403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-16.17.09.txt
 ## swap threshold exceeded
## server overview
2025-11-16.17.09 load[0] mem[79/35] mysql[4/11] httpd[28]
              total        used        free      shared  buff/cache   available
Mem:           2363        1840          79          35         443         336
Swap:          1999         775        1224
 17:09:01 up 6 min,  0 users,  load average: 0.36, 0.93, 0.60
## system overview
top - 17:09:01 up 6 min,  0 users,  load average: 0.36, 0.93, 0.60
Tasks: 215 total,   3 running, 211 sleeping,   0 stopped,   1 zombie
%Cpu(s): 69.7 us, 24.2 sy,  0.0 ni,  0.0 id,  6.1 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    84696 free,  1901264 used,   434340 buff/cache
KiB Swap:  2047996 total,  1253628 free,   794368 used.   327632 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1750 mysql     20   0 1458592 205692   3248 S 106.2  8.5   0:06.99 /usr/sbin+
  7445 nobody    20   0  277744  34820   3588 S  12.5  1.4   0:00.08 /usr/sbin+
  8591 root      20   0  169868  16852   2880 S  12.5  0.7   0:00.09 /usr/loca+
    36 root      20   0       0      0      0 S   6.2  0.0   0:04.70 [kswapd0]
   261 root       0 -20       0      0      0 S   6.2  0.0   0:00.37 [kworker/+
  8614 nigeria   20   0  404052  16140  10384 R   6.2  0.7   0:00.03 /opt/cpan+
  8638 root      20   0  160220   2064   1580 R   6.2  0.1   0:00.01 top -bcn1
     1 root      20   0   44140   3312   1608 S   0.0  0.1   0:01.32 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     3 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:00.46 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    31 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   252 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   269 root       0 -20       0      0      0 S   0.0  0.0   0:00.28 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   39496   3816   3508 S   0.0  0.2   0:00.34 /usr/lib/+
   389 root      20   0   45352    524    372 S   0.0  0.0   0:00.36 /usr/lib/+
   411 root      16  -4   55532    424    308 S   0.0  0.0   0:00.04 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 dbus      20   0   58404   1296    776 S   0.0  0.1   0:00.26 /usr/bin/+
   493 rpc       20   0   69256    308    200 S   0.0  0.0   0:00.01 /sbin/rpc+
   524 root      20   0   24604   1168    900 S   0.0  0.0   0:00.11 /usr/lib/+
   525 root      20   0  152780    284    276 S   0.0  0.0   0:00.00 /usr/sbin+
   529 root      20   0   21540    520    408 S   0.0  0.0   0:00.01 /usr/sbin+
   530 polkitd   20   0  612240    992    584 S   0.0  0.0   0:00.08 /usr/lib/+
   531 root      20   0  224144   5764   1000 S   0.0  0.2   0:00.08 queueproc+
   538 root      20   0   52852    324    320 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0  195208    128    128 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0    4388    148    144 S   0.0  0.0   0:00.00 /usr/sbin+
   550 nscd      20   0 1131720   1176    472 S   0.0  0.0   0:00.39 /usr/sbin+
   578 root      20   0   24208     76     76 S   0.0  0.0   0:00.00 /usr/sbin+
   579 root      20   0  124480    592    460 S   0.0  0.0   0:00.01 /usr/sbin+
   585 root      20   0  114704    236    236 S   0.0  0.0   0:00.02 /bin/bash
   586 root      20   0  108296    236    232 S   0.0  0.0   0:00.00 /sbin/age+
   588 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   626 mailnull  20   0   88988   3432    500 S   0.0  0.1   0:00.03 /usr/sbin+
   685 root       0 -20       0      0      0 S   0.0  0.0   0:00.09 [loop0]
   743 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   744 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   933 root      20   0  281936   3332   2876 S   0.0  0.1   0:00.16 /usr/sbin+
   935 root      20   0  388892   1636    308 S   0.0  0.1   0:00.09 php-fpm: +
   937 named     20   0  859188  20820   1880 S   0.0  0.9   0:00.41 /usr/sbin+
   939 root      20   0 1689392 816920    216 S   0.0 33.8   0:13.31 /usr/loca+
   941 systuser  20   0  112268     92     20 S   0.0  0.0   0:00.00 /usr/loca+
   942 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.00 /usr/loca+
   943 systuser  20   0  111864     80      0 S   0.0  0.0   0:00.00 /usr/loca+
   944 cpanelc+  20   0    9700   2656   2360 S   0.0  0.1   0:00.33 /usr/loca+
   945 root      20   0  572372    900    436 S   0.0  0.0   0:00.14 /usr/bin/+
   946 root      20   0  261164  24196   1792 S   0.0  1.0   0:00.25 cpsrvd (S+
   947 root      20   0  400740   3492    820 S   0.0  0.1   0:00.21 php-fpm: +
   952 root      20   0  396248    588    508 S   0.0  0.0   0:00.09 php-fpm: +
   953 root      20   0  445028   4772   3284 S   0.0  0.2   0:00.09 sw-engine+
   954 root      20   0 1277312  12340    244 S   0.0  0.5   0:26.49 /usr/bin/+
   955 root      20   0   51508    640    480 S   0.0  0.0   0:00.03 /usr/sbin+
   957 root      20   0 1341892   7632    244 S   0.0  0.3   0:25.26 /usr/bin/+
   959 systuser  20   0   12756     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   960 root      20   0  111304    616    516 S   0.0  0.0   0:00.05 /usr/sbin+
   962 root      20   0  153404    512    432 S   0.0  0.0   0:00.01 pure-ftpd+
   980 systuser  20   0  114016  11860   2432 S   0.0  0.5   0:00.17 /usr/loca+
   981 memcach+  20   0  342400    204    204 S   0.0  0.0   0:00.01 /usr/bin/+
   987 root      20   0  389508    764    560 S   0.0  0.0   0:00.08 php-fpm: +
   989 telegraf  20   0 5654048  35836   2640 S   0.0  1.5   0:00.40 /usr/loca+
   992 root      20   0  439788  11292  11200 S   0.0  0.5   0:00.12 php-fpm: +
  1097 dovenull  20   0   46772   1112    832 S   0.0  0.0   0:00.00 dovecot/p+
  1098 dovenull  20   0   46780   1204    948 S   0.0  0.0   0:00.00 dovecot/i+
  1099 dovecot   20   0   10320    352    244 S   0.0  0.0   0:00.00 dovecot/a+
  1100 root      20   0   10452    496    332 S   0.0  0.0   0:00.00 dovecot/l+
  1101 dovenull  20   0   46772    908    664 S   0.0  0.0   0:00.00 dovecot/p+
  1102 dovenull  20   0   46780    688    424 S   0.0  0.0   0:00.00 dovecot/i+
  1110 root      20   0   24528   1996    612 S   0.0  0.1   0:00.01 dovecot/c+
  1117 dovecot   20   0   13568    592    400 S   0.0  0.0   0:00.00 dovecot/s+
  1136 systuser  20   0  157708   2984   1008 S   0.0  0.1   0:00.00 SonarPush+
  1147 root      20   0  248052 122012   5372 S   0.0  5.0   0:02.85 /usr/loca+
  1176 wp-tool+  20   0  412368  30628   1368 S   0.0  1.3   0:00.39 /usr/bin/+
  1177 wp-tool+  20   0  387528  12292   1448 S   0.0  0.5   0:00.08 /usr/bin/+
  1181 dovecot   20   0   41056   1112    856 S   0.0  0.0   0:00.00 dovecot/a+
  1229 root      20   0  167452   1584    984 S   0.0  0.1   0:00.05 dnsadmin +
  1231 root      20   0  183900    292    292 S   0.0  0.0   0:00.08 cpdavd - +
  1233 root      20   0  209700  11212   1380 S   0.0  0.5   0:00.36 tailwatchd
  1607 root      20   0  299272    976    616 S   0.0  0.0   0:00.01 php-fpm: +
  1637 root      38  18  130416    844    144 S   0.0  0.0   0:00.00 cpanellog+
  1985 root      20   0  266984  25848    816 S   0.0  1.1   0:00.19 /usr/sbin+
  1988 root      20   0   12824    664    372 S   0.0  0.0   0:00.05 /usr/loca+
  1989 root      20   0   12732    440    256 S   0.0  0.0   0:00.04 /usr/loca+
  1992 root      20   0   12864    696    360 S   0.0  0.0   0:00.05 /usr/loca+
  1995 root      20   0   53340   9580    276 S   0.0  0.4   0:00.04 /usr/loca+
  2081 root      20   0  181100  28092   1212 S   0.0  1.2   0:00.55 lfd - sle+
  2289 nobody    20   0  277912  34740   3488 S   0.0  1.4   0:00.51 /usr/sbin+
  2447 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
  2549 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  2832 nobody    20   0  277908  34560   3312 S   0.0  1.4   0:00.53 /usr/sbin+
  4639 nobody    20   0  277744  34848   3608 S   0.0  1.4   0:00.39 /usr/sbin+
  4641 nobody    20   0  277876  35128   3924 S   0.0  1.5   0:00.49 /usr/sbin+
  5289 nobody    20   0  277744  35000   3764 S   0.0  1.4   0:00.43 /usr/sbin+
  5291 nobody    20   0  277892  35024   3804 S   0.0  1.4   0:00.25 /usr/sbin+
  5292 nobody    20   0  277744  34560   3328 S   0.0  1.4   0:00.31 /usr/sbin+
  5518 nobody    20   0  277744  34736   3496 S   0.0  1.4   0:00.24 /usr/sbin+
  6514 nobody    20   0  277744  35040   3804 S   0.0  1.4   0:00.14 /usr/sbin+
  6515 nobody    20   0  277744  34432   3200 S   0.0  1.4   0:00.25 /usr/sbin+
  6531 nobody    20   0  277888  34456   3240 S   0.0  1.4   0:00.18 /usr/sbin+
  6532 nobody    20   0  277876  34808   3604 S   0.0  1.4   0:00.14 /usr/sbin+
  6608 nobody    20   0  277748  34884   3644 S   0.0  1.4   0:00.15 /usr/sbin+
  6609 nobody    20   0  277744  34664   3424 S   0.0  1.4   0:00.15 /usr/sbin+
  6610 nobody    20   0  277744  35092   3856 S   0.0  1.4   0:00.17 /usr/sbin+
  6613 nobody    20   0  277756  34780   3524 S   0.0  1.4   0:00.23 /usr/sbin+
  7226 root      20   0   41052   1604    940 S   0.0  0.1   0:00.00 dovecot/a+
  7415 nobody    20   0  277744  34752   3520 S   0.0  1.4   0:00.12 /usr/sbin+
  7447 nobody    20   0  277876  34652   3448 S   0.0  1.4   0:00.07 /usr/sbin+
  7498 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  7499 nobody    20   0  277880  34752   3544 S   0.0  1.4   0:00.13 /usr/sbin+
  7511 nobody    20   0  277884  34504   3284 S   0.0  1.4   0:00.19 /usr/sbin+
  8203 root      20   0  249196 119628   1924 S   0.0  4.9   0:00.03 spamd chi+
  8204 root      20   0  248052 118100   1496 S   0.0  4.9   0:00.00 spamd chi+
  8234 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
  8305 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  8514 wp-tool+  20   0  445028   1692    188 S   0.0  0.1   0:00.00 sw-engine+
  8517 nobody    20   0  277600  34160   3164 S   0.0  1.4   0:00.00 /usr/sbin+
  8531 wp-tool+  20   0  445028   1692    188 S   0.0  0.1   0:00.00 sw-engine+
  8533 nobody    20   0  277600  34156   3160 S   0.0  1.4   0:00.00 /usr/sbin+
  8534 nobody    20   0  277600  34152   3156 S   0.0  1.4   0:00.00 /usr/sbin+
  8542 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  8549 nobody    20   0  277600  34164   3168 S   0.0  1.4   0:00.00 /usr/sbin+
  8550 nobody    20   0  277600  34152   3156 S   0.0  1.4   0:00.00 /usr/sbin+
  8551 nobody    20   0  277308  33464   2832 S   0.0  1.4   0:00.00 /usr/sbin+
  8552 nobody    20   0  277344  34236   3484 S   0.0  1.4   0:00.00 /usr/sbin+
  8558 nigeria   20   0  400460   5612   2176 S   0.0  0.2   0:00.00 php-fpm: +
  8560 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  8561 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8562 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8563 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8564 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8565 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8566 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8567 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8568 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8569 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8570 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
  8571 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  8573 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8574 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
  8575 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8576 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8577 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  8578 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  8579 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8580 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8581 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
  8582 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  8583 root      20   0   20164    980    784 S   0.0  0.0   0:00.00 jailshell+
  8584 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8585 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  8586 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8588 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8589 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  8592 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
  8593 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
  8602 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  8604 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
  8605 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  8606 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.02 /opt/cpan+
  8607 cloudsms  20   0  404052  15616  10164 S   0.0  0.6   0:00.01 /opt/cpan+
  8612 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  8620 cloudw    20   0  353712  15980  10492 S   0.0  0.7   0:00.02 /opt/cpan+
  8621 saboakin  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  8623 saboakin  20   0  404052  15608  10156 S   0.0  0.6   0:00.01 /opt/cpan+
  8624 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.01 /opt/cpan+
  8639 cloudw    20   0  353712  15972  10492 S   0.0  0.7   0:00.00 /opt/cpan+
  8642 cloudsms  20   0   20164    252      0 S   0.0  0.0   0:00.00 jailshell+
  8643 root      20   0  113496   1420   1232 S   0.0  0.1   0:00.00 bash /usr+
  8644 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
  8645 cloudsms  20   0  243944   5844   4072 R   0.0  0.2   0:00.00 /opt/cpan+
  8646 root      20   0  123348   4272   1880 D   0.0  0.2   0:00.00 /usr/bin/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    17:02   0:00 [kthreadd]
root          3  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kworker/0:0]
root          4  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    17:02   0:00  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [watchdogd]
root         31  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kworker/1:1]
root         36  1.1  0.0      0     0 ?        S    17:02   0:04  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   17:02   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   17:02   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ata_sff]
root        244  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kworker/0:2]
root        247  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [scsi_tmf_1]
root        252  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kworker/u200:3]
root        253  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/1:1H]
root        269  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kworker/1:2]
root        278  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [xprtiod]
root        588  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kvm-irqfd-clean]
root        685  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [loop0]
root        743  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [jbd2/loop0-8]
root        744  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ext4-rsv-conver]
root       2447  0.0  0.0      0     0 ?        S    17:03   0:00  \_ [kworker/0:3]
root       2549  0.0  0.0      0     0 ?        S    17:03   0:00  \_ [kworker/1:3]
root       7498  0.0  0.0      0     0 ?        S    17:07   0:00  \_ [kworker/u200:0]
root          1  0.3  0.1  44140  3312 ?        Ss   17:02   0:01 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.1  39496  3816 ?        Ss   17:02   0:00 /usr/lib/systemd/systemd-journald
root        389  0.0  0.0  45352   524 ?        Ss   17:02   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   424 ?        S<sl 17:02   0:00 /sbin/auditd
dbus        489  0.0  0.0  58404  1296 ?        Ss   17:02   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         493  0.0  0.0  69256   308 ?        Ss   17:02   0:00 /sbin/rpcbind -w
root        524  0.0  0.0  24604  1168 ?        Ss   17:02   0:00 /usr/lib/systemd/systemd-logind
root        525  0.0  0.0 152780   284 ?        Ss   17:02   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        529  0.0  0.0  21540   520 ?        Ss   17:02   0:00 /usr/sbin/irqbalance --foreground
polkitd     530  0.0  0.0 612240   992 ?        Ssl  17:02   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        531  0.0  0.2 224144  5764 ?        Ss   17:02   0:00 queueprocd - waiting up to 60s to process a task
root        538  0.0  0.0  52852   324 ?        Ss   17:02   0:00 /usr/sbin/smartd -n -q never
root        542  0.0  0.0 195208   128 ?        Ssl  17:02   0:00 /usr/sbin/gssproxy -D
root        545  0.0  0.0   4388   148 ?        Ss   17:02   0:00 /usr/sbin/acpid
nscd        550  0.0  0.0 1131720 1176 ?        Ssl  17:02   0:00 /usr/sbin/nscd
root        578  0.0  0.0  24208    76 ?        Ss   17:02   0:00 /usr/sbin/atd -f
root        579  0.0  0.0 124480   592 ?        Ss   17:02   0:00 /usr/sbin/crond -n
root       8560  0.0  0.0 183048  2144 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root       8578  0.0  0.0 113284  1212 ?        Ss   17:09   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       8592  0.0  0.0 108052   360 ?        S    17:09   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       8593  0.0  0.0 113288  1520 ?        S    17:09   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       8647  0.0  0.0 153840  2096 ?        R    17:09   0:00  |               \_ ps auxf
root       8561  0.0  0.0 183048  2148 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root       8586  0.0  0.0  20164   808 ?        Ss   17:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       8562  0.0  0.0 183048  2148 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root       8575  0.0  0.0  20164   808 ?        Ss   17:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       8563  0.0  0.0 183048  2144 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root       8576  0.0  0.0  20164   804 ?        Ss   17:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       8564  0.0  0.0 183048  2144 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root       8582  0.0  0.0  20164   964 ?        Ss   17:09   0:00  |   \_ jailshell (cloudsms) [8602] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   8602  0.0  0.0  20164   260 ?        S    17:09   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   8604  0.0  0.0 113284  1212 ?        S    17:09   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   8607  0.0  0.6 404052 15616 ?        S    17:09   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root       8565  0.0  0.0 183048  2144 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root       8588  0.0  0.0  20164   804 ?        Ss   17:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       8566  0.0  0.0 183048  2140 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root       8579  0.0  0.0  20164   808 ?        Ss   17:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       8567  0.0  0.0 183048  2140 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root       8583  0.0  0.0  20164   980 ?        Ss   17:09   0:00  |   \_ jailshell (cloudsms) [8642] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms   8642  0.0  0.0  20164   252 ?        S    17:09   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms   8644  0.0  0.0 113284  1212 ?        S    17:09   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms   8645  0.0  0.5 400380 12156 ?        R    17:09   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue4.php
root       8568  0.0  0.0 183048  2140 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root       8584  0.0  0.0  20164   808 ?        Ss   17:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       8569  0.0  0.0 183048  2140 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root       8580  0.0  0.0  20164   804 ?        Ss   17:09   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       8570  0.0  0.0 183048  2136 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root       8577  0.0  0.0 113284  1212 ?        Ss   17:09   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root       8591  0.0  0.6 169868 16852 ?        S    17:09   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root       8643  0.0  0.0 113496  1420 ?        S    17:09   0:00  |           \_ bash /usr/local/cpanel/bin/python-packman /usr/local/cpanel/bin/packman_get_list_json all ea-php*-php-common
root       8646  0.0  0.2 123708  4852 ?        R    17:09   0:00  |               \_ /usr/bin/python2.7 -c import yum
root       8571  0.0  0.0 183048  2144 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root       8585  0.0  0.0  20164   968 ?        Ss   17:09   0:00  |   \_ jailshell (pactpay) [8605] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    8605  0.0  0.0  20164   260 ?        S    17:09   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    8606  0.0  0.7 480124 17688 ?        S    17:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       8573  0.0  0.0 183048  2140 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root       8581  0.0  0.0  20164   972 ?        Ss   17:09   0:00  |   \_ jailshell (nigeria) [8612] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    8612  0.0  0.0  20164   264 ?        S    17:09   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    8614  0.0  0.6 404052 16140 ?        S    17:09   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root       8574  0.0  0.0 183048  2148 ?        S    17:09   0:00  \_ /usr/sbin/CROND -n
root       8589  0.0  0.0  20164   964 ?        Ss   17:09   0:00      \_ jailshell (saboakin) [8621] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin   8621  0.0  0.0  20164   260 ?        S    17:09   0:00          \_ jailshell (saboakin) [init] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin   8623  0.0  0.6 404052 15608 ?        S    17:09   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/saboakin/public_html/massmailer/cron.php
root        585  0.0  0.0 114704   236 ttyS0    Ss+  17:02   0:00 /bin/bash
root        586  0.0  0.0 108296   236 tty1     Ss+  17:02   0:00 /sbin/agetty --noclear tty1 linux
mailnull    626  0.0  0.1  88988  3432 ?        Ss   17:02   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        933  0.0  0.1 281936  3332 ?        Ssl  17:02   0:00 /usr/sbin/rsyslogd -n
root        935  0.0  0.0 388892  1636 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
named       937  0.1  0.8 859188 20820 ?        Ssl  17:02   0:00 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        939  3.3 33.7 1689392 816920 ?      Ssl  17:02   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    941  0.0  0.0 112268    92 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    942  0.0  0.0  10132    28 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    943  0.0  0.0 111864    80 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
cpanelc+    944  0.0  0.1   9700  2656 ?        Ss   17:02   0:00 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        945  0.0  0.0 572372   900 ?        Ssl  17:02   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        946  0.0  0.9 261164 24196 ?        Ss   17:02   0:00 cpsrvd (SSL) - waiting for connections                   
root       8542  0.0  0.0      0     0 ?        Z    17:08   0:00  \_ [cpaneld - servi] <defunct>
root        947  0.0  0.1 400740  3492 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria    8558  0.0  0.2 400460  5612 ?        S    17:09   0:00  \_ php-fpm: pool nigeriadecide_org
root        952  0.0  0.0 396248   588 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        953  0.0  0.1 445028  4772 ?        Ss   17:02   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+   8514  0.0  0.0 445028  1692 ?        S    17:08   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+   8531  0.0  0.0 445028  1692 ?        S    17:08   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        954  6.6  0.5 1277312 12340 ?       Ssl  17:02   0:26 /usr/bin/checkstatus
root        955  0.0  0.0  51508   640 ?        Ss   17:02   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1097  0.0  0.0  46772  1112 ?        S    17:02   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.0  46780  1204 ?        S    17:02   0:00  \_ dovecot/imap-login
dovecot    1099  0.0  0.0  10320   352 ?        S    17:02   0:00  \_ dovecot/anvil
root       1100  0.0  0.0  10452   496 ?        S    17:02   0:00  \_ dovecot/log
dovenull   1101  0.0  0.0  46772   908 ?        S    17:02   0:00  \_ dovecot/pop3-login
dovenull   1102  0.0  0.0  46780   688 ?        S    17:02   0:00  \_ dovecot/imap-login
root       1110  0.0  0.0  24528  1996 ?        S    17:02   0:00  \_ dovecot/config
dovecot    1117  0.0  0.0  13568   592 ?        S    17:02   0:00  \_ dovecot/stats
dovecot    1181  0.0  0.0  41056  1112 ?        S    17:02   0:00  \_ dovecot/auth
root       7226  0.0  0.0  41052  1604 ?        S    17:07   0:00  \_ dovecot/auth -w
root       8234  0.0  0.1  60820  4512 ?        S    17:08   0:00  \_ dovecot/lmtp
root        957  6.3  0.3 1341892 7632 ?        Ssl  17:02   0:25 /usr/bin/cspdaemon
systuser    959  0.0  0.0  12756    60 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        960  0.0  0.0 111304   616 ?        Ss   17:02   0:00 /usr/sbin/sshd -D
root       8305  0.0  0.1 111304  4272 ?        Ss   17:08   0:00  \_ sshd: [accepted]
root        962  0.0  0.0 153404   512 ?        Ss   17:02   0:00 pure-ftpd (SERVER)
systuser    980  0.0  0.4 114016 11860 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+    981  0.0  0.0 342400   204 ?        Ssl  17:02   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        987  0.0  0.0 389508   764 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
telegraf    989  0.1  1.4 5654048 35836 ?       SLsl 17:02   0:00 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        992  0.0  0.4 439788 11292 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser   1136  0.0  0.1 157708  2984 ?        S    17:02   0:00 SonarPush 0.6.12 [sleeping]
root       1147  0.7  5.0 248052 122012 ?       Ss   17:02   0:02 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8203  0.1  4.9 249196 119628 ?       S    17:08   0:00  \_ spamd child
root       8204  0.0  4.8 248052 118100 ?       S    17:08   0:00  \_ spamd child
wp-tool+   1176  0.0  1.2 412368 30628 ?        Ss   17:02   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1177  0.0  0.5 387528 12292 ?        Ss   17:02   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1229  0.0  0.0 167452  1584 ?        Ss   17:02   0:00 dnsadmin - dormant mode
root       1231  0.0  0.0 183900   292 ?        Ss   17:02   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1233  0.0  0.4 209700 11212 ?        Ss   17:02   0:00 tailwatchd
root       1607  0.0  0.0 299272   976 ?        Ss   17:02   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1637  0.0  0.0 130416   844 ?        SN   17:02   0:00 cpanellogd - sleeping for logs
mysql      1750  1.7  8.4 1458592 205692 ?      Sl   17:02   0:07 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1985  0.0  1.0 266984 25848 ?        Ss   17:02   0:00 /usr/sbin/httpd -k start
root       1988  0.0  0.0  12824   664 ?        S    17:02   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1989  0.0  0.0  12732   440 ?        S    17:02   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1992  0.0  0.0  12864   696 ?        S    17:02   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1995  0.0  0.3  53340  9580 ?        S    17:02   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     2289  0.1  1.4 277912 34740 ?        S    17:02   0:00  \_ /usr/sbin/httpd -k start
nobody     2832  0.1  1.4 277908 34560 ?        S    17:03   0:00  \_ /usr/sbin/httpd -k start
nobody     4639  0.1  1.4 277744 34848 ?        S    17:05   0:00  \_ /usr/sbin/httpd -k start
nobody     4641  0.2  1.4 277876 35128 ?        S    17:05   0:00  \_ /usr/sbin/httpd -k start
nobody     5289  0.2  1.4 277744 35000 ?        S    17:05   0:00  \_ /usr/sbin/httpd -k start
nobody     5291  0.1  1.4 277892 35024 ?        S    17:05   0:00  \_ /usr/sbin/httpd -k start
nobody     5292  0.1  1.4 277744 34560 ?        S    17:05   0:00  \_ /usr/sbin/httpd -k start
nobody     5518  0.1  1.4 277744 34736 ?        S    17:05   0:00  \_ /usr/sbin/httpd -k start
nobody     6514  0.1  1.4 277744 35040 ?        S    17:06   0:00  \_ /usr/sbin/httpd -k start
nobody     6515  0.2  1.4 277744 34432 ?        S    17:06   0:00  \_ /usr/sbin/httpd -k start
nobody     6531  0.1  1.4 277888 34456 ?        S    17:07   0:00  \_ /usr/sbin/httpd -k start
nobody     6532  0.1  1.4 277876 34808 ?        S    17:07   0:00  \_ /usr/sbin/httpd -k start
nobody     6608  0.1  1.4 277748 34884 ?        S    17:07   0:00  \_ /usr/sbin/httpd -k start
nobody     6609  0.1  1.4 277744 34664 ?        S    17:07   0:00  \_ /usr/sbin/httpd -k start
cloudw     8620  0.0  0.6 353712 15980 ?        R    17:09   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     6610  0.1  1.4 277744 35092 ?        S    17:07   0:00  \_ /usr/sbin/httpd -k start
nobody     6613  0.1  1.4 277756 34780 ?        S    17:07   0:00  \_ /usr/sbin/httpd -k start
nobody     7415  0.1  1.4 277744 34752 ?        S    17:07   0:00  \_ /usr/sbin/httpd -k start
nobody     7445  0.1  1.4 277744 34820 ?        S    17:07   0:00  \_ /usr/sbin/httpd -k start
cloudw     8639  0.0  0.6 353712 15972 ?        S    17:09   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     7447  0.1  1.4 277876 34652 ?        S    17:07   0:00  \_ /usr/sbin/httpd -k start
nobody     7499  0.2  1.4 277880 34752 ?        S    17:07   0:00  \_ /usr/sbin/httpd -k start
nobody     7511  0.3  1.4 277884 34504 ?        S    17:08   0:00  \_ /usr/sbin/httpd -k start
nobody     8517  0.0  1.4 277600 34160 ?        S    17:08   0:00  \_ /usr/sbin/httpd -k start
nobody     8533  0.0  1.4 277600 34156 ?        S    17:08   0:00  \_ /usr/sbin/httpd -k start
nobody     8534  0.0  1.4 277600 34152 ?        S    17:08   0:00  \_ /usr/sbin/httpd -k start
nobody     8549  0.0  1.4 277600 34164 ?        S    17:09   0:00  \_ /usr/sbin/httpd -k start
nobody     8550  0.0  1.4 277600 34152 ?        S    17:09   0:00  \_ /usr/sbin/httpd -k start
nobody     8551  0.0  1.3 277308 33464 ?        S    17:09   0:00  \_ /usr/sbin/httpd -k start
cloudw     8624  0.0  0.6 353712 15976 ?        R    17:09   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     8552  0.0  1.4 277344 34236 ?        S    17:09   0:00  \_ /usr/sbin/httpd -k start
root       2081  0.1  1.1 181100 28092 ?        Ss   17:02   0:00 lfd - sleeping
## mysql stats
Uptime: 395  Threads: 7  Questions: 35007  Slow queries: 0  Opens: 862  Flush tables: 1  Open tables: 843  Queries per second avg: 88.625
*************************** 1. row ***************************
     Id: 557
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 2. row ***************************
     Id: 558
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 559
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 4. row ***************************
     Id: 561
   User: saboakin_saboaki
   Host: localhost
     db: saboakin_sabo
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 10
*************************** 5. row ***************************
     Id: 562
   User: saboakin_saboaki
   Host: localhost
     db: saboakin_sabo
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 6. row ***************************
     Id: 563
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: init
   Info: SELECT * FROM `10` WHERE `phone`='2348135933428' LIMIT 1
*************************** 7. row ***************************
     Id: 567
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.136.245 TIME_WAIT
      1 114.119.151.171 TIME_WAIT
      1 114.119.154.41 TIME_WAIT
      1 129.122.157.175 TIME_WAIT
      1 142.147.172.233 TIME_WAIT
      1 15.235.98.34 TIME_WAIT
      1 154.30.75.21 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.97 TIME_WAIT
      1 ::1 TIME_WAIT
      1 54.39.210.137 TIME_WAIT
      1 66.249.64.129 TIME_WAIT
      1 66.249.70.5 TIME_WAIT
      1 92.50.30.116 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      4 104.248.90.230 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 16-Nov-2025 17:09:01 WAT
   Restart Time: Sunday, 16-Nov-2025 17:02:33 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 minutes 28 seconds
   Server load: 0.36 0.93 0.60
   Total accesses: 2564 - Total Traffic: 54.3 MB - Total Duration: 1307509
   CPU Usage: u3.74 s1.59 cu25.89 cs22.38 - 13.8% CPU load
   6.61 requests/sec - 143.2 kB/second - 21.7 kB/request - 509.949 ms/request
   27 requests currently being processed, 0 workers gracefully restarting, 1 idle workers

KKKK_KKKKKWKKKKKKKKKKKKW.............K.KK........K..............
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv  PID     Acc    M CPU  SS  Req   Dur   Conn  Child Slot    Client     Protocol           VHost                                        Request
   0-0  7415 1/20/93   K 0.48 3   355  50117  35.5  0.55  2.59 66.249.70.98  http/1.1 team.cloudware.ng:443      GET /?l=3551111498 HTTP/1.1
   1-0  2832 1/170/181 K 1.84 4   357  97965  35.2  1.96  2.01 66.249.70.165 http/1.1 team.cloudware.ng:443      GET /?l=2221768412 HTTP/1.1
   2-0  8517 1/1/68    K 0.00 2   358  29880  33.7  0.03  1.12 66.249.64.2   http/1.1 team.cloudware.ng:443      GET /?l=4245180578 HTTP/1.1
   3-0  6514 1/25/62   K 0.53 1   353  58758  35.7  0.60  1.07 66.249.70.36  http/1.1 team.cloudware.ng:443      GET /?l=3463560902 HTTP/1.1
   4-0  6515 0/39/92   _ 1.07 0   354  44504  0.0   1.13  1.84 66.249.70.35  http/1.1 team.cloudware.ng:443      GET /?l=1321106851 HTTP/1.1
   5-0  6531 1/29/103  K 0.73 0   258  44039  33.8  0.85  1.69 66.249.70.39  http/1.1 team.cloudware.ng:443      GET /?l=2131890359 HTTP/1.1
   6-0  6532 1/22/47   K 0.53 2   352  24896  35.2  0.60  1.06 66.249.64.168 http/1.1 team.cloudware.ng:443      GET /?l=80827497 HTTP/1.1
   7-0  8533 1/1/143   K 0.00 1   402  33735  34.9  0.03  1.27 66.249.64.167 http/1.1 team.cloudware.ng:443      GET /?l=3521940313 HTTP/1.1
   8-0  2289 1/103/103 K 2.30 3   346  57146  34.3  1.99  1.99 66.249.70.199 http/1.1 team.cloudware.ng:443      GET /?l=4255956316 HTTP/1.1
   9-0  8534 1/1/54    K 0.00 1   406  28788  35.3  0.03  1.20 66.249.70.1   http/1.1 team.cloudware.ng:443      GET /?l=3834889099 HTTP/1.1
   10-0 7445 1/13/58   W 0.22 0   0    31156  34.8  0.31  1.47 192.178.4.98  http/1.1 team.cloudware.ng:443      GET /?l=1763352958 HTTP/1.1
   11-0 6608 1/29/56   K 0.55 1   343  38337  34.4  0.77  1.44 66.249.70.194 http/1.1 team.cloudware.ng:443      GET /?l=1046228596 HTTP/1.1
   12-0 6609 1/29/77   K 0.68 0   344  31177  33.7  0.66  3.87 66.249.70.5   http/1.1 team.cloudware.ng:443      GET /?l=3544389396 HTTP/1.1
   13-0 4639 1/64/76   K 1.65 0   272  43397  33.7  1.74  1.81 66.249.64.35  http/1.1 team.cloudware.ng:443      GET /sets/131195909940 HTTP/1.1
   14-0 6610 1/30/187  K 0.64 1   295  101884 34.4  0.74  2.20 66.249.70.36  http/1.1 team.cloudware.ng:443      GET /?l=1490300083 HTTP/1.1
   15-0 8549 1/1/77    K 0.00 0   356  30890  35.5  0.03  1.44 66.249.64.109 http/1.1 team.cloudware.ng:443      GET /?l=3014108182 HTTP/1.1
   16-0 7447 1/19/50   K 0.63 1   394  21580  36.8  0.16  0.95 66.249.64.234 http/1.1 team.cloudware.ng:443      GET /?l=3231218308 HTTP/1.1
   17-0 4641 1/78/79   K 2.24 2   295  44241  35.6  2.09  2.09 66.249.70.192 http/1.1 team.cloudware.ng:443      GET /?l=1278257686 HTTP/1.1
   18-0 7499 1/21/134  K 0.51 3   398  35208  36.3  0.58  1.16 66.249.64.45  http/1.1 team.cloudware.ng:443      GET /?l=3978684086 HTTP/1.1
   19-0 7511 1/31/60   K 0.79 4   353  28907  34.6  0.88  1.57 66.249.64.228 http/1.1 team.cloudware.ng:443      GET /?l=3225871466 HTTP/1.1
   20-0 6613 4/40/59   K 1.07 1   24   33311  7.9   1.00  1.47 66.249.70.7   http/1.1 test.cloudware.ng:443      GET /2993559041?goodscode=2989636398 HTTP/1.1
   21-0 8550 1/1/30    K 0.00 0   308  13949  35.9  0.04  0.53 66.249.64.39  http/1.1 team.cloudware.ng:443      GET /?l=206282882 HTTP/1.1
   22-0 8551 1/1/20    K 0.01 0   321  17982  35.5  0.03  0.34 66.249.64.129 http/1.1 team.cloudware.ng:443      GET /?l=2664432685 HTTP/1.1
   23-0 8552 0/2/20    W 0.00 0   0    4431   0.0   0.03  0.25 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   24-0 -    0/0/14    . 0.00 144 0    8541   0.0   0.00  0.31 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -    0/0/10    . 0.00 153 0    3546   0.0   0.00  0.19 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -    0/0/26    . 0.00 113 0    14974  0.0   0.00  0.76 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -    0/0/4     . 0.00 176 0    2053   0.0   0.00  0.10 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -    0/0/14    . 0.00 115 0    7026   0.0   0.00  0.39 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -    0/0/17    . 0.00 112 0    11668  0.0   0.00  0.51 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -    0/0/40    . 0.00 16  0    38754  0.0   0.00  1.11 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -    0/0/7     . 0.00 163 0    3178   0.0   0.00  0.17 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -    0/0/28    . 0.00 79  0    15277  0.0   0.00  0.74 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -    0/0/20    . 0.00 47  0    18375  0.0   0.00  0.68 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -    0/0/39    . 0.00 15  0    20913  0.0   0.00  0.96 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -    0/0/5     . 0.00 165 0    2554   0.0   0.00  0.14 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -    0/0/24    . 0.00 108 0    13354  0.0   0.00  2.05 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 5289 2/70/70   K 1.86 4   1061 44178  350.1 2.30  2.30 177.223.55.78 http/1.1 health.oyostate.gov.ng:443 GET /wp-content/uploads/2023/12/REGULATORY-PROCESSING-ISSUANCE-
   38-0 -    0/0/49    . 0.00 45  0    9438   0.0   0.00  0.38 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 5291 2/46/46   K 1.06 0   282  22112  63.8  1.05  1.05 192.178.4.104 http/1.1 team.cloudware.ng:443      GET /?l=2933774412 HTTP/1.1
   40-0 5292 1/50/50   K 1.35 2   362  25689  35.9  1.28  1.28 66.249.70.136 http/1.1 team.cloudware.ng:443      GET /?l=3640427901 HTTP/1.1
   41-0 -    0/0/7     . 0.00 161 0    1435   0.0   0.00  0.10 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -    0/0/17    . 0.00 109 0    11034  0.0   0.00  0.48 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -    0/0/5     . 0.00 166 0    1769   0.0   0.00  0.11 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -    0/0/13    . 0.00 133 0    7314   0.0   0.00  0.35 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -    0/0/5     . 0.00 155 0    2116   0.0   0.00  0.10 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -    0/0/29    . 0.00 49  0    15427  0.0   0.00  0.77 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -    0/0/46    . 0.00 56  0    31137  0.0   0.00  1.31 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -    0/0/5     . 0.00 157 0    2706   0.0   0.00  0.13 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 5518 1/42/42   K 0.97 0   278  25235  34.1  1.24  1.24 66.249.64.230 http/1.1 team.cloudware.ng:443      GET /?l=3324792928 HTTP/1.1
   50-0 -    0/0/3     . 0.00 172 0    1402   0.0   0.00  0.06 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1607
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 4 seconds, (range: 0...20)
   index usage: 28%, cache usage: 38%
   total entries stored since starting: 2131
   total entries replaced since starting: 0
   total entries expired since starting: 524
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 12 miss
   total removes since starting: 1 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit