403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-10.00.45.txt
 ## swap threshold exceeded
## server overview
2025-11-10.00.45 load[0] mem[61/71] mysql[3/11] httpd[10]
              total        used        free      shared  buff/cache   available
Mem:           2363        1324         249          72         789         783
Swap:          1999        1517         482
 00:45:01 up  7:07,  0 users,  load average: 0.50, 0.74, 0.83
## system overview
top - 00:45:01 up  7:07,  0 users,  load average: 0.50, 0.74, 0.83
Tasks: 203 total,   1 running, 201 sleeping,   0 stopped,   1 zombie
%Cpu(s): 74.2 us, 25.8 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   233292 free,  1376844 used,   810164 buff/cache
KiB Swap:  2047996 total,   493820 free,  1554176 used.   781624 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1929 mysql     20   0 1458592 271092   3512 S 106.2 11.2   7:35.28 /usr/sbin+
 38587 nigeria   20   0  400652  15940  10220 S  12.5  0.7   0:00.05 /opt/cpan+
 38673 cloudw    20   0  350316  16620  10324 S  12.5  0.7   0:00.02 /opt/cpan+
 38585 pactpay   20   0  476724  17484  11728 S   6.2  0.7   0:00.02 /opt/cpan+
 38661 cloudsms  20   0  400652  15404  10000 S   6.2  0.6   0:00.01 /opt/cpan+
 38672 cloudsms  20   0  400652  15144   9844 S   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44420   3548   1600 S   0.0  0.1   0:37.37 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.13 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.59 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:30.59 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.07 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.58 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.95 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:14.00 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.44 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   260 root       0 -20       0      0      0 S   0.0  0.0   0:01.78 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:01.54 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:01.44 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   356 root      20   0   39500   3304   2988 S   0.0  0.1   0:12.53 /usr/lib/+
   390 root      20   0   45352    456    388 S   0.0  0.0   0:00.34 /usr/lib/+
   407 root      16  -4   55532    548    420 S   0.0  0.0   0:01.97 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 polkitd   20   0  612240   1160    760 S   0.0  0.0   0:03.47 /usr/lib/+
   471 root      20   0  224144   5748   1204 S   0.0  0.2   0:00.32 queueproc+
   480 root      20   0  152780    324    280 S   0.0  0.0   0:00.01 /usr/sbin+
   484 root      20   0   21540    492    408 S   0.0  0.0   0:00.57 /usr/sbin+
   489 root      20   0   52852    392    280 S   0.0  0.0   0:00.01 /usr/sbin+
   496 dbus      20   0   57028   1508    772 S   0.0  0.1   0:13.52 /usr/bin/+
   497 rpc       20   0   69256    196    136 S   0.0  0.0   0:00.02 /sbin/rpc+
   506 nscd      20   0 1340640   2128    888 S   0.0  0.1   0:12.06 /usr/sbin+
   510 root      20   0  195208    168    168 S   0.0  0.0   0:00.00 /usr/sbin+
   512 root      20   0    4388    240    236 S   0.0  0.0   0:00.00 /usr/sbin+
   536 root      20   0   24896   1548    912 S   0.0  0.1   0:06.00 /usr/lib/+
   545 root      20   0   24208    208    180 S   0.0  0.0   0:00.00 /usr/sbin+
   547 root      20   0  124480    584    452 S   0.0  0.0   0:00.73 /usr/sbin+
   563 root      20   0  114704    292    292 S   0.0  0.0   0:00.03 /bin/bash
   565 root      20   0  108296    276    272 S   0.0  0.0   0:00.00 /sbin/age+
   606 mailnull  20   0   90824   4108   1076 S   0.0  0.2   0:00.52 /usr/sbin+
   641 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   687 root       0 -20       0      0      0 S   0.0  0.0   0:02.34 [loop0]
   718 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   719 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
  1039 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.01 /usr/loca+
  1041 memcach+  20   0  342400    164    164 S   0.0  0.0   0:00.56 /usr/bin/+
  1042 systuser  20   0  114016  14500   2736 S   0.0  0.6   0:05.84 /usr/loca+
  1044 systuser  20   0   11796     40      0 S   0.0  0.0   0:00.01 /usr/loca+
  1045 root      20   0   51508    720    556 S   0.0  0.0   0:00.30 /usr/sbin+
  1046 root      20   0  572372   1252    680 S   0.0  0.1   0:02.23 /usr/bin/+
  1054 systuser  20   0  111608     76      0 S   0.0  0.0   0:00.00 /usr/loca+
  1059 root      20   0  111304    656    556 S   0.0  0.0   0:02.88 /usr/sbin+
  1064 root      20   0  445028    244    244 S   0.0  0.0   0:00.05 sw-engine+
  1065 root      20   0 1763032 114544    776 S   0.0  4.7   0:13.79 /usr/loca+
  1077 root      20   0  385496    944    728 S   0.0  0.0   0:00.75 php-fpm: +
  1087 cpanelc+  20   0   10528   3540   2356 S   0.0  0.1   0:20.75 /usr/loca+
  1092 root      20   0  436392   1520   1304 S   0.0  0.1   0:00.78 php-fpm: +
  1099 named     20   0  711612  38948   2088 S   0.0  1.6   0:13.01 /usr/sbin+
  1100 root      20   0  290128   3928   2804 S   0.0  0.2   0:06.41 /usr/sbin+
  1104 root      20   0  397344   3048    788 S   0.0  0.1   0:05.17 php-fpm: +
  1108 root      20   0  392856    820    636 S   0.0  0.0   0:00.69 php-fpm: +
  1110 systuser  20   0   14068     40      0 S   0.0  0.0   0:00.01 /usr/loca+
  1112 telegraf  20   0 5654304  39496   5880 S   0.0  1.6   0:13.85 /usr/loca+
  1113 root      20   0  261424   7284   1932 S   0.0  0.3   0:06.43 cpsrvd (S+
  1114 root      20   0  153404    532    448 S   0.0  0.0   0:00.56 pure-ftpd+
  1127 root      20   0  386112    860    648 S   0.0  0.0   0:00.67 php-fpm: +
  1151 dovenull  20   0   47280   2972   2064 S   0.0  0.1   0:00.51 dovecot/p+
  1152 dovenull  20   0   48148   4212   2452 S   0.0  0.2   0:00.36 dovecot/i+
  1153 dovecot   20   0   10320    496    388 S   0.0  0.0   0:00.07 dovecot/a+
  1154 root      20   0   10452    732    532 S   0.0  0.0   0:00.31 dovecot/l+
  1155 dovenull  20   0   47296   3444   2340 S   0.0  0.1   0:00.44 dovecot/p+
  1156 dovenull  20   0   48152   4236   2472 S   0.0  0.2   0:00.32 dovecot/i+
  1159 root      20   0   24572   2772    624 S   0.0  0.1   0:00.16 dovecot/c+
  1160 dovecot   20   0   13568    772    544 S   0.0  0.0   0:00.05 dovecot/s+
  1226 dovecot   20   0   41168   1608   1112 S   0.0  0.1   0:00.52 dovecot/a+
  1267 wp-tool+  20   0  410480  37148   1960 S   0.0  1.5   0:21.15 /usr/bin/+
  1268 wp-tool+  20   0  387556   5148   1824 S   0.0  0.2   0:00.26 /usr/bin/+
  1277 root      20   0  248136 117936   1424 S   0.0  4.9   0:05.88 /usr/loca+
  1288 systuser  20   0  157708   3016    992 S   0.0  0.1   0:00.12 SonarPush+
  1339 root      20   0  210416  13952   2492 S   0.0  0.6   0:04.00 tailwatchd
  1342 root      20   0  167452   1512    912 S   0.0  0.1   0:00.39 dnsadmin +
  1344 root      20   0  262224  23000   5076 S   0.0  1.0   0:00.99 cpdavd - +
  1784 root      38  18  130416   1508    764 S   0.0  0.1   0:00.06 cpanellog+
  1800 root      20   0  299272    984    604 S   0.0  0.0   0:00.70 php-fpm: +
  2055 root      20   0  266992   8936    904 S   0.0  0.4   0:01.49 /usr/sbin+
  2059 root      20   0   12828    564    444 S   0.0  0.0   0:02.43 /usr/loca+
  2060 root      20   0   12732    472    396 S   0.0  0.0   0:02.03 /usr/loca+
  2061 root      20   0   12864    528    400 S   0.0  0.0   0:02.27 /usr/loca+
  2072 root      20   0   53268    312    312 S   0.0  0.0   0:00.05 /usr/loca+
  4358 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kworker/+
  5954 root      20   0  265100 128784   2368 S   0.0  5.3   0:03.29 spamd chi+
  5955 root      20   0  261996 127796   2276 S   0.0  5.3   0:00.63 spamd chi+
  8927 nobody    20   0  277684  21432   4932 S   0.0  0.9   0:03.38 /usr/sbin+
 12610 root      20   0  181432  29584   2368 S   0.0  1.2   0:02.73 lfd - sle+
 12895 root      20   0 1341636  11172    600 S   0.0  0.5   0:00.08 /usr/bin/+
 12931 root      20   0 1277312  12012    596 S   0.0  0.5   0:00.08 /usr/bin/+
 13390 nobody    20   0  277692  21204   4992 S   0.0  0.9   0:03.05 /usr/sbin+
 14576 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 14614 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 14618 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.44 [kworker]
 19017 nobody    20   0  277892  20952   4908 S   0.0  0.9   0:02.58 /usr/sbin+
 19897 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25702 nobody    20   0  277752  20572   4656 S   0.0  0.8   0:01.90 /usr/sbin+
 27236 nobody    20   0  277876  20476   4628 S   0.0  0.8   0:01.47 /usr/sbin+
 29393 nobody    20   0  277892  20656   4616 S   0.0  0.9   0:00.99 /usr/sbin+
 29619 nobody    20   0  277916  20604   4520 S   0.0  0.9   0:00.99 /usr/sbin+
 30296 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 32052 nobody    20   0  277752  20096   4196 S   0.0  0.8   0:00.89 /usr/sbin+
 32437 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 33220 nobody    20   0  277752  19980   4160 S   0.0  0.8   0:00.96 /usr/sbin+
 33393 nobody    20   0  277752  20244   4384 S   0.0  0.8   0:00.60 /usr/sbin+
 33580 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 33690 nobody    20   0  277756  20056   4248 S   0.0  0.8   0:00.59 /usr/sbin+
 35238 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 35349 nobody    20   0  277752  20124   4280 S   0.0  0.8   0:00.40 /usr/sbin+
 37020 nobody    20   0  277908  19824   4056 S   0.0  0.8   0:00.19 /usr/sbin+
 37036 nobody    20   0  277512  19548   3968 S   0.0  0.8   0:00.16 /usr/sbin+
 37037 nobody    20   0  277748  19864   4068 S   0.0  0.8   0:00.14 /usr/sbin+
 37560 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 38187 healtho+  20   0  459288  69464   4220 S   0.0  2.9   0:05.35 php-fpm: +
 38195 healtho+  20   0  459804  70008   4260 S   0.0  2.9   0:04.94 php-fpm: +
 38233 root      20   0  111304   4444   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 38234 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 38410 mailnull  20   0   91204   5680   2448 S   0.0  0.2   0:00.00 /usr/sbin+
 38461 root      20   0  162436   5824   4332 S   0.0  0.2   0:00.01 sshd: roo+
 38462 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: roo+
 38477 nigeria   20   0  397064   5456   2400 S   0.0  0.2   0:00.00 php-fpm: +
 38508 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 38509 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 38513 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 38520 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 38522 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38523 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38524 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38525 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38526 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38527 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38528 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38530 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38531 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 38532 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 38534 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38545 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 38547 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 38548 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 38549 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38550 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 38551 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38552 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 38553 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38554 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38558 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 38559 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38562 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 38568 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 38570 root      20   0  188200  11076   5148 S   0.0  0.5   0:00.01 /usr/loca+
 38574 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 38579 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 38580 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 38608 root      20   0  160224   2328   1632 S   0.0  0.1   0:00.00 top -n 2 +
 38656 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 38659 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 38660 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 38670 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 38671 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 38674 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 38676 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 50336 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 93810 root      20   0       0      0      0 S   0.0  0.0   0:00.24 [kworker/+
 96079 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov09   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov09   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov09   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov09   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov09   0:30  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov09   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov09   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov09   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov09   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov09   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov09   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov09   0:14  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov09   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov09   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov09   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov09   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov09   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [scsi_tmf_1]
root        252  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [ttm_swap]
root        260  0.0  0.0      0     0 ?        S<   Nov09   0:01  \_ [kworker/1:1H]
root        269  0.0  0.0      0     0 ?        S<   Nov09   0:01  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov09   0:01  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [xprtiod]
root        641  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [kvm-irqfd-clean]
root        687  0.0  0.0      0     0 ?        S<   Nov09   0:02  \_ [loop0]
root        718  0.0  0.0      0     0 ?        S    Nov09   0:00  \_ [jbd2/loop0-8]
root        719  0.0  0.0      0     0 ?        S<   Nov09   0:00  \_ [ext4-rsv-conver]
root      50336  0.0  0.0      0     0 ?        S    Nov09   0:00  \_ [kworker/u200:1]
root      93810  0.0  0.0      0     0 ?        S    Nov09   0:00  \_ [kworker/0:1]
root      96079  0.0  0.0      0     0 ?        S    Nov09   0:00  \_ [kworker/1:5]
root       4358  0.0  0.0      0     0 ?        S    Nov09   0:00  \_ [kworker/0:2]
root      14576  0.0  0.0      0     0 ?        S    00:03   0:00  \_ [kworker/1:0]
root      19897  0.0  0.0      0     0 ?        S    00:12   0:00  \_ [kworker/1:1]
root      30296  0.0  0.0      0     0 ?        S    00:30   0:00  \_ [kworker/u200:0]
root      32437  0.0  0.0      0     0 ?        S    00:34   0:00  \_ [kworker/0:0]
root      33580  0.0  0.0      0     0 ?        S    00:36   0:00  \_ [kworker/1:2]
root      35238  0.0  0.0      0     0 ?        S    00:39   0:00  \_ [kworker/0:3]
root      37560  0.0  0.0      0     0 ?        S    00:43   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44420  3548 ?        Ss   Nov09   0:37 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.1  39500  3304 ?        Ss   Nov09   0:12 /usr/lib/systemd/systemd-journald
root        390  0.0  0.0  45352   456 ?        Ss   Nov09   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   548 ?        S<sl Nov09   0:01 /sbin/auditd
polkitd     470  0.0  0.0 612240  1160 ?        Ssl  Nov09   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        471  0.0  0.2 224144  5748 ?        Ss   Nov09   0:00 queueprocd - waiting up to 60s to process a task
root        480  0.0  0.0 152780   324 ?        Ss   Nov09   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        484  0.0  0.0  21540   492 ?        Ss   Nov09   0:00 /usr/sbin/irqbalance --foreground
root        489  0.0  0.0  52852   392 ?        Ss   Nov09   0:00 /usr/sbin/smartd -n -q never
dbus        496  0.0  0.0  57028  1508 ?        Ss   Nov09   0:13 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         497  0.0  0.0  69256   196 ?        Ss   Nov09   0:00 /sbin/rpcbind -w
nscd        506  0.0  0.0 1340640 2128 ?        Ssl  Nov09   0:12 /usr/sbin/nscd
root        510  0.0  0.0 195208   168 ?        Ssl  Nov09   0:00 /usr/sbin/gssproxy -D
root        512  0.0  0.0   4388   240 ?        Ss   Nov09   0:00 /usr/sbin/acpid
root        536  0.0  0.0  24896  1548 ?        Ss   Nov09   0:06 /usr/lib/systemd/systemd-logind
root        545  0.0  0.0  24208   208 ?        Ss   Nov09   0:00 /usr/sbin/atd -f
root        547  0.0  0.0 124480   584 ?        Ss   Nov09   0:00 /usr/sbin/crond -n
root      38520  0.0  0.0 183048  2144 ?        S    00:45   0:00  \_ /usr/sbin/CROND -n
root      38552  0.0  0.0 113284  1212 ?        Ss   00:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      38568  0.0  0.0 108052   360 ?        S    00:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      38579  0.0  0.0 113288  1520 ?        S    00:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      38677  0.0  0.0 153840  2092 ?        R    00:45   0:00  |               \_ ps auxf
root      38522  0.0  0.0 183048  2148 ?        S    00:45   0:00  \_ /usr/sbin/CROND -n
root      38554  0.0  0.0  20164   808 ?        Ss   00:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      38523  0.0  0.0 183048  2148 ?        S    00:45   0:00  \_ /usr/sbin/CROND -n
root      38553  0.0  0.0  20164   808 ?        Ss   00:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      38524  0.0  0.0 183048  2144 ?        S    00:45   0:00  \_ /usr/sbin/CROND -n
root      38545  0.0  0.0  20164   984 ?        Ss   00:45   0:00  |   \_ jailshell (cloudsms) [38659] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  38659  0.0  0.0  20164   256 ?        S    00:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  38660  0.0  0.0 113284  1208 ?        S    00:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  38661  0.0  0.6 400652 15404 ?        S    00:45   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      38525  0.0  0.0 183048  2144 ?        S    00:45   0:00  \_ /usr/sbin/CROND -n
root      38551  0.0  0.0  20164   808 ?        Ss   00:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      38526  0.0  0.0 183048  2144 ?        S    00:45   0:00  \_ /usr/sbin/CROND -n
root      38547  0.0  0.0  20164   984 ?        Ss   00:45   0:00  |   \_ jailshell (cloudsms) [38670] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  38670  0.0  0.0  20164   256 ?        S    00:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  38671  0.0  0.0 113284  1212 ?        S    00:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  38672  0.0  0.6 400652 15144 ?        S    00:45   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      38527  0.0  0.0 183048  2140 ?        S    00:45   0:00  \_ /usr/sbin/CROND -n
root      38559  0.0  0.0  20164   808 ?        Ss   00:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      38528  0.0  0.0 183048  2140 ?        S    00:45   0:00  \_ /usr/sbin/CROND -n
root      38550  0.0  0.0  20164   804 ?        Ss   00:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      38530  0.0  0.0 183048  2140 ?        S    00:45   0:00  \_ /usr/sbin/CROND -n
root      38549  0.0  0.0  20164   808 ?        Ss   00:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      38531  0.0  0.0 183048  2136 ?        S    00:45   0:00  \_ /usr/sbin/CROND -n
root      38562  0.0  0.0 113284  1208 ?        Ss   00:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      38570  0.0  0.4 188200 11076 ?        S    00:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      38608  0.0  0.0 160224  2328 ?        S    00:45   0:00  |           \_ top -n 2 -b -c
root      38532  0.0  0.0 183048  2144 ?        S    00:45   0:00  \_ /usr/sbin/CROND -n
root      38558  0.0  0.0  20164   960 ?        Ss   00:45   0:00  |   \_ jailshell (pactpay) [38574] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   38574  0.0  0.0  20164   256 ?        S    00:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   38585  0.0  0.7 476724 17484 ?        S    00:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      38534  0.0  0.0 183048  2140 ?        S    00:45   0:00  \_ /usr/sbin/CROND -n
root      38548  0.0  0.0  20164   968 ?        Ss   00:45   0:00      \_ jailshell (nigeria) [38580] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   38580  0.0  0.0  20164   264 ?        S    00:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   38587  0.0  0.6 400652 15940 ?        S    00:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        563  0.0  0.0 114704   292 ttyS0    Ss+  Nov09   0:00 /bin/bash
root        565  0.0  0.0 108296   276 tty1     Ss+  Nov09   0:00 /sbin/agetty --noclear tty1 linux
mailnull    606  0.0  0.1  90824  4108 ?        Ss   Nov09   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  38410  0.0  0.2  91204  5680 ?        S    00:44   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser   1039  0.0  0.0 112524    72 ?        Ssl  Nov09   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+   1041  0.0  0.0 342400   164 ?        Ssl  Nov09   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser   1042  0.0  0.5 114016 14500 ?        Ssl  Nov09   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser   1044  0.0  0.0  11796    40 ?        Ssl  Nov09   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root       1045  0.0  0.0  51508   720 ?        Ss   Nov09   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1151  0.0  0.1  47280  2972 ?        S    Nov09   0:00  \_ dovecot/pop3-login
dovenull   1152  0.0  0.1  48148  4212 ?        S    Nov09   0:00  \_ dovecot/imap-login
dovecot    1153  0.0  0.0  10320   496 ?        S    Nov09   0:00  \_ dovecot/anvil
root       1154  0.0  0.0  10452   732 ?        S    Nov09   0:00  \_ dovecot/log
dovenull   1155  0.0  0.1  47296  3444 ?        S    Nov09   0:00  \_ dovecot/pop3-login
dovenull   1156  0.0  0.1  48152  4236 ?        S    Nov09   0:00  \_ dovecot/imap-login
root       1159  0.0  0.1  24572  2772 ?        S    Nov09   0:00  \_ dovecot/config
dovecot    1160  0.0  0.0  13568   772 ?        S    Nov09   0:00  \_ dovecot/stats
dovecot    1226  0.0  0.0  41168  1608 ?        S    Nov09   0:00  \_ dovecot/auth
root       1046  0.0  0.0 572372  1252 ?        Ssl  Nov09   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1054  0.0  0.0 111608    76 ?        Ssl  Nov09   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root       1059  0.0  0.0 111304   656 ?        Ss   Nov09   0:02 /usr/sbin/sshd -D
root      38233  0.0  0.1 111304  4444 ?        Ss   00:44   0:00  \_ sshd: [accepted]
sshd      38234  0.0  0.1 115644  2628 ?        S    00:44   0:00  |   \_ sshd: [net]
root      38461  0.1  0.2 162436  5824 ?        Ss   00:44   0:00  \_ sshd: root [priv]
sshd      38462  0.0  0.1 115644  2632 ?        S    00:44   0:00  |   \_ sshd: root [net]
root      38508  0.0  0.1 111304  4264 ?        Ss   00:44   0:00  \_ sshd: [accepted]
sshd      38509  0.0  0.1 115644  2628 ?        S    00:44   0:00  |   \_ sshd: [net]
root      38674  0.0  0.1 111304  4260 ?        Ss   00:45   0:00  \_ sshd: [accepted]
sshd      38676  0.0  0.1 115644  2624 ?        S    00:45   0:00      \_ sshd: [net]
root       1064  0.0  0.0 445028   244 ?        Ss   Nov09   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root       1065  0.0  4.7 1763032 114544 ?      Ssl  Nov09   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1077  0.0  0.0 385496   944 ?        Ss   Nov09   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+   1087  0.0  0.1  10528  3540 ?        Ss   Nov09   0:20 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root       1092  0.0  0.0 436392  1520 ?        Ss   Nov09   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named      1099  0.0  1.6 711612 38948 ?        Ssl  Nov09   0:13 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root       1100  0.0  0.1 290128  3928 ?        Ssl  Nov09   0:06 /usr/sbin/rsyslogd -n
root       1104  0.0  0.1 397344  3048 ?        Ss   Nov09   0:05 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  38187 11.6  2.8 459288 69464 ?        S    00:44   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  38195 10.9  2.8 459804 70008 ?        S    00:44   0:04  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   38477  0.0  0.2 397064  5456 ?        S    00:44   0:00  \_ php-fpm: pool nigeriadecide_org
root       1108  0.0  0.0 392856   820 ?        Ss   Nov09   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser   1110  0.0  0.0  14068    40 ?        Ssl  Nov09   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf   1112  0.0  1.6 5654304 39496 ?       SLsl Nov09   0:13 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1113  0.0  0.3 261424  7284 ?        Ss   Nov09   0:06 cpsrvd (SSL) - waiting for connections                   
root      38513  0.0  0.0      0     0 ?        Z    00:45   0:00  \_ [cpaneld - servi] <defunct>
root       1114  0.0  0.0 153404   532 ?        Ss   Nov09   0:00 pure-ftpd (SERVER)
root       1127  0.0  0.0 386112   860 ?        Ss   Nov09   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
wp-tool+   1267  0.0  1.5 410480 37148 ?        Ss   Nov09   0:21 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1268  0.0  0.2 387556  5148 ?        Ss   Nov09   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1277  0.0  4.8 248136 117936 ?       Ss   Nov09   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5954  0.0  5.3 265100 128784 ?       S    Nov09   0:03  \_ spamd child
root       5955  0.0  5.2 261996 127796 ?       S    Nov09   0:00  \_ spamd child
systuser   1288  0.0  0.1 157708  3016 ?        S    Nov09   0:00 SonarPush 0.6.12 [sleeping]
root       1339  0.0  0.5 210416 13952 ?        Ss   Nov09   0:04 tailwatchd
root       1342  0.0  0.0 167452  1512 ?        Ss   Nov09   0:00 dnsadmin - dormant mode
root       1344  0.0  0.9 262224 23000 ?        Ss   Nov09   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1784  0.0  0.0 130416  1508 ?        SN   Nov09   0:00 cpanellogd - sleeping for logs
root       1800  0.0  0.0 299272   984 ?        Ss   Nov09   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
mysql      1929  1.7 11.2 1458592 271092 ?      Sl   Nov09   7:35 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2055  0.0  0.3 266992  8936 ?        Ss   Nov09   0:01 /usr/sbin/httpd -k start
root       2059  0.0  0.0  12828   564 ?        S    Nov09   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2060  0.0  0.0  12732   472 ?        S    Nov09   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2061  0.0  0.0  12864   528 ?        S    Nov09   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2072  0.0  0.0  53268   312 ?        S    Nov09   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     8927  0.1  0.8 277684 21432 ?        S    Nov09   0:03  \_ /usr/sbin/httpd -k start
nobody    13390  0.1  0.8 277692 21204 ?        S    00:01   0:03  \_ /usr/sbin/httpd -k start
nobody    19017  0.1  0.8 277892 20952 ?        S    00:10   0:02  \_ /usr/sbin/httpd -k start
nobody    25702  0.1  0.8 277752 20572 ?        S    00:22   0:01  \_ /usr/sbin/httpd -k start
nobody    27236  0.1  0.8 277876 20476 ?        S    00:24   0:01  \_ /usr/sbin/httpd -k start
nobody    29393  0.1  0.8 277892 20656 ?        S    00:28   0:00  \_ /usr/sbin/httpd -k start
nobody    29619  0.1  0.8 277916 20604 ?        S    00:29   0:00  \_ /usr/sbin/httpd -k start
nobody    32052  0.1  0.8 277752 20096 ?        S    00:33   0:00  \_ /usr/sbin/httpd -k start
nobody    33220  0.1  0.8 277752 19980 ?        S    00:35   0:00  \_ /usr/sbin/httpd -k start
cloudw    38673  0.0  0.6 350316 16620 ?        S    00:45   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    33393  0.1  0.8 277752 20244 ?        S    00:35   0:00  \_ /usr/sbin/httpd -k start
nobody    33690  0.1  0.8 277756 20056 ?        S    00:36   0:00  \_ /usr/sbin/httpd -k start
nobody    35349  0.1  0.8 277752 20124 ?        S    00:39   0:00  \_ /usr/sbin/httpd -k start
nobody    37020  0.1  0.8 277908 19824 ?        S    00:42   0:00  \_ /usr/sbin/httpd -k start
nobody    37036  0.0  0.8 277512 19548 ?        S    00:42   0:00  \_ /usr/sbin/httpd -k start
nobody    37037  0.0  0.8 277748 19864 ?        S    00:42   0:00  \_ /usr/sbin/httpd -k start
oysipao+  14614  0.0  0.0   3148   416 ?        Ss   Nov09   0:00 [kworker]
oysipao+  14618  0.0  0.0   3152   424 ?        S    Nov09   0:00  \_ [kworker]
root      12610  0.1  1.2 181432 29584 ?        Ss   00:00   0:02 lfd - sleeping
root      12895  0.0  0.4 1341636 11172 ?       Ssl  00:00   0:00 /usr/bin/cspdaemon
root      12931  0.0  0.4 1277312 12012 ?       Ssl  00:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 25612  Threads: 5  Questions: 3296300  Slow queries: 0  Opens: 7727  Flush tables: 1  Open tables: 2000  Queries per second avg: 128.701
*************************** 1. row ***************************
     Id: 46386
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 46393
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 3. row ***************************
     Id: 46394
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 46396
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 103.109.180.104 TIME_WAIT
      1 114.119.139.59 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 ::1 TIME_WAIT
      1 223.109.252.189 TIME_WAIT
      1 3.229.164.203 TIME_WAIT
      1 54.39.89.193 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     37 157.20.32.131 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 10-Nov-2025 00:45:01 WAT
   Restart Time: Sunday, 09-Nov-2025 17:38:14 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 7 hours 6 minutes 47 seconds
   Server load: 0.50 0.74 0.83
   Total accesses: 103990 - Total Traffic: 2.0 GB - Total Duration: 52786448
   CPU Usage: u13.68 s6.1 cu1065.35 cs768.75 - 7.24% CPU load
   4.06 requests/sec - 80.0 kB/second - 19.7 kB/request - 507.611 ms/request
   10 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

KW.R._WK____KKKK.K..............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS  Req   Dur   Conn  Child  Slot     Client     Protocol              VHost                              Request
   0-0  32052 2/170/6114 K 3.98  0    283 2736034 63.4  3.79  127.86 66.249.70.39  http/1.1 support.cloudware.ng:443        GET /?c=4073201824 HTTP/1.1
   1-0  33220 1/175/6160 W 4.17  0    0   3016321 34.1  4.09  115.08 66.249.70.36  http/1.1 support.cloudware.ng:443        GET /?c=2933123937 HTTP/1.1
   2-0  -     0/0/6223   . 0.00  154  0   2838886 0.0   0.00  113.36 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   3-0  27236 0/395/5788 R 6.16  3    262 2837714 0.0   5.93  110.62 157.20.32.131 http/1.1
   4-0  -     0/0/5281   . 0.00  134  0   2889292 0.0   0.00  96.45  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   5-0  13390 0/705/5390 _ 12.75 0    346 2850833 0.0   12.59 107.02 157.20.32.131 http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   6-0  35349 0/85/5079  W 2.11  0    0   3222103 0.0   1.64  104.63 ::1           http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   7-0  25702 2/539/5064 K 8.50  1    314 2474504 64.5  7.29  91.32  66.249.70.38  http/1.1 support.cloudware.ng:443        GET /?c=2327845539 HTTP/1.1
   8-0  37020 0/37/4976  _ 0.74  0    0   2683580 0.0   0.81  95.60  127.0.0.1     http/1.1 chs1.nescrow.com.ng:80          GET /whm-server-status HTTP/1.0
   9-0  29393 0/220/4785 _ 3.57  1    1   2169255 0.0   3.95  85.83  127.0.0.1     http/1.1 chs1.nescrow.com.ng:80          GET / HTTP/1.1
   10-0 37036 0/37/4574  _ 0.59  1    1   2198428 0.0   0.66  86.09  127.0.0.1     http/1.1 chs1.nescrow.com.ng:80          GET / HTTP/1.1
   11-0 33393 0/125/4492 _ 2.76  0    0   2125795 0.0   2.50  84.84  ::1           http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   12-0 37037 2/38/4776  K 0.43  3    274 2422490 64.3  0.54  98.04  66.249.70.37  http/1.1 support.cloudware.ng:443        GET /?c=828823799 HTTP/1.1
   13-0 29619 3/212/3550 K 4.11  0    18  1677103 23.1  4.01  69.09  20.222.66.73  http/1.1 farmrecords.staging.cloudware.n GET /cgi-sys/suspendedpage.cgi HTTP/1.1
   14-0 8927  1/815/3685 K 14.29 0    308 1792587 38.0  14.42 66.04  66.249.70.32  http/1.1 support.cloudware.ng:443        GET /?c=2419077925 HTTP/1.1
   15-0 33690 4/122/3279 K 2.60  2    270 1688554 124.9 2.48  69.94  66.249.70.35  http/1.1 support.cloudware.ng:443        GET /?c=38134802 HTTP/1.1
   16-0 -     0/0/1681   . 0.00  885  0   889074  0.0   0.00  29.87  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   17-0 19017 4/683/2938 K 10.96 0    0   1618459 2.1   10.57 64.84  20.222.66.73  http/1.1 farmrecords.staging.cloudware.n GET /as.php HTTP/1.1
   18-0 -     0/0/2429   . 0.00  812  0   1245596 0.0   0.00  44.34  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   19-0 -     0/0/1764   . 0.00  1971 0   842816  0.0   0.00  32.89  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   20-0 -     0/0/881    . 0.00  2664 0   492633  0.0   0.00  16.80  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 -     0/0/1931   . 0.00  2056 0   959102  0.0   0.00  38.88  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   22-0 -     0/0/1067   . 0.00  6197 0   424949  0.0   0.00  15.56  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 -     0/0/1172   . 0.00  5937 0   611077  0.0   0.00  23.41  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-0 -     0/0/1195   . 0.00  6104 0   744521  0.0   0.00  27.73  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 -     0/0/1072   . 0.00  6130 0   484929  0.0   0.00  20.56  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 -     0/0/234    . 0.00  6110 0   126789  0.0   0.00  3.84   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/540    . 0.00  5962 0   246159  0.0   0.00  8.01   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -     0/0/201    . 0.00  6213 0   140180  0.0   0.00  3.67   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/551    . 0.00  4643 0   315417  0.0   0.00  10.65  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/745    . 0.00  6148 0   424450  0.0   0.00  16.16  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/369    . 0.00  4711 0   203654  0.0   0.00  14.46  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/91     . 0.00  5961 0   77916   0.0   0.00  1.81   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -     0/0/38     . 0.00  6230 0   52569   0.0   0.00  0.74   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -     0/0/416    . 0.00  6215 0   219961  0.0   0.00  7.08   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/330    . 0.00  6233 0   151003  0.0   0.00  4.54   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/353    . 0.00  6149 0   179496  0.0   0.00  4.81   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/50     . 0.00  7765 0   54853   0.0   0.00  1.02   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/86     . 0.00  7774 0   54435   0.0   0.00  1.38   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/239    . 0.00  7799 0   142017  0.0   0.00  4.68   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/160    . 0.00  7754 0   122302  0.0   0.00  3.62   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/186    . 0.00  7766 0   126009  0.0   0.00  3.90   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/467    . 0.00  7794 0   267786  0.0   0.00  9.40   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/26     . 0.00  7779 0   30080   0.0   0.00  0.41   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/176    . 0.00  7159 0   98561   0.0   0.00  2.95   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/77     . 0.00  7596 0   77546   0.0   0.00  1.94   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/9      . 0.00  7756 0   28898   0.0   0.00  0.05   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/4      . 0.00  7795 0   25201   0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/26     . 0.00  7783 0   36605   0.0   0.00  0.62   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -     0/0/178    . 0.00  7347 0   50025   0.0   0.00  2.00   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -     0/0/283    . 0.00  7792 0   120597  0.0   0.00  7.34   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -     0/0/6      . 0.00  7772 0   29915   0.0   0.00  0.08   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -     0/0/3      . 0.00  7808 0   14364   0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -     0/0/1113   . 0.00  3626 0   555530  0.0   0.00  21.12  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -     0/0/5      . 0.00  7791 0   25890   0.0   0.00  0.05   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-0 -     0/0/9      . 0.00  7763 0   5381    0.0   0.00  0.19   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-0 -     0/0/5      . 0.00  7810 0   1816    0.0   0.00  0.05   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-0 -     0/0/7      . 0.00  7796 0   11491   0.0   0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   58-0 -     0/0/5      . 0.00  7782 0   975     0.0   0.00  0.07   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   59-0 -     0/0/6      . 0.00  7777 0   10501   0.0   0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-0 -     0/0/2      . 0.00  7788 0   5316    0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-0 -     0/0/1      . 0.00  7809 0   0       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   62-0 -     0/0/2      . 0.00  7789 0   4699    0.0   0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   63-0 -     0/0/8      . 0.00  7751 0   16851   0.0   0.00  0.16   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   64-0 -     0/0/440    . 0.00  6160 0   250262  0.0   0.00  9.28   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   65-0 -     0/0/4      . 0.00  7761 0   5604    0.0   0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   66-0 -     0/0/1      . 0.00  7806 0   0       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   67-0 -     0/0/11     . 0.00  7731 0   10146   0.0   0.00  0.28   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   68-0 -     0/0/2      . 0.00  7785 0   5977    0.0   0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   69-0 -     0/0/2      . 0.00  7784 0   1542    0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   70-0 -     0/0/2      . 0.00  7786 0   4651    0.0   0.00  0.11   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   71-0 -     0/0/242    . 0.00  6805 0   118411  0.0   0.00  4.51   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   72-0 -     0/0/2      . 0.00  7790 0   14      0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   73-0 -     0/0/1      . 0.00  7807 0   0       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   74-0 -     0/0/2      . 0.00  7787 0   5844    0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   75-0 -     0/0/8      . 0.00  7757 0   3612    0.0   0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   76-0 -     0/0/223    . 0.00  6810 0   101392  0.0   0.00  3.20   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   77-0 -     0/0/3      . 0.00  7771 0   5716    0.0   0.00  0.12   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   78-0 -     0/0/690    . 0.00  6120 0   278428  0.0   0.00  7.98   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00  7805 0   0       0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   80-0 -     0/0/3      . 0.00  7770 5   2937    0.0   0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 768
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 12 seconds, (range: 0...69)
   index usage: 13%, cache usage: 18%
   total entries stored since starting: 58561
   total entries replaced since starting: 0
   total entries expired since starting: 57773
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 9 hit, 154 miss
   total removes since starting: 20 hit, 21 miss
Youez - 2016 - github.com/yon3zu
LinuXploit