403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-10.01.06.txt
 ## mem threshold exceeded
## server overview
2025-11-10.01.06 load[1] mem[83/30] mysql[1/7] httpd[8]
              total        used        free      shared  buff/cache   available
Mem:           2363        1947          82          18         333         242
Swap:          1999         685        1314
 01:06:01 up 12 min,  0 users,  load average: 1.51, 0.85, 0.62
## system overview
top - 01:06:01 up 12 min,  0 users,  load average: 1.51, 0.85, 0.62
Tasks: 206 total,   3 running, 202 sleeping,   0 stopped,   1 zombie
%Cpu(s): 51.6 us, 29.0 sy,  0.0 ni,  3.2 id, 16.1 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    85340 free,  1979416 used,   355544 buff/cache
KiB Swap:  2047996 total,  1346556 free,   701440 used.   263048 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1851 mysql     20   0 1459040 194868   3560 S  73.3  8.1   0:11.33 /usr/sbin+
  9659 nigeria   20   0  400652  15936  10220 S  13.3  0.7   0:00.03 /opt/cpan+
     1 root      20   0   44420   3436   1520 S   6.7  0.1   0:02.06 /usr/lib/+
    36 root      20   0       0      0      0 R   6.7  0.0   0:04.11 [kswapd0]
   357 root      20   0   40240   4360   4028 S   6.7  0.2   0:00.48 /usr/lib/+
  9651 pactpay   20   0  476724  17484  11728 S   6.7  0.7   0:00.02 /opt/cpan+
  9661 cloudsms  20   0  400652  15404  10000 S   6.7  0.6   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     5 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:00.85 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    30 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
    31 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   109 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kauditd]
   227 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   253 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.43 [kworker/+
   273 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/vda+
   274 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:00.36 [kworker/+
   385 root      20   0   45352    264    116 S   0.0  0.0   0:00.35 /usr/lib/+
   411 root      16  -4   55532    348    236 S   0.0  0.0   0:00.06 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   479 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
   481 polkitd   20   0  612240   1024    632 S   0.0  0.0   0:00.12 /usr/lib/+
   482 dbus      20   0   58620   1368    648 S   0.0  0.1   0:00.46 /usr/bin/+
   494 rpc       20   0   69256    252     72 S   0.0  0.0   0:00.01 /sbin/rpc+
   521 root      20   0   52852    112    108 S   0.0  0.0   0:00.01 /usr/sbin+
   523 root      20   0   21540    412    304 S   0.0  0.0   0:00.02 /usr/sbin+
   528 root      20   0  224268   5408    708 S   0.0  0.2   0:00.09 queueproc+
   533 root      20   0  152780     88     80 S   0.0  0.0   0:00.00 /usr/sbin+
   539 root      20   0   24896   1460    824 S   0.0  0.1   0:00.20 /usr/lib/+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388     64     60 S   0.0  0.0   0:00.00 /usr/sbin+
   551 nscd      20   0  928956   1316    600 S   0.0  0.1   0:00.33 /usr/sbin+
   562 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    488    320 S   0.0  0.0   0:00.02 /usr/sbin+
   583 root      20   0  108296     68     64 S   0.0  0.0   0:00.00 /sbin/age+
   584 root      20   0  114704     44     44 S   0.0  0.0   0:00.02 /bin/bash
   598 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   629 mailnull  20   0   90820   3528    572 S   0.0  0.1   0:00.04 /usr/sbin+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:00.11 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   938 telegraf  20   0 5654048  33740   1060 S   0.0  1.4   0:00.56 /usr/loca+
   941 root      20   0   51508    468    308 S   0.0  0.0   0:00.04 /usr/sbin+
   942 root      20   0  153404    320    236 S   0.0  0.0   0:00.01 pure-ftpd+
   943 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.00 /usr/loca+
   944 root      20   0  111304    428    324 S   0.0  0.0   0:00.07 /usr/sbin+
   945 systuser  20   0   13012     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   946 systuser  20   0  113932     72      0 S   0.0  0.0   0:00.00 /usr/loca+
   949 root      20   0 1689380 922404     96 S   0.0 38.1   0:13.72 /usr/loca+
   950 root      20   0  436392  11328  11124 S   0.0  0.5   0:00.13 php-fpm: +
   952 named     20   0  719808  22580   1100 S   0.0  0.9   0:00.80 /usr/sbin+
   960 root      20   0  392856    596    420 S   0.0  0.0   0:00.09 php-fpm: +
   961 root      20   0  216400   3656   3168 S   0.0  0.2   0:00.23 /usr/sbin+
   962 root      20   0  397344   3212    640 S   0.0  0.1   0:00.30 php-fpm: +
   965 root      20   0  261152   4320    868 S   0.0  0.2   0:00.25 cpsrvd (S+
   967 root      20   0  445028   2604   2604 S   0.0  0.1   0:00.05 sw-engine+
   969 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.01 /usr/bin/+
   970 cpanelc+  20   0    9700   2480   2236 S   0.0  0.1   0:00.55 /usr/loca+
   982 root      20   0  385496    408    316 S   0.0  0.0   0:00.08 php-fpm: +
   985 root      20   0  386112    736    532 S   0.0  0.0   0:00.09 php-fpm: +
   986 systuser  20   0  113272     80      0 S   0.0  0.0   0:00.00 /usr/loca+
   992 systuser  20   0  114016  12212   2352 S   0.0  0.5   0:00.24 /usr/loca+
   993 root      20   0  572372    764    288 S   0.0  0.0   0:00.16 /usr/bin/+
  1085 dovenull  20   0   46912   1272    656 S   0.0  0.1   0:00.02 dovecot/p+
  1086 dovenull  20   0   47188   1152    308 S   0.0  0.0   0:00.00 dovecot/i+
  1087 dovecot   20   0   10320    380    272 S   0.0  0.0   0:00.00 dovecot/a+
  1088 root      20   0   10452    472    300 S   0.0  0.0   0:00.01 dovecot/l+
  1089 dovenull  20   0   46772    956    688 S   0.0  0.0   0:00.01 dovecot/p+
  1090 dovenull  20   0   47052   1992   1188 S   0.0  0.1   0:00.00 dovecot/i+
  1095 root      20   0   24528   2132    452 S   0.0  0.1   0:00.03 dovecot/c+
  1097 dovecot   20   0   13568    476    268 S   0.0  0.0   0:00.00 dovecot/s+
  1144 dovecot   20   0   41056    952    684 S   0.0  0.0   0:00.01 dovecot/a+
  1168 root      20   0  248160 119808   3064 S   0.0  5.0   0:02.89 /usr/loca+
  1181 systuser  20   0  157704   2196    140 S   0.0  0.1   0:00.01 SonarPush+
  1219 wp-tool+  20   0  410452  36524   1428 S   0.0  1.5   0:00.81 /usr/bin/+
  1220 wp-tool+  20   0  387528  12888   1264 S   0.0  0.5   0:00.09 /usr/bin/+
  1249 root      20   0  209016   9496   1224 S   0.0  0.4   0:00.25 tailwatchd
  1252 root      20   0  183900     80     80 S   0.0  0.0   0:00.08 cpdavd - +
  1253 root      20   0  167452   1420    820 S   0.0  0.1   0:00.06 dnsadmin +
  1749 root      20   0  299272    836    456 S   0.0  0.0   0:00.01 php-fpm: +
  1799 root      38  18  130416   1384    672 S   0.0  0.1   0:00.00 cpanellog+
  1947 root      20   0  266988  18600    632 S   0.0  0.8   0:00.11 /usr/sbin+
  1949 root      20   0   12836    544    240 S   0.0  0.0   0:00.06 /usr/loca+
  1950 root      20   0   12732    188      0 S   0.0  0.0   0:00.04 /usr/loca+
  1951 root      20   0   12872    580    232 S   0.0  0.0   0:00.05 /usr/loca+
  1978 root      20   0   53252   9492    100 S   0.0  0.4   0:00.04 /usr/loca+
  1979 nobody    20   0  277940  28728   3952 S   0.0  1.2   0:00.84 /usr/sbin+
  1981 nobody    20   0  277940  28744   3908 S   0.0  1.2   0:00.86 /usr/sbin+
  1982 nobody    20   0  277944  28664   3884 S   0.0  1.2   0:00.92 /usr/sbin+
  1983 nobody    20   0  277964  28680   3900 S   0.0  1.2   0:00.89 /usr/sbin+
  2095 root      20   0  180936  27988   1192 S   0.0  1.2   0:00.79 lfd - sle+
  2136 nobody    20   0  277532  28364   3788 S   0.0  1.2   0:00.78 /usr/sbin+
  2468 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
  2685 nobody    20   0  277940  28628   3804 S   0.0  1.2   0:00.87 /usr/sbin+
  3164 nobody    20   0  277932  28772   3932 S   0.0  1.2   0:00.76 /usr/sbin+
  3975 nobody    20   0  277600  28504   3836 S   0.0  1.2   0:00.78 /usr/sbin+
  4123 nobody    20   0  277884  28720   3904 S   0.0  1.2   0:00.78 /usr/sbin+
  4328 nobody    20   0  277892  28532   3752 S   0.0  1.2   0:00.65 /usr/sbin+
  4574 nobody    20   0  277748  28732   3960 S   0.0  1.2   0:00.66 /usr/sbin+
  5800 root      20   0  183048   1708   1148 S   0.0  0.1   0:00.00 /usr/sbin+
  5849 root      20   0  113284    648    468 S   0.0  0.0   0:00.00 /bin/sh -+
  5867 root      20   0  108056    300    228 S   0.0  0.0   0:00.00 sleep 5h +
  5913 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
  5923 oysipao+  20   0    3152    420      0 S   0.0  0.0   0:00.00 [kworker]
  6068 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6333 root      20   0 1349832  10992    596 S   0.0  0.5   0:00.05 /usr/bin/+
  6376 root      20   0 1277056  12084    592 S   0.0  0.5   0:00.07 /usr/bin/+
  6471 root      20   0  249444 119140   1328 S   0.0  4.9   0:00.06 spamd chi+
  6472 root      20   0  248160 117692    984 S   0.0  4.9   0:00.00 spamd chi+
  7438 nobody    20   0  277900  28588   3820 S   0.0  1.2   0:00.34 /usr/sbin+
  8081 nobody    20   0  277752  28484   3720 S   0.0  1.2   0:00.20 /usr/sbin+
  8145 nobody    20   0  277884  28636   3856 S   0.0  1.2   0:00.14 /usr/sbin+
  9144 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9195 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  9197 sshd      20   0  115644   2620   1556 S   0.0  0.1   0:00.00 sshd: [ne+
  9242 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  9243 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
  9302 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
  9461 healtho+  20   0  457240  67736   4216 S   0.0  2.8   0:02.03 php-fpm: +
  9485 healtho+  20   0  457240  67660   4212 S   0.0  2.8   0:01.71 php-fpm: +
  9486 nigeria   20   0  397064   5768   2400 S   0.0  0.2   0:00.00 php-fpm: +
  9511 root      20   0   41052   2784   2128 S   0.0  0.1   0:00.00 dovecot/a+
  9539 mailnull  20   0   91200   5624   2464 S   0.0  0.2   0:00.00 /usr/sbin+
  9540 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  9541 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
  9570 cloudw    20   0  405160  15752   3420 S   0.0  0.7   0:00.05 php-fpm: +
  9579 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  9592 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  9593 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9594 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9595 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9596 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9597 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  9598 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  9599 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  9600 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  9601 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  9602 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9603 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  9604 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
  9606 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  9608 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  9609 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
  9610 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
  9624 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  9627 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  9628 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  9629 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  9630 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  9631 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  9632 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  9633 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  9634 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  9635 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
  9636 root      20   0   20164    964    768 S   0.0  0.0   0:00.00 jailshell+
  9637 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  9638 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  9647 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
  9653 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  9657 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  9658 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
  9665 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
  9671 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9673 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  9674 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
  9675 cloudsms  20   0  129592   2840   2152 R   0.0  0.1   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          5  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/u200:0]
root          6  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         30  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/0:1]
root         31  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/1:1]
root         36  0.5  0.0      0     0 ?        S    00:54   0:04  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        109  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        227  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/0:2]
root        230  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        251  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        253  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/u200:2]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:1H]
root        273  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        274  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        280  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:1H]
root        416  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        479  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/1:3]
root        598  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root       2468  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [kworker/0:3]
root       6068  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/1:2]
root       9144  0.0  0.0      0     0 ?        S    01:05   0:00  \_ [kworker/1:0]
root       9671  0.0  0.0      0     0 ?        S    01:06   0:00  \_ [kworker/0:0]
root          1  0.2  0.1  44420  3436 ?        Ss   00:54   0:02 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  40240  4360 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45352   264 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   348 ?        S<sl 00:54   0:00 /sbin/auditd
polkitd     481  0.0  0.0 612240  1024 ?        Ssl  00:54   0:00 /usr/lib/polkit-1/polkitd --no-debug
dbus        482  0.0  0.0  58620  1368 ?        Ss   00:54   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         494  0.0  0.0  69256   252 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        521  0.0  0.0  52852   112 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0  21540   412 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        528  0.0  0.2 224268  5408 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        533  0.0  0.0 152780    88 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        539  0.0  0.0  24896  1460 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-logind
root        544  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388    64 ?        Ss   00:54   0:00 /usr/sbin/acpid
nscd        551  0.0  0.0 928956  1316 ?        Ssl  00:54   0:00 /usr/sbin/nscd
root        562  0.0  0.0  24208     0 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   488 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       5800  0.0  0.0 183048  1708 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5849  0.0  0.0 113284   648 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       5867  0.0  0.0 108056   300 ?        S    01:00   0:00  |       \_ sleep 5h 14m
root       9592  0.0  0.0 183044  2148 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root       9608  0.0  0.0 113284  1212 ?        Ss   01:06   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       9609  0.0  0.0 108052   360 ?        S    01:06   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       9610  0.0  0.0 113288  1516 ?        S    01:06   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       9676  0.0  0.0 153840  2096 ?        R    01:06   0:00  |               \_ ps auxf
root       9593  0.0  0.0 183044  2152 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root       9627  0.0  0.0  20164   808 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       9594  0.0  0.0 183044  2152 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root       9629  0.0  0.0  20164   808 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root       9595  0.0  0.0 183044  2152 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root       9634  0.0  0.0  20164   804 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root       9596  0.0  0.0 183044  2152 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root       9637  0.0  0.0  20164   804 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       9597  0.0  0.0 183044  2148 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root       9628  0.0  0.0  20164   804 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       9598  0.0  0.0 183044  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root       9633  0.0  0.0  20164   968 ?        Ss   01:06   0:00  |   \_ jailshell (cloudsms) [9657] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   9657  0.0  0.0  20164   264 ?        S    01:06   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   9658  0.0  0.0 113284  1212 ?        S    01:06   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   9661  0.0  0.6 400652 15404 ?        S    01:06   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root       9599  0.0  0.0 183044  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root       9631  0.0  0.0  20164   808 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       9600  0.0  0.0 183044  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root       9630  0.0  0.0  20164   804 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       9601  0.0  0.0 183044  2140 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root       9632  0.0  0.0  20164   808 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       9602  0.0  0.0 183044  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root       9638  0.0  0.0  20164   804 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       9603  0.0  0.0 183044  2140 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root       9635  0.0  0.0  20164   988 ?        Ss   01:06   0:00  |   \_ jailshell (cloudsms) [9673] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms   9673  0.0  0.0  20164   264 ?        S    01:06   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms   9674  0.0  0.0 113284  1212 ?        S    01:06   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms   9675  0.0  0.6 400652 15676 ?        R    01:06   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue1.php
root       9604  0.0  0.0 183044  2148 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root       9636  0.0  0.0  20164   964 ?        Ss   01:06   0:00  |   \_ jailshell (pactpay) [9647] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    9647  0.0  0.0  20164   256 ?        S    01:06   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    9651  0.0  0.7 476724 17484 ?        S    01:06   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       9606  0.0  0.0 183044  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root       9624  0.0  0.0  20164   964 ?        Ss   01:06   0:00      \_ jailshell (nigeria) [9653] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    9653  0.0  0.0  20164   260 ?        S    01:06   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    9659  0.0  0.6 400652 15936 ?        S    01:06   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        583  0.0  0.0 108296    68 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
root        584  0.0  0.0 114704    44 ttyS0    Ss+  00:54   0:00 /bin/bash
mailnull    629  0.0  0.1  90820  3528 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   9539  0.0  0.2  91200  5624 ?        S    01:05   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
telegraf    938  0.0  1.3 5654048 33740 ?       SLsl 00:54   0:00 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        941  0.0  0.0  51508   468 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1085  0.0  0.0  46912  1272 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1086  0.0  0.0  47188  1152 ?        S    00:54   0:00  \_ dovecot/imap-login
dovecot    1087  0.0  0.0  10320   380 ?        S    00:54   0:00  \_ dovecot/anvil
root       1088  0.0  0.0  10452   472 ?        S    00:54   0:00  \_ dovecot/log
dovenull   1089  0.0  0.0  46772   956 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1090  0.0  0.0  47052  1992 ?        S    00:54   0:00  \_ dovecot/imap-login
root       1095  0.0  0.0  24528  2132 ?        S    00:54   0:00  \_ dovecot/config
dovecot    1097  0.0  0.0  13568   476 ?        S    00:54   0:00  \_ dovecot/stats
dovecot    1144  0.0  0.0  41056   952 ?        S    00:54   0:00  \_ dovecot/auth
root       9302  0.0  0.1  60820  4512 ?        S    01:05   0:00  \_ dovecot/lmtp
root       9511  0.0  0.1  41052  2784 ?        S    01:05   0:00  \_ dovecot/auth -w
root        942  0.0  0.0 153404   320 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    943  0.0  0.0  10132    44 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        944  0.0  0.0 111304   428 ?        Ss   00:54   0:00 /usr/sbin/sshd -D
root       9195  0.0  0.1 111304  4260 ?        Ss   01:05   0:00  \_ sshd: [accepted]
sshd       9197  0.0  0.1 115644  2620 ?        S    01:05   0:00  |   \_ sshd: [net]
root       9242  0.0  0.1 111304  4264 ?        Ss   01:05   0:00  \_ sshd: [accepted]
sshd       9243  0.0  0.1 115644  2628 ?        S    01:05   0:00  |   \_ sshd: [net]
root       9540  0.0  0.1 111304  4264 ?        Ss   01:05   0:00  \_ sshd: [accepted]
sshd       9541  0.0  0.1 115644  2632 ?        S    01:05   0:00      \_ sshd: [net]
systuser    945  0.0  0.0  13012    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    946  0.0  0.0 113932    72 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        949  1.9 38.1 1689380 922404 ?      Ssl  00:54   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        950  0.0  0.4 436392 11328 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       952  0.1  0.9 719808 22580 ?        Ssl  00:54   0:00 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        960  0.0  0.0 392856   596 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        961  0.0  0.1 216400  3656 ?        Ssl  00:54   0:00 /usr/sbin/rsyslogd -n
root        962  0.0  0.1 397344  3212 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+   9461 10.6  2.7 457240 67736 ?        S    01:05   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+   9485 11.4  2.7 457240 67660 ?        S    01:05   0:01  \_ php-fpm: pool health_oyostate_gov_ng
nigeria    9486  0.0  0.2 397064  5768 ?        S    01:05   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw     9570  1.2  0.6 405160 15752 ?        S    01:05   0:00  \_ php-fpm: pool cloudware_ng
root        965  0.0  0.1 261152  4320 ?        Ss   00:54   0:00 cpsrvd (SSL) - waiting for connections                   
root       9579  0.0  0.0      0     0 ?        Z    01:05   0:00  \_ [cpaneld - servi] <defunct>
root        967  0.0  0.1 445028  2604 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
memcach+    969  0.0  0.0 342400     0 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    970  0.0  0.1   9700  2480 ?        Ss   00:54   0:00 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 385496   408 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.0 386112   736 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    986  0.0  0.0 113272    80 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    992  0.0  0.5 114016 12212 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        993  0.0  0.0 572372   764 ?        Ssl  00:54   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1168  0.4  4.9 248160 119808 ?       Ss   00:54   0:02 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6471  0.0  4.9 249444 119140 ?       S    01:00   0:00  \_ spamd child
root       6472  0.0  4.8 248160 117692 ?       S    01:00   0:00  \_ spamd child
systuser   1181  0.0  0.0 157704  2196 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1219  0.1  1.5 410452 36524 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1220  0.0  0.5 387528 12888 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1249  0.0  0.3 209016  9496 ?        Ss   00:54   0:00 tailwatchd
root       1252  0.0  0.0 183900    80 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1253  0.0  0.0 167452  1420 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1749  0.0  0.0 299272   836 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1799  0.0  0.0 130416  1384 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1851  1.6  8.0 1459040 194868 ?      Sl   00:54   0:11 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  0.7 266988 18600 ?        Ss   00:54   0:00 /usr/sbin/httpd -k start
root       1949  0.0  0.0  12836   544 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1950  0.0  0.0  12732   188 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1951  0.0  0.0  12872   580 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1978  0.0  0.3  53252  9492 ?        S    00:54   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     1979  0.1  1.1 277940 28728 ?        S    00:54   0:00  \_ /usr/sbin/httpd -k start
nobody     1981  0.1  1.1 277940 28744 ?        S    00:54   0:00  \_ /usr/sbin/httpd -k start
nobody     1982  0.1  1.1 277944 28664 ?        S    00:54   0:00  \_ /usr/sbin/httpd -k start
nobody     1983  0.1  1.1 277964 28680 ?        S    00:54   0:00  \_ /usr/sbin/httpd -k start
nobody     2136  0.1  1.1 277532 28364 ?        S    00:54   0:00  \_ /usr/sbin/httpd -k start
nobody     2685  0.1  1.1 277940 28628 ?        S    00:55   0:00  \_ /usr/sbin/httpd -k start
nobody     3164  0.1  1.1 277932 28772 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
nobody     3975  0.1  1.1 277600 28504 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
nobody     4123  0.1  1.1 277884 28720 ?        S    00:56   0:00  \_ /usr/sbin/httpd -k start
nobody     4328  0.1  1.1 277892 28532 ?        S    00:57   0:00  \_ /usr/sbin/httpd -k start
nobody     4574  0.1  1.1 277748 28732 ?        S    00:57   0:00  \_ /usr/sbin/httpd -k start
nobody     7438  0.1  1.1 277900 28588 ?        S    01:02   0:00  \_ /usr/sbin/httpd -k start
nobody     8081  0.1  1.1 277752 28484 ?        S    01:03   0:00  \_ /usr/sbin/httpd -k start
nobody     8145  0.0  1.1 277884 28636 ?        S    01:03   0:00  \_ /usr/sbin/httpd -k start
root       2095  0.1  1.1 180936 27988 ?        Ss   00:54   0:00 lfd - sleeping
oysipao+   5913  0.0  0.0   3148   412 ?        Ss   01:00   0:00 [kworker]
oysipao+   5923  0.0  0.0   3152   420 ?        S    01:00   0:00  \_ [kworker]
root       6333  0.0  0.4 1349832 10992 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root       6376  0.0  0.4 1277056 12084 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 707  Threads: 5  Questions: 69376  Slow queries: 0  Opens: 1003  Flush tables: 1  Open tables: 972  Queries per second avg: 98.127
*************************** 1. row ***************************
     Id: 1022
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-10' LIMIT 1
*************************** 2. row ***************************
     Id: 1023
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 1024
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 4. row ***************************
     Id: 1027
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 1030
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.153.50 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 ::1 TIME_WAIT
      1 52.230.164.189 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      4 165.22.250.70 TIME_WAIT
     40 157.20.32.131 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 10-Nov-2025 01:06:01 WAT
   Restart Time: Monday, 10-Nov-2025 00:54:18 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 11 minutes 42 seconds
   Server load: 1.51 0.85 0.62
   Total accesses: 2696 - Total Traffic: 52.8 MB - Total Duration: 1168380
   CPU Usage: u6.88 s2.7 cu19.04 cs14.26 - 6.11% CPU load
   3.84 requests/sec - 77.0 kB/second - 20.1 kB/request - 433.375 ms/request
   8 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

_.CK___WRC_K.K_K................................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv  PID     Acc    M CPU  SS Req  Dur   Conn  Child  Slot     Client      Protocol           VHost                              Request
   0-0  1979 0/337/337 _ 2.59 0  408 80017  0.0   2.99  2.99  66.249.70.33    http/1.1 support.cloudware.ng:443   GET /?c=250192887 HTTP/1.1
   1-0  -    0/0/230   . 0.00 92 0   93181  0.0   0.00  2.98  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   2-0  1981 3/206/206 C 3.31 6  0   98285  33.9  2.93  2.93  105.112.228.122 http/1.1 chs1.nescrow.com.ng:443    GET /favicon.ico HTTP/1.1
   3-0  1982 1/257/257 K 3.52 2  349 90864  35.5  5.21  5.21  66.249.70.34    http/1.1 support.cloudware.ng:443   GET /?c=333267036 HTTP/1.1
   4-0  1983 0/279/279 _ 4.09 1  339 77207  0.0   2.93  2.93  66.249.70.37    http/1.1 support.cloudware.ng:443   GET /?c=2701118666 HTTP/1.1
   5-0  2136 0/215/215 _ 2.60 0  339 91855  0.0   2.50  2.50  157.20.32.131   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   6-0  2685 0/191/191 _ 3.54 0  3   101579 0.0   11.08 11.08 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   7-0  3164 0/189/189 W 3.53 0  0   93543  0.0   3.04  3.04  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   8-0  3975 0/157/157 R 3.07 2  335 80431  0.0   3.08  3.08  157.20.32.131   http/1.1 health.oyostate.gov.ng:443
   9-0  4123 1/148/148 C 3.47 6  1   93712  10.7  3.16  3.16  105.112.228.122 http/1.1 chs1.nescrow.com.ng:443    GET /img-sys/powered_by_cpanel.svg HTTP/1.1
   10-0 4328 0/134/134 _ 2.36 0  396 75204  0.0   2.74  2.74  66.249.70.39    http/1.1 support.cloudware.ng:443   GET /?c=924823925 HTTP/1.1
   11-0 4574 2/130/130 K 2.69 2  341 74908  65.5  2.85  2.85  66.249.70.38    http/1.1 support.cloudware.ng:443   GET /?c=2162607252 HTTP/1.1
   12-0 -    0/0/89    . 0.00 99 0   49164  0.0   0.00  2.06  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 7438 2/60/60   K 1.34 1  268 32629  66.0  1.38  1.38  66.249.70.35    http/1.1 support.cloudware.ng:443   GET /?c=3129520297 HTTP/1.1
   14-0 8081 0/41/41   _ 0.70 1  1   20476  0.0   0.78  0.78  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   15-0 8145 4/33/33   K 0.42 0  361 15318  129.1 3.09  3.09  66.249.70.32    http/1.1 support.cloudware.ng:443   GET /?c=2844051003 HTTP/1.1
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 650
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 8 seconds, (range: 0...47)
   index usage: 11%, cache usage: 15%
   total entries stored since starting: 1290
   total entries replaced since starting: 0
   total entries expired since starting: 638
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 10 miss
   total removes since starting: 2 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit