403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-07.03.45.txt
 ## mem threshold exceeded
## server overview
2025-11-07.03.45 load[3] mem[89/0] mysql[5/] httpd[]
              total        used        free      shared  buff/cache   available
Mem:           2363        2182          53          16         128          33
Swap:          1999           7        1992
 03:45:03 up 0 min,  0 users,  load average: 3.72, 0.92, 0.31
## system overview
top - 03:45:03 up 0 min,  0 users,  load average: 3.72, 0.92, 0.31
Tasks: 181 total,  10 running, 170 sleeping,   0 stopped,   1 zombie
%Cpu(s): 78.1 us, 18.8 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  3.1 si,  0.0 st
KiB Mem :  2420300 total,   153896 free,  2069100 used,   197304 buff/cache
KiB Swap:  2047996 total,  2021108 free,    26888 used.   179420 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
   982 root      20   0 1602316   1.3g   1980 R  26.7 56.8   0:11.44 /usr/loca+
   597 root      20   0 1350832  12496    596 R  20.0  0.5   0:12.59 /usr/bin/+
   958 root      20   0 1276416  11712    552 S  20.0  0.5   0:14.44 /usr/bin/+
   962 root      20   0 1275844  11204    588 R  20.0  0.5   0:13.50 /usr/bin/+
   271 root       0 -20       0      0      0 R   6.7  0.0   0:00.12 [kworker/+
   489 root      20   0   24604   1492   1248 R   6.7  0.1   0:00.02 /usr/lib/+
  1014 root      20   0  261028  26064   3744 S   6.7  1.1   0:00.10 cpsrvd (S+
  2439 root      20   0  160220   2064   1580 R   6.7  0.1   0:00.01 top -bcn1
     1 root      20   0   44268   3212   1516 S   0.0  0.1   0:00.84 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     3 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     5 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [ksoftirq+
    15 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    30 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    31 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    36 root      20   0       0      0      0 S   0.0  0.0   0:00.41 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
   268 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
   270 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
   279 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/vda+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   39188   2828   2636 R   0.0  0.1   0:00.12 /usr/lib/+
   382 root      20   0   45352   1024    896 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    628    516 S   0.0  0.0   0:00.00 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   493 root      20   0  224136   9936   2728 S   0.0  0.4   0:00.05 /usr/loca+
   494 root      20   0  152780   1212   1212 S   0.0  0.1   0:00.00 /usr/sbin+
   499 nscd      20   0  861368   1200    956 S   0.0  0.0   0:00.02 /usr/sbin+
   500 rpc       20   0   69256    432    328 S   0.0  0.0   0:00.01 /sbin/rpc+
   503 dbus      20   0   56708   2024   1480 R   0.0  0.1   0:00.05 /usr/bin/+
   523 root      20   0  195208    516    516 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0   52852   1116   1112 S   0.0  0.0   0:00.01 /usr/sbin+
   537 polkitd   20   0  610540   3844   1492 S   0.0  0.2   0:00.01 /usr/lib/+
   541 root      20   0   21540    876    768 S   0.0  0.0   0:00.00 /usr/sbin+
   551 root      20   0   24208    552    552 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  124480   1020    852 S   0.0  0.0   0:00.00 /usr/sbin+
   558 root      20   0    4388    312    308 S   0.0  0.0   0:00.00 /usr/sbin+
   569 root      20   0  114704   2400   1012 S   0.0  0.1   0:00.02 /bin/bash
   570 root      20   0  108296    708    596 S   0.0  0.0   0:00.00 /sbin/age+
   572 root      20   0  183048   1064   1000 S   0.0  0.0   0:00.00 /usr/sbin+
   573 root      20   0  183048   1068   1000 S   0.0  0.0   0:00.00 /usr/sbin+
   587 root      20   0  113284    812    808 S   0.0  0.0   0:00.00 /bin/sh -+
   588 root      20   0  113284    808    808 S   0.0  0.0   0:00.00 /bin/sh -+
   598 root      20   0  113284    984    928 S   0.0  0.0   0:00.00 /bin/bash+
   615 root      20   0  108056    300    224 S   0.0  0.0   0:00.00 sleep 120
   622 mailnull  20   0   88988   4696   1120 S   0.0  0.2   0:00.01 /usr/sbin+
   627 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:00.01 [loop0]
   677 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   678 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   959 systuser  20   0  114016   8648      0 S   0.0  0.4   0:00.02 /usr/loca+
   960 systuser  20   0   11604   1220      0 S   0.0  0.1   0:00.00 /usr/loca+
   961 root      20   0  572372  13512   2196 S   0.0  0.6   0:00.10 /usr/bin/+
   963 telegraf  20   0 5653536  32408      0 S   0.0  1.3   0:00.13 /usr/loca+
   964 root      20   0   51508   1728   1208 S   0.0  0.1   0:00.03 /usr/sbin+
   966 root      20   0  445028  13476   4624 S   0.0  0.6   0:00.06 sw-engine+
   968 systuser  20   0  111608   4376      0 S   0.0  0.2   0:00.00 /usr/loca+
   969 systuser  20   0   10388   1132      0 S   0.0  0.0   0:00.00 /usr/loca+
   970 systuser  20   0  113932   6396      0 S   0.0  0.3   0:00.00 /usr/loca+
   981 named     20   0  637732  54556   2148 S   0.0  2.3   0:00.23 /usr/sbin+
   984 root      20   0  386112   8864   2232 S   0.0  0.4   0:00.06 php-fpm: +
   992 root      20   0  397344   9800   2608 S   0.0  0.4   0:00.11 php-fpm: +
   994 memcach+  20   0  342400   1488    904 S   0.0  0.1   0:00.00 /usr/bin/+
  1007 root      20   0  392856   9796   2260 S   0.0  0.4   0:00.05 php-fpm: +
  1012 root      20   0  385496   9284   2220 S   0.0  0.4   0:00.05 php-fpm: +
  1013 root      20   0  216400   4396   2180 S   0.0  0.2   0:00.05 /usr/sbin+
  1017 root      20   0  436392  20408  12916 S   0.0  0.8   0:00.09 php-fpm: +
  1018 root      20   0  153404   2432   1688 S   0.0  0.1   0:00.00 pure-ftpd+
  1020 root      20   0  111304   3032   2012 S   0.0  0.1   0:00.00 /usr/sbin+
  1026 cpanelc+  20   0    9568   2756   2368 S   0.0  0.1   0:00.01 /usr/loca+
  1096 dovenull  20   0   46772   2456   1612 S   0.0  0.1   0:00.00 dovecot/p+
  1097 dovenull  20   0   46780   2452   1608 S   0.0  0.1   0:00.00 dovecot/i+
  1098 dovecot   20   0   10320    972    768 S   0.0  0.0   0:00.00 dovecot/a+
  1099 root      20   0   10452    912    540 S   0.0  0.0   0:00.00 dovecot/l+
  1100 dovenull  20   0   46772   2420   1580 S   0.0  0.1   0:00.00 dovecot/p+
  1101 dovenull  20   0   46780   2456   1608 S   0.0  0.1   0:00.00 dovecot/i+
  1108 root      20   0   24528  11752    920 S   0.0  0.5   0:00.01 dovecot/c+
  1113 dovecot   20   0   13568   1108    816 S   0.0  0.0   0:00.00 dovecot/s+
  1182 dovecot   20   0   41056   1768   1092 S   0.0  0.1   0:00.00 dovecot/a+
  1212 root      20   0   25760   2168   1596 S   0.0  0.1   0:01.45 spamd-dor+
  1218 systuser  20   0  157708  10080    756 S   0.0  0.4   0:00.00 SonarPush+
  1233 wp-tool+  20   0  408404  41488   3212 S   0.0  1.7   0:00.23 /usr/bin/+
  1234 wp-tool+  20   0  387528  19184   1972 S   0.0  0.8   0:00.07 /usr/bin/+
  1264 root      20   0  183900   5980   2676 S   0.0  0.2   0:00.08 cpdavd - +
  1265 root      20   0  208064  19160   2776 S   0.0  0.8   0:00.18 tailwatchd
  1267 root      20   0  167452   3916   2552 S   0.0  0.2   0:00.04 dnsadmin +
  1713 root      20   0  299272   7748    700 S   0.0  0.3   0:00.00 php-fpm: +
  1728 root      38  18  130416   2732   1576 S   0.0  0.1   0:00.00 cpanellog+
  1773 mysql     20   0   55312   1888    728 S   0.0  0.1   0:00.00 /usr/sbin+
  1782 mysql     20   0  692116  33644    948 R   0.0  1.4   0:00.43 /usr/sbin+
  1968 root      20   0  266984  26724   1120 S   0.0  1.1   0:00.07 /usr/sbin+
  1970 root      20   0   12748    788    604 S   0.0  0.0   0:00.00 /usr/loca+
  1971 root      20   0   12732    788    608 S   0.0  0.0   0:00.00 /usr/loca+
  1972 root      20   0   12756    788    608 S   0.0  0.0   0:00.00 /usr/loca+
  1977 root      20   0   53340  11640   2316 S   0.0  0.5   0:00.05 /usr/loca+
  1978 nobody    20   0  277472  32368    908 S   0.0  1.3   0:00.01 /usr/sbin+
  1979 nobody    20   0  277236  31728    532 S   0.0  1.3   0:00.00 /usr/sbin+
  1980 nobody    20   0  277216  31804    644 S   0.0  1.3   0:00.01 /usr/sbin+
  1981 nobody    20   0  277316  32632   1320 S   0.0  1.3   0:00.02 /usr/sbin+
  1982 nobody    20   0  277316  32576   1316 S   0.0  1.3   0:00.02 /usr/sbin+
  1989 nigeria   20   0  397064   8148    896 S   0.0  0.3   0:00.00 php-fpm: +
  2028 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  2041 root      20   0  180960  28924   2128 S   0.0  1.2   0:00.12 lfd - sle+
  2082 root      38  18  147784  12004   1884 R   0.0  0.5   0:00.07 cpanellog+
  2117 nobody    20   0  277280  31896    656 S   0.0  1.3   0:00.00 /usr/sbin+
  2138 root      20   0  111304   2964   1952 S   0.0  0.1   0:00.00 sshd: [ac+
  2141 root      20   0  183044   1880   1312 S   0.0  0.1   0:00.00 /usr/sbin+
  2143 root      20   0  183048   1572   1004 S   0.0  0.1   0:00.00 /usr/sbin+
  2144 root      20   0  183044   1888   1308 S   0.0  0.1   0:00.00 /usr/sbin+
  2149 root      20   0  183052   1568    996 S   0.0  0.1   0:00.00 /usr/sbin+
  2154 root      20   0  183048   1572   1004 S   0.0  0.1   0:00.00 /usr/sbin+
  2155 root      20   0  183048   1632   1052 S   0.0  0.1   0:00.00 /usr/sbin+
  2157 root      20   0  183048   1624   1044 S   0.0  0.1   0:00.00 /usr/sbin+
  2158 root      20   0  183048   1632   1052 S   0.0  0.1   0:00.00 /usr/sbin+
  2159 root      20   0  113284    988    808 S   0.0  0.0   0:00.00 /bin/sh -+
  2162 root      20   0   20164    832    596 S   0.0  0.0   0:00.00 jailshell+
  2178 root      20   0  113284    980    804 S   0.0  0.0   0:00.00 /bin/sh -+
  2180 root      20   0  188084   9724   3408 S   0.0  0.4   0:00.02 /usr/loca+
  2183 root      20   0  108052    296    224 S   0.0  0.0   0:00.00 /usr/bin/+
  2187 mailnull  20   0   82572   3908   2884 S   0.0  0.2   0:00.00 /usr/sbin+
  2191 root      20   0  113288   1224   1008 S   0.0  0.1   0:00.00 /bin/bash+
  2247 cloudsms  20   0   20164    252      0 S   0.0  0.0   0:00.00 jailshell+
  2269 cloudsms  20   0  113284    968    792 S   0.0  0.0   0:00.00 /usr/loca+
  2282 cloudsms  20   0  400652   9368   4068 S   0.0  0.4   0:00.01 /opt/cpan+
  2297 mailnull  20   0   86628   9412   4416 S   0.0  0.4   0:00.02 /usr/sbin+
  2304 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  2307 mailnull  20   0   86632   9416   4416 S   0.0  0.4   0:00.02 /usr/sbin+
  2309 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  2310 mailnull  20   0   86628   9412   4416 S   0.0  0.4   0:00.01 /usr/sbin+
  2344 root      20   0  160224   1936   1228 S   0.0  0.1   0:00.01 top -n 2 +
  2348 root      20   0   86580  10084   5072 S   0.0  0.4   0:00.02 /usr/sbin+
  2362 mailnull  20   0   86588  10100   5084 D   0.0  0.4   0:00.02 /usr/sbin+
  2364 root      20   0   86584  10076   5064 S   0.0  0.4   0:00.02 /usr/sbin+
  2392 mailnull  20   0   86584   5420    408 S   0.0  0.2   0:00.00 /usr/sbin+
  2404 mailnull  20   0   87860   9620   3548 S   0.0  0.4   0:00.00 /usr/sbin+
  2416 cloudw    20   0   61776   6120   4384 D   0.0  0.3   0:00.01 dovecot/l+
  2440 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
  2455 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpsrvd (+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    03:44   0:00 [kthreadd]
root          3  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/0:0]
root          4  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kworker/0:0H]
root          5  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/u200:0]
root          6  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    03:44   0:00  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [ksoftirqd/1]
root         15  0.0  0.0      0     0 ?        D    03:44   0:00  \_ [kworker/1:0]
root         16  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [watchdogd]
root         30  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/0:1]
root         31  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/1:1]
root         36  1.0  0.0      0     0 ?        S    03:44   0:00  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   03:44   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   03:44   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [scsi_tmf_1]
root        250  0.2  0.0      0     0 ?        D    03:44   0:00  \_ [kworker/u200:2]
root        251  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/u200:3]
root        255  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [ttm_swap]
root        256  0.1  0.0      0     0 ?        S<   03:44   0:00  \_ [kworker/0:1H]
root        268  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/1:2]
root        270  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/0:2]
root        271  0.3  0.0      0     0 ?        S<   03:44   0:00  \_ [kworker/1:1H]
root        279  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [jbd2/vda3-8]
root        280  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [xprtiod]
root        627  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [kvm-irqfd-clean]
root        660  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [loop0]
root        677  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [jbd2/loop0-8]
root        678  0.0  0.0      0     0 ?        S<   03:44   0:00  \_ [ext4-rsv-conver]
root       2028  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/1:3]
root       2304  0.0  0.0      0     0 ?        D    03:45   0:00  \_ [kworker/1:4]
root       2309  0.0  0.0      0     0 ?        S    03:45   0:00  \_ [kworker/0:3]
root          1  2.2  0.1  44268  3212 ?        Ss   03:44   0:00 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.3  0.1  39188  2832 ?        Ss   03:44   0:00 /usr/lib/systemd/systemd-journald
root        382  0.9  0.0  45352  1024 ?        Ss   03:44   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   628 ?        R<sl 03:44   0:00 /sbin/auditd
root        489  0.0  0.0  24604  1492 ?        Ss   03:44   0:00 /usr/lib/systemd/systemd-logind
root        493  0.1  0.4 224136  9936 ?        Ss   03:44   0:00 /usr/local/cpanel/libexec/queueprocd --start --systemd
root        494  0.0  0.0 152780  1212 ?        Ss   03:44   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        499  0.0  0.0 861368  1200 ?        Ssl  03:44   0:00 /usr/sbin/nscd
rpc         500  0.0  0.0  69256   432 ?        Ss   03:44   0:00 /sbin/rpcbind -w
dbus        503  0.1  0.0  56708  2024 ?        Rs   03:44   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        523  0.0  0.0 195208   516 ?        Ssl  03:44   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0  52852  1116 ?        Ss   03:44   0:00 /usr/sbin/smartd -n -q never
polkitd     537  0.0  0.1 610540  3844 ?        Ssl  03:44   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        541  0.0  0.0  21540   876 ?        Ss   03:44   0:00 /usr/sbin/irqbalance --foreground
root        551  0.0  0.0  24208   552 ?        Ss   03:44   0:00 /usr/sbin/atd -f
root        552  0.0  0.0 124480  1020 ?        Rs   03:44   0:00 /usr/sbin/crond -n
root        572  0.0  0.0 183048  1064 ?        S    03:44   0:00  \_ /usr/sbin/CROND -n
root        587  0.0  0.0 113284   812 ?        Ss   03:44   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root        597 34.9  0.5 1350832 12496 ?       Rl   03:44   0:12  |       \_ /usr/bin/update_imunify
root        573  0.0  0.0 183048  1068 ?        S    03:44   0:00  \_ /usr/sbin/CROND -n
root        588  0.0  0.0 113284   808 ?        Ss   03:44   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh reboot > /dev/null 2>&1
root        598  0.0  0.0 113284   984 ?        S    03:44   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh reboot
root        615  0.0  0.0 108056   300 ?        S    03:44   0:00  |           \_ sleep 120
root       2143  0.0  0.0 183048  1572 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root       2178  0.0  0.0 113284   980 ?        Ss   03:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       2183  0.0  0.0 108052   296 ?        S    03:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       2191  0.0  0.0 113288  1224 ?        S    03:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       2467  0.0  0.0 153840  2096 ?        R    03:45   0:00  |               \_ ps auxf
root       2144  0.0  0.0      0     0 ?        Z    03:45   0:00  \_ [crond] <defunct>
root       2149  0.0  0.0 183052  1568 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root       2162  0.0  0.0  20164   832 ?        Ss   03:45   0:00  |   \_ jailshell (cloudsms) [2247] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms   2247  0.0  0.0  20164   252 ?        S    03:45   0:00  |   |   \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms   2269  0.0  0.0 113284   968 ?        S    03:45   0:00  |   |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms   2282  1.0  0.3 400652  9368 ?        S    03:45   0:00  |   |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
mailnull   2187  0.0  0.1  82572  3908 ?        S    03:45   0:00  |   \_ /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f cloudsms
root       2154  0.0  0.0 183048  1572 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root       2159  0.0  0.0 113284   988 ?        Ss   03:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root       2180  1.0  0.4 188084  9724 ?        S    03:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root       2344  1.0  0.0 160224  1936 ?        S    03:45   0:00  |           \_ top -n 2 -b -c
root       2155  0.0  0.0 183048  1632 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
mailnull   2310  1.0  0.3  86628  9412 ?        S    03:45   0:00  |   \_ /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f pactpay
root       2348  2.0  0.4  86584 10084 ?        Ss   03:45   0:00  |       \_ /usr/sbin/exim -odi -Mc 1vHCTG-000000000bG-3GTo
mailnull   2468  0.0  0.2  86796  6272 ?        S    03:45   0:00  |           \_ /usr/sbin/exim -odi -Mc 1vHCTG-000000000bG-3GTo
root       2157  0.0  0.0 183048  1624 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
mailnull   2297  2.0  0.3  86628  9412 ?        S    03:45   0:00      \_ /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f nigeria
root       2364  0.0  0.4  86584 10076 ?        Ss   03:45   0:00          \_ /usr/sbin/exim -odi -Mc 1vHCTG-000000000b3-3CrH
mailnull   2404  0.0  0.3  87860  9620 ?        S    03:45   0:00              \_ /usr/sbin/exim -odi -Mc 1vHCTG-000000000b3-3CrH
root        558  0.0  0.0   4388   312 ?        Ss   03:44   0:00 /usr/sbin/acpid
root        569  0.0  0.0 114704  2400 ttyS0    Ss+  03:44   0:00 /bin/bash
root        570  0.0  0.0 108296   708 tty1     Ss+  03:44   0:00 /sbin/agetty --noclear tty1 linux
mailnull    622  0.0  0.1  88988  4696 ?        Ss   03:44   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        958 45.1  0.4 1276416 11712 ?       Ssl  03:44   0:14 /usr/bin/checkstatus
systuser    959  0.0  0.3 114016  8648 ?        Ssl  03:44   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    960  0.0  0.0  11604  1220 ?        Ssl  03:44   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        961  0.3  0.5 572372 13512 ?        Ssl  03:44   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        962 42.2  0.4 1275844 11204 ?       Rsl  03:44   0:13 /usr/bin/cspdaemon
telegraf    963  0.4  1.3 5653536 32408 ?       SLsl 03:44   0:00 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0  51508  1728 ?        Ss   03:44   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1096  0.0  0.1  46772  2456 ?        S    03:44   0:00  \_ dovecot/pop3-login
dovenull   1097  0.0  0.1  46780  2452 ?        S    03:44   0:00  \_ dovecot/imap-login
dovecot    1098  0.0  0.0  10320   972 ?        S    03:44   0:00  \_ dovecot/anvil
root       1099  0.0  0.0  10452   912 ?        S    03:44   0:00  \_ dovecot/log
dovenull   1100  0.0  0.0  46772  2420 ?        S    03:44   0:00  \_ dovecot/pop3-login
dovenull   1101  0.0  0.1  46780  2456 ?        S    03:44   0:00  \_ dovecot/imap-login
root       1108  0.0  0.4  24528 11752 ?        S    03:44   0:00  \_ dovecot/config
dovecot    1113  0.0  0.0  13568  1108 ?        S    03:44   0:00  \_ dovecot/stats
dovecot    1182  0.0  0.0  41056  1768 ?        S    03:44   0:00  \_ dovecot/auth
cloudw     2416  0.0  0.2  61588  5948 ?        S    03:45   0:00  \_ dovecot/lmtp
root       2440  0.0  0.1  41052  2728 ?        S    03:45   0:00  \_ dovecot/auth -w
root        966  0.1  0.5 445028 13476 ?        Ss   03:44   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser    968  0.0  0.1 111608  4376 ?        Ssl  03:44   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    969  0.0  0.0  10388  1132 ?        Ssl  03:44   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    970  0.0  0.2 113932  6396 ?        Ssl  03:44   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
named       981  0.7  2.2 637732 54556 ?        Ssl  03:44   0:00 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        982 35.7 56.8 1602316 1375876 ?     Rs   03:44   0:11 /usr/local/cpanel/3rdparty/bin/clamd -F
root        984  0.1  0.3 386112  8864 ?        Ss   03:44   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.3  0.4 397344  9800 ?        Ss   03:44   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria    1989  0.0  0.3 397064  8148 ?        S    03:44   0:00  \_ php-fpm: pool nigeriadecide_org
memcach+    994  0.0  0.0 342400  1488 ?        Ssl  03:44   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1007  0.1  0.4 392856  9796 ?        Ss   03:44   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root       1012  0.1  0.3 385496  9284 ?        Ss   03:44   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root       1013  0.1  0.1 216400  4396 ?        Ssl  03:44   0:00 /usr/sbin/rsyslogd -n
root       1014  0.3  1.0 261028 26064 ?        Ss   03:44   0:00 cpsrvd (SSL) - waiting for connections                   
root       2455  0.0  0.0      0     0 ?        Z    03:45   0:00  \_ [cpsrvd (SSL) - ] <defunct>
root       1017  0.2  0.8 436392 20408 ?        Ss   03:44   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root       1018  0.0  0.1 153404  2432 ?        Ss   03:44   0:00 pure-ftpd (SERVER)
root       1020  0.0  0.1 111304  3032 ?        Ss   03:44   0:00 /usr/sbin/sshd -D
root       2138  0.0  0.1 111304  2964 ?        Ss   03:45   0:00  \_ sshd: [accepted]
cpanelc+   1026  0.0  0.1   9568  2756 ?        Rs   03:44   0:00 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1212  4.6  0.0  25760  2168 ?        Ss   03:44   0:01 spamd-dormant: waiting for connections [5,6] --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5,6
systuser   1218  0.0  0.4 157708 10080 ?        S    03:44   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1233  0.7  1.7 408404 41488 ?        Ss   03:44   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1234  0.2  0.7 387528 19184 ?        Ss   03:44   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.2  0.2 183900  5980 ?        Ss   03:44   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1265  0.5  0.7 208064 19160 ?        Ss   03:44   0:00 tailwatchd
root       1267  0.1  0.1 167452  3916 ?        Ss   03:44   0:00 dnsadmin - dormant mode
root       1713  0.0  0.3 299272  7748 ?        Ss   03:44   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1728  0.0  0.1 130416  2732 ?        SN   03:44   0:00 cpanellogd - waiting for child to process logs
root       2082  0.5  0.5 149992 12104 ?        RN   03:44   0:00  \_ cpanellogd - waiting for child to process logs
mysql      1773  0.0  0.0  55312  1888 ?        Ss   03:44   0:00 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
mysql      1782  1.5  1.4 692116 33888 ?        Rl   03:44   0:00 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1968  0.3  1.1 266984 26724 ?        Ss   03:44   0:00 /usr/sbin/httpd -k start
root       1970  0.0  0.0  12748   788 ?        S    03:44   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1971  0.0  0.0  12732   788 ?        S    03:44   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1972  0.0  0.0  12756   788 ?        S    03:44   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1977  0.2  0.4  53340 11640 ?        S    03:44   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     1978  0.0  1.3 277472 32368 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody     1979  0.0  1.3 277236 31728 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody     1980  0.0  1.3 277216 31804 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody     1981  0.0  1.3 277316 32632 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody     1982  0.0  1.3 277316 32576 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
nobody     2117  0.0  1.3 277280 31896 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
root       2041  0.6  1.1 180960 28924 ?        Ss   03:44   0:00 lfd - sleeping
## mysql stats
## network stats
      1 10.30.9.122 TIME_WAIT
      1 10.30.9.138 TIME_WAIT
      1 114.119.133.35 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.161.65.165 TIME_WAIT
      1 74.7.227.82 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 07-Nov-2025 03:45:04 WAT
   Restart Time: Friday, 07-Nov-2025 03:44:42 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 21 seconds
   Server load: 3.72 0.92 0.31
   Total accesses: 33 - Total Traffic: 111 kB - Total Duration: 8866
   CPU Usage: u.09 s.04 cu.14 cs.14 - 1.95% CPU load
   1.57 requests/sec - 5.3 kB/second - 3444 B/request - 268.667 ms/request
   5 requests currently being processed, 0 workers gracefully restarting, 1 idle workers

_KKKKW..........................................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv PID   Acc  M CPU  SS Req Dur  Conn Child Slot     Client      Protocol              VHost                                          Request
   0-0 1978 0/7/7 _ 0.01 1  2   262  0.0  0.04  0.04 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   1-0 1979 1/4/4 K 0.00 4  30  114  5.7  0.02  0.02 104.210.140.128 http/1.1 international.cloudsms.com.ng:4 GET /robots.txt HTTP/1.1
   2-0 1980 1/5/5 K 0.01 4  0   1051 0.9  0.02  0.02 104.210.140.137 http/1.1 international.cloudsms.com.ng:8 GET /robots.txt HTTP/1.1
   3-0 1981 7/7/7 K 0.14 0  733 2735 11.8 0.01  0.01 217.182.195.126 http/1.1 cloudsms.com.ng:443             GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   4-0 1982 8/8/8 K 0.18 0  661 4623 13.0 0.01  0.01 217.182.195.126 http/1.1 cloudsms.com.ng:443             GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   5-0 2117 0/2/2 W 0.00 0  0   79   0.0  0.01  0.01 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 16
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 286 seconds, (range: 277...294)
   index usage: 0%, cache usage: 0%
   total entries stored since starting: 16
   total entries replaced since starting: 0
   total entries expired since starting: 0
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 0 miss
   total removes since starting: 0 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit