403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.10.30.txt
 ## mem threshold exceeded
## server overview
2025-11-13.10.30 load[0] mem[85/25] mysql[1/7] httpd[7]
              total        used        free      shared  buff/cache   available
Mem:           2363        1972          69          19         321         219
Swap:          1999         592        1407
 10:30:01 up 13 min,  0 users,  load average: 0.14, 0.46, 0.48
## system overview
top - 10:30:01 up 13 min,  0 users,  load average: 0.14, 0.46, 0.48
Tasks: 214 total,   2 running, 211 sleeping,   0 stopped,   1 zombie
%Cpu(s): 67.6 us, 26.5 sy,  0.0 ni,  0.0 id,  2.9 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,    80852 free,  2014660 used,   324788 buff/cache
KiB Swap:  2047996 total,  1441788 free,   606208 used.   230564 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1731 mysql     20   0 1457540 210704   3292 S 153.3  8.7   0:11.00 /usr/sbin+
 11412 nigeria   20   0  400652  15932  10212 S  13.3  0.7   0:00.04 /opt/cpan+
    36 root      20   0       0      0      0 S   6.7  0.0   0:03.96 [kswapd0]
 11407 pactpay   20   0  476724  17488  11728 S   6.7  0.7   0:00.02 /opt/cpan+
 11441 root      20   0  160224   2352   1640 S   6.7  0.1   0:00.01 top -n 2 +
     1 root      20   0   44272   3256   1480 S   0.0  0.1   0:01.96 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     5 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:00.79 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    30 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kauditd]
   229 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:00.29 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:00.42 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   39496   5004   4712 S   0.0  0.2   0:00.63 /usr/lib/+
   379 root      20   0   45352    488    344 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    332    200 S   0.0  0.0   0:00.09 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   482 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
   488 dbus      20   0   58392   1336    732 S   0.0  0.1   0:00.45 /usr/bin/+
   512 rpc       20   0   69256    268    160 S   0.0  0.0   0:00.01 /sbin/rpc+
   518 root      20   0  152780    236    228 S   0.0  0.0   0:00.00 /usr/sbin+
   520 root      20   0   24592   1188    888 S   0.0  0.0   0:00.19 /usr/lib/+
   521 root      20   0  224148   6384    812 S   0.0  0.3   0:00.08 queueproc+
   524 root      20   0   21540    512    400 S   0.0  0.0   0:00.01 /usr/sbin+
   525 polkitd   20   0  612240   1088    736 S   0.0  0.0   0:00.13 /usr/lib/+
   533 root      20   0   52852    336    332 S   0.0  0.0   0:00.01 /usr/sbin+
   535 nscd      20   0  928956   1404    680 S   0.0  0.1   0:00.47 /usr/sbin+
   540 root      20   0    4388    232    228 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0  195208    132    132 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0  124480    560    428 S   0.0  0.0   0:00.02 /usr/sbin+
   574 root      20   0   24208     80     80 S   0.0  0.0   0:00.00 /usr/sbin+
   577 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   585 root      20   0  108296    248    244 S   0.0  0.0   0:00.00 /sbin/age+
   586 root      20   0  114704    280    280 S   0.0  0.0   0:00.02 /bin/bash
   615 mailnull  20   0   88984   3512    560 S   0.0  0.1   0:00.03 /usr/sbin+
   677 root       0 -20       0      0      0 S   0.0  0.0   0:00.15 [loop0]
   714 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   717 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   925 root      20   0 1763044 986.3m    556 S   0.0 41.7   0:13.65 /usr/loca+
   931 named     20   0  637992  23472   1292 S   0.0  1.0   0:00.74 /usr/sbin+
   933 root      20   0  445028   2804   2804 S   0.0  0.1   0:00.06 sw-engine+
   938 root      20   0  436392  11196  11108 S   0.0  0.5   0:00.14 php-fpm: +
   940 root      20   0  385496    772    556 S   0.0  0.0   0:00.09 php-fpm: +
   941 systuser  20   0  114016  12068   1152 S   0.0  0.5   0:00.27 /usr/loca+
   945 cpanelc+  20   0    9700   2656   2348 S   0.0  0.1   0:00.61 /usr/loca+
   946 root      20   0  392856    560    480 S   0.0  0.0   0:00.08 php-fpm: +
   948 memcach+  20   0  342400    260    260 S   0.0  0.0   0:00.01 /usr/bin/+
   950 systuser  20   0   10132     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   952 systuser  20   0  112524   2088      0 S   0.0  0.1   0:00.00 /usr/loca+
   957 systuser  20   0   14068     44      0 S   0.0  0.0   0:00.00 /usr/loca+
   959 root      20   0  397344   3112    732 S   0.0  0.1   0:00.23 php-fpm: +
   960 root      20   0  153404    484    396 S   0.0  0.0   0:00.02 pure-ftpd+
   963 systuser  20   0  111608   1600      0 S   0.0  0.1   0:00.00 /usr/loca+
   988 root      20   0  386112    868    660 S   0.0  0.0   0:00.08 php-fpm: +
   989 root      20   0  261032   3256    920 S   0.0  0.1   0:00.23 cpsrvd (S+
   990 root      20   0  572372    980    516 S   0.0  0.0   0:00.17 /usr/bin/+
   991 telegraf  20   0 5654048  35424   1244 S   0.0  1.5   0:00.62 /usr/loca+
   998 root      20   0  111304    616    516 S   0.0  0.0   0:00.13 /usr/sbin+
  1000 root      20   0  216400   4276   3844 S   0.0  0.2   0:00.29 /usr/sbin+
  1001 root      20   0   51508    672    512 S   0.0  0.0   0:00.04 /usr/sbin+
  1125 dovenull  20   0   46772    764    520 S   0.0  0.0   0:00.01 dovecot/p+
  1126 dovenull  20   0   47056   2896   2160 S   0.0  0.1   0:00.00 dovecot/i+
  1127 dovecot   20   0   10320    508    396 S   0.0  0.0   0:00.00 dovecot/a+
  1128 root      20   0   10452    472    324 S   0.0  0.0   0:00.00 dovecot/l+
  1129 dovenull  20   0   46912   2036   1464 S   0.0  0.1   0:00.02 dovecot/p+
  1130 dovenull  20   0   46924   3052   2432 S   0.0  0.1   0:00.00 dovecot/i+
  1133 root      20   0   24556   2408    580 S   0.0  0.1   0:00.02 dovecot/c+
  1137 dovecot   20   0   13568    704    492 S   0.0  0.0   0:00.00 dovecot/s+
  1147 root      20   0  248176 119744   3000 S   0.0  4.9   0:02.96 /usr/loca+
  1164 systuser  20   0  157708   2200    208 S   0.0  0.1   0:00.01 SonarPush+
  1165 wp-tool+  20   0  410452  34876   1428 S   0.0  1.4   0:00.88 /usr/bin/+
  1166 wp-tool+  20   0  387528  12200   1544 S   0.0  0.5   0:00.09 /usr/bin/+
  1208 dovecot   20   0   41056   1440   1016 S   0.0  0.1   0:00.01 dovecot/a+
  1236 root      20   0  183900    312    312 S   0.0  0.0   0:00.08 cpdavd - +
  1239 root      20   0  209296  10872   1460 S   0.0  0.4   0:00.30 tailwatchd
  1241 root      20   0  167452   1516    912 S   0.0  0.1   0:00.06 dnsadmin +
  1631 root      20   0  299272    888    508 S   0.0  0.0   0:00.01 php-fpm: +
  1677 root      38  18  130416   1432    716 S   0.0  0.1   0:00.00 cpanellog+
  1979 root      20   0  267036  18500    916 S   0.0  0.8   0:00.22 /usr/sbin+
  1980 root      20   0  181060  27996   1248 S   0.0  1.2   0:00.78 lfd - sle+
  1981 root      20   0   12856    704    408 S   0.0  0.0   0:00.05 /usr/loca+
  1982 root      20   0   12732    480    292 S   0.0  0.0   0:00.05 /usr/loca+
  1983 root      20   0   12896    716    368 S   0.0  0.0   0:00.05 /usr/loca+
  1986 root      20   0   53268   9656    268 S   0.0  0.4   0:00.04 /usr/loca+
  2097 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  2098 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
  2452 root      20   0 1341636  11528    244 S   0.0  0.5   0:00.06 /usr/bin/+
  2488 root      20   0 1277312  12172    244 S   0.0  0.5   0:00.07 /usr/bin/+
  5511 root      20   0  259348 125060   1988 S   0.0  5.2   0:00.78 spamd chi+
  5512 root      20   0  248176 117624    916 S   0.0  4.9   0:00.00 spamd chi+
  6450 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  7172 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  8209 nobody    20   0  277784  28160   3732 S   0.0  1.2   0:00.38 /usr/sbin+
  8260 nobody    20   0  277784  28300   3836 S   0.0  1.2   0:00.33 /usr/sbin+
  8577 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  8777 nobody    20   0  277548  28056   3796 S   0.0  1.2   0:00.27 /usr/sbin+
  9149 nobody    20   0  277924  28284   3856 S   0.0  1.2   0:00.25 /usr/sbin+
  9212 nobody    20   0  277784  28044   3624 S   0.0  1.2   0:00.22 /usr/sbin+
  9908 nobody    20   0  277932  28036   3636 S   0.0  1.2   0:00.13 /usr/sbin+
 10342 nobody    20   0  277932  28128   3756 S   0.0  1.2   0:00.13 /usr/sbin+
 10490 nobody    20   0  277920  27984   3584 S   0.0  1.2   0:00.10 /usr/sbin+
 10501 nobody    20   0  277932  28236   3844 S   0.0  1.2   0:00.10 /usr/sbin+
 10502 nobody    20   0  277704  28444   3756 S   0.0  1.2   0:00.06 /usr/sbin+
 10772 nobody    20   0  277788  27952   3536 S   0.0  1.2   0:00.09 /usr/sbin+
 11005 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 11033 nobody    20   0  277700  27892   3572 S   0.0  1.2   0:00.04 /usr/sbin+
 11035 nobody    20   0  277948  27912   3540 S   0.0  1.2   0:00.06 /usr/sbin+
 11037 nobody    20   0  277784  26520   2148 S   0.0  1.1   0:00.03 /usr/sbin+
 11038 nobody    20   0  277784  27736   3364 S   0.0  1.1   0:00.03 /usr/sbin+
 11274 nobody    20   0  277360  27320   3412 S   0.0  1.1   0:00.00 /usr/sbin+
 11284 oyocovi+  20   0  397064   3780   1156 S   0.0  0.2   0:00.00 php-fpm: +
 11287 root      20   0   41052   2780   2124 S   0.0  0.1   0:00.00 dovecot/a+
 11289 worencom  20   0   38380   3660   2872 S   0.0  0.2   0:00.00 dovecot/i+
 11290 nigeria   20   0  397064   5524   2312 S   0.0  0.2   0:00.00 php-fpm: +
 11291 root      20   0  162436   5828   4336 S   0.0  0.2   0:00.01 sshd: roo+
 11292 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 11312 root      20   0  162436   5828   4336 S   0.0  0.2   0:00.01 sshd: roo+
 11314 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 11321 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 11322 root      20   0  162436   5828   4336 S   0.0  0.2   0:00.01 sshd: roo+
 11323 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 11332 root      20   0  183052   2140   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 11334 root      20   0  183048   2140   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 11335 root      20   0  183048   2140   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 11336 root      20   0  183048   2140   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 11337 root      20   0  183048   2140   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 11338 root      20   0  183048   2140   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 11339 root      20   0  183048   2140   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 11340 root      20   0  183048   2140   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 11341 root      20   0  183048   2140   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 11342 root      20   0  183048   2140   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 11343 root      20   0  183048   2140   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 11344 root      20   0  183048   2136   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 11345 root      20   0  183048   2136   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 11346 root      20   0  183048   2132   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 11347 root      20   0  183048   2132   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 11348 root      20   0  183048   2132   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 11349 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 11351 root      20   0  183048   2132   1576 S   0.0  0.1   0:00.00 /usr/sbin+
 11356 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 11357 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 11358 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 11359 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 11360 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 11361 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11363 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 11365 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11366 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11367 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 11369 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 11370 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11371 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 11372 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 11374 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 11376 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11377 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11379 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 11380 root      20   0  114256   2428   1280 S   0.0  0.1   0:00.00 bash /usr+
 11385 root      20   0  188420  11356   5148 S   0.0  0.5   0:00.02 /usr/loca+
 11388 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 11391 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 11403 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 11406 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 11416 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 11418 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 11419 cloudsms  20   0  400652  15144   9844 S   0.0  0.6   0:00.02 /opt/cpan+
 11446 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 11468 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 11471 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 11473 cloudsms  20   0  400652  15408  10004 S   0.0  0.6   0:00.01 /opt/cpan+
 11480 root      20   0  160220   2068   1580 R   0.0  0.1   0:00.00 top -bcn1
 11490 root      20   0     192      4      0 D   0.0  0.0   0:00.00 [chmod]
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    10:16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kworker/0:0H]
root          5  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kworker/u200:0]
root          6  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        R    10:16   0:00  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [watchdogd]
root         30  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kworker/0:1]
root         36  0.4  0.0      0     0 ?        S    10:16   0:03  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   10:16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   10:16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [deferwq]
root        104  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kworker/1:2]
root        240  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ext4-rsv-conver]
root        413  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [xprtiod]
root        482  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [kworker/1:3]
root        577  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [kvm-irqfd-clean]
root        677  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [loop0]
root        714  0.0  0.0      0     0 ?        S    10:16   0:00  \_ [jbd2/loop0-8]
root        717  0.0  0.0      0     0 ?        S<   10:16   0:00  \_ [ext4-rsv-conver]
root       2097  0.0  0.0      0     0 ?        S    10:17   0:00  \_ [kworker/0:3]
root       2098  0.0  0.0      0     0 ?        S    10:17   0:00  \_ [kworker/0:4]
root       6450  0.0  0.0      0     0 ?        S    10:22   0:00  \_ [kworker/1:0]
root       7172  0.0  0.0      0     0 ?        S    10:23   0:00  \_ [kworker/0:0]
root       8577  0.0  0.0      0     0 ?        S    10:25   0:00  \_ [kworker/0:2]
root      11446  0.0  0.0      0     0 ?        R    10:30   0:00  \_ [kworker/1:1]
root          1  0.2  0.1  44272  3256 ?        Ss   10:16   0:01 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  39496  5004 ?        Ss   10:16   0:00 /usr/lib/systemd/systemd-journald
root        379  0.0  0.0  45352   488 ?        Ss   10:16   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   332 ?        S<sl 10:16   0:00 /sbin/auditd
dbus        488  0.0  0.0  58392  1336 ?        Ss   10:16   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         512  0.0  0.0  69256   268 ?        Ss   10:16   0:00 /sbin/rpcbind -w
root        518  0.0  0.0 152780   236 ?        Ss   10:16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        520  0.0  0.0  24592  1188 ?        Ss   10:16   0:00 /usr/lib/systemd/systemd-logind
root        521  0.0  0.2 224148  6384 ?        Ss   10:16   0:00 queueprocd - waiting up to 60s to process a task
root        524  0.0  0.0  21540   512 ?        Ss   10:16   0:00 /usr/sbin/irqbalance --foreground
polkitd     525  0.0  0.0 612240  1088 ?        Ssl  10:16   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        533  0.0  0.0  52852   336 ?        Ss   10:16   0:00 /usr/sbin/smartd -n -q never
nscd        535  0.0  0.0 928956  1404 ?        Ssl  10:16   0:00 /usr/sbin/nscd
root        540  0.0  0.0   4388   232 ?        Ss   10:16   0:00 /usr/sbin/acpid
root        542  0.0  0.0 195208   132 ?        Ssl  10:16   0:00 /usr/sbin/gssproxy -D
root        571  0.0  0.0 124480   560 ?        Ss   10:16   0:00 /usr/sbin/crond -n
root      11332  0.0  0.0 183052  2140 ?        S    10:30   0:00  \_ /usr/sbin/CROND -n
root      11363  0.0  0.0 113284  1212 ?        Ss   10:30   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      11380  0.0  0.1 114256  2428 ?        R    10:30   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      11493  0.0  0.0      0     0 ?        Z    10:30   0:00  |           \_ [sed] <defunct>
root      11334  0.0  0.0 183048  2140 ?        S    10:30   0:00  \_ /usr/sbin/CROND -n
root      11372  0.0  0.0 113284  1212 ?        Ss   10:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      11388  0.0  0.0 108052   356 ?        S    10:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      11391  0.0  0.0 113288  1516 ?        S    10:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      11492  0.0  0.0 153840  2104 ?        R    10:30   0:00  |               \_ ps auxf
root      11335  0.0  0.0 183048  2140 ?        S    10:30   0:00  \_ /usr/sbin/CROND -n
root      11366  0.0  0.0  20164   808 ?        Ss   10:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      11336  0.0  0.0 183048  2140 ?        S    10:30   0:00  \_ /usr/sbin/CROND -n
root      11376  0.0  0.0  20164   808 ?        Ss   10:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      11337  0.0  0.0 183048  2140 ?        S    10:30   0:00  \_ /usr/sbin/CROND -n
root      11377  0.0  0.0  20164   808 ?        Ss   10:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      11338  0.0  0.0 183048  2140 ?        S    10:30   0:00  \_ /usr/sbin/CROND -n
root      11360  0.0  0.0  20164   804 ?        Ss   10:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      11339  0.0  0.0 183048  2140 ?        S    10:30   0:00  \_ /usr/sbin/CROND -n
root      11361  0.0  0.0  20164   808 ?        Ss   10:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      11340  0.0  0.0 183048  2140 ?        S    10:30   0:00  \_ /usr/sbin/CROND -n
root      11374  0.0  0.0  20164   804 ?        Ss   10:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      11341  0.0  0.0 183048  2140 ?        S    10:30   0:00  \_ /usr/sbin/CROND -n
root      11358  0.0  0.0  20164   988 ?        Ss   10:30   0:00  |   \_ jailshell (cloudsms) [11468] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  11468  0.0  0.0  20164   256 ?        S    10:30   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  11471  0.0  0.0 113284  1212 ?        S    10:30   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  11473  1.0  0.6 400652 15408 ?        S    10:30   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      11342  0.0  0.0 183048  2140 ?        S    10:30   0:00  \_ /usr/sbin/CROND -n
root      11365  0.0  0.0  20164   808 ?        Ss   10:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      11343  0.0  0.0 183048  2140 ?        S    10:30   0:00  \_ /usr/sbin/CROND -n
root      11357  0.0  0.0  20164   972 ?        Ss   10:30   0:00  |   \_ jailshell (cloudsms) [11416] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  11416  0.0  0.0  20164   264 ?        S    10:30   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  11418  0.0  0.0 113284  1212 ?        S    10:30   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  11419  2.0  0.6 400652 15144 ?        S    10:30   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      11344  0.0  0.0 183048  2136 ?        S    10:30   0:00  \_ /usr/sbin/CROND -n
root      11369  0.0  0.0  20164   804 ?        Ss   10:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      11345  0.0  0.0 183048  2136 ?        S    10:30   0:00  \_ /usr/sbin/CROND -n
root      11379  0.0  0.0  20164   808 ?        Ss   10:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      11346  0.0  0.0 183048  2132 ?        S    10:30   0:00  \_ /usr/sbin/CROND -n
root      11371  0.0  0.0  20164   804 ?        Ss   10:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      11347  0.0  0.0 183048  2132 ?        S    10:30   0:00  \_ /usr/sbin/CROND -n
root      11370  0.0  0.0  20164   808 ?        Ss   10:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      11348  0.0  0.0 183048  2132 ?        S    10:30   0:00  \_ /usr/sbin/CROND -n
root      11367  0.0  0.0 113284  1212 ?        Ss   10:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      11385  2.0  0.4 188420 11356 ?        S    10:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      11441  1.0  0.0 160224  2352 ?        S    10:30   0:00  |           \_ top -n 2 -b -c
root      11349  0.0  0.0 183048  2136 ?        S    10:30   0:00  \_ /usr/sbin/CROND -n
root      11356  0.0  0.0  20164   968 ?        Ss   10:30   0:00  |   \_ jailshell (pactpay) [11403] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   11403  0.0  0.0  20164   260 ?        S    10:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   11407  2.0  0.7 476724 17488 ?        S    10:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      11351  0.0  0.0 183048  2132 ?        S    10:30   0:00  \_ /usr/sbin/CROND -n
root      11359  0.0  0.0  20164   972 ?        Ss   10:30   0:00      \_ jailshell (nigeria) [11406] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   11406  0.0  0.0  20164   264 ?        S    10:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   11412  5.0  0.6 400652 15932 ?        S    10:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        574  0.0  0.0  24208    80 ?        Ss   10:16   0:00 /usr/sbin/atd -f
root        585  0.0  0.0 108296   248 tty1     Ss+  10:16   0:00 /sbin/agetty --noclear tty1 linux
root        586  0.0  0.0 114704   280 ttyS0    Ss+  10:16   0:00 /bin/bash
mailnull    615  0.0  0.1  88984  3512 ?        Ss   10:16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        925  1.7 41.7 1763044 1010000 ?     Ssl  10:16   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       931  0.0  0.9 637992 23472 ?        Ssl  10:16   0:00 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        933  0.0  0.1 445028  2804 ?        Ss   10:16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        938  0.0  0.4 436392 11196 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        940  0.0  0.0 385496   772 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    941  0.0  0.4 114016 12068 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
cpanelc+    945  0.0  0.1   9700  2656 ?        Rs   10:16   0:00 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        946  0.0  0.0 392856   560 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
memcach+    948  0.0  0.0 342400   260 ?        Ssl  10:16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    950  0.0  0.0  10132    48 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    952  0.0  0.0 112524  2088 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    957  0.0  0.0  14068    44 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        959  0.0  0.1 397344  3112 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
oyocovi+  11284  0.0  0.1 397064  3780 ?        S    10:29   0:00  \_ php-fpm: pool covid19_oyostate_gov_ng
nigeria   11290  0.0  0.2 397064  5524 ?        S    10:29   0:00  \_ php-fpm: pool nigeriadecide_org
root        960  0.0  0.0 153404   484 ?        Ss   10:16   0:00 pure-ftpd (SERVER)
systuser    963  0.0  0.0 111608  1600 ?        Ssl  10:16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        988  0.0  0.0 386112   868 ?        Ss   10:16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        989  0.0  0.1 261032  3256 ?        Ss   10:16   0:00 cpsrvd (SSL) - waiting for connections                   
root      11321  0.0  0.0      0     0 ?        Z    10:29   0:00  \_ [cpaneld - servi] <defunct>
root        990  0.0  0.0 572372   980 ?        Ssl  10:16   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    991  0.0  1.4 5654048 35424 ?       SLsl 10:16   0:00 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        998  0.0  0.0 111304   616 ?        Ss   10:16   0:00 /usr/sbin/sshd -D
root      11005  0.0  0.1 111304  4268 ?        Ss   10:29   0:00  \_ sshd: [accepted]
root      11291  0.3  0.2 162436  5828 ?        Ss   10:29   0:00  \_ sshd: root [priv]
sshd      11292  0.0  0.1 115644  2628 ?        S    10:29   0:00  |   \_ sshd: root [net]
root      11312  0.5  0.2 162436  5828 ?        Ss   10:29   0:00  \_ sshd: root [priv]
sshd      11314  0.0  0.1 115644  2628 ?        S    10:29   0:00  |   \_ sshd: root [net]
root      11322  0.5  0.2 162436  5828 ?        Ss   10:29   0:00  \_ sshd: root [priv]
sshd      11323  0.0  0.1 115644  2628 ?        S    10:29   0:00      \_ sshd: root [net]
root       1000  0.0  0.1 216400  4276 ?        Ssl  10:16   0:00 /usr/sbin/rsyslogd -n
root       1001  0.0  0.0  51508   672 ?        Ss   10:16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1125  0.0  0.0  46772   764 ?        S    10:16   0:00  \_ dovecot/pop3-login
dovenull   1126  0.0  0.1  47056  2896 ?        S    10:16   0:00  \_ dovecot/imap-login
dovecot    1127  0.0  0.0  10320   508 ?        S    10:16   0:00  \_ dovecot/anvil
root       1128  0.0  0.0  10452   472 ?        S    10:16   0:00  \_ dovecot/log
dovenull   1129  0.0  0.0  46912  2036 ?        S    10:16   0:00  \_ dovecot/pop3-login
dovenull   1130  0.0  0.1  46924  3052 ?        S    10:16   0:00  \_ dovecot/imap-login
root       1133  0.0  0.0  24556  2408 ?        S    10:16   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   704 ?        S    10:16   0:00  \_ dovecot/stats
dovecot    1208  0.0  0.0  41056  1440 ?        S    10:16   0:00  \_ dovecot/auth
root      11287  0.0  0.1  41052  2780 ?        S    10:29   0:00  \_ dovecot/auth -w
worencom  11289  0.0  0.1  38380  3660 ?        S    10:29   0:00  \_ dovecot/imap
root       1147  0.3  4.9 248176 119744 ?       Ss   10:16   0:02 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5511  0.1  5.1 259348 125060 ?       S    10:20   0:00  \_ spamd child
root       5512  0.0  4.8 248176 117624 ?       S    10:20   0:00  \_ spamd child
systuser   1164  0.0  0.0 157708  2200 ?        S    10:16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1165  0.1  1.4 410452 34876 ?        Ss   10:16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1166  0.0  0.5 387528 12200 ?        Ss   10:16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1236  0.0  0.0 183900   312 ?        Ss   10:16   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1239  0.0  0.4 209296 10872 ?        Ss   10:16   0:00 tailwatchd
root       1241  0.0  0.0 167452  1516 ?        Ss   10:16   0:00 dnsadmin - dormant mode
root       1631  0.0  0.0 299272   888 ?        Ss   10:16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1677  0.0  0.0 130416  1432 ?        SN   10:16   0:00 cpanellogd - sleeping for logs
mysql      1731  1.3  8.7 1457540 210704 ?      Sl   10:16   0:11 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1979  0.0  0.7 267036 18500 ?        Ss   10:16   0:00 /usr/sbin/httpd -k start
root       1981  0.0  0.0  12856   704 ?        R    10:16   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1982  0.0  0.0  12732   480 ?        S    10:16   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1983  0.0  0.0  12896   716 ?        R    10:16   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1986  0.0  0.3  53268  9656 ?        S    10:16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     8209  0.1  1.1 277784 28160 ?        S    10:24   0:00  \_ /usr/sbin/httpd -k start
nobody     8260  0.1  1.1 277784 28300 ?        S    10:24   0:00  \_ /usr/sbin/httpd -k start
nobody     8777  0.0  1.1 277548 28056 ?        S    10:25   0:00  \_ /usr/sbin/httpd -k start
nobody     9149  0.1  1.1 277924 28284 ?        S    10:26   0:00  \_ /usr/sbin/httpd -k start
nobody     9212  0.0  1.1 277784 28044 ?        S    10:26   0:00  \_ /usr/sbin/httpd -k start
nobody     9908  0.0  1.1 277932 28036 ?        S    10:27   0:00  \_ /usr/sbin/httpd -k start
nobody    10342  0.1  1.1 277932 28128 ?        S    10:28   0:00  \_ /usr/sbin/httpd -k start
nobody    10490  0.1  1.1 277920 27984 ?        S    10:28   0:00  \_ /usr/sbin/httpd -k start
nobody    10501  0.1  1.1 277932 28236 ?        S    10:28   0:00  \_ /usr/sbin/httpd -k start
nobody    10502  0.0  1.1 277704 28444 ?        S    10:28   0:00  \_ /usr/sbin/httpd -k start
nobody    10772  0.1  1.1 277788 27952 ?        S    10:29   0:00  \_ /usr/sbin/httpd -k start
nobody    11033  0.1  1.1 277700 27892 ?        S    10:29   0:00  \_ /usr/sbin/httpd -k start
nobody    11035  0.1  1.1 277948 27912 ?        S    10:29   0:00  \_ /usr/sbin/httpd -k start
nobody    11037  0.0  1.0 277784 26520 ?        S    10:29   0:00  \_ /usr/sbin/httpd -k start
nobody    11038  0.0  1.1 277784 27736 ?        S    10:29   0:00  \_ /usr/sbin/httpd -k start
nobody    11274  0.0  1.1 277360 27320 ?        S    10:29   0:00  \_ /usr/sbin/httpd -k start
root       1980  0.0  1.1 181060 27996 ?        Ss   10:16   0:00 lfd - sleeping
root       2452  0.0  0.4 1341636 11528 ?       Ssl  10:17   0:00 /usr/bin/cspdaemon
root       2488  0.0  0.5 1277312 12172 ?       Ssl  10:17   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 795  Threads: 3  Questions: 56498  Slow queries: 0  Opens: 1078  Flush tables: 1  Open tables: 1054  Queries per second avg: 71.066
*************************** 1. row ***************************
     Id: 721
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-13' LIMIT 1
*************************** 2. row ***************************
     Id: 725
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 730
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 106.75.23.247 TIME_WAIT
      1 114.119.133.34 TIME_WAIT
      1 114.119.134.51 TIME_WAIT
      1 114.119.138.173 TIME_WAIT
      1 114.119.145.187 TIME_WAIT
      1 114.119.155.236 TIME_WAIT
      1 142.44.225.193 TIME_WAIT
      1 170.106.65.93 TIME_WAIT
      1 172.213.21.156 TIME_WAIT
      1 181.215.17.135 TIME_WAIT
      1 ::1 TIME_WAIT
      1 207.46.13.51 TIME_WAIT
      1 34.74.248.16 TIME_WAIT
      1 51.222.168.178 TIME_WAIT
      1 66.249.70.194 TIME_WAIT
      1 85.254.42.223 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 130.131.161.76 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 10:30:02 WAT
   Restart Time: Thursday, 13-Nov-2025 10:16:53 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 13 minutes 8 seconds
   Server load: 0.61 0.55 0.51
   Total accesses: 2698 - Total Traffic: 66.5 MB - Total Duration: 1320971
   CPU Usage: u1.69 s.75 cu32.13 cs26.44 - 7.74% CPU load
   3.42 requests/sec - 86.5 kB/second - 25.3 kB/request - 489.611 ms/request
   7 requests currently being processed, 0 workers gracefully restarting, 9 idle workers

K_KK__W.K.__._..__._K.....K.....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU  SS  Req  Dur  Conn Child Slot     Client     Protocol            VHost                                        Request
   0-0  8209  1/70/154  K 1.52 1   398 76337 37.7 1.61  3.61 66.249.70.39   http/1.1 support.cloudware.ng:443    GET /?c=1222584772 HTTP/1.1
   1-0  9908  0/26/150  _ 0.51 2   5   57650 0.0  0.59  2.66 114.119.134.51 http/1.1 nigeriadecide.org:443       GET /polling_unit_category.php?state=Cross%20river&=Yala&ward=Y
   2-0  8777  18/68/170 K 1.06 0   0   62876 9.1  1.08  5.72 20.196.107.56  http/1.1 covid19.oyostate.gov.ng:80  GET /111.php HTTP/1.1
   3-0  9149  1/44/128  K 1.02 1   407 55907 32.6 1.10  2.75 66.249.70.193  http/1.1 schoolplus.cloudware.ng:80  GET /?p=1450127636 HTTP/1.1
   4-0  11274 0/2/158   _ 0.00 0   0   71964 0.0  0.02  4.15 ::1            http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   5-0  10342 0/23/145  _ 0.53 0   23  69905 0.0  0.59  3.05 54.84.102.81   http/1.1 nigeriadecide.org:443       GET /polling_unit_category.php/blog/blog/blog/assets/js/polling
   6-0  9212  0/40/136  W 0.94 0   0   64897 0.0  1.00  2.96 ::1            http/1.1 chs1.nescrow.com.ng:80      GET //whm-server-status HTTP/1.0
   7-0  -     0/0/98    . 0.00 26  0   50587 0.0  0.00  2.21 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   8-0  10490 1/20/100  K 0.40 1   394 53128 32.4 0.47  2.48 66.249.70.199  http/1.1 schoolplus.cloudware.ng:80  GET /?p=3372182949 HTTP/1.1
   9-0  -     0/0/125   . 0.00 11  0   66349 0.0  0.00  4.52 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   10-0 10501 0/20/76   _ 0.43 0   1   38297 0.0  0.46  1.79 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80      GET /whm-server-status HTTP/1.0
   11-0 10502 0/13/73   _ 0.23 2   3   39042 0.0  0.27  1.83 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80      GET / HTTP/1.1
   12-0 -     0/0/73    . 0.00 19  0   33553 0.0  0.00  1.56 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   13-0 10772 0/21/107  _ 0.36 3   389 52210 0.0  0.42  2.38 66.249.70.193  http/1.1 schoolplus.cloudware.ng:80  GET /?p=2477192893 HTTP/1.1
   14-0 -     0/0/103   . 0.00 13  0   47017 0.0  0.00  2.32 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   15-0 -     0/0/80    . 0.00 12  0   46144 0.0  0.00  2.03 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   16-0 11033 0/7/42    _ 0.12 3   390 21595 0.0  0.36  1.24 66.249.70.196  http/1.1 schoolplus.cloudware.ng:80  GET /?p=3361818903 HTTP/1.1
   17-0 11035 0/10/62   _ 0.24 3   346 37120 0.0  0.28  1.82 66.249.70.195  http/1.1 schoolplus.cloudware.ng:80  GET /?p=3918468938 HTTP/1.1
   18-0 -     0/0/103   . 0.00 1   0   52040 0.0  0.00  2.52 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   19-0 11037 0/6/32    _ 0.13 2   1   14854 0.0  0.15  0.67 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80      GET / HTTP/1.1
   20-0 11038 3/6/29    K 0.11 1   341 17183 89.4 0.16  0.52 66.249.70.195  http/1.1 schoolplus.cloudware.ng:80  GET /?p=1662194748 HTTP/1.1
   21-0 -     0/0/53    . 0.00 146 0   28761 0.0  0.00  1.39 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   22-0 -     0/0/26    . 0.00 320 0   13374 0.0  0.00  0.63 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   23-0 -     0/0/36    . 0.00 257 0   20736 0.0  0.00  0.97 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   24-0 -     0/0/79    . 0.00 36  0   45652 0.0  0.00  2.06 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   25-0 -     0/0/119   . 0.00 43  0   65979 0.0  0.00  3.07 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   26-0 8260  18/78/116 K 1.33 0   1   53466 9.7  1.51  2.57 20.196.107.56  http/1.1 covid19.oyostate.gov.ng:443 GET /111.php HTTP/1.1
   27-0 -     0/0/21    . 0.00 518 0   12967 0.0  0.00  0.61 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   28-0 -     0/0/42    . 0.00 370 0   20479 0.0  0.00  0.98 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   29-0 -     0/0/56    . 0.00 332 0   28706 0.0  0.00  1.37 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   30-0 -     0/0/1     . 0.00 533 0   0     0.0  0.00  0.00 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   31-0 -     0/0/4     . 0.00 519 0   2179  0.0  0.00  0.09 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
   32-0 -     0/0/1     . 0.00 534 0   0     0.0  0.00  0.00 ::1            http/1.1 chs1.nescrow.com.ng:80      OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 342
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 25 seconds, (range: 2...110)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 1025
   total entries replaced since starting: 0
   total entries expired since starting: 683
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 10 miss
   total removes since starting: 0 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit