403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.10.24.txt
 ## mem threshold exceeded
## server overview
2025-11-13.10.24 load[0] mem[84/24] mysql[7/7] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1967          70          17         324         227
Swap:          1999         539        1460
 10:24:01 up 7 min,  0 users,  load average: 0.49, 0.88, 0.56
## system overview
top - 10:24:01 up 7 min,  0 users,  load average: 0.49, 0.88, 0.56
Tasks: 206 total,   6 running, 199 sleeping,   0 stopped,   1 zombie
%Cpu(s): 68.8 us, 25.0 sy,  0.0 ni,  0.0 id,  6.2 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    81600 free,  2012488 used,   326212 buff/cache
KiB Swap:  2047996 total,  1495140 free,   552856 used.   235176 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1731 mysql     20   0 1457540 189092   3816 S 140.0  7.8   0:06.15 /usr/sbin+
    36 root      20   0       0      0      0 R  13.3  0.0   0:03.32 [kswapd0]
  7791 nigeria   20   0  400652  15932  10220 S  13.3  0.7   0:00.04 /opt/cpan+
  7794 pactpay   20   0  476724  17484  11728 S   6.7  0.7   0:00.02 /opt/cpan+
  7819 root      20   0  160220   2060   1580 R   6.7  0.1   0:00.01 top -bcn1
     1 root      20   0   44272   3248   1472 S   0.0  0.1   0:01.50 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     5 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:00.46 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    30 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
    31 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kauditd]
   229 root      20   0       0      0      0 R   0.0  0.0   0:00.01 [kworker/+
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:00.23 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:00.34 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   39496   3904   3612 S   0.0  0.2   0:00.39 /usr/lib/+
   379 root      20   0   45352    488    344 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    336    204 S   0.0  0.0   0:00.05 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   482 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
   488 dbus      20   0   58392   1304    732 S   0.0  0.1   0:00.26 /usr/bin/+
   512 rpc       20   0   69256    268    160 S   0.0  0.0   0:00.00 /sbin/rpc+
   518 root      20   0  152780    244    236 S   0.0  0.0   0:00.00 /usr/sbin+
   520 root      20   0   24592   1160    888 S   0.0  0.0   0:00.11 /usr/lib/+
   521 root      20   0  224148   6372    800 S   0.0  0.3   0:00.08 queueproc+
   524 root      20   0   21540    488    376 S   0.0  0.0   0:00.01 /usr/sbin+
   525 polkitd   20   0  612240   1092    740 S   0.0  0.0   0:00.07 /usr/lib/+
   533 root      20   0   52852    336    332 S   0.0  0.0   0:00.01 /usr/sbin+
   535 nscd      20   0  928956   1072    572 S   0.0  0.0   0:00.28 /usr/sbin+
   540 root      20   0    4388    232    228 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0  195208    132    132 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124480    560    428 S   0.0  0.0   0:00.01 /usr/sbin+
   574 root      20   0   24208     80     80 S   0.0  0.0   0:00.00 /usr/sbin+
   577 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   585 root      20   0  108296    248    244 S   0.0  0.0   0:00.00 /sbin/age+
   586 root      20   0  114704    280    280 S   0.0  0.0   0:00.02 /bin/bash
   615 mailnull  20   0   88984   3312    360 S   0.0  0.1   0:00.02 /usr/sbin+
   677 root       0 -20       0      0      0 S   0.0  0.0   0:00.15 [loop0]
   714 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   717 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   925 root      20   0 1763044   1.0g    556 S   0.0 43.9   0:13.65 /usr/loca+
   931 named     20   0  637992  21620   1212 S   0.0  0.9   0:00.51 /usr/sbin+
   933 root      20   0  445028   2804   2804 S   0.0  0.1   0:00.06 sw-engine+
   938 root      20   0  436392  11112  11024 S   0.0  0.5   0:00.13 php-fpm: +
   940 root      20   0  385496    772    556 S   0.0  0.0   0:00.08 php-fpm: +
   941 systuser  20   0  114016  13192   2300 S   0.0  0.5   0:00.17 /usr/loca+
   945 cpanelc+  20   0    9568   2424   2200 R   0.0  0.1   0:00.33 /usr/loca+
   946 root      20   0  392856    560    480 S   0.0  0.0   0:00.08 php-fpm: +
   948 memcach+  20   0  342400    260    260 S   0.0  0.0   0:00.01 /usr/bin/+
   950 systuser  20   0   10132     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   952 systuser  20   0  112524   2088      0 S   0.0  0.1   0:00.00 /usr/loca+
   957 systuser  20   0   14068     28      0 S   0.0  0.0   0:00.00 /usr/loca+
   959 root      20   0  397344   3112    732 S   0.0  0.1   0:00.18 php-fpm: +
   960 root      20   0  153404    484    396 S   0.0  0.0   0:00.01 pure-ftpd+
   963 systuser  20   0  111608   1600      0 S   0.0  0.1   0:00.00 /usr/loca+
   988 root      20   0  386112    432    348 S   0.0  0.0   0:00.07 php-fpm: +
   989 root      20   0  261032   3036    972 S   0.0  0.1   0:00.18 cpsrvd (S+
   990 root      20   0  572372    988    524 S   0.0  0.0   0:00.14 /usr/bin/+
   991 telegraf  20   0 5654048  34012    112 S   0.0  1.4   0:00.39 /usr/loca+
   998 root      20   0  111304    616    516 S   0.0  0.0   0:00.07 /usr/sbin+
  1000 root      20   0  216400   3304   2884 S   0.0  0.1   0:00.17 /usr/sbin+
  1001 root      20   0   51508    672    512 S   0.0  0.0   0:00.04 /usr/sbin+
  1125 dovenull  20   0   46772    764    520 S   0.0  0.0   0:00.00 dovecot/p+
  1126 dovenull  20   0   47056   3024   2340 S   0.0  0.1   0:00.00 dovecot/i+
  1127 dovecot   20   0   10320    524    412 S   0.0  0.0   0:00.00 dovecot/a+
  1128 root      20   0   10452    476    328 S   0.0  0.0   0:00.00 dovecot/l+
  1129 dovenull  20   0   46912   2732   2160 S   0.0  0.1   0:00.00 dovecot/p+
  1130 dovenull  20   0   46780    460    412 S   0.0  0.0   0:00.00 dovecot/i+
  1133 root      20   0   24556   2232    588 S   0.0  0.1   0:00.02 dovecot/c+
  1137 dovecot   20   0   13568    540    348 S   0.0  0.0   0:00.00 dovecot/s+
  1147 root      20   0  248176 119660   2916 S   0.0  4.9   0:02.92 /usr/loca+
  1164 systuser  20   0  157708   2112    124 S   0.0  0.1   0:00.00 SonarPush+
  1165 wp-tool+  20   0  410452  34900   1452 S   0.0  1.4   0:00.58 /usr/bin/+
  1166 wp-tool+  20   0  387528  12176   1520 S   0.0  0.5   0:00.09 /usr/bin/+
  1208 dovecot   20   0   41056   1056    792 S   0.0  0.0   0:00.00 dovecot/a+
  1236 root      20   0  183900    312    312 S   0.0  0.0   0:00.08 cpdavd - +
  1239 root      20   0  209296  10628   1304 S   0.0  0.4   0:00.27 tailwatchd
  1241 root      20   0  167452   1488    892 S   0.0  0.1   0:00.05 dnsadmin +
  1631 root      20   0  299272   1088    708 S   0.0  0.0   0:00.01 php-fpm: +
  1677 root      38  18  130416    888    228 S   0.0  0.0   0:00.00 cpanellog+
  1979 root      20   0  267036  22500    916 S   0.0  0.9   0:00.15 /usr/sbin+
  1980 root      20   0  180932  27912   1168 S   0.0  1.2   0:00.47 lfd - sle+
  1981 root      20   0   12824    708    412 S   0.0  0.0   0:00.04 /usr/loca+
  1982 root      20   0   12732    480    292 S   0.0  0.0   0:00.02 /usr/loca+
  1983 root      20   0   12848    480    252 S   0.0  0.0   0:00.03 /usr/loca+
  1986 root      20   0   53268   9656    268 S   0.0  0.4   0:00.04 /usr/loca+
  2097 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  2098 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  2452 root      20   0 1341636  11528    244 S   0.0  0.5   0:00.05 /usr/bin/+
  2488 root      20   0 1277312  12372    244 S   0.0  0.5   0:00.07 /usr/bin/+
  2885 nobody    20   0  277772  31532   3612 S   0.0  1.3   0:00.45 /usr/sbin+
  5511 root      20   0  259348 125024   2004 S   0.0  5.2   0:00.75 spamd chi+
  5512 root      20   0  248176 117628    920 S   0.0  4.9   0:00.00 spamd chi+
  5753 nobody    20   0  277784  31664   3776 S   0.0  1.3   0:00.19 /usr/sbin+
  5815 nobody    20   0  277520  31340   3712 S   0.0  1.3   0:00.21 /usr/sbin+
  5817 nobody    20   0  277784  31608   3732 S   0.0  1.3   0:00.25 /usr/sbin+
  5819 nobody    20   0  277932  31632   3780 S   0.0  1.3   0:00.28 /usr/sbin+
  6450 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6709 nobody    20   0  277784  31420   3560 S   0.0  1.3   0:00.13 /usr/sbin+
  6724 nobody    20   0  277932  31412   3568 S   0.0  1.3   0:00.08 /usr/sbin+
  7021 root      20   0   60820   3888   2900 S   0.0  0.2   0:00.00 dovecot/l+
  7172 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  7240 nobody    20   0  277784  31192   3280 S   0.0  1.3   0:00.06 /usr/sbin+
  7262 nobody    20   0  277652  31068   3316 S   0.0  1.3   0:00.07 /usr/sbin+
  7283 nobody    20   0  277784  31216   3360 S   0.0  1.3   0:00.08 /usr/sbin+
  7303 nobody    20   0  277784  31632   3772 S   0.0  1.3   0:00.04 /usr/sbin+
  7305 nobody    20   0  277816  31432   3548 S   0.0  1.3   0:00.08 /usr/sbin+
  7306 nobody    20   0  277932  31224   3372 S   0.0  1.3   0:00.08 /usr/sbin+
  7440 root      20   0  111304   4264   3244 S   0.0  0.2   0:00.00 sshd: [ac+
  7449 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
  7496 root      20   0  111304   4260   3244 S   0.0  0.2   0:00.00 sshd: [ac+
  7583 nobody    20   0  277804  31036   3164 S   0.0  1.3   0:00.02 /usr/sbin+
  7676 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
  7677 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
  7701 root      20   0   41052   2780   2124 S   0.0  0.1   0:00.00 dovecot/a+
  7703 nescrow+  20   0   38052   3400   2756 S   0.0  0.1   0:00.00 dovecot/i+
  7706 root      20   0  162436   5828   4340 S   0.0  0.2   0:00.01 sshd: roo+
  7707 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: roo+
  7712 nobody    20   0  277404  29276   1904 S   0.0  1.2   0:00.00 /usr/sbin+
  7713 root      20   0  162436   5832   4340 S   0.0  0.2   0:00.01 sshd: roo+
  7714 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
  7728 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  7737 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  7738 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  7739 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  7740 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  7741 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  7742 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  7743 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  7744 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  7745 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  7746 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  7747 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  7748 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  7749 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  7751 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  7752 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
  7755 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  7756 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  7757 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
  7758 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
  7759 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  7760 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  7762 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  7763 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  7764 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  7765 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  7766 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  7767 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
  7768 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  7769 root      20   0   20164    984    788 S   0.0  0.0   0:00.00 jailshell+
  7770 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
  7774 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
  7777 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
  7782 saboakin  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  7784 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  7785 saboakin  20   0  400652  15412  10000 S   0.0  0.6   0:00.01 /opt/cpan+
  7790 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
  7792 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  7795 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
  7796 cloudsms  20   0  400652  15412  10000 S   0.0  0.6   0:00.01 /opt/cpan+
  7799 cloudw    20   0  352096  15232  10128 S   0.0  0.6   0:00.01 /opt/cpan+
  7821 cloudsms  20   0   20164    252      0 S   0.0  0.0   0:00.00 jailshell+
  7822 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
  7823 cloudsms  20   0  276940   6724   4660 R   0.0  0.3   0:00.00 /opt/cpan+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    10:16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kworker/0:0H]
root          5  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kworker/u200:0]
root          6  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    10:16   0:00  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [watchdogd]
root         30  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kworker/0:1]
root         31  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kworker/1:1]
root         36  0.7  0.0      0     0 ?        S    10:16   0:03  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   10:16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   10:16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [deferwq]
root        104  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kworker/1:2]
root        240  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ext4-rsv-conver]
root        413  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [xprtiod]
root        482  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kworker/1:3]
root        577  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kvm-irqfd-clean]
root        677  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [loop0]
root        714  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [jbd2/loop0-8]
root        717  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ext4-rsv-conver]
root       2097  0.0  0.0      0     0 ?        S    10:17   0:00  \_ [kworker/0:3]
root       2098  0.0  0.0      0     0 ?        S    10:17   0:00  \_ [kworker/0:4]
root       6450  0.0  0.0      0     0 ?        S    10:22   0:00  \_ [kworker/1:0]
root       7172  0.0  0.0      0     0 ?        S    10:23   0:00  \_ [kworker/0:0]
root          1  0.3  0.1  44272  3248 ?        Ss   10:16   0:01 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.1  39496  3904 ?        Ss   10:16   0:00 /usr/lib/systemd/systemd-journald
root        379  0.0  0.0  45352   488 ?        Ss   10:16   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   336 ?        S<sl 10:16   0:00 /sbin/auditd
dbus        488  0.0  0.0  58392  1304 ?        Ss   10:16   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         512  0.0  0.0  69256   268 ?        Ss   10:16   0:00 /sbin/rpcbind -w
root        518  0.0  0.0 152780   244 ?        Ss   10:16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        520  0.0  0.0  24592  1160 ?        Ss   10:16   0:00 /usr/lib/systemd/systemd-logind
root        521  0.0  0.2 224148  6372 ?        Ss   10:16   0:00 queueprocd - waiting up to 60s to process a task
root        524  0.0  0.0  21540   488 ?        Ss   10:16   0:00 /usr/sbin/irqbalance --foreground
polkitd     525  0.0  0.0 612240  1092 ?        Ssl  10:16   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        533  0.0  0.0  52852   336 ?        Ss   10:16   0:00 /usr/sbin/smartd -n -q never
nscd        535  0.0  0.0 928956  1072 ?        Ssl  10:16   0:00 /usr/sbin/nscd
root        540  0.0  0.0   4388   232 ?        Ss   10:16   0:00 /usr/sbin/acpid
root        542  0.0  0.0 195208   132 ?        Ssl  10:16   0:00 /usr/sbin/gssproxy -D
root        571  0.0  0.0 124480   560 ?        Ss   10:16   0:00 /usr/sbin/crond -n
root       7737  0.0  0.0 183048  2144 ?        S    10:24   0:00  \_ /usr/sbin/CROND -n
root       7763  0.0  0.0 113284  1212 ?        Ss   10:24   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       7774  0.0  0.0 108052   360 ?        S    10:24   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       7777  0.0  0.0 113288  1516 ?        S    10:24   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       7824  0.0  0.0 153840  2096 ?        R    10:24   0:00  |               \_ ps auxf
root       7738  0.0  0.0 183048  2148 ?        S    10:24   0:00  \_ /usr/sbin/CROND -n
root       7759  0.0  0.0  20164   804 ?        Ss   10:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       7739  0.0  0.0 183048  2148 ?        S    10:24   0:00  \_ /usr/sbin/CROND -n
root       7765  0.0  0.0  20164   804 ?        Ss   10:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root       7740  0.0  0.0 183048  2148 ?        S    10:24   0:00  \_ /usr/sbin/CROND -n
root       7762  0.0  0.0  20164   804 ?        Ss   10:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root       7741  0.0  0.0 183048  2144 ?        S    10:24   0:00  \_ /usr/sbin/CROND -n
root       7769  0.0  0.0  20164   984 ?        Ss   10:24   0:00  |   \_ jailshell (cloudsms) [7821] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms   7821  0.0  0.0  20164   252 ?        S    10:24   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms   7822  0.0  0.0 113284  1208 ?        S    10:24   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
cloudsms   7823  0.0  0.5 397548 13272 ?        R    10:24   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_schedules.php
root       7742  0.0  0.0 183048  2144 ?        S    10:24   0:00  \_ /usr/sbin/CROND -n
root       7760  0.0  0.0  20164   808 ?        Ss   10:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       7743  0.0  0.0 183048  2144 ?        S    10:24   0:00  \_ /usr/sbin/CROND -n
root       7758  0.0  0.0  20164   968 ?        Ss   10:24   0:00  |   \_ jailshell (cloudsms) [7792] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   7792  0.0  0.0  20164   260 ?        S    10:24   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   7795  0.0  0.0 113284  1212 ?        S    10:24   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   7796  0.0  0.6 400652 15412 ?        S    10:24   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root       7744  0.0  0.0 183048  2144 ?        S    10:24   0:00  \_ /usr/sbin/CROND -n
root       7768  0.0  0.0  20164   808 ?        Ss   10:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       7745  0.0  0.0 183048  2144 ?        S    10:24   0:00  \_ /usr/sbin/CROND -n
root       7766  0.0  0.0  20164   804 ?        Ss   10:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       7746  0.0  0.0 183048  2140 ?        S    10:24   0:00  \_ /usr/sbin/CROND -n
root       7756  0.0  0.0  20164   804 ?        Ss   10:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       7747  0.0  0.0 183048  2140 ?        S    10:24   0:00  \_ /usr/sbin/CROND -n
root       7755  0.0  0.0  20164   804 ?        Ss   10:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       7748  0.0  0.0 183048  2140 ?        S    10:24   0:00  \_ /usr/sbin/CROND -n
root       7764  0.0  0.0  20164   804 ?        Ss   10:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       7749  0.0  0.0 183048  2144 ?        S    10:24   0:00  \_ /usr/sbin/CROND -n
root       7757  0.0  0.0  20164   968 ?        Ss   10:24   0:00  |   \_ jailshell (pactpay) [7790] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    7790  0.0  0.0  20164   256 ?        S    10:24   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    7794  0.0  0.7 476724 17484 ?        S    10:24   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       7751  0.0  0.0 183048  2140 ?        S    10:24   0:00  \_ /usr/sbin/CROND -n
root       7767  0.0  0.0  20164   972 ?        Ss   10:24   0:00  |   \_ jailshell (nigeria) [7784] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    7784  0.0  0.0  20164   264 ?        S    10:24   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    7791  0.0  0.6 400652 15932 ?        R    10:24   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root       7752  0.0  0.0 183048  2148 ?        S    10:24   0:00  \_ /usr/sbin/CROND -n
root       7770  0.0  0.0  20164   968 ?        Ss   10:24   0:00      \_ jailshell (saboakin) [7782] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin   7782  0.0  0.0      0     0 ?        R    10:24   0:00          \_ [jailshell]
root        574  0.0  0.0  24208    80 ?        Ss   10:16   0:00 /usr/sbin/atd -f
root        585  0.0  0.0 108296   248 tty1     Ss+  10:16   0:00 /sbin/agetty --noclear tty1 linux
root        586  0.0  0.0 114704   280 ttyS0    Ss+  10:16   0:00 /bin/bash
mailnull    615  0.0  0.1  88984  3312 ?        Ss   10:16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        925  3.1 43.8 1763044 1061140 ?     Ssl  10:16   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       931  0.1  0.8 637992 21620 ?        Ssl  10:16   0:00 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        933  0.0  0.1 445028  2804 ?        Ss   10:16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        938  0.0  0.4 436392 11112 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        940  0.0  0.0 385496   772 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    941  0.0  0.5 114016 13192 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
cpanelc+    945  0.0  0.1   9568  2424 ?        Rs   10:16   0:00 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        946  0.0  0.0 392856   560 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
memcach+    948  0.0  0.0 342400   260 ?        Ssl  10:16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    950  0.0  0.0  10132    48 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    952  0.0  0.0 112524  2088 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    957  0.0  0.0  14068    28 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        959  0.0  0.1 397344  3112 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
root        960  0.0  0.0 153404   484 ?        Ss   10:16   0:00 pure-ftpd (SERVER)
systuser    963  0.0  0.0 111608  1600 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        988  0.0  0.0 386112   432 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        989  0.0  0.1 261032  3036 ?        Ss   10:16   0:00 cpsrvd (SSL) - waiting for connections                   
root       7728  0.0  0.0      0     0 ?        Z    10:23   0:00  \_ [cpaneld - servi] <defunct>
root        990  0.0  0.0 572372   988 ?        Ssl  10:16   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    991  0.0  1.4 5654048 34012 ?       SLsl 10:16   0:00 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        998  0.0  0.0 111304   616 ?        Ss   10:16   0:00 /usr/sbin/sshd -D
root       7440  0.0  0.1 111304  4264 ?        Ss   10:23   0:00  \_ sshd: [accepted]
sshd       7449  0.0  0.1 115644  2632 ?        S    10:23   0:00  |   \_ sshd: [net]
root       7496  0.0  0.1 111304  4260 ?        Ss   10:23   0:00  \_ sshd: [accepted]
root       7676  0.0  0.1 111304  4268 ?        Ss   10:23   0:00  \_ sshd: [accepted]
sshd       7677  0.0  0.1 115644  2628 ?        S    10:23   0:00  |   \_ sshd: [net]
root       7706  0.3  0.2 162436  5828 ?        Ss   10:23   0:00  \_ sshd: root [priv]
sshd       7707  0.0  0.1 115644  2624 ?        S    10:23   0:00  |   \_ sshd: root [net]
root       7713  0.5  0.2 162436  5832 ?        Ss   10:23   0:00  \_ sshd: root [priv]
sshd       7714  0.0  0.1 115644  2628 ?        S    10:23   0:00      \_ sshd: root [net]
root       1000  0.0  0.1 216400  3304 ?        Ssl  10:16   0:00 /usr/sbin/rsyslogd -n
root       1001  0.0  0.0  51508   672 ?        Ss   10:16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1125  0.0  0.0  46772   764 ?        S    10:16   0:00  \_ dovecot/pop3-login
dovenull   1126  0.0  0.1  47056  3024 ?        S    10:16   0:00  \_ dovecot/imap-login
dovecot    1127  0.0  0.0  10320   524 ?        S    10:16   0:00  \_ dovecot/anvil
root       1128  0.0  0.0  10452   476 ?        S    10:16   0:00  \_ dovecot/log
dovenull   1129  0.0  0.1  46912  2732 ?        S    10:16   0:00  \_ dovecot/pop3-login
dovenull   1130  0.0  0.0  46780   460 ?        S    10:16   0:00  \_ dovecot/imap-login
root       1133  0.0  0.0  24556  2232 ?        S    10:16   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   540 ?        S    10:16   0:00  \_ dovecot/stats
dovecot    1208  0.0  0.0  41056  1056 ?        S    10:16   0:00  \_ dovecot/auth
root       7021  0.0  0.1  60820  3888 ?        S    10:22   0:00  \_ dovecot/lmtp
root       7701  0.0  0.1  41052  2780 ?        S    10:23   0:00  \_ dovecot/auth -w
nescrow+   7703  0.0  0.1  38052  3400 ?        S    10:23   0:00  \_ dovecot/imap
root       1147  0.6  4.9 248176 119660 ?       Ss   10:16   0:02 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5511  0.3  5.1 259348 125024 ?       S    10:20   0:00  \_ spamd child
root       5512  0.0  4.8 248176 117628 ?       S    10:20   0:00  \_ spamd child
systuser   1164  0.0  0.0 157708  2112 ?        S    10:16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1165  0.1  1.4 410452 34900 ?        Ss   10:16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1166  0.0  0.5 387528 12176 ?        Ss   10:16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1236  0.0  0.0 183900   312 ?        Ss   10:16   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1239  0.0  0.4 209296 10628 ?        Ss   10:16   0:00 tailwatchd
root       1241  0.0  0.0 167452  1488 ?        Ss   10:16   0:00 dnsadmin - dormant mode
root       1631  0.0  0.0 299272  1088 ?        Ss   10:16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1677  0.0  0.0 130416   888 ?        SN   10:16   0:00 cpanellogd - sleeping for logs
mysql      1731  1.4  7.8 1457540 189084 ?      Sl   10:16   0:06 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1979  0.0  0.9 267036 22484 ?        Ss   10:16   0:00 /usr/sbin/httpd -k start
root       1981  0.0  0.0  12824   708 ?        S    10:16   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1982  0.0  0.0  12732   480 ?        S    10:16   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1983  0.0  0.0  12848   480 ?        S    10:16   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1986  0.0  0.3  53268  9656 ?        S    10:16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     2885  0.1  1.3 277772 31516 ?        S    10:18   0:00  \_ /usr/sbin/httpd -k start
nobody     5753  0.1  1.3 277784 31648 ?        S    10:21   0:00  \_ /usr/sbin/httpd -k start
nobody     5815  0.1  1.2 277520 31324 ?        S    10:21   0:00  \_ /usr/sbin/httpd -k start
nobody     5817  0.1  1.3 277784 31592 ?        S    10:21   0:00  \_ /usr/sbin/httpd -k start
cloudw     7825  0.0  0.2 112976  5268 ?        R    10:24   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody     5819  0.1  1.3 277932 31616 ?        S    10:21   0:00  \_ /usr/sbin/httpd -k start
nobody     6709  0.1  1.2 277784 31404 ?        S    10:22   0:00  \_ /usr/sbin/httpd -k start
nobody     6724  0.0  1.2 277932 31396 ?        S    10:22   0:00  \_ /usr/sbin/httpd -k start
nobody     7240  0.1  1.2 277784 31176 ?        S    10:23   0:00  \_ /usr/sbin/httpd -k start
nobody     7262  0.1  1.2 277652 31052 ?        S    10:23   0:00  \_ /usr/sbin/httpd -k start
nobody     7283  0.1  1.2 277784 31200 ?        S    10:23   0:00  \_ /usr/sbin/httpd -k start
nobody     7303  0.0  1.3 277784 31616 ?        S    10:23   0:00  \_ /usr/sbin/httpd -k start
nobody     7305  0.1  1.2 277816 31416 ?        S    10:23   0:00  \_ /usr/sbin/httpd -k start
nobody     7306  0.1  1.2 277932 31208 ?        S    10:23   0:00  \_ /usr/sbin/httpd -k start
cloudw     7799  0.0  0.6 352096 15232 ?        S    10:24   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody     7583  0.0  1.2 277804 31020 ?        S    10:23   0:00  \_ /usr/sbin/httpd -k start
nobody     7712  0.0  1.2 277404 29260 ?        S    10:23   0:00  \_ /usr/sbin/httpd -k start
root       1980  0.1  1.1 180932 27912 ?        Ss   10:16   0:00 lfd - sleeping
root       2452  0.0  0.4 1341636 11528 ?       Ssl  10:17   0:00 /usr/bin/cspdaemon
root       2488  0.0  0.5 1277312 12372 ?       Ssl  10:17   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 434  Threads: 4  Questions: 30276  Slow queries: 0  Opens: 719  Flush tables: 1  Open tables: 712  Queries per second avg: 69.760
*************************** 1. row ***************************
     Id: 369
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 370
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-13' LIMIT 1
*************************** 3. row ***************************
     Id: 380
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 110.249.201.56 TIME_WAIT
      1 110.249.202.64 TIME_WAIT
      1 114.119.154.186 TIME_WAIT
      1 114.119.157.111 TIME_WAIT
      1 125.94.174.216 TIME_WAIT
      1 154.29.230.227 TIME_WAIT
      1 ::1 TIME_WAIT
      1 4.151.241.243 TIME_WAIT
      1 4.196.198.88 TIME_WAIT
      1 45.156.128.54 TIME_WAIT
      1 45.227.253.15 TIME_WAIT
      1 54.39.203.13 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 130.131.162.184 TIME_WAIT
      2 4.151.241.240 TIME_WAIT
      2 44.252.53.153 TIME_WAIT
      2 45.156.128.51 TIME_WAIT
      2 45.156.128.53 TIME_WAIT
      3 45.156.128.52 TIME_WAIT
      4 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 10:24:01 WAT
   Restart Time: Thursday, 13-Nov-2025 10:16:53 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 7 minutes 8 seconds
   Server load: 0.49 0.88 0.56
   Total accesses: 1568 - Total Traffic: 40.0 MB - Total Duration: 792153
   CPU Usage: u1.51 s.66 cu18.2 cs15.45 - 8.37% CPU load
   3.66 requests/sec - 95.8 kB/second - 26.2 kB/request - 505.2 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

KK_WKKK.K..._K.KKK.......W..._..................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv  PID    Acc   M CPU  SS  Req  Dur  Conn Child Slot    Client     Protocol           VHost                                        Request
   0-0  7240 2/10/76 K 0.21 0   382 35989 61.0 0.25  1.80 66.249.70.198 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3781165392 HTTP/1.1
   1-0  5753 1/38/90 K 0.84 0   309 36054 29.5 0.80  1.53 66.249.70.200 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3290550308 HTTP/1.1
   2-0  7262 0/12/92 _ 0.30 0   359 37352 0.0  0.32  4.44 66.249.70.192 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2482314241 HTTP/1.1
   3-0  7712 0/1/66  W 0.00 0   0   25114 0.0  0.00  1.22 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   4-0  6709 2/23/87 K 0.55 4   351 40293 65.9 0.60  2.67 66.249.70.38  http/1.1 support.cloudware.ng:443   GET /?c=736723582 HTTP/1.1
   5-0  7283 3/13/89 K 0.32 0   356 40987 92.3 0.37  1.74 66.249.70.194 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3941856702 HTTP/1.1
   6-0  2885 1/85/85 K 1.94 3   389 38052 30.8 1.77  1.77 66.249.70.197 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1731352150 HTTP/1.1
   7-0  -    0/0/70  . 0.00 10  0   37690 0.0  0.00  1.67 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   8-0  7583 2/4/65  K 0.05 0   344 33892 60.5 0.20  1.66 66.249.70.197 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2095355518 HTTP/1.1
   9-0  -    0/0/51  . 0.00 42  0   27123 0.0  0.00  1.46 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-0 -    0/0/53  . 0.00 25  0   28556 0.0  0.00  1.30 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   11-0 -    0/0/52  . 0.00 39  0   30058 0.0  0.00  1.39 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-0 7303 0/11/50 _ 0.12 0   2   22297 0.0  0.16  1.01 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   13-0 6724 2/15/53 K 0.30 3   345 29413 61.0 0.35  1.27 66.249.70.195 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2950614177 HTTP/1.1
   14-0 -    0/0/48  . 0.00 12  0   24526 0.0  0.00  1.24 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 5815 2/37/63 K 0.86 2   352 38219 59.9 0.95  1.64 66.249.70.196 http/1.1 schoolplus.cloudware.ng:80 GET /?p=396050865 HTTP/1.1
   16-0 7305 1/13/25 K 0.33 2   390 13471 35.7 0.38  0.65 66.249.70.193 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1925144505 HTTP/1.1
   17-0 7306 3/14/42 K 0.34 0   426 26195 90.7 0.40  1.30 66.249.70.199 http/1.1 schoolplus.cloudware.ng:80 GET /?p=4012895991 HTTP/1.1
   18-0 -    0/0/59  . 0.00 24  0   29828 0.0  0.00  1.43 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -    0/0/25  . 0.00 156 0   11685 0.0  0.00  0.51 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -    0/0/14  . 0.00 167 0   8447  0.0  0.00  0.25 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -    0/0/27  . 0.00 168 0   16012 0.0  0.00  0.75 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -    0/0/25  . 0.00 171 0   13373 0.0  0.00  0.63 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -    0/0/24  . 0.00 163 0   14358 0.0  0.00  0.67 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -    0/0/25  . 0.00 164 0   15863 0.0  0.00  0.60 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 5817 0/42/54 W 1.06 0   0   31740 0.0  1.10  1.44 66.249.70.192 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1606122799 HTTP/1.1
   26-0 -    0/0/38  . 0.00 121 0   23357 0.0  0.00  1.07 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -    0/0/21  . 0.00 157 0   12967 0.0  0.00  0.61 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -    0/0/42  . 0.00 9   0   20479 0.0  0.00  0.98 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 5819 0/51/51 _ 1.21 0   23  26565 0.0  1.27  1.27 54.157.99.244 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/2019elections/blog/2019elections
   30-0 -    0/0/1   . 0.00 172 0   0     0.0  0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -    0/0/4   . 0.00 158 0   2179  0.0  0.00  0.09 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -    0/0/1   . 0.00 173 0   0     0.0  0.00  0.00 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 414
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 17 seconds, (range: 0...52)
   index usage: 7%, cache usage: 10%
   total entries stored since starting: 583
   total entries replaced since starting: 0
   total entries expired since starting: 169
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 10 miss
   total removes since starting: 0 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit