   2416 S   0.0  0.2   0:11.04 /usr/loca+
  1093 dovenull  20   0   47424   3096   2100 S   0.0  0.1   0:00.26 dovecot/p+
  1094 dovenull  20   0   48032   3212   1780 S   0.0  0.1   0:00.24 dovecot/i+
  1095 dovecot   20   0   10320    292    176 S   0.0  0.0   0:00.06 dovecot/a+
  1096 root      20   0   10452    488    308 S   0.0  0.0   0:00.17 dovecot/l+
  1097 dovenull  20   0   47308   3004   2072 S   0.0  0.1   0:00.22 dovecot/p+
  1098 dovenull  20   0   47996   3300   1936 S   0.0  0.1   0:00.23 dovecot/i+
  1104 root      20   0   24528   2632    548 S   0.0  0.1   0:00.12 dovecot/c+
  1110 dovecot   20   0   13568    624    424 S   0.0  0.0   0:00.04 dovecot/s+
  1145 systuser  20   0  157704   3068   1092 S   0.0  0.1   0:00.09 SonarPush+
  1170 dovecot   20   0   41192   1564   1048 S   0.0  0.1   0:00.51 dovecot/a+
  1175 wp-tool+  20   0  412368  27512   1612 S   0.0  1.1   0:04.53 /usr/bin/+
  1176 wp-tool+  20   0  387528   8692   1560 S   0.0  0.4   0:00.20 /usr/bin/+
  1234 root      20   0  167452   1320    776 S   0.0  0.1   0:00.23 dnsadmin +
  1235 root      20   0  262224  22728   4872 S   0.0  0.9   0:02.33 cpdavd - +
  1237 root      20   0  209456  19804   2324 S   0.0  0.8   0:01.87 tailwatchd
  1669 root      20   0  299272    604    440 S   0.0  0.0   0:00.36 php-fpm: +
  1701 root      38  18  130416   1404    728 S   0.0  0.1   0:00.04 cpanellog+
  1959 root      20   0  266992   7380    740 S   0.0  0.3   0:01.19 /usr/sbin+
  1962 root      20   0   12832    400    296 S   0.0  0.0   0:01.63 /usr/loca+
  1963 root      20   0   12732    368    292 S   0.0  0.0   0:01.41 /usr/loca+
  1964 root      20   0   12868    420    296 S   0.0  0.0   0:01.52 /usr/loca+
  1968 root      20   0   53340    216    216 S   0.0  0.0   0:00.05 /usr/loca+
  2014 root      20   0  182984  10844   1168 S   0.0  0.4   0:12.73 lfd - sle+
 18294 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 18303 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.23 [kworker]
 31542 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 47448 nobody    20   0  277884  20452   4920 S   0.0  0.8   0:03.30 /usr/sbin+
 50251 nobody    20   0  277904  20144   4828 S   0.0  0.8   0:01.90 /usr/sbin+
 50669 nobody    20   0  277896  20500   4936 S   0.0  0.8   0:01.96 /usr/sbin+
 56404 root      20   0  248036 117144   1060 S   0.0  4.8   0:03.88 /usr/loca+
 60287 nobody    20   0  277592  20164   4872 S   0.0  0.8   0:01.39 /usr/sbin+
 61118 nobody    20   0  277736  19876   4776 S   0.0  0.8   0:01.82 /usr/sbin+
 61529 nobody    20   0  278196  20200   4648 S   0.0  0.8   0:00.84 /usr/sbin+
 62813 nobody    20   0  277760  19684   4684 S   0.0  0.8   0:01.11 /usr/sbin+
 64340 root      20   0  260788 127868   3356 S   0.0  5.3   0:01.14 spamd chi+
 64341 root      20   0  248036 116460    416 S   0.0  4.8   0:00.00 spamd chi+
 65204 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65953 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 66735 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 67149 nobody    20   0  277696  19596   4744 S   0.0  0.8   0:01.54 /usr/sbin+
 68641 nobody    20   0  277496  19256   4640 S   0.0  0.8   0:01.19 /usr/sbin+
 69321 nobody    20   0  277940  19696   4616 S   0.0  0.8   0:00.56 /usr/sbin+
 69362 nobody    20   0  277504  19028   4312 S   0.0  0.8   0:00.49 /usr/sbin+
 69624 nobody    20   0  277884  19072   4448 S   0.0  0.8   0:00.52 /usr/sbin+
 69723 nobody    20   0  277760  19492   4728 S   0.0  0.8   0:01.14 /usr/sbin+
 70827 nobody    20   0  277760  19168   4444 S   0.0  0.8   0:00.57 /usr/sbin+
 72501 nobody    20   0  277892  20556   4924 S   0.0  0.8   0:01.71 /usr/sbin+
 73128 nobody    20   0  277760  19204   4376 S   0.0  0.8   0:00.60 /usr/sbin+
 73148 nobody    20   0  277896  19132   4340 S   0.0  0.8   0:00.43 /usr/sbin+
 73194 nobody    20   0  277704  19956   4656 S   0.0  0.8   0:01.14 /usr/sbin+
 73225 nobody    20   0  277908  19700   4512 S   0.0  0.8   0:00.61 /usr/sbin+
 75040 nobody    20   0  277760  18744   4232 S   0.0  0.8   0:00.27 /usr/sbin+
 75350 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 77501 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 77522 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 78192 nobody    20   0  277540  18724   4208 S   0.0  0.8   0:00.55 /usr/sbin+
 79071 nobody    20   0  277760  19156   4324 S   0.0  0.8   0:00.65 /usr/sbin+
 79374 nobody    20   0  277796  18608   4092 S   0.0  0.8   0:00.19 /usr/sbin+
 79513 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 80197 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 81100 nobody    20   0  277760  18612   4156 S   0.0  0.8   0:00.67 /usr/sbin+
 81112 nobody    20   0  277760  18404   3964 S   0.0  0.8   0:00.29 /usr/sbin+
 81113 nobody    20   0  277760  18872   4356 S   0.0  0.8   0:00.72 /usr/sbin+
 81832 nobody    20   0  277760  18252   3800 S   0.0  0.8   0:00.04 /usr/sbin+
 82162 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 82400 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 82527 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 82577 nobody    20   0  277760  18804   4308 S   0.0  0.8   0:00.48 /usr/sbin+
 82727 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 82926 cloudw    20   0  367184  19144  12236 S   0.0  0.8   0:00.20 /opt/cpan+
 83207 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 83429 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 83601 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 83841 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 83917 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 83977 nobody    20   0  277760  18548   4072 S   0.0  0.8   0:00.28 /usr/sbin+
 83991 nobody    20   0  277756  18580   4092 S   0.0  0.8   0:00.27 /usr/sbin+
 84104 nobody    20   0  277324  17096   3220 S   0.0  0.7   0:00.00 /usr/sbin+
 84110 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 84276 nobody    20   0  277760  18172   3656 S   0.0  0.8   0:00.28 /usr/sbin+
 84378 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 84649 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.20 /opt/cpan+
 84839 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 84930 nobody    20   0  277052  15652   2056 S   0.0  0.6   0:00.00 /usr/sbin+
 85030 cloudw    20   0  367184  19028  12184 S   0.0  0.8   0:00.22 /opt/cpan+
 85996 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 86201 cloudw    20   0  367184  19032  12184 S   0.0  0.8   0:00.21 /opt/cpan+
 86404 cloudw    20   0  366248  16796  10940 S   0.0  0.7   0:00.13 /opt/cpan+
 86414 nigeria   20   0  400460   5572   2328 S   0.0  0.2   0:00.00 php-fpm: +
 86463 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 86464 wp-tool+  20   0  445028    324    196 S   0.0  0.0   0:00.00 sw-engine+
 86487 root      20   0  162436   5836   4344 S   0.0  0.2   0:00.01 sshd: roo+
 86488 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 86519 mailnull  20   0   89496   5428   2220 S   0.0  0.2   0:00.00 /usr/sbin+
 86536 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 86538 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 86540 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 86542 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 86543 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 86544 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 86545 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 86546 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 86547 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 86548 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 86549 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 86550 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 86551 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 86553 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 86562 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 86570 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 86571 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 86572 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 86574 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 86575 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 86576 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 86577 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
 86578 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 86579 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 86580 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 86581 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 86582 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 86584 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 86588 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 86592 root      20   0  188244  11132   5148 S   0.0  0.5   0:00.01 /usr/loca+
 86601 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 86603 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 86604 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 86608 pactpay   20   0  480124  17692  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 86618 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 86695 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 86698 cloudsms  20   0  113284   1212   1032 R   0.0  0.1   0:00.00 /usr/loca+
100665 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:40   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:40   0:14  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:40   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:40   0:19  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   09:40   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kvm-irqfd-clean]
root        675  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [loop0]
root        735  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/loop0-8]
root        736  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root     100665  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/u200:2]
root      31542  0.0  0.0      0     0 ?        S    12:25   0:00  \_ [kworker/1:1]
root      65204  0.0  0.0      0     0 ?        S    13:03   0:00  \_ [kworker/u200:0]
root      65953  0.0  0.0      0     0 ?        S    13:04   0:00  \_ [kworker/1:4]
root      66735  0.0  0.0      0     0 ?        S    13:05   0:00  \_ [kworker/0:0]
root      75350  0.0  0.0      0     0 ?        S    13:16   0:00  \_ [kworker/0:1]
root      77501  0.0  0.0      0     0 ?        S    13:19   0:00  \_ [kworker/1:0]
root      77522  0.0  0.0      0     0 ?        S    13:19   0:00  \_ [kworker/1:2]
root      79513  0.0  0.0      0     0 ?        S    13:21   0:00  \_ [kworker/0:3]
root      80197  0.0  0.0      0     0 ?        S    13:22   0:00  \_ [kworker/0:4]
root      82400  0.0  0.0      0     0 ?        S    13:25   0:00  \_ [kworker/1:3]
root      83841  0.0  0.0      0     0 ?        S    13:27   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44268  3332 ?        Ss   09:40   0:20 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.0  40244  1412 ?        Ss   09:40   0:08 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   252 ?        Ss   09:40   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   504 ?        S<sl 09:40   0:01 /sbin/auditd
root        470  0.0  0.0  24712  1180 ?        Ss   09:40   0:03 /usr/lib/systemd/systemd-logind
root        471  0.0  0.0  52852   416 ?        Ss   09:40   0:00 /usr/sbin/smartd -n -q never
dbus        474  0.0  0.0  58644  1412 ?        Ss   09:40   0:07 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         476  0.0  0.0  69256    72 ?        Ss   09:40   0:00 /sbin/rpcbind -w
polkitd     486  0.0  0.0 612240  1088 ?        Ssl  09:40   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        487  0.0  0.0  21540   408 ?        Ss   09:40   0:00 /usr/sbin/irqbalance --foreground
root        492  0.0  0.0 152780   248 ?        Ss   09:40   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        493  0.0  0.2 224280  5440 ?        Ss   09:40   0:00 queueprocd - waiting up to 60s to process a task
nscd        507  0.0  0.0 928956  1380 ?        Ssl  09:40   0:11 /usr/sbin/nscd
root        515  0.0  0.0 195208    68 ?        Ssl  09:40   0:00 /usr/sbin/gssproxy -D
root        516  0.0  0.0   4388   156 ?        Ss   09:40   0:00 /usr/sbin/acpid
root        543  0.0  0.0  24208   164 ?        Ss   09:40   0:00 /usr/sbin/atd -f
root        545  0.0  0.0 124480   520 ?        Ss   09:40   0:00 /usr/sbin/crond -n
root      86536  0.0  0.0 183048  2156 ?        S    13:30   0:00  \_ /usr/sbin/CROND -n
root      86584  0.0  0.0 113284  1208 ?        Ss   13:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      86588  0.0  0.0 108052   356 ?        S    13:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      86601  0.0  0.0 113288  1516 ?        S    13:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      86700  0.0  0.0 153840  2096 ?        R    13:30   0:00  |               \_ ps auxf
root      86538  0.0  0.0 183048  2152 ?        S    13:30   0:00  \_ /usr/sbin/CROND -n
root      86581  0.0  0.0  20164   804 ?        Ss   13:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      86540  0.0  0.0 183048  2152 ?        S    13:30   0:00  \_ /usr/sbin/CROND -n
root      86570  0.0  0.0  20164   808 ?        Ss   13:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      86542  0.0  0.0 183048  2152 ?        S    13:30   0:00  \_ /usr/sbin/CROND -n
root      86577  0.0  0.0  20164   992 ?        Ss   13:30   0:00  |   \_ jailshell (cloudsms) [86695] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
cloudsms  86695  0.0  0.0      0     0 ?        D    13:30   0:00  |       \_ [jailshell]
root      86543  0.0  0.0 183048  2152 ?        S    13:30   0:00  \_ /usr/sbin/CROND -n
root      86575  0.0  0.0  20164   804 ?        Ss   13:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      86544  0.0  0.0 183048  2152 ?        S    13:30   0:00  \_ /usr/sbin/CROND -n
root      86580  0.0  0.0  20164   808 ?        Ss   13:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      86545  0.0  0.0 183048  2148 ?        S    13:30   0:00  \_ /usr/sbin/CROND -n
root      86571  0.0  0.0  20164   804 ?        Ss   13:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      86546  0.0  0.0 183048  2148 ?        S    13:30   0:00  \_ /usr/sbin/CROND -n
root      86579  0.0  0.0  20164   804 ?        Ss   13:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      86547  0.0  0.0 183048  2144 ?        S    13:30   0:00  \_ /usr/sbin/CROND -n
root      86562  0.0  0.0  20164   808 ?        Ss   13:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      86548  0.0  0.0 183048  2144 ?        S    13:30   0:00  \_ /usr/sbin/CROND -n
root      86576  0.0  0.0  20164   804 ?        Ss   13:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      86549  0.0  0.0 183048  2144 ?        S    13:30   0:00  \_ /usr/sbin/CROND -n
root      86582  0.0  0.0  20164   804 ?        Ss   13:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      86550  0.0  0.0 183048  2148 ?        S    13:30   0:00  \_ /usr/sbin/CROND -n
root      86578  0.0  0.0 113284  1212 ?        Ss   13:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      86592  0.0  0.4 188244 11132 ?        S    13:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      86655  0.0  0.0 160224  2384 ?        S    13:30   0:00  |           \_ top -n 2 -b -c
root      86551  0.0  0.0 183048  2144 ?        S    13:30   0:00  \_ /usr/sbin/CROND -n
root      86572  0.0  0.0  20164   964 ?        Ss   13:30   0:00  |   \_ jailshell (pactpay) [86603] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   86603  0.0  0.0  20164   260 ?        S    13:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   86608  0.0  0.7 480124 17692 ?        S    13:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      86553  0.0  0.0 183048  2144 ?        S    13:30   0:00  \_ /usr/sbin/CROND -n
root      86574  0.0  0.0  20164   968 ?        Ss   13:30   0:00      \_ jailshell (nigeria) [86618] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   86618  0.0  0.0  20164   256 ?        S    13:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   86636  0.0  0.6 404052 16140 ?        S    13:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        562  0.0  0.0 108296   180 tty1     Ss+  09:40   0:00 /sbin/agetty --noclear tty1 linux
root        563  0.0  0.0 114704   180 ttyS0    Ss+  09:40   0:00 /bin/bash
mailnull    613  0.0  0.1  89116  3912 ?        Ss   09:40   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  86519  0.0  0.2  89496  5428 ?        S    13:30   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        931  0.0  0.0 153404   396 ?        Ss   09:40   0:00 pure-ftpd (SERVER)
root        932  0.0  0.0 572372  1052 ?        Ssl  09:40   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    933  0.0  0.0 112268    56 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.6 114016 15276 ?        Ssl  09:40   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        936  0.1  0.2 1277056 6144 ?        Ssl  09:40   0:21 /usr/bin/checkstatus
root        937  0.0  0.0 445028  1384 ?        Ss   09:40   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  86464  0.0  0.0 445028   324 ?        S    13:29   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    938  0.0  0.0  11796    32 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    939  0.0  0.0 111608    60 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        942  0.0  0.0 111304   544 ?        Ss   09:40   0:02 /usr/sbin/sshd -D
root      86487  0.2  0.2 162436  5836 ?        Ss   13:29   0:00  \_ sshd: root [priv]
sshd      86488  0.0  0.1 115644  2628 ?        S    13:29   0:00      \_ sshd: root [net]
systuser    943  0.0  0.0  11348    24 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        944  0.2  0.3 1349832 8612 ?        Ssl  09:40   0:28 /usr/bin/cspdaemon
root        945  0.0  0.0  51508   612 ?        Ss   09:40   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1093  0.0  0.1  47424  3096 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1094  0.0  0.1  48032  3212 ?        S    09:40   0:00  \_ dovecot/imap-login
dovecot    1095  0.0  0.0  10320   292 ?        S    09:40   0:00  \_ dovecot/anvil
root       1096  0.0  0.0  10452   488 ?        S    09:40   0:00  \_ dovecot/log
dovenull   1097  0.0  0.1  47308  3004 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47996  3300 ?        S    09:40   0:00  \_ dovecot/imap-login
root       1104  0.0  0.1  24528  2632 ?        S    09:40   0:00  \_ dovecot/config
dovecot    1110  0.0  0.0  13568   624 ?        S    09:40   0:00  \_ dovecot/stats
dovecot    1170  0.0  0.0  41192  1564 ?        S    09:40   0:00  \_ dovecot/auth
telegraf    946  0.0  1.4 5654304 35140 ?       SLsl 09:40   0:07 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    947  0.0  0.0 342400   232 ?        Ssl  09:40   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        948  0.1 10.8 1763312 262956 ?      Ssl  09:40   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        949  0.0  0.0 389508   548 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        950  0.0  0.2 261160  7048 ?        Ss   09:40   0:02 cpsrvd (SSL) - waiting for connections                   
root      86463  0.0  0.0      0     0 ?        Z    13:29   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.0 388892   660 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        958  0.0  0.0 265552  1816 ?        Ssl  09:40   0:04 /usr/sbin/rsyslogd -n
root        986  0.0  0.0 396248   568 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        990  0.0  0.0 439788  1176 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        994  0.0  0.1 400740  3096 ?        Ss   09:40   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   86414  0.0  0.2 400460  5572 ?        S    13:29   0:00  \_ php-fpm: pool nigeriadecide_org
named       996  0.0  1.5 1186868 37056 ?       Ssl  09:40   0:09 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
cpanelc+   1013  0.0  0.1  10580  3680 ?        Ss   09:40   0:11 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1145  0.0  0.1 157704  3068 ?        S    09:40   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1175  0.0  1.1 412368 27512 ?        Ss   09:40   0:04 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1176  0.0  0.3 387528  8692 ?        Ss   09:40   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1234  0.0  0.0 167452  1320 ?        Ss   09:40   0:00 dnsadmin - dormant mode
root       1235  0.0  0.9 262224 22728 ?        Ss   09:40   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1237  0.0  0.8 209456 19804 ?        Ss   09:40   0:01 tailwatchd
root       1669  0.0  0.0 299272   604 ?        Ss   09:40   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1701  0.0  0.0 130416  1404 ?        SN   09:40   0:00 cpanellogd - sleeping for logs
mysql      1793  1.3  9.5 1463376 231392 ?      Sl   09:40   3:06 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1959  0.0  0.3 266992  7380 ?        Ss   09:40   0:01 /usr/sbin/httpd -k start
root       1962  0.0  0.0  12832   400 ?        S    09:40   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1963  0.0  0.0  12732   368 ?        S    09:40   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1964  0.0  0.0  12868   420 ?        S    09:40   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1968  0.0  0.0  53340   216 ?        S    09:40   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    47448  0.1  0.8 277884 20452 ?        S    12:42   0:03  \_ /usr/sbin/httpd -k start
nobody    50251  0.0  0.8 277904 20144 ?        S    12:45   0:01  \_ /usr/sbin/httpd -k start
cloudw    85996  0.3  0.7 367184 19032 ?        S    13:29   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    50669  0.0  0.8 277896 20500 ?        S    12:46   0:01  \_ /usr/sbin/httpd -k start
cloudw    82527  0.0  0.7 367184 19032 ?        S    13:25   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    60287  0.0  0.8 277592 20164 ?        S    12:58   0:01  \_ /usr/sbin/httpd -k start
cloudw    83917  0.1  0.7 367184 19032 ?        S    13:27   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    61118  0.0  0.8 277736 19876 ?        S    12:59   0:01  \_ /usr/sbin/httpd -k start
nobody    61529  0.0  0.8 278196 20200 ?        S    12:59   0:00  \_ /usr/sbin/httpd -k start
nobody    62813  0.0  0.8 277760 19684 ?        S    13:01   0:01  \_ /usr/sbin/httpd -k start
cloudw    86201  0.6  0.7 367184 19032 ?        S    13:29   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    67149  0.1  0.8 277696 19596 ?        S    13:05   0:01  \_ /usr/sbin/httpd -k start
nobody    68641  0.0  0.7 277496 19256 ?        S    13:07   0:01  \_ /usr/sbin/httpd -k start
nobody    69321  0.0  0.8 277940 19696 ?        S    13:08   0:00  \_ /usr/sbin/httpd -k start
nobody    69362  0.0  0.7 277504 19028 ?        S    13:08   0:00  \_ /usr/sbin/httpd -k start
cloudw    83207  0.0  0.7 367184 19032 ?        S    13:26   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    69624  0.0  0.7 277884 19072 ?        S    13:08   0:00  \_ /usr/sbin/httpd -k start
cloudw    84378  0.1  0.7 367184 19032 ?        S    13:27   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    69723  0.0  0.8 277760 19492 ?        S    13:08   0:01  \_ /usr/sbin/httpd -k start
cloudw    83429  0.0  0.7 367184 19028 ?        S    13:26   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    70827  0.0  0.7 277760 19168 ?        S    13:10   0:00  \_ /usr/sbin/httpd -k start
cloudw    83601  0.1  0.7 367184 19028 ?        S    13:26   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    72501  0.1  0.8 277892 20556 ?        S    13:12   0:01  \_ /usr/sbin/httpd -k start
nobody    73128  0.0  0.7 277760 19204 ?        S    13:13   0:00  \_ /usr/sbin/httpd -k start
nobody    73148  0.0  0.7 277896 19132 ?        S    13:13   0:00  \_ /usr/sbin/httpd -k start
nobody    73194  0.1  0.8 277704 19956 ?        S    13:13   0:01  \_ /usr/sbin/httpd -k start
cloudw    82727  0.0  0.7 367184 19032 ?        S    13:25   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    73225  0.0  0.8 277908 19700 ?        S    13:13   0:00  \_ /usr/sbin/httpd -k start
nobody    75040  0.0  0.7 277760 18744 ?        S    13:15   0:00  \_ /usr/sbin/httpd -k start
cloudw    85030  0.3  0.7 367184 19028 ?        S    13:28   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    78192  0.0  0.7 277540 18724 ?        S    13:19   0:00  \_ /usr/sbin/httpd -k start
nobody    79071  0.1  0.7 277760 19156 ?        S    13:20   0:00  \_ /usr/sbin/httpd -k start
cloudw    84649  0.1  0.7 367184 19028 ?        S    13:28   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    79374  0.0  0.7 277796 18608 ?        S    13:21   0:00  \_ /usr/sbin/httpd -k start
cloudw    84839  0.2  0.7 367184 19032 ?        S    13:28   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    81100  0.1  0.7 277760 18612 ?        S    13:23   0:00  \_ /usr/sbin/httpd -k start
cloudw    86404  1.0  0.6 366248 16796 ?        R    13:29   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    81112  0.0  0.7 277760 18404 ?        S    13:23   0:00  \_ /usr/sbin/httpd -k start
cloudw    82926  0.0  0.7 367184 19144 ?        S    13:25   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    81113  0.1  0.7 277760 18872 ?        S    13:23   0:00  \_ /usr/sbin/httpd -k start
nobody    81832  0.0  0.7 277760 18252 ?        S    13:24   0:00  \_ /usr/sbin/httpd -k start
cloudw    82162  0.0  0.7 367184 19028 ?        S    13:24   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    82577  0.1  0.7 277760 18804 ?        S    13:25   0:00  \_ /usr/sbin/httpd -k start
nobody    83977  0.1  0.7 277760 18548 ?        S    13:27   0:00  \_ /usr/sbin/httpd -k start
nobody    83991  0.1  0.7 277756 18580 ?        S    13:27   0:00  \_ /usr/sbin/httpd -k start
cloudw    86604  0.0  0.6 353712 15976 ?        S    13:30   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    84104  0.0  0.7 277324 17096 ?        S    13:27   0:00  \_ /usr/sbin/httpd -k start
cloudw    84110  0.1  0.7 367184 19028 ?        S    13:27   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    84276  0.1  0.7 277760 18172 ?        S    13:27   0:00  \_ /usr/sbin/httpd -k start
nobody    84930  0.0  0.6 277052 15652 ?        S    13:28   0:00  \_ /usr/sbin/httpd -k start
root       2014  0.0  0.4 182984 10844 ?        Ss   09:40   0:12 lfd - sleeping
oysipao+  18294  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+  18303  0.0  0.0   3152    36 ?        S    10:01   0:00  \_ [kworker]
root      56404  0.0  4.8 248036 117144 ?       Ss   10:49   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      64340  0.0  5.2 260788 127868 ?       S    11:00   0:01  \_ spamd child
root      64341  0.0  4.8 248036 116460 ?       S    11:00   0:00  \_ spamd child
## mysql stats
Uptime: 35485  Threads: 3  Questions: 998015  Slow queries: 0  Opens: 5668  Flush tables: 1  Open tables: 2000  Queries per second avg: 28.124
*************************** 1. row ***************************
     Id: 16213
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 16220
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 16224
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.137.160 TIME_WAIT
      1 138.199.16.143 TIME_WAIT
      1 185.226.197.19 TIME_WAIT
      1 ::1 TIME_WAIT
      1 43.133.66.51 TIME_WAIT
      1 43.157.188.74 TIME_WAIT
      1 51.161.37.7 TIME_WAIT
      1 52.167.144.159 TIME_WAIT
      1 54.39.210.194 TIME_WAIT
      1 84.37.231.41 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 13:30:01 WAT
   Restart Time: Thursday, 20-Nov-2025 03:38:40 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 9 hours 51 minutes 21 seconds
   Server load: 0.29 0.42 0.41
   Total accesses: 72080 - Total Traffic: 1.7 GB - Total Duration: 146145228
   CPU Usage: u19.64 s9.01 cu919.55 cs722.23 - 4.71% CPU load
   2.03 requests/sec - 51.7 kB/second - 25.4 kB/request - 2027.54 ms/request
   27 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

RWKLL._WKW_KWL_W.L_LKLLWW_K_WKL.WL.K.L..........................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur    Conn  Child  Slot     Client      Protocol            VHost                                        Request
   0-0  84930 0/0/3325   R 0.00  83    0   3577427  0.0   0.00  94.89 102.89.75.177   http/1.1
   1-0  62813 0/184/3239 W 5.15  32    0   47510641 0.0   4.79  82.74 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343533
   2-0  83977 1/46/3231  K 1.13  0     451 4178255  34.4  1.21  88.90 192.178.4.98    http/1.1 team.cloudware.ng:443       GET /?l=3823217875 HTTP/1.1
   3-0  70827 1/104/3634 L 2.95  192   0   4160630  5.3   2.34  85.12 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343532
   4-0  69624 1/90/3325  L 2.53  132   0   3524312  5.3   3.52  84.69 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343532
   5-0  -     0/0/3449   . 0.00  130   0   2076393  0.0   0.00  78.21 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   6-0  72501 0/377/3200 _ 7.29  0     7   2855670  0.0   11.05 81.91 84.37.53.19     http/1.1 nigeriadecide.org:443       GET /polling_unit_category.php?state=Anambra&lga=Idemili-south&
   7-0  61118 0/318/3268 W 7.65  0     0   3421099  0.0   9.10  84.48 14.186.131.71   http/1.1 cloudware.ng:443            GET /wp-content/uploads/2019/06/Office-Workflow-Automation-350x
   8-0  78192 3/222/3175 K 2.16  0     270 2860114  96.1  1.97  96.63 192.178.4.97    http/1.1 team.cloudware.ng:443       GET /?l=2218390879 HTTP/1.1
   9-0  50251 0/394/3261 W 8.69  52    0   4020866  0.0   7.82  76.53 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343533
   10-0 84276 0/45/2993  _ 1.27  0     0   3342871  0.0   1.24  72.05 ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   11-0 67149 4/256/3069 K 6.95  3     305 3291945  127.1 6.96  69.77 192.178.4.100   http/1.1 team.cloudware.ng:443       GET /?l=3285539790 HTTP/1.1
   12-0 73128 2/98/2834  W 2.98  0     0   3984640  65.5  2.63  68.91 192.178.4.96    http/1.1 team.cloudware.ng:443       GET /?l=1385912604 HTTP/1.1
   13-0 84104 1/1/2400   L 0.00  152   0   3127733  5.3   0.01  58.79 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343532
   14-0 47448 0/593/2582 _ 14.86 0     25  3223761  0.0   14.17 67.94 116.203.134.67  http/1.1 cloudsms.com.ng:443         GET /cron/process_queue4.php HTTP/1.1
   15-0 81100 0/109/2503 W 2.85  12    0   3004199  0.0   2.97  58.07 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343533
   16-0 -     0/0/2225   . 0.00  157   0   3628332  0.0   0.00  54.81 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   17-0 81832 1/9/2058   L 0.19  312   0   3596426  5.3   0.23  54.31 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343530
   18-0 68641 0/218/2445 _ 5.23  0     257 3019983  0.0   5.37  50.17 192.178.4.104   http/1.1 team.cloudware.ng:443       GET /?l=4186919750 HTTP/1.1
   19-0 50669 1/386/2643 L 8.60  292   0   2891892  5.3   8.72  57.80 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343531
   20-0 69321 1/120/2114 K 3.20  0     302 4074527  36.0  2.37  47.83 192.178.4.98    http/1.1 team.cloudware.ng:443       GET /?l=1087115621 HTTP/1.1
   21-0 69723 1/185/1676 L 5.14  212   0   2027886  5.3   6.57  39.51 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343531
   22-0 81112 1/47/1573  L 1.29  252   0   2589693  5.3   1.34  38.28 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343531
   23-0 79071 0/113/936  W 2.70  112   0   1730016  0.0   3.00  22.85 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343532
   24-0 79374 0/33/987   W 0.94  92    0   2402654  0.0   0.75  24.18 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343533
   25-0 82577 0/78/965   _ 2.03  0     0   1752005  0.0   2.14  24.55 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80      GET /whm-server-status HTTP/1.0
   26-0 81113 11/134/412 K 2.99  4     270 1476198  337.2 3.08  9.80  192.178.4.101   http/1.1 team.cloudware.ng:443       GET /?l=3545412299 HTTP/1.1
   27-0 73148 0/73/644   _ 2.22  0     23  2886847  0.0   2.27  17.76 128.140.8.200   http/1.1 cloudsms.com.ng:443         GET /cron/process_queue3.php HTTP/1.1
   28-0 75040 0/44/454   W 1.49  72    0   2797840  0.0   1.11  11.00 173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343533
   29-0 83991 5/48/745   K 1.19  0     461 1013262  156.1 1.23  19.39 192.178.4.105   http/1.1 team.cloudware.ng:443       GET /?l=2282516277 HTTP/1.1
   30-0 73194 1/279/512  L 4.77  272   0   836556   5.3   4.83  9.57  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343531
   31-0 -     0/0/392    . 0.00  379   0   797137   0.0   0.00  16.77 ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   32-0 73225 0/156/405  W 2.78  0     0   2102638  0.0   2.81  8.95  ::1             http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   33-0 60287 1/235/241  L 6.48  172   0   2048663  5.3   5.89  5.93  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343532
   34-0 -     0/0/190    . 0.00  854   0   1384292  0.0   0.00  4.57  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   35-0 61529 2/148/152  K 4.14  2     306 2630575  65.5  3.57  3.67  192.178.4.103   http/1.1 team.cloudware.ng:443       GET /?l=466761620 HTTP/1.1
   36-0 -     0/0/88     . 0.00  897   0   29587    0.0   0.00  1.86  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   37-0 69362 1/96/104   L 3.07  232   0   1322821  5.3   1.87  2.06  173.199.190.174 http/1.1 schoolplus.cloudware.ng:443 GET /cgi-bin/cgi-bin/index.php?ARRAY=7o2230223n3137363336343531
   38-0 -     0/0/113    . 0.00  444   0   683167   0.0   0.00  2.35  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   39-0 -     0/0/84     . 0.00  896   0   37708    0.0   0.00  1.89  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   40-0 -     0/0/28     . 0.00  956   0   15783    0.0   0.00  0.75  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   41-0 -     0/0/3      . 0.00  35248 0   840      0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   42-0 -     0/0/227    . 0.00  34354 0   110452   0.0   0.00  5.70  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   43-0 -     0/0/9      . 0.00  35251 0   4927     0.0   0.00  0.24  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   44-0 -     0/0/154    . 0.00  34730 0   84969    0.0   0.00  4.58  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   45-0 -     0/0/13     . 0.00  35218 0   6975     0.0   0.00  0.32  ::1             http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1007
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 10 seconds, (range: 1...32)
   index usage: 17%, cache usage: 24%
   total entries stored since starting: 44408
   total entries replaced since starting: 0
   total entries expired since starting: 43383
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 24 hit, 73 miss
   total removes since starting: 18 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit