403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-16.17.03.txt
 ## mem threshold exceeded
## server overview
2025-11-16.17.03 load[5] mem[90/6] mysql[5/] httpd[]
              total        used        free      shared  buff/cache   available
Mem:           2363        2126          86          39         150          67
Swap:          1999         148        1851
 17:03:03 up 0 min,  0 users,  load average: 5.68, 1.48, 0.50
## system overview
top - 17:03:03 up 0 min,  0 users,  load average: 5.68, 1.48, 0.50
Tasks: 212 total,  15 running, 195 sleeping,   0 stopped,   2 zombie
%Cpu(s): 75.0 us, 23.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  1.8 si,  0.0 st
KiB Mem :  2420300 total,    83108 free,  2157776 used,   179416 buff/cache
KiB Swap:  2047996 total,  1890812 free,   157184 used.    75800 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
   954 root      20   0 1276416  10832    468 R  37.0  0.4   0:18.93 /usr/bin/+
   615 root      20   0 1351344  11168    468 S  22.2  0.5   0:14.29 /usr/bin/+
   957 root      20   0 1341380   6768    464 R  18.5  0.3   0:19.27 /usr/bin/+
    36 root      20   0       0      0      0 S  11.1  0.0   0:01.03 [kswapd0]
     1 root      20   0   44140   3172   1560 S   3.7  0.1   0:00.84 /usr/lib/+
   261 root       0 -20       0      0      0 S   3.7  0.0   0:00.14 [kworker/+
  2076 wp-tool+  20   0  425156  57068   2896 R   3.7  2.4   0:00.53 /usr/bin/+
  2449 root      20   0  160220   2168   1588 R   3.7  0.1   0:00.01 top -bcn1
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     3 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     5 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [ksoftirq+
    15 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    30 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    31 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
   252 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   269 root       0 -20       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40240   2784   2476 S   0.0  0.1   0:00.13 /usr/lib/+
   389 root      20   0   45352    704    572 S   0.0  0.0   0:00.36 /usr/lib/+
   411 root      16  -4   55532    352    236 S   0.0  0.0   0:00.01 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 dbus      20   0   58404   1488    992 S   0.0  0.1   0:00.07 /usr/bin/+
   493 rpc       20   0   69256    404    328 S   0.0  0.0   0:00.01 /sbin/rpc+
   524 root      20   0   24604   1304   1072 S   0.0  0.1   0:00.03 /usr/lib/+
   525 root      20   0  152780    324    324 S   0.0  0.0   0:00.00 /usr/sbin+
   529 root      20   0   21540    620    508 S   0.0  0.0   0:00.00 /usr/sbin+
   530 polkitd   20   0  612240   3476   1040 S   0.0  0.1   0:00.02 /usr/lib/+
   531 root      20   0  224144   1368    688 S   0.0  0.1   0:00.05 /usr/loca+
   538 root      20   0   52852    588    584 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0  195208    388    388 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0    4388    212    208 S   0.0  0.0   0:00.00 /usr/sbin+
   550 nscd      20   0 1131720   1152    708 S   0.0  0.0   0:00.04 /usr/sbin+
   578 root      20   0   24208    304    304 S   0.0  0.0   0:00.00 /usr/sbin+
   579 root      20   0  124480    748    616 S   0.0  0.0   0:00.00 /usr/sbin+
   585 root      20   0  114704    792    464 S   0.0  0.0   0:00.02 /bin/bash
   586 root      20   0  108296    432    428 S   0.0  0.0   0:00.00 /sbin/age+
   588 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  183048    556    552 S   0.0  0.0   0:00.00 /usr/sbin+
   591 root      20   0  183048    556    552 S   0.0  0.0   0:00.00 /usr/sbin+
   603 root      20   0  113284    344    344 S   0.0  0.0   0:00.00 /bin/sh -+
   606 root      20   0  113284    444    444 S   0.0  0.0   0:00.00 /bin/bash+
   611 root      20   0  113284    348    344 S   0.0  0.0   0:00.00 /bin/sh -+
   626 mailnull  20   0   88988    724    504 S   0.0  0.0   0:00.00 /usr/sbin+
   630 root      20   0  108056    104    104 S   0.0  0.0   0:00.00 sleep 120
   685 root       0 -20       0      0      0 S   0.0  0.0   0:00.02 [loop0]
   743 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   744 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   933 root      20   0  281936   2436   2036 S   0.0  0.1   0:00.05 /usr/sbin+
   935 root      20   0  388892   7860    768 S   0.0  0.3   0:00.06 php-fpm: +
   937 named     20   0  711588  19280    800 S   0.0  0.8   0:00.20 /usr/sbin+
   939 root      20   0 1689392   1.3g    540 S   0.0 57.0   0:13.31 /usr/loca+
   941 systuser  20   0  112268      4      0 S   0.0  0.0   0:00.00 /usr/loca+
   942 systuser  20   0   10132      0      0 S   0.0  0.0   0:00.00 /usr/loca+
   943 systuser  20   0  111864      4      0 S   0.0  0.0   0:00.00 /usr/loca+
   944 cpanelc+  20   0    9568   2444   2228 S   0.0  0.1   0:00.02 /usr/loca+
   945 root      20   0  572372   2748    900 S   0.0  0.1   0:00.10 /usr/bin/+
   946 root      20   0  261032  23540   1144 S   0.0  1.0   0:00.15 cpsrvd (S+
   947 root      20   0  400740   8120    900 S   0.0  0.3   0:00.12 php-fpm: +
   952 root      20   0  396248   8320    760 S   0.0  0.3   0:00.05 php-fpm: +
   953 root      20   0  445028   4748   3248 S   0.0  0.2   0:00.05 sw-engine+
   955 root      20   0   51508    592    492 S   0.0  0.0   0:00.03 /usr/sbin+
   959 systuser  20   0   12756      0      0 S   0.0  0.0   0:00.00 /usr/loca+
   960 root      20   0  111304    728    628 S   0.0  0.0   0:00.00 /usr/sbin+
   962 root      20   0  153404    720    632 S   0.0  0.0   0:00.00 pure-ftpd+
   980 systuser  20   0  114016   8632      0 S   0.0  0.4   0:00.04 /usr/loca+
   981 memcach+  20   0  342400    540    540 S   0.0  0.0   0:00.00 /usr/bin/+
   987 root      20   0  389508   7416    752 S   0.0  0.3   0:00.05 php-fpm: +
   989 telegraf  20   0 5653536  23248    284 S   0.0  1.0   0:00.14 /usr/loca+
   992 root      20   0  439788  18844  11316 S   0.0  0.8   0:00.09 php-fpm: +
  1097 dovenull  20   0   46772    744    544 S   0.0  0.0   0:00.00 dovecot/p+
  1098 dovenull  20   0   46780    572    572 S   0.0  0.0   0:00.00 dovecot/i+
  1099 dovecot   20   0   10320    388    388 S   0.0  0.0   0:00.00 dovecot/a+
  1100 root      20   0   10452    604    464 S   0.0  0.0   0:00.00 dovecot/l+
  1101 dovenull  20   0   46772    824    608 S   0.0  0.0   0:00.00 dovecot/p+
  1102 dovenull  20   0   46780    572    572 S   0.0  0.0   0:00.00 dovecot/i+
  1110 root      20   0   24396    544    448 S   0.0  0.0   0:00.01 dovecot/c+
  1117 dovecot   20   0   13436    508    408 S   0.0  0.0   0:00.00 dovecot/s+
  1136 systuser  20   0  157708    692    552 S   0.0  0.0   0:00.00 SonarPush+
  1147 root      20   0   25760    892    324 S   0.0  0.0   0:01.47 spamd-dor+
  1176 wp-tool+  20   0  412368  42420   1644 S   0.0  1.8   0:00.25 /usr/bin/+
  1177 wp-tool+  20   0  387528  16848    712 S   0.0  0.7   0:00.08 /usr/bin/+
  1181 dovecot   20   0   41056    564    564 S   0.0  0.0   0:00.00 dovecot/a+
  1229 root      20   0  167452   1972    612 S   0.0  0.1   0:00.05 dnsadmin +
  1231 root      20   0  183900   3976    672 S   0.0  0.2   0:00.08 cpdavd - +
  1233 root      20   0  208064  17320    928 S   0.0  0.7   0:00.18 tailwatchd
  1607 root      20   0  299272   7408    356 S   0.0  0.3   0:00.00 php-fpm: +
  1637 root      38  18  130416   1608    456 S   0.0  0.1   0:00.00 cpanellog+
  1739 mysql     20   0   55312   1624    468 S   0.0  0.1   0:00.00 /usr/sbin+
  1750 mysql     20   0  494104  33912    508 R   0.0  1.4   0:00.39 /usr/sbin+
  1985 root      20   0  266984  26624    888 S   0.0  1.1   0:00.09 /usr/sbin+
  1988 root      20   0   12764    532    352 S   0.0  0.0   0:00.00 /usr/loca+
  1989 root      20   0   12732    536    356 S   0.0  0.0   0:00.00 /usr/loca+
  1992 root      20   0   12768    532    352 S   0.0  0.0   0:00.00 /usr/loca+
  1995 root      20   0   53340   9912    588 S   0.0  0.4   0:00.04 /usr/loca+
  1997 nobody    20   0  277480  34296   2748 S   0.0  1.4   0:00.04 /usr/sbin+
  2000 nobody    20   0  277404  32600   1120 S   0.0  1.3   0:00.02 /usr/sbin+
  2001 nobody    20   0  277416  34256   2788 S   0.0  1.4   0:00.03 /usr/sbin+
  2081 root      20   0  180932  27928   1140 S   0.0  1.2   0:00.14 lfd - sle+
  2083 wp-tool+  20   0  456280  41960  26876 S   0.0  1.7   0:00.38 sw-engine+
  2136 wp-tool+  20   0  445652  21324  16944 S   0.0  0.9   0:00.05 sw-engine+
  2137 root      38  18  183340  25500   1608 R   0.0  1.1   0:00.19 cpanellog+
  2164 nobody    20   0  277416  34292   2728 S   0.0  1.4   0:00.03 /usr/sbin+
  2199 root      20   0  111304   1656    636 S   0.0  0.1   0:00.00 sshd: [ac+
  2233 oyotech+  20   0  389236   9712   2400 S   0.0  0.4   0:00.01 php-fpm: +
  2234 oyotech+  20   0  389236   8872   1560 S   0.0  0.4   0:00.02 php-fpm: +
  2243 nobody    20   0  277500  33884   2340 S   0.0  1.4   0:00.02 /usr/sbin+
  2244 oyotech+  20   0  389236   8804   1492 S   0.0  0.4   0:00.02 php-fpm: +
  2272 nobody    20   0  277312  33712   2316 S   0.0  1.4   0:00.01 /usr/sbin+
  2289 nobody    20   0  277404  33788   2316 S   0.0  1.4   0:00.01 /usr/sbin+
  2290 nobody    20   0  277312  33624   2244 S   0.0  1.4   0:00.02 /usr/sbin+
  2309 nobody    20   0  277408  33764   2280 S   0.0  1.4   0:00.01 /usr/sbin+
  2310 nobody    20   0  277404  33760   2288 S   0.0  1.4   0:00.01 /usr/sbin+
  2311 nobody    20   0  277312  33960   2592 S   0.0  1.4   0:00.00 /usr/sbin+
  2312 nobody    20   0  277312  32832   1444 S   0.0  1.4   0:00.01 /usr/sbin+
  2315 nobody    20   0  277304  33492   2120 S   0.0  1.4   0:00.00 /usr/sbin+
  2316 nobody    20   0  277408  33868   2376 S   0.0  1.4   0:00.00 /usr/sbin+
  2317 nobody    20   0  277468  34620   3088 S   0.0  1.4   0:00.00 /usr/sbin+
  2319 nobody    20   0  277428  33872   2332 S   0.0  1.4   0:00.00 /usr/sbin+
  2320 nobody    20   0  277176  33180   1920 S   0.0  1.4   0:00.00 /usr/sbin+
  2321 nobody    20   0       0      0      0 Z   0.0  0.0   0:00.01 [httpd] <+
  2322 nobody    20   0  277448  32792   1272 S   0.0  1.4   0:00.00 /usr/sbin+
  2325 mailnull  20   0   89532   1420    308 S   0.0  0.1   0:00.00 /usr/sbin+
  2347 nobody    20   0  277304  33644   2288 S   0.0  1.4   0:00.00 /usr/sbin+
  2352 nigeria   20   0  400460   8136    868 S   0.0  0.3   0:00.00 php-fpm: +
  2353 nigeria   20   0  400460   8292   1024 S   0.0  0.3   0:00.00 php-fpm: +
  2355 root      20   0       0      0      0 Z   0.0  0.0   0:00.01 [webmaild+
  2357 root      20   0  183048   1604   1040 S   0.0  0.1   0:00.00 /usr/sbin+
  2358 root      20   0  183048   1604   1040 S   0.0  0.1   0:00.00 /usr/sbin+
  2359 root      20   0  183048   1604   1040 S   0.0  0.1   0:00.00 /usr/sbin+
  2361 root      20   0  183048   1600   1040 S   0.0  0.1   0:00.00 /usr/sbin+
  2362 root      20   0  183048   1596   1040 S   0.0  0.1   0:00.00 /usr/sbin+
  2364 root      20   0  183048   1596   1040 S   0.0  0.1   0:00.00 /usr/sbin+
  2365 root      20   0  183048   1596   1040 S   0.0  0.1   0:00.00 /usr/sbin+
  2366 root      20   0  183048   1596   1040 S   0.0  0.1   0:00.00 /usr/sbin+
  2367 root      20   0  183048   1704   1120 S   0.0  0.1   0:00.00 /usr/sbin+
  2369 root      20   0  183048   1704   1120 S   0.0  0.1   0:00.00 /usr/sbin+
  2370 root      20   0  183048   1704   1120 S   0.0  0.1   0:00.00 /usr/sbin+
  2377 root      20   0  113284   1116    936 S   0.0  0.0   0:00.00 /bin/sh -+
  2381 root      20   0   20164    924    728 S   0.0  0.0   0:00.00 jailshell+
  2382 root      20   0   20164    752    576 S   0.0  0.0   0:00.00 /usr/loca+
  2383 root      20   0   20164    752    576 S   0.0  0.0   0:00.00 /usr/loca+
  2388 root      20   0   20164    748    576 S   0.0  0.0   0:00.00 /usr/loca+
  2389 root      20   0   20164    932    728 S   0.0  0.0   0:00.00 /usr/loca+
  2390 root      20   0   20164    752    576 S   0.0  0.0   0:00.00 /usr/loca+
  2393 root      20   0   20164    932    728 S   0.0  0.0   0:00.00 jailshell+
  2396 root      20   0  108052    312    236 S   0.0  0.0   0:00.00 /usr/bin/+
  2398 root      20   0  113288   1384   1164 S   0.0  0.1   0:00.00 /bin/bash+
  2443 mailnull  20   0   86628   9420   4420 S   0.0  0.4   0:00.02 /usr/sbin+
  2444 mailnull  20   0   86628   9416   4416 S   0.0  0.4   0:00.02 /usr/sbin+
  2445 mailnull  20   0   86632   9420   4416 S   0.0  0.4   0:00.02 /usr/sbin+
  2447 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
  2454 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
  2455 cloudsms  20   0  113284   1204   1028 S   0.0  0.0   0:00.00 /usr/loca+
  2457 cloudsms  20   0  243944   7780   4072 R   0.0  0.3   0:00.00 /opt/cpan+
  2459 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  2460 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
  2461 cloudw    20   0  119376   7364   3816 D   0.0  0.3   0:00.00 /opt/cpan+
  2462 cloudsms  20   0  243944   7784   4072 R   0.0  0.3   0:00.00 /opt/cpan+
  2463 cloudw    20   0  119376   7368   3816 D   0.0  0.3   0:00.00 /opt/cpan+
  2464 root      20   0   83508   6704   4740 R   0.0  0.3   0:00.00 /usr/sbin+
  2465 root      20   0   82568   3976   2956 S   0.0  0.2   0:00.00 /usr/sbin+
  2466 root      20   0   82564   3972   2956 S   0.0  0.2   0:00.00 /usr/sbin+
  2467 cloudw    20   0  119376   5356   3816 R   0.0  0.2   0:00.00 /opt/cpan+
  2471 root      20   0    6728    416    336 R   0.0  0.0   0:00.00 /usr/sbin+
  2472 root      20   0   38648   6508   3048 R   0.0  0.3   0:00.00 /usr/loca+
  2474 root      20   0   82568   1020      0 R   0.0  0.0   0:00.00 /usr/sbin+
  2475 root      20   0   82564   1016      0 R   0.0  0.0   0:00.00 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    17:02   0:00 [kthreadd]
root          3  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kworker/0:0]
root          4  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/0:0H]
root          5  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kworker/u200:0]
root          6  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [ksoftirqd/1]
root         15  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kworker/1:0]
root         16  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [watchdogd]
root         30  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kworker/0:1]
root         31  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kworker/1:1]
root         36  2.2  0.0      0     0 ?        S    17:02   0:01  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   17:02   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   17:02   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ata_sff]
root        244  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kworker/0:2]
root        247  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [scsi_tmf_1]
root        251  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kworker/u200:2]
root        252  0.2  0.0      0     0 ?        S    17:02   0:00  \_ [kworker/u200:3]
root        253  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ttm_swap]
root        261  0.2  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/1:1H]
root        269  0.1  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kworker/1:2]
root        278  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [xprtiod]
root        588  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kvm-irqfd-clean]
root        685  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [loop0]
root        743  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [jbd2/loop0-8]
root        744  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ext4-rsv-conver]
root       2447  0.0  0.0      0     0 ?        S    17:03   0:00  \_ [kworker/0:3]
root          1  1.7  0.1  44140  3172 ?        Ss   17:02   0:00 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.2  0.1  40240  2784 ?        Ss   17:02   0:00 /usr/lib/systemd/systemd-journald
root        389  0.7  0.0  45352   704 ?        Ss   17:02   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   352 ?        S<sl 17:02   0:00 /sbin/auditd
dbus        489  0.1  0.0  58404  1488 ?        Ss   17:02   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         493  0.0  0.0  69256   404 ?        Ss   17:02   0:00 /sbin/rpcbind -w
root        524  0.0  0.0  24604  1304 ?        Ss   17:02   0:00 /usr/lib/systemd/systemd-logind
root        525  0.0  0.0 152780   324 ?        Ss   17:02   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        529  0.0  0.0  21540   620 ?        Ss   17:02   0:00 /usr/sbin/irqbalance --foreground
polkitd     530  0.0  0.1 612240  3476 ?        Ssl  17:02   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        531  0.1  0.0 224144  1368 ?        Ss   17:02   0:00 /usr/local/cpanel/libexec/queueprocd --start --systemd
root        538  0.0  0.0  52852   588 ?        Ss   17:02   0:00 /usr/sbin/smartd -n -q never
root        542  0.0  0.0 195208   388 ?        Ssl  17:02   0:00 /usr/sbin/gssproxy -D
root        545  0.0  0.0   4388   212 ?        Ss   17:02   0:00 /usr/sbin/acpid
nscd        550  0.0  0.0 1131720 1132 ?        Ssl  17:02   0:00 /usr/sbin/nscd
root        578  0.0  0.0  24208   304 ?        Ss   17:02   0:00 /usr/sbin/atd -f
root        579  0.0  0.0 124480   748 ?        Ss   17:02   0:00 /usr/sbin/crond -n
root        590  0.0  0.0 183048   556 ?        S    17:02   0:00  \_ /usr/sbin/CROND -n
root        611  0.0  0.0 113284   348 ?        Ss   17:02   0:00  |   \_ /bin/sh -c /usr/bin/update_imunify &>/dev/null
root        615 31.8  0.4 1351344 11168 ?       Sl   17:02   0:14  |       \_ /usr/bin/update_imunify
root        591  0.0  0.0 183048   556 ?        S    17:02   0:00  \_ /usr/sbin/CROND -n
root        603  0.0  0.0 113284   344 ?        Ss   17:02   0:00  |   \_ /bin/sh -c /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh reboot > /dev/null 2>&1
root        606  0.0  0.0 113284   444 ?        S    17:02   0:00  |       \_ /bin/bash /usr/local/lp/apps/sonarpush-helpers/sonarpush-helpers.sh reboot
root        630  0.0  0.0 108056   104 ?        S    17:02   0:00  |           \_ sleep 120
root       2357  0.0  0.0 183048  1576 ?        S    17:03   0:00  \_ /usr/sbin/CROND -n
root       2377  0.0  0.0 113284  1116 ?        Ss   17:03   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       2396  0.0  0.0 108052   304 ?        S    17:03   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       2398  0.0  0.0 113288  1376 ?        S    17:03   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       2476  0.0  0.0 153840  2096 ?        R    17:03   0:00  |               \_ ps auxf
root       2358  0.0  0.0 183048  1576 ?        S    17:03   0:00  \_ /usr/sbin/CROND -n
root       2389  0.0  0.0  20164   904 ?        Ss   17:03   0:00  |   \_ jailshell (cloudsms) [2477] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms   2477  0.0  0.0  20164   260 ?        S    17:03   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
cloudsms   2478  0.0  0.0   1084     4 ?        R    17:03   0:00  |           \_ [bash]
root       2359  0.0  0.0 183048  1576 ?        S    17:03   0:00  \_ /usr/sbin/CROND -n
root       2383  0.0  0.0  20164   724 ?        Ss   17:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       2361  0.0  0.0 183048  1572 ?        S    17:03   0:00  \_ /usr/sbin/CROND -n
root       2381  0.0  0.0  20164   896 ?        Ss   17:03   0:00  |   \_ jailshell (cloudsms) [2454] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   2454  0.0  0.0  20164   256 ?        S    17:03   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   2455  0.0  0.0 113284  1204 ?        S    17:03   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   2457  0.0  0.4 338336 11012 ?        D    17:03   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root       2362  0.0  0.0 183048  1568 ?        S    17:03   0:00  \_ /usr/sbin/CROND -n
root       2388  0.0  0.0  20164   720 ?        Ss   17:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       2364  0.0  0.0 183048  1568 ?        S    17:03   0:00  \_ /usr/sbin/CROND -n
root       2382  0.0  0.0  20164   724 ?        Ss   17:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       2365  0.0  0.0 183048  1568 ?        S    17:03   0:00  \_ /usr/sbin/CROND -n
root       2390  0.0  0.0  20164   724 ?        Ss   17:03   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       2366  0.0  0.0 183048  1568 ?        S    17:03   0:00  \_ /usr/sbin/CROND -n
root       2393  0.0  0.0  20164   904 ?        Ss   17:03   0:00  |   \_ jailshell (cloudsms) [2459] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms   2459  0.0  0.0  20164   264 ?        S    17:03   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms   2460  0.0  0.0 113284  1212 ?        S    17:03   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms   2462  0.0  0.4 338336 11016 ?        R    17:03   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue1.php
root       2367  0.0  0.0 183048  1676 ?        S    17:03   0:00  \_ /usr/sbin/CROND -n
mailnull   2444  0.0  0.3  86628  9416 ?        S    17:03   0:00  |   \_ /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f pactpay
root       2466  0.0  0.3  86500  9600 ?        Rs   17:03   0:00  |       \_ /usr/sbin/exim -odi -Mc 1vKfDT-000000000dQ-20a1
root       2369  0.0  0.0 183048  1676 ?        S    17:03   0:00  \_ /usr/sbin/CROND -n
mailnull   2443  0.0  0.3  86628  9420 ?        S    17:03   0:00  |   \_ /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f nigeria
root       2464  0.0  0.4  86504  9868 ?        Rs   17:03   0:00  |       \_ /usr/sbin/exim -odi -Mc 1vKfDT-000000000dP-1qUb
root       2370  0.0  0.0 183048  1676 ?        S    17:03   0:00  \_ /usr/sbin/CROND -n
mailnull   2445  0.0  0.3  86632  9420 ?        S    17:03   0:00      \_ /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f saboakin
root       2465  0.0  0.3  86516  9600 ?        Rs   17:03   0:00          \_ /usr/sbin/exim -odi -Mc 1vKfDT-000000000dR-1qEO
root        585  0.0  0.0 114704   792 ttyS0    Ss+  17:02   0:00 /bin/bash
root        586  0.0  0.0 108296   432 tty1     Ss+  17:02   0:00 /sbin/agetty --noclear tty1 linux
mailnull    626  0.0  0.0  88988   724 ?        Ss   17:02   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   2325  0.0  0.1  89532  2688 ?        S    17:02   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        933  0.1  0.1 281936  2436 ?        Ssl  17:02   0:00 /usr/sbin/rsyslogd -n
root        935  0.1  0.3 388892  7856 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
oyotech+   2233  0.1  0.4 389236  9712 ?        S    17:02   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
oyotech+   2234  0.2  0.3 389236  8872 ?        S    17:02   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
oyotech+   2244  0.2  0.3 389236  8804 ?        S    17:02   0:00  \_ php-fpm: pool covid-19_oyostate_gov_ng
named       937  0.4  0.7 711588 18772 ?        Ssl  17:02   0:00 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        939 32.4 56.9 1689392 1379136 ?     Ssl  17:02   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    941  0.0  0.0 112268     4 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    942  0.0  0.0  10132     0 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    943  0.0  0.0 111864     4 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
cpanelc+    944  0.0  0.1   9568  2440 ?        Ss   17:02   0:00 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        945  0.2  0.0 572372  2012 ?        Ssl  17:02   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        946  0.3  0.9 261032 23532 ?        Ss   17:02   0:00 cpsrvd (SSL) - waiting for connections                   
root       2355  0.5  0.0      0     0 ?        Z    17:03   0:00  \_ [webmaild - serv] <defunct>
root        947  0.2  0.3 400740  8120 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria    2352  0.0  0.3 400460  8048 ?        S    17:03   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria    2353  0.0  0.3 400460  8204 ?        S    17:03   0:00  \_ php-fpm: pool nigeriadecide_org
root        952  0.1  0.3 396248  8320 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        953  0.1  0.1 445028  4748 ?        Ss   17:02   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+   2083  1.4  1.7 456280 41960 ?        S    17:02   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+   2136  0.2  0.8 445652 21324 ?        S    17:02   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        954 46.2  0.4 1276416 10812 ?       Rsl  17:02   0:18 /usr/bin/checkstatus
root        955  0.0  0.0  51508   592 ?        Ss   17:02   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1097  0.0  0.0  46772   744 ?        S    17:02   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.0  46780   572 ?        S    17:02   0:00  \_ dovecot/imap-login
dovecot    1099  0.0  0.0  10320   388 ?        S    17:02   0:00  \_ dovecot/anvil
root       1100  0.0  0.0  10452   604 ?        S    17:02   0:00  \_ dovecot/log
dovenull   1101  0.0  0.0  46772   824 ?        S    17:02   0:00  \_ dovecot/pop3-login
dovenull   1102  0.0  0.0  46780   572 ?        S    17:02   0:00  \_ dovecot/imap-login
root       1110  0.0  0.0  24396   544 ?        S    17:02   0:00  \_ dovecot/config
dovecot    1117  0.0  0.0  13436   508 ?        S    17:02   0:00  \_ dovecot/stats
dovecot    1181  0.0  0.0  41056   564 ?        S    17:02   0:00  \_ dovecot/auth
root        957 47.0  0.2 1341380 6748 ?        Rsl  17:02   0:19 /usr/bin/cspdaemon
systuser    959  0.0  0.0  12756     0 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        960  0.0  0.0 111304   728 ?        Ss   17:02   0:00 /usr/sbin/sshd -D
root       2199  0.0  0.0 111304  1656 ?        Ss   17:02   0:00  \_ sshd: [accepted]
root        962  0.0  0.0 153404   720 ?        Ss   17:02   0:00 pure-ftpd (SERVER)
systuser    980  0.0  0.3 114016  8632 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+    981  0.0  0.0 342400   540 ?        Ssl  17:02   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        987  0.1  0.3 389508  7380 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
telegraf    989  0.3  0.9 5653536 22812 ?       SLsl 17:02   0:00 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        992  0.2  0.7 439788 18844 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser   1136  0.0  0.0 157708   692 ?        S    17:02   0:00 SonarPush 0.6.12 [sleeping]
root       1147  3.6  0.0  25760   892 ?        Ss   17:02   0:01 spamd-dormant: waiting for connections [5,6] --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5,6
wp-tool+   1176  0.6  1.7 412368 42036 ?        Ss   17:02   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   2076  1.9  2.3 425156 56936 ?        R    17:02   0:00  \_ /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script execute-background-task.php 28045
wp-tool+   1177  0.2  0.6 387528 16320 ?        Ss   17:02   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1229  0.1  0.0 167452  1972 ?        Ss   17:02   0:00 dnsadmin - dormant mode
root       1231  0.2  0.1 183900  3976 ?        Ss   17:02   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1233  0.4  0.7 208064 17320 ?        Ss   17:02   0:00 tailwatchd
root       1607  0.0  0.3 299272  7408 ?        Ss   17:02   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1637  0.0  0.0 130416  1608 ?        SN   17:02   0:00 cpanellogd - waiting for child to process logs
root       2137  0.8  1.0 183472 25496 ?        RN   17:02   0:00  \_ cpanellogd - waiting for child to process logs
mysql      1739  0.0  0.0  55312  1624 ?        Ss   17:02   0:00 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
mysql      1750  1.0  1.4 494104 33888 ?        Rl   17:02   0:00 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1985  0.3  1.1 266984 26624 ?        Ss   17:02   0:00 /usr/sbin/httpd -k start
root       1988  0.0  0.0  12764   532 ?        S    17:02   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1989  0.0  0.0  12732   536 ?        S    17:02   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1992  0.0  0.0  12768   532 ?        S    17:02   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1995  0.1  0.4  53340  9912 ?        S    17:02   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     1997  0.1  1.4 277480 34296 ?        S    17:02   0:00  \_ /usr/sbin/httpd -k start
cloudw     2467  0.0  0.3 211200  8040 ?        R    17:03   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     2000  0.0  1.3 277404 32600 ?        S    17:02   0:00  \_ /usr/sbin/httpd -k start
nobody     2001  0.1  1.4 277416 34256 ?        S    17:02   0:00  \_ /usr/sbin/httpd -k start
cloudw     2471  0.0  0.1  87208  4324 ?        R    17:03   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     2164  0.1  1.4 277416 34292 ?        S    17:02   0:00  \_ /usr/sbin/httpd -k start
cloudw     2461  0.0  0.4 211200 10048 ?        R    17:03   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     2243  0.2  1.3 277500 33884 ?        S    17:02   0:00  \_ /usr/sbin/httpd -k start
nobody     2272  0.1  1.3 277312 33712 ?        S    17:02   0:00  \_ /usr/sbin/httpd -k start
nobody     2289  0.1  1.3 277404 33788 ?        S    17:02   0:00  \_ /usr/sbin/httpd -k start
nobody     2290  0.2  1.3 277312 33624 ?        S    17:02   0:00  \_ /usr/sbin/httpd -k start
nobody     2309  0.1  1.3 277408 33760 ?        S    17:02   0:00  \_ /usr/sbin/httpd -k start
nobody     2310  0.1  1.3 277404 33760 ?        S    17:02   0:00  \_ /usr/sbin/httpd -k start
nobody     2311  0.0  1.4 277312 33960 ?        S    17:02   0:00  \_ /usr/sbin/httpd -k start
cloudw     2463  0.0  0.4 211200 10052 ?        R    17:03   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     2312  0.1  1.3 277312 32832 ?        S    17:02   0:00  \_ /usr/sbin/httpd -k start
nobody     2315  0.0  1.3 277304 33472 ?        S    17:02   0:00  \_ /usr/sbin/httpd -k start
nobody     2316  0.0  1.3 277408 33868 ?        S    17:02   0:00  \_ /usr/sbin/httpd -k start
nobody     2317  0.0  1.4 277468 34620 ?        S    17:02   0:00  \_ /usr/sbin/httpd -k start
nobody     2319  0.0  1.3 277428 33868 ?        S    17:02   0:00  \_ /usr/sbin/httpd -k start
nobody     2320  0.0  1.3 277176 33180 ?        S    17:02   0:00  \_ /usr/sbin/httpd -k start
nobody     2321  0.2  0.0      0     0 ?        Z    17:02   0:00  \_ [httpd] <defunct>
nobody     2322  0.0  1.3 277448 32792 ?        S    17:02   0:00  \_ /usr/sbin/httpd -k start
nobody     2347  0.0  1.3 277304 33636 ?        S    17:02   0:00  \_ /usr/sbin/httpd -k start
root       2081  0.5  1.1 180932 27928 ?        Ss   17:02   0:00 lfd - sleeping
## mysql stats
## network stats
      1 10.30.9.122 TIME_WAIT
      1 114.119.145.187 TIME_WAIT
      1 152.232.149.250 TIME_WAIT
      1 154.7.231.190 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 92.205.186.4 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     10 104.248.90.230 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 16-Nov-2025 17:03:04 WAT
   Restart Time: Sunday, 16-Nov-2025 17:02:33 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 31 seconds
   Server load: 5.68 1.48 0.50
   Total accesses: 108 - Total Traffic: 616 kB - Total Duration: 86744
   CPU Usage: u.16 s.14 cu.44 cs.58 - 4.26% CPU load
   3.48 requests/sec - 19.9 kB/second - 5.7 kB/request - 803.185 ms/request
   10 requests currently being processed, 0 workers gracefully restarting, 10 idle workers

K..RKK____W_KR___.KKC__.........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv  PID    Acc   M CPU  SS Req   Dur  Conn Child Slot     Client     Protocol            VHost                                           Request
   0-0  1997 1/11/11 K 0.11 0  689  11543 4.9  0.07  0.07 3.34.122.94    http/1.1 support.cloudware.ng:443     GET /info2.php HTTP/1.1
   1-0  -    0/0/11  . 0.00 1  0    5819  0.0  0.00  0.05 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   2-0  -    0/0/12  . 0.00 0  0    5515  0.0  0.00  0.07 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   3-0  2000 0/5/5   R 0.09 2  4131 13628 0.0  0.03  0.03 94.250.251.7   http/1.1 cloudware.ng:443
   4-0  2001 1/12/12 K 0.13 0  639  6643  4.9  0.07  0.07 3.34.122.94    http/1.1 support.cloudware.ng:443     GET /info1.php HTTP/1.1
   5-0  2164 1/9/9   K 0.13 0  790  7532  4.9  0.05  0.05 3.34.122.94    http/1.1 support.cloudware.ng:443     GET /test.php HTTP/1.1
   6-0  2243 0/6/6   _ 0.09 1  305  4282  0.0  0.03  0.03 3.34.122.94    http/1.1 test.cloudware.ng:443        GET /cgi-bin/phpinfo.php HTTP/1.1
   7-0  2272 0/4/4   _ 0.05 1  254  3913  0.0  0.02  0.02 3.34.122.94    http/1.1 test.cloudware.ng:443        GET /web/phpinfo.php.save HTTP/1.1
   8-0  2289 0/4/4   _ 0.04 1  122  1654  0.0  0.02  0.02 3.34.122.94    http/1.1 test.cloudware.ng:443        GET /tmp/info.php HTTP/1.1
   9-0  2290 0/3/3   _ 0.07 1  721  4914  0.0  0.01  0.01 3.34.122.94    http/1.1 test.cloudware.ng:443        GET /includes/info.php HTTP/1.1
   10-0 2309 0/3/3   W 0.04 0  0    1866  0.0  0.02  0.02 ::1            http/1.1 chs1.nescrow.com.ng:80       GET //whm-server-status HTTP/1.0
   11-0 2310 0/3/3   _ 0.03 1  108  1519  0.0  0.02  0.02 3.34.122.94    http/1.1 test.cloudware.ng:443        GET /web/info.php HTTP/1.1
   12-0 2311 1/3/3   K 0.03 0  752  4232  4.9  0.01  0.01 3.34.122.94    http/1.1 support.cloudware.ng:443     GET /php.php HTTP/1.1
   13-0 2312 0/2/2   R 0.02 3  703  2406  0.0  0.01  0.01 94.250.251.7   http/1.1
   14-0 2315 0/2/2   _ 0.03 1  11   1171  0.0  0.02  0.02 ::1            http/1.1 chs1.nescrow.com.ng:80       GET //whm-server-status HTTP/1.0
   15-0 2316 0/3/3   _ 0.02 1  296  1731  0.0  0.02  0.02 104.248.90.230 http/1.1 covid-19.oyostate.gov.ng:443 GET /?InternalDir=\\..\\..\\..\\..\\etc&InternalFile=passwd HTTP/1.1
   16-0 2317 0/3/3   _ 0.02 0  258  1699  0.0  0.02  0.02 104.248.90.230 http/1.1 covid-19.oyostate.gov.ng:443 GET /KJPsq.txt HTTP/1.1
   17-0 -    0/0/1   . 0.00 3  0    0     0.0  0.00  0.00 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   18-0 2319 1/3/3   K 0.02 2  164  1574  7.5  0.02  0.02 52.167.144.19  http/1.1 nigeriadecide.org:443        GET /polling_unit_category.php?state=anambra&lga=Anaocha&ward=A
   19-0 2320 1/1/1   K 0.00 2  143  286   5.4  0.01  0.01 199.45.155.100 http/1.1 portal.salutem.com.ng:443    GET / HTTP/1.1
   20-0 2321 1/4/4   C 0.03 0  0    1588  0.2  0.02  0.02 ::1            http/1.1 chs1.nescrow.com.ng:80       OPTIONS * HTTP/1.0
   21-0 2322 0/2/2   _ 0.00 2  748  2385  0.0  0.01  0.01 3.34.122.94    http/1.1 test.cloudware.ng:443        GET /web/phpinfo.php HTTP/1.1
   22-0 2347 0/1/1   _ 0.00 2  416  833   0.0  0.01  0.01 3.34.122.94    http/1.1 test.cloudware.ng:443        GET /cgi-bin/info.php HTTP/1.1
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 193
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 283 seconds, (range: 268...294)
   index usage: 3%, cache usage: 4%
   total entries stored since starting: 193
   total entries replaced since starting: 0
   total entries expired since starting: 0
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 0 miss
   total removes since starting: 0 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit