403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-18.10.45.txt
 ## mem threshold exceeded
 ## swap threshold exceeded
## server overview
2025-11-18.10.45 load[0] mem[83/38] mysql[5/6] httpd[22]
              total        used        free      shared  buff/cache   available
Mem:           2363        1919          78          42         365         246
Swap:          1999         867        1132
 10:45:01 up 29 min,  0 users,  load average: 0.21, 0.45, 0.60
## system overview
top - 10:45:01 up 29 min,  0 users,  load average: 0.21, 0.45, 0.60
Tasks: 212 total,   2 running, 209 sleeping,   0 stopped,   1 zombie
%Cpu(s): 75.0 us, 21.9 sy,  0.0 ni,  0.0 id,  3.1 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   121252 free,  1925392 used,   373656 buff/cache
KiB Swap:  2047996 total,  1160188 free,   887808 used.   292904 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1824 mysql     20   0 1461196 216764   3916 S 112.5  9.0   0:24.08 /usr/sbin+
 29227 healtho+  20   0  443300  50592   4140 S  37.5  2.1   0:00.43 php-fpm: +
 29308 nigeria   20   0  404052  16136  10384 S  25.0  0.7   0:00.05 /opt/cpan+
 29289 cloudw    20   0  353712  16240  10612 S   6.2  0.7   0:00.02 /opt/cpan+
 29329 root      20   0  160224   2352   1636 S   6.2  0.1   0:00.01 top -n 2 +
 29375 root      20   0  160220   2064   1584 R   6.2  0.1   0:00.01 top -bcn1
     1 root      20   0   44264   3300   1588 S   0.0  0.1   0:03.00 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     3 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kworker/+
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     5 root      20   0       0      0      0 S   0.0  0.0   0:00.25 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.10 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:02.02 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.10 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.42 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:07.23 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   236 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.53 [kworker/+
   253 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   266 root       0 -20       0      0      0 S   0.0  0.0   0:00.57 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39496   7764   7484 S   0.0  0.3   0:01.28 /usr/lib/+
   382 root      20   0   45352    584    440 S   0.0  0.0   0:00.39 /usr/lib/+
   411 root      16  -4   55532    336    224 S   0.0  0.0   0:00.18 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   508 dbus      20   0   58384   1316    760 S   0.0  0.1   0:00.90 /usr/bin/+
   514 rpc       20   0   69256    228    120 S   0.0  0.0   0:00.01 /sbin/rpc+
   515 nscd      20   0  861368   1256    772 S   0.0  0.1   0:01.69 /usr/sbin+
   532 root      20   0   21540    540    428 S   0.0  0.0   0:00.03 /usr/sbin+
   533 root      20   0  152780    264    260 S   0.0  0.0   0:00.00 /usr/sbin+
   535 root      20   0   52852    344    340 S   0.0  0.0   0:00.01 /usr/sbin+
   536 polkitd   20   0  610540   1108    684 S   0.0  0.0   0:00.26 /usr/lib/+
   539 root      20   0  224148   5664    976 S   0.0  0.2   0:00.11 queueproc+
   540 root      20   0   24604   1212    932 S   0.0  0.1   0:00.41 /usr/lib/+
   550 root      20   0    4388    144    140 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  195208    160    160 S   0.0  0.0   0:00.00 /usr/sbin+
   571 root      20   0   24208     92     92 S   0.0  0.0   0:00.00 /usr/sbin+
   573 root      20   0  124476    624    492 S   0.0  0.0   0:00.04 /usr/sbin+
   582 root      20   0  108296    260    256 S   0.0  0.0   0:00.00 /sbin/age+
   583 root      20   0  114704    240    240 S   0.0  0.0   0:00.02 /bin/bash
   615 mailnull  20   0   88988   3608    660 S   0.0  0.1   0:00.04 /usr/sbin+
   624 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   660 root       0 -20       0      0      0 S   0.0  0.0   0:02.16 [loop0]
   698 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   699 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   919 root      20   0 1763304 769428    504 S   0.0 31.8   0:13.80 /usr/loca+
   925 named     20   0  637992  30804   1596 S   0.0  1.3   0:01.62 /usr/sbin+
   929 systuser  20   0  111608     72      0 S   0.0  0.0   0:00.00 /usr/loca+
   932 systuser  20   0   14068     40      0 S   0.0  0.0   0:00.00 /usr/loca+
   933 root      20   0 1277056  11232    248 S   0.0  0.5   0:26.76 /usr/bin/+
   934 root      20   0  400740   2160    832 S   0.0  0.1   0:00.32 php-fpm: +
   935 root      20   0  216400   7688   6236 S   0.0  0.3   0:00.59 /usr/sbin+
   936 telegraf  20   0 5654048  34144   3332 S   0.0  1.4   0:01.19 /usr/loca+
   937 root      20   0  388892    472    388 S   0.0  0.0   0:00.11 php-fpm: +
   938 root      20   0  439788  11452  11244 S   0.0  0.5   0:00.15 php-fpm: +
   940 root      20   0  396248    564    388 S   0.0  0.0   0:00.12 php-fpm: +
   942 root      20   0  389508    688    496 S   0.0  0.0   0:00.11 php-fpm: +
   944 root      20   0 1276356   9544    216 S   0.0  0.4   0:23.49 /usr/bin/+
   945 root      20   0   51508    688    524 S   0.0  0.0   0:00.05 /usr/sbin+
   946 root      20   0  445028   2792   2792 S   0.0  0.1   0:00.06 sw-engine+
   948 cpanelc+  20   0    9824   2832   2404 S   0.0  0.1   0:01.49 /usr/loca+
   951 systuser  20   0   10388     52      0 S   0.0  0.0   0:00.00 /usr/loca+
   952 root      20   0  261032   4800   1136 S   0.0  0.2   0:00.32 cpsrvd (S+
   957 root      20   0  111304    632    532 S   0.0  0.0   0:00.26 /usr/sbin+
   958 root      20   0  153404    496    412 S   0.0  0.0   0:00.03 pure-ftpd+
   963 systuser  20   0  114016  11968    920 S   0.0  0.5   0:00.55 /usr/loca+
   964 root      20   0  572372    980    512 S   0.0  0.0   0:00.25 /usr/bin/+
   969 systuser  20   0  113676     72      0 S   0.0  0.0   0:00.00 /usr/loca+
   994 memcach+  20   0  342400    276    276 S   0.0  0.0   0:00.03 /usr/bin/+
  1086 dovenull  20   0   46984   2060   1336 S   0.0  0.1   0:00.07 dovecot/p+
  1087 dovenull  20   0   47188   3140   2212 S   0.0  0.1   0:00.03 dovecot/i+
  1088 dovecot   20   0   10320    384    272 S   0.0  0.0   0:00.00 dovecot/a+
  1089 root      20   0   10452    532    352 S   0.0  0.0   0:00.02 dovecot/l+
  1090 dovenull  20   0   46984   2876   2104 S   0.0  0.1   0:00.09 dovecot/p+
  1091 dovenull  20   0   47056   1812    992 S   0.0  0.1   0:00.02 dovecot/i+
  1096 root      20   0   24572   2528    436 S   0.0  0.1   0:00.03 dovecot/c+
  1101 dovecot   20   0   13568    576    368 S   0.0  0.0   0:00.00 dovecot/s+
  1127 root      20   0  248088 118784   2344 S   0.0  4.9   0:03.08 /usr/loca+
  1176 dovecot   20   0   41056   1524   1120 S   0.0  0.1   0:00.04 dovecot/a+
  1179 systuser  20   0  157708   3020   1024 S   0.0  0.1   0:00.02 SonarPush+
  1200 wp-tool+  20   0  412368  30372   1284 S   0.0  1.3   0:00.77 /usr/bin/+
  1201 wp-tool+  20   0  387528  12300   1640 S   0.0  0.5   0:00.09 /usr/bin/+
  1231 root      20   0  262228  20736   2876 S   0.0  0.9   0:00.26 cpdavd - +
  1233 root      20   0  167452   1512    912 S   0.0  0.1   0:00.08 dnsadmin +
  1235 root      20   0  209272  10756   1376 S   0.0  0.4   0:00.40 tailwatchd
  1658 root      20   0  299272    808    428 S   0.0  0.0   0:00.05 php-fpm: +
  1695 root      38  18  130416   1536    816 S   0.0  0.1   0:00.00 cpanellog+
  1995 root      20   0  266984   7980    820 S   0.0  0.3   0:00.36 /usr/sbin+
  1997 root      20   0   12856    480    380 S   0.0  0.0   0:00.22 /usr/loca+
  1998 root      20   0   12732    436    360 S   0.0  0.0   0:00.20 /usr/loca+
  1999 root      20   0   12892    496    380 S   0.0  0.0   0:00.20 /usr/loca+
  2006 root      20   0   53252    316    316 S   0.0  0.0   0:00.05 /usr/loca+
  2124 root      20   0  181060  28192   1276 S   0.0  1.2   0:01.83 lfd - sle+
  7379 root      20   0  259664 125700   2484 S   0.0  5.2   0:01.83 spamd chi+
  7380 root      20   0  248088 116820    396 S   0.0  4.8   0:00.00 spamd chi+
  8402 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 11809 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 17098 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 18159 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 20039 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 21876 nobody    20   0  277744  19464   4388 S   0.0  0.8   0:00.82 /usr/sbin+
 21877 nobody    20   0  277504  19468   4348 S   0.0  0.8   0:00.87 /usr/sbin+
 23817 nobody    20   0  277752  19336   4388 S   0.0  0.8   0:00.48 /usr/sbin+
 23987 nobody    20   0  277488  18832   4076 S   0.0  0.8   0:00.29 /usr/sbin+
 24869 nobody    20   0  277744  19332   4172 S   0.0  0.8   0:00.42 /usr/sbin+
 25022 nobody    20   0  277744  19100   4164 S   0.0  0.8   0:00.63 /usr/sbin+
 25515 nobody    20   0  277744  19248   4236 S   0.0  0.8   0:00.42 /usr/sbin+
 25547 nobody    20   0  277848  19080   4176 S   0.0  0.8   0:00.55 /usr/sbin+
 25548 nobody    20   0  277784  19216   4116 S   0.0  0.8   0:00.36 /usr/sbin+
 25828 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25838 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 26736 nobody    20   0  277744  19180   4168 S   0.0  0.8   0:00.24 /usr/sbin+
 26763 nobody    20   0  277752  18984   3984 S   0.0  0.8   0:00.19 /usr/sbin+
 26773 nobody    20   0  277744  18972   4024 S   0.0  0.8   0:00.25 /usr/sbin+
 27508 nobody    20   0  277744  18356   3480 S   0.0  0.8   0:00.26 /usr/sbin+
 27734 nobody    20   0  277744  18828   3928 S   0.0  0.8   0:00.17 /usr/sbin+
 27753 nobody    20   0  277744  18772   3884 S   0.0  0.8   0:00.18 /usr/sbin+
 27754 nobody    20   0  277472  18244   3584 S   0.0  0.8   0:00.25 /usr/sbin+
 28177 nobody    20   0  277876  18648   3788 S   0.0  0.8   0:00.16 /usr/sbin+
 28370 nobody    20   0  277744  18660   3764 S   0.0  0.8   0:00.10 /usr/sbin+
 28446 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 28474 nobody    20   0  277744  18420   3536 S   0.0  0.8   0:00.12 /usr/sbin+
 28644 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 28664 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 28864 nobody    20   0  277744  18068   3212 S   0.0  0.7   0:00.10 /usr/sbin+
 28865 nobody    20   0  277768  18596   3780 S   0.0  0.8   0:00.02 /usr/sbin+
 29157 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 29173 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 29180 nobody    20   0  277600  17788   3160 S   0.0  0.7   0:00.00 /usr/sbin+
 29185 root      20   0  162436   5836   4340 S   0.0  0.2   0:00.01 sshd: roo+
 29186 sshd      20   0  115644   2628   1556 S   0.0  0.1   0:00.00 sshd: roo+
 29187 nobody    20   0  277600  17792   3164 S   0.0  0.7   0:00.00 /usr/sbin+
 29188 nobody    20   0  277600  17788   3160 S   0.0  0.7   0:00.00 /usr/sbin+
 29199 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 29212 nobody    20   0  277600  17792   3164 S   0.0  0.7   0:00.00 /usr/sbin+
 29213 nobody    20   0  277340  18084   3628 S   0.0  0.7   0:00.01 /usr/sbin+
 29214 nobody    20   0  277600  17792   3164 S   0.0  0.7   0:00.00 /usr/sbin+
 29215 nobody    20   0  277600  17788   3160 S   0.0  0.7   0:00.00 /usr/sbin+
 29222 nigeria   20   0  400460   4264   2160 S   0.0  0.2   0:00.00 php-fpm: +
 29232 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 29233 root      20   0  183044   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 29235 root      20   0  183044   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 29236 root      20   0  183044   2156   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 29237 root      20   0  183044   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 29238 root      20   0  183044   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 29239 root      20   0  183044   2152   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 29240 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 29241 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 29242 root      20   0  183044   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 29243 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 29244 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 29246 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 29249 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 29251 root      20   0  188424  11268   5132 S   0.0  0.5   0:00.01 /usr/loca+
 29253 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 29254 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 29255 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 29256 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 29257 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 29258 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 29260 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 29262 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 29263 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 29266 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 29267 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 29268 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 29274 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 29279 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 29292 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 29296 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 29297 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 29299 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 29304 cloudsms  20   0  404052  15352  10008 S   0.0  0.6   0:00.00 /opt/cpan+
 29306 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 29380 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 29381 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 29382 cloudsms  20   0  129464   2580   2092 R   0.0  0.1   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    10:15   0:00 [kthreadd]
root          3  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kworker/0:0]
root          4  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [kworker/0:0H]
root          5  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kworker/u200:0]
root          6  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    10:15   0:02  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [watchdogd]
root         36  0.4  0.0      0     0 ?        S    10:15   0:07  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   10:15   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   10:15   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [deferwq]
root        104  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [ata_sff]
root        236  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [kworker/1:2]
root        249  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [scsi_eh_0]
root        250  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [kworker/0:1H]
root        253  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [scsi_eh_1]
root        254  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [ttm_swap]
root        266  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [xprtiod]
root        624  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [kvm-irqfd-clean]
root        660  0.1  0.0      0     0 ?        S<   10:15   0:02  \_ [loop0]
root        698  0.0  0.0      0     0 ?        S    10:15   0:00  \_ [jbd2/loop0-8]
root        699  0.0  0.0      0     0 ?        S<   10:15   0:00  \_ [ext4-rsv-conver]
root       8402  0.0  0.0      0     0 ?        S    10:22   0:00  \_ [kworker/0:1]
root      11809  0.0  0.0      0     0 ?        S    10:26   0:00  \_ [kworker/1:0]
root      17098  0.0  0.0      0     0 ?        S    10:32   0:00  \_ [kworker/1:3]
root      18159  0.0  0.0      0     0 ?        S    10:33   0:00  \_ [kworker/u200:2]
root      20039  0.0  0.0      0     0 ?        S    10:35   0:00  \_ [kworker/0:3]
root      25828  0.0  0.0      0     0 ?        S    10:41   0:00  \_ [kworker/1:1]
root      25838  0.0  0.0      0     0 ?        S    10:41   0:00  \_ [kworker/0:2]
root      28446  0.0  0.0      0     0 ?        S    10:44   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44264  3300 ?        Ss   10:15   0:03 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.3  39496  7764 ?        Ss   10:15   0:01 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45352   584 ?        Ss   10:15   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   336 ?        S<sl 10:15   0:00 /sbin/auditd
dbus        508  0.0  0.0  58384  1316 ?        Ss   10:15   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         514  0.0  0.0  69256   228 ?        Ss   10:15   0:00 /sbin/rpcbind -w
nscd        515  0.0  0.0 861368  1256 ?        Ssl  10:15   0:01 /usr/sbin/nscd
root        532  0.0  0.0  21540   540 ?        Ss   10:15   0:00 /usr/sbin/irqbalance --foreground
root        533  0.0  0.0 152780   264 ?        Ss   10:15   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        535  0.0  0.0  52852   344 ?        Ss   10:15   0:00 /usr/sbin/smartd -n -q never
polkitd     536  0.0  0.0 610540  1108 ?        Ssl  10:15   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        539  0.0  0.2 224148  5664 ?        Ss   10:15   0:00 queueprocd - waiting up to 60s to process a task
root        540  0.0  0.0  24604  1212 ?        Ss   10:15   0:00 /usr/lib/systemd/systemd-logind
root        550  0.0  0.0   4388   144 ?        Ss   10:15   0:00 /usr/sbin/acpid
root        552  0.0  0.0 195208   160 ?        Ssl  10:15   0:00 /usr/sbin/gssproxy -D
root        571  0.0  0.0  24208    92 ?        Ss   10:15   0:00 /usr/sbin/atd -f
root        573  0.0  0.0 124476   624 ?        Ss   10:15   0:00 /usr/sbin/crond -n
root      29232  0.0  0.0 183044  2148 ?        S    10:45   0:00  \_ /usr/sbin/CROND -n
root      29262  0.0  0.0 113284  1212 ?        Ss   10:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      29274  0.0  0.0 108052   360 ?        S    10:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      29279  0.0  0.0 113288  1516 ?        S    10:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      29383  0.0  0.0 153840  2096 ?        R    10:45   0:00  |               \_ ps auxf
root      29233  0.0  0.0 183044  2156 ?        S    10:45   0:00  \_ /usr/sbin/CROND -n
root      29257  0.0  0.0  20164   804 ?        Ss   10:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      29235  0.0  0.0 183044  2156 ?        S    10:45   0:00  \_ /usr/sbin/CROND -n
root      29258  0.0  0.0  20164   808 ?        Ss   10:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      29236  0.0  0.0 183044  2156 ?        S    10:45   0:00  \_ /usr/sbin/CROND -n
root      29253  0.0  0.0  20164   988 ?        Ss   10:45   0:00  |   \_ jailshell (cloudsms) [29380] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  29380  0.0  0.0  20164   256 ?        S    10:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  29381  0.0  0.0 113284  1212 ?        S    10:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  29382  0.0  0.6 404052 15088 ?        R    10:45   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      29237  0.0  0.0 183044  2152 ?        S    10:45   0:00  \_ /usr/sbin/CROND -n
root      29268  0.0  0.0  20164   808 ?        Ss   10:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      29238  0.0  0.0 183044  2152 ?        S    10:45   0:00  \_ /usr/sbin/CROND -n
root      29255  0.0  0.0  20164   972 ?        Ss   10:45   0:00  |   \_ jailshell (cloudsms) [29292] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  29292  0.0  0.0  20164   264 ?        S    10:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  29297  0.0  0.0 113284  1212 ?        S    10:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  29304  0.0  0.6 404052 15352 ?        S    10:45   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      29239  0.0  0.0 183044  2152 ?        S    10:45   0:00  \_ /usr/sbin/CROND -n
root      29263  0.0  0.0  20164   804 ?        Ss   10:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      29240  0.0  0.0 183044  2148 ?        S    10:45   0:00  \_ /usr/sbin/CROND -n
root      29266  0.0  0.0  20164   808 ?        Ss   10:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      29241  0.0  0.0 183044  2148 ?        S    10:45   0:00  \_ /usr/sbin/CROND -n
root      29260  0.0  0.0  20164   808 ?        Ss   10:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      29242  0.0  0.0 183044  2148 ?        S    10:45   0:00  \_ /usr/sbin/CROND -n
root      29267  0.0  0.0  20164   804 ?        Ss   10:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      29243  0.0  0.0 183044  2140 ?        S    10:45   0:00  \_ /usr/sbin/CROND -n
root      29249  0.0  0.0 113284  1212 ?        Ss   10:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      29251  0.0  0.4 188424 11268 ?        S    10:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      29329  0.0  0.0 160224  2352 ?        S    10:45   0:00  |           \_ top -n 2 -b -c
root      29244  0.0  0.0 183044  2144 ?        S    10:45   0:00  \_ /usr/sbin/CROND -n
root      29254  0.0  0.0  20164   972 ?        Ss   10:45   0:00  |   \_ jailshell (pactpay) [29296] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   29296  0.0  0.0  20164   264 ?        S    10:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   29299  0.0  0.7 480124 17688 ?        S    10:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      29246  0.0  0.0 183044  2144 ?        S    10:45   0:00  \_ /usr/sbin/CROND -n
root      29256  0.0  0.0  20164   968 ?        Ss   10:45   0:00      \_ jailshell (nigeria) [29306] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   29306  0.0  0.0  20164   256 ?        S    10:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   29308  0.0  0.6 404052 16136 ?        S    10:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        582  0.0  0.0 108296   260 tty1     Ss+  10:15   0:00 /sbin/agetty --noclear tty1 linux
root        583  0.0  0.0 114704   240 ttyS0    Ss+  10:15   0:00 /bin/bash
mailnull    615  0.0  0.1  88988  3608 ?        Ss   10:15   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        919  0.7 31.7 1763304 769428 ?      Ssl  10:15   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       925  0.0  1.2 637992 30804 ?        Ssl  10:15   0:01 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
systuser    929  0.0  0.0 111608    72 ?        Ssl  10:15   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    932  0.0  0.0  14068    40 ?        Ssl  10:15   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        933  1.5  0.4 1277056 11232 ?       Ssl  10:15   0:26 /usr/bin/checkstatus
root        934  0.0  0.0 400740  2160 ?        Ss   10:15   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   29222  0.0  0.1 400460  4264 ?        S    10:44   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  29227  0.0  2.0 443300 50592 ?        S    10:45   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root        935  0.0  0.3 216400  7688 ?        Ssl  10:15   0:00 /usr/sbin/rsyslogd -n
telegraf    936  0.0  1.4 5654048 34144 ?       SLsl 10:15   0:01 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        937  0.0  0.0 388892   472 ?        Ss   10:15   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        938  0.0  0.4 439788 11452 ?        Ss   10:15   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        940  0.0  0.0 396248   564 ?        Ss   10:15   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        942  0.0  0.0 389508   688 ?        Ss   10:15   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        944  1.3  0.3 1276356 9544 ?        Ssl  10:15   0:23 /usr/bin/cspdaemon
root        945  0.0  0.0  51508   688 ?        Ss   10:15   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1086  0.0  0.0  46984  2060 ?        S    10:15   0:00  \_ dovecot/pop3-login
dovenull   1087  0.0  0.1  47188  3140 ?        S    10:15   0:00  \_ dovecot/imap-login
dovecot    1088  0.0  0.0  10320   384 ?        S    10:15   0:00  \_ dovecot/anvil
root       1089  0.0  0.0  10452   532 ?        S    10:15   0:00  \_ dovecot/log
dovenull   1090  0.0  0.1  46984  2876 ?        S    10:15   0:00  \_ dovecot/pop3-login
dovenull   1091  0.0  0.0  47056  1812 ?        S    10:15   0:00  \_ dovecot/imap-login
root       1096  0.0  0.1  24572  2528 ?        S    10:15   0:00  \_ dovecot/config
dovecot    1101  0.0  0.0  13568   576 ?        S    10:15   0:00  \_ dovecot/stats
dovecot    1176  0.0  0.0  41056  1524 ?        S    10:15   0:00  \_ dovecot/auth
root        946  0.0  0.1 445028  2792 ?        Ss   10:15   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
cpanelc+    948  0.0  0.1   9824  2832 ?        Rs   10:15   0:01 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    951  0.0  0.0  10388    52 ?        Ssl  10:15   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        952  0.0  0.1 261032  4800 ?        Ss   10:15   0:00 cpsrvd (SSL) - waiting for connections                   
root      29199  0.0  0.0      0     0 ?        Z    10:44   0:00  \_ [cpaneld - servi] <defunct>
root        957  0.0  0.0 111304   632 ?        Ss   10:15   0:00 /usr/sbin/sshd -D
root      28644  0.0  0.1 111304  4268 ?        Ss   10:44   0:00  \_ sshd: [accepted]
sshd      28664  0.0  0.1 115644  2628 ?        S    10:44   0:00  |   \_ sshd: [net]
root      29157  0.0  0.1 111304  4276 ?        Ss   10:44   0:00  \_ sshd: [accepted]
sshd      29173  0.0  0.1 115644  2632 ?        S    10:44   0:00  |   \_ sshd: [net]
root      29185  0.3  0.2 162436  5836 ?        Ss   10:44   0:00  \_ sshd: root [priv]
sshd      29186  0.0  0.1 115644  2628 ?        S    10:44   0:00      \_ sshd: root [net]
root        958  0.0  0.0 153404   496 ?        Ss   10:15   0:00 pure-ftpd (SERVER)
systuser    963  0.0  0.4 114016 11968 ?        Ssl  10:15   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        964  0.0  0.0 572372   980 ?        Ssl  10:15   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    969  0.0  0.0 113676    72 ?        Ssl  10:15   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    994  0.0  0.0 342400   276 ?        Ssl  10:15   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root       1127  0.1  4.9 248088 118784 ?       Ss   10:15   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7379  0.1  5.1 259664 125700 ?       S    10:20   0:01  \_ spamd child
root       7380  0.0  4.8 248088 116820 ?       S    10:20   0:00  \_ spamd child
systuser   1179  0.0  0.1 157708  3020 ?        S    10:15   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1200  0.0  1.2 412368 30372 ?        Ss   10:15   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1201  0.0  0.5 387528 12300 ?        Ss   10:15   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1231  0.0  0.8 262228 20736 ?        Ss   10:15   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1233  0.0  0.0 167452  1512 ?        Ss   10:15   0:00 dnsadmin - dormant mode
root       1235  0.0  0.4 209272 10756 ?        Ss   10:15   0:00 tailwatchd
root       1658  0.0  0.0 299272   808 ?        Ss   10:16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1695  0.0  0.0 130416  1536 ?        SN   10:16   0:00 cpanellogd - sleeping for logs
mysql      1824  1.3  8.9 1461196 216764 ?      Sl   10:16   0:24 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1995  0.0  0.3 266984  7980 ?        Ss   10:16   0:00 /usr/sbin/httpd -k start
root       1997  0.0  0.0  12856   480 ?        S    10:16   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1998  0.0  0.0  12732   436 ?        S    10:16   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1999  0.0  0.0  12892   496 ?        S    10:16   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2006  0.0  0.0  53252   316 ?        S    10:16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    21876  0.1  0.8 277744 19464 ?        S    10:37   0:00  \_ /usr/sbin/httpd -k start
nobody    21877  0.1  0.8 277504 19468 ?        S    10:37   0:00  \_ /usr/sbin/httpd -k start
nobody    23817  0.1  0.7 277752 19336 ?        S    10:38   0:00  \_ /usr/sbin/httpd -k start
nobody    23987  0.0  0.7 277488 18840 ?        S    10:39   0:00  \_ /usr/sbin/httpd -k start
nobody    24869  0.1  0.7 277744 19332 ?        S    10:40   0:00  \_ /usr/sbin/httpd -k start
nobody    25022  0.2  0.7 277744 19100 ?        S    10:40   0:00  \_ /usr/sbin/httpd -k start
nobody    25515  0.1  0.7 277744 19248 ?        S    10:40   0:00  \_ /usr/sbin/httpd -k start
nobody    25547  0.2  0.7 277848 19080 ?        S    10:40   0:00  \_ /usr/sbin/httpd -k start
nobody    25548  0.1  0.7 277784 19216 ?        S    10:40   0:00  \_ /usr/sbin/httpd -k start
nobody    26736  0.1  0.7 277744 19180 ?        S    10:42   0:00  \_ /usr/sbin/httpd -k start
nobody    26763  0.1  0.7 277752 18984 ?        S    10:42   0:00  \_ /usr/sbin/httpd -k start
nobody    26773  0.1  0.7 277744 18972 ?        S    10:42   0:00  \_ /usr/sbin/httpd -k start
nobody    27508  0.2  0.7 277744 18356 ?        S    10:42   0:00  \_ /usr/sbin/httpd -k start
nobody    27734  0.1  0.7 277744 18828 ?        S    10:43   0:00  \_ /usr/sbin/httpd -k start
nobody    27753  0.1  0.7 277744 18772 ?        S    10:43   0:00  \_ /usr/sbin/httpd -k start
nobody    27754  0.2  0.7 277472 18244 ?        S    10:43   0:00  \_ /usr/sbin/httpd -k start
nobody    28177  0.2  0.7 277876 18648 ?        S    10:43   0:00  \_ /usr/sbin/httpd -k start
nobody    28370  0.1  0.7 277744 18660 ?        S    10:44   0:00  \_ /usr/sbin/httpd -k start
nobody    28474  0.2  0.7 277744 18420 ?        S    10:44   0:00  \_ /usr/sbin/httpd -k start
nobody    28864  0.3  0.7 277744 18068 ?        S    10:44   0:00  \_ /usr/sbin/httpd -k start
nobody    28865  0.0  0.7 277768 18596 ?        S    10:44   0:00  \_ /usr/sbin/httpd -k start
nobody    29180  0.0  0.7 277600 17788 ?        S    10:44   0:00  \_ /usr/sbin/httpd -k start
nobody    29187  0.0  0.7 277600 17792 ?        S    10:44   0:00  \_ /usr/sbin/httpd -k start
nobody    29188  0.0  0.7 277600 17788 ?        S    10:44   0:00  \_ /usr/sbin/httpd -k start
nobody    29212  0.0  0.7 277600 17792 ?        S    10:44   0:00  \_ /usr/sbin/httpd -k start
nobody    29213  1.0  0.7 277340 18084 ?        S    10:44   0:00  \_ /usr/sbin/httpd -k start
nobody    29214  0.0  0.7 277600 17792 ?        S    10:44   0:00  \_ /usr/sbin/httpd -k start
nobody    29215  0.0  0.7 277600 17788 ?        S    10:44   0:00  \_ /usr/sbin/httpd -k start
root       2124  0.1  1.1 181060 28192 ?        Rs   10:16   0:01 lfd - processing
## mysql stats
Uptime: 1738  Threads: 5  Questions: 118330  Slow queries: 0  Opens: 1699  Flush tables: 1  Open tables: 1595  Queries per second avg: 68.084
*************************** 1. row ***************************
     Id: 1602
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 1606
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 1610
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 4. row ***************************
     Id: 1611
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 1613
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.133.35 TIME_WAIT
      1 114.119.154.186 TIME_WAIT
      1 114.119.155.44 TIME_WAIT
      1 170.23.29.211 TIME_WAIT
      1 192.178.4.98 TIME_WAIT
      1 ::1 TIME_WAIT
      1 213.201.179.162 TIME_WAIT
      1 34.200.116.27 TIME_WAIT
      1 44.213.143.188 TIME_WAIT
      1 45.41.144.127 TIME_WAIT
      1 52.205.132.115 TIME_WAIT
      1 54.39.136.55 TIME_WAIT
      1 66.249.70.193 TIME_WAIT
      1 66.249.70.4 TIME_WAIT
      1 66.249.70.68 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 18-Nov-2025 10:45:02 WAT
   Restart Time: Tuesday, 18-Nov-2025 10:16:08 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 28 minutes 54 seconds
   Server load: 0.21 0.45 0.60
   Total accesses: 9789 - Total Traffic: 273.0 MB - Total Duration: 5709259
   CPU Usage: u5.02 s2.23 cu139.35 cs114.55 - 15.1% CPU load
   5.65 requests/sec - 161.2 kB/second - 28.6 kB/request - 583.232 ms/request
   19 requests currently being processed, 0 workers gracefully restarting, 9 idle workers

_KKKKK_RRK_KKWK__K_KW_KK__KK....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU   SS  Req  Dur   Conn Child  Slot    Client     Protocol           VHost                                        Request
   0-0  26736 0/43/392  _ 0.99 0    267 221640 0.0  1.00  10.38 66.249.64.130 http/1.1 team.cloudware.ng:443      GET /?l=1625591959 HTTP/1.1
   1-0  25515 1/65/391  K 1.74 3    264 228955 33.9 1.82  10.78 66.249.70.200 http/1.1 team.cloudware.ng:443      GET /?l=360705438 HTTP/1.1
   2-0  28177 1/25/405  K 0.64 0    306 235932 38.4 0.72  10.94 66.249.70.8   http/1.1 team.cloudware.ng:443      GET /?l=646188836 HTTP/1.1
   3-0  29180 1/1/344   K 0.00 3    392 199604 35.2 0.03  9.08  66.249.64.228 http/1.1 team.cloudware.ng:443      GET /?l=2379050055 HTTP/1.1
   4-0  29187 1/1/420   K 0.00 2    272 236877 33.6 0.03  13.42 66.249.70.69  http/1.1 team.cloudware.ng:443      GET /?l=1357833072 HTTP/1.1
   5-0  28370 1/17/386  K 0.39 3    295 215685 36.7 0.44  10.53 192.178.4.96  http/1.1 team.cloudware.ng:443      GET /?l=2014142768 HTTP/1.1
   6-0  23817 0/82/387  _ 1.98 0    0   220334 0.0  2.10  10.93 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   7-0  28474 0/19/317  R 0.51 1    1   182007 0.0  0.53  8.65  103.119.95.28 http/1.1 ekoemail.com:443
   8-0  26763 0/33/280  R 0.77 57   265 162364 0.0  0.83  10.40 102.89.85.101 http/1.1
   9-0  27508 1/40/337  K 1.16 2    265 196695 33.9 1.24  9.48  66.249.70.6   http/1.1 team.cloudware.ng:443      GET /?l=1368857383 HTTP/1.1
   10-0 24869 0/71/374  _ 1.64 0    274 222651 0.0  1.84  10.31 66.249.70.129 http/1.1 team.cloudware.ng:443      GET /?l=2606473334 HTTP/1.1
   11-0 23987 1/49/219  K 1.22 0    490 128002 34.8 1.34  5.87  66.249.70.38  http/1.1 team.cloudware.ng:443      GET /?l=368215528 HTTP/1.1
   12-0 28864 1/15/437  K 0.42 3    273 254939 32.9 0.45  12.43 66.249.70.101 http/1.1 team.cloudware.ng:443      GET /?l=3817863410 HTTP/1.1
   13-0 25022 1/96/380  W 2.78 0    0   223987 34.4 2.85  10.78 66.249.70.195 http/1.1 team.cloudware.ng:443      GET /?l=1642494498 HTTP/1.1
   14-0 25547 1/88/324  K 2.52 0    304 180765 34.3 2.52  8.74  66.249.64.34  http/1.1 team.cloudware.ng:443      GET /?l=1427436412 HTTP/1.1
   15-0 27734 0/28/343  _ 0.65 0    297 191718 0.0  0.75  9.41  66.249.64.69  http/1.1 team.cloudware.ng:443      GET /?l=4193734921 HTTP/1.1
   16-0 25548 0/57/310  _ 1.43 0    261 179028 0.0  1.57  8.56  66.249.64.67  http/1.1 team.cloudware.ng:443      GET /?l=1324424539 HTTP/1.1
   17-0 28865 1/5/281   K 0.05 0    756 163660 25.7 0.10  7.80  92.71.124.73  http/1.1 health.oyostate.gov.ng:443 GET /oyo-govt-reaffirms-commitment-to-quality-eye-care-as-state
   18-0 27753 0/27/308  _ 0.74 0    305 176929 0.0  0.80  8.99  66.249.64.227 http/1.1 team.cloudware.ng:443      GET /?l=996569981 HTTP/1.1
   19-0 27754 1/39/317  K 1.08 4    260 184448 35.8 1.16  8.71  66.249.70.33  http/1.1 team.cloudware.ng:443      GET /?l=763021183 HTTP/1.1
   20-0 21876 0/131/315 W 3.39 0    0   175146 0.0  3.61  8.52  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   21-0 21877 0/137/299 _ 3.68 0    265 162783 0.0  3.84  8.13  66.249.70.174 http/1.1 team.cloudware.ng:443      GET /?l=614783889 HTTP/1.1
   22-0 29188 1/1/117   K 0.00 2    275 66125  35.3 0.03  2.92  66.249.64.167 http/1.1 team.cloudware.ng:443      GET /?l=2851636251 HTTP/1.1
   23-0 29212 1/1/151   K 0.00 1    286 87470  34.1 0.03  4.28  66.249.64.234 http/1.1 team.cloudware.ng:443      GET /?l=1082860854 HTTP/1.1
   24-0 26773 0/39/202  _ 1.29 0    344 108610 0.0  1.14  5.19  66.249.70.106 http/1.1 team.cloudware.ng:443      GET /?l=2548878758 HTTP/1.1
   25-0 29213 0/3/241   _ 0.01 0    12  125558 0.0  0.02  6.24  127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   26-0 29214 1/1/279   K 0.00 1    350 164563 35.3 0.03  8.11  66.249.64.65  http/1.1 team.cloudware.ng:443      GET /?l=3728048250 HTTP/1.1
   27-0 29215 1/1/122   K 0.00 1    279 70850  35.5 0.03  3.57  66.249.70.1   http/1.1 team.cloudware.ng:443      GET /?l=3755846187 HTTP/1.1
   28-0 -     0/0/80    . 0.00 582  0   42487  0.0  0.00  2.06  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/180   . 0.00 343  0   102236 0.0  0.00  4.80  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/62    . 0.00 503  4   30288  0.0  0.00  1.49  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/146   . 0.00 560  0   83368  0.0  0.00  3.87  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/7     . 0.00 1538 0   3843   0.0  0.00  0.20  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/62    . 0.00 1312 0   141616 0.0  0.00  1.55  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/26    . 0.00 1505 0   13216  0.0  0.00  0.65  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/10    . 0.00 1516 0   5002   0.0  0.00  0.27  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/6     . 0.00 1542 0   3632   0.0  0.00  0.17  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/7     . 0.00 1534 0   2245   0.0  0.00  0.12  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/98    . 0.00 1245 0   59621  0.0  0.00  2.76  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/19    . 0.00 1504 0   12310  0.0  0.00  0.56  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/89    . 0.00 1237 0   52449  0.0  0.00  2.47  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/7     . 0.00 1543 0   7720   0.0  0.00  0.08  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/86    . 0.00 1252 0   48514  0.0  0.00  2.36  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/226   . 0.00 732  0   133362 0.0  0.00  6.42  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1232
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 3 seconds, (range: 0...14)
   index usage: 21%, cache usage: 29%
   total entries stored since starting: 7234
   total entries replaced since starting: 0
   total entries expired since starting: 6002
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 5 miss
   total removes since starting: 0 hit, 16 miss
Youez - 2016 - github.com/yon3zu
LinuXploit