403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.03.24.txt
 ## swap threshold exceeded
## server overview
2025-11-20.03.24 load[0] mem[60/66] mysql[1/25] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1365         150          59         847         768
Swap:          1999        1429         570
 03:24:02 up  2:29,  0 users,  load average: 0.55, 0.65, 0.78
## system overview
top - 03:24:02 up  2:29,  0 users,  load average: 0.55, 0.65, 0.78
Tasks: 201 total,   6 running, 194 sleeping,   0 stopped,   1 zombie
%Cpu(s): 76.5 us, 23.5 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   156236 free,  1393860 used,   870204 buff/cache
KiB Swap:  2047996 total,   583932 free,  1464064 used.   791476 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 15504 healtho+  20   0  465248  71100   4240 R  82.4  2.9   0:04.10 php-fpm: +
  1752 mysql     20   0 1467384 303924   3668 S  52.9 12.6   3:20.45 /usr/sbin+
 15758 nigeria   20   0  404052  16136  10376 S  17.6  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44256   3348   1520 S  11.8  0.1   0:12.46 /usr/lib/+
  3925 root      20   0       0      0      0 S   5.9  0.0   0:00.04 [kworker/+
 15770 pactpay   20   0  480124  17316  11584 R   5.9  0.7   0:00.02 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.98 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.30 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:10.89 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.29 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.00 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:11.69 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.17 [kauditd]
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:01.00 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:01.20 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.76 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40244   5612   5288 S   0.0  0.2   0:04.89 /usr/lib/+
   381 root      20   0   45352    268     96 S   0.0  0.0   0:00.34 /usr/lib/+
   410 root      16  -4   55532    504    372 S   0.0  0.0   0:00.78 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   476 polkitd   20   0  612240    852    488 S   0.0  0.0   0:01.30 /usr/lib/+
   477 dbus      20   0   58724   1344    624 S   0.0  0.1   0:04.99 /usr/bin/+
   486 rpc       20   0   69256    148     44 S   0.0  0.0   0:00.01 /sbin/rpc+
   495 root      20   0   24688   1168    812 R   0.0  0.0   0:02.19 /usr/lib/+
   499 root      20   0   52852    336    240 S   0.0  0.0   0:00.00 /usr/sbin+
   503 root      20   0  152780    132     88 S   0.0  0.0   0:00.00 /usr/sbin+
   505 nscd      20   0  994492   1392    684 S   0.0  0.1   0:06.80 /usr/sbin+
   506 root      20   0  224144   6368    796 S   0.0  0.3   0:00.16 queueproc+
   508 root      20   0   21540    408    296 S   0.0  0.0   0:00.20 /usr/sbin+
   515 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   547 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124480    448    312 S   0.0  0.0   0:00.25 /usr/sbin+
   558 root      20   0   24208     72     48 S   0.0  0.0   0:00.00 /usr/sbin+
   568 root      20   0  114704     36     36 S   0.0  0.0   0:00.03 /bin/bash
   572 root      20   0  108296     52     48 S   0.0  0.0   0:00.00 /sbin/age+
   609 mailnull  20   0   89116   3936    860 S   0.0  0.2   0:00.25 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:03.36 [loop0]
   683 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   684 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   920 root      20   0  153404    308    224 S   0.0  0.0   0:00.18 pure-ftpd+
   921 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   923 root      20   0   51508    504    340 S   0.0  0.0   0:00.14 /usr/sbin+
   925 systuser  20   0  113676   1848      0 S   0.0  0.1   0:00.00 /usr/loca+
   926 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.19 /usr/bin/+
   927 telegraf  20   0 5654048  38784   5532 S   0.0  1.6   0:05.09 /usr/loca+
   928 systuser  20   0  114016  14796   2492 S   0.0  0.6   0:02.19 /usr/loca+
   929 root      20   0 1349832   9352     24 S   0.0  0.4   0:30.53 /usr/bin/+
   930 root      20   0 1277312  11308     52 S   0.0  0.5   0:23.26 /usr/bin/+
   931 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   933 root      20   0  240976   6308   4628 S   0.0  0.3   0:02.44 /usr/sbin+
   935 root      20   0  439788  11508  11292 S   0.0  0.5   0:00.38 php-fpm: +
   936 named     20   0  989260  34392   2188 S   0.0  1.4   0:06.86 /usr/sbin+
   938 root      20   0  261028   6552   1768 S   0.0  0.3   0:01.37 cpsrvd (S+
   942 root      20   0  400740   2888    652 S   0.0  0.1   0:02.30 php-fpm: +
   947 root      20   0 1763312 187636    696 S   0.0  7.8   0:14.15 /usr/loca+
   964 root      20   0  111304    412    316 S   0.0  0.0   0:01.06 /usr/sbin+
   972 root      20   0  389508    736    528 S   0.0  0.0   0:00.32 php-fpm: +
   979 cpanelc+  20   0   10612   3528   2312 S   0.0  0.1   0:07.48 /usr/loca+
   982 root      20   0  396248    676    496 S   0.0  0.0   0:00.29 php-fpm: +
   984 root      20   0  388892    684    472 S   0.0  0.0   0:00.29 php-fpm: +
   985 root      20   0  445028   3236   3124 S   0.0  0.1   0:00.41 sw-engine+
   986 systuser  20   0  113272   1820      0 S   0.0  0.1   0:00.00 /usr/loca+
   987 root      20   0  572372    864    288 S   0.0  0.0   0:00.87 /usr/bin/+
  1116 dovenull  20   0   46912   2572   1940 S   0.0  0.1   0:00.12 dovecot/p+
  1117 dovenull  20   0   47592   3160   1940 S   0.0  0.1   0:00.11 dovecot/i+
  1118 dovecot   20   0   10320    460    340 S   0.0  0.0   0:00.03 dovecot/a+
  1119 root      20   0   10452    624    448 S   0.0  0.0   0:00.09 dovecot/l+
  1120 dovenull  20   0   46912   2064   1420 S   0.0  0.1   0:00.16 dovecot/p+
  1121 dovenull  20   0   47336   3180   2084 S   0.0  0.1   0:00.06 dovecot/i+
  1128 root      20   0   24564   2312    348 S   0.0  0.1   0:00.08 dovecot/c+
  1133 systuser  20   0  157708   2860    808 S   0.0  0.1   0:00.05 SonarPush+
  1137 dovecot   20   0   13568    604    380 S   0.0  0.0   0:00.02 dovecot/s+
  1172 root      20   0  248320 119680   2788 S   0.0  4.9   0:03.89 /usr/loca+
  1190 dovecot   20   0   41276   1660   1036 S   0.0  0.1   0:00.25 dovecot/a+
  1258 wp-tool+  20   0  412368  32420   1628 S   0.0  1.3   0:03.00 /usr/bin/+
  1259 wp-tool+  20   0  387528  13076   1448 S   0.0  0.5   0:00.17 /usr/bin/+
  1294 root      20   0  167452   3208   1836 S   0.0  0.1   0:00.22 dnsadmin +
  1298 root      20   0  262224  24368   6452 S   0.0  1.0   0:00.91 cpdavd - +
  1300 root      20   0  209644  11476   1504 S   0.0  0.5   0:02.13 tailwatchd
  1692 root      20   0  299272    904    524 S   0.0  0.0   0:00.23 php-fpm: +
  1709 root      38  18  130416   1432    704 S   0.0  0.1   0:00.01 cpanellog+
  1943 root      20   0  266992   8052    768 S   0.0  0.3   0:00.89 /usr/sbin+
  1945 root      20   0   12852    428    292 S   0.0  0.0   0:01.24 /usr/loca+
  1946 root      20   0   12732    300    228 S   0.0  0.0   0:01.07 /usr/loca+
  1947 root      20   0   12892    356    232 S   0.0  0.0   0:01.14 /usr/loca+
  1952 root      20   0   53268     92     92 S   0.0  0.0   0:00.04 /usr/loca+
  2017 root      20   0  182364  11140   1188 S   0.0  0.5   0:08.55 lfd - sle+
  2654 nobody    20   0  277764  20520   4748 S   0.0  0.8   0:01.62 /usr/sbin+
  3065 nobody    20   0  277904  20480   4564 S   0.0  0.8   0:01.56 /usr/sbin+
  3155 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  5518 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6770 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  6775 oysipao+  20   0    3152    508     16 S   0.0  0.0   0:00.16 [kworker]
  6787 nobody    20   0  277760  19284   4144 S   0.0  0.8   0:00.30 /usr/sbin+
  7285 root      20   0  265396 128580   1716 S   0.0  5.3   0:01.36 spamd chi+
  7286 root      20   0  248320 117500    644 S   0.0  4.9   0:00.00 spamd chi+
  7824 nobody    20   0  277568  19712   4492 S   0.0  0.8   0:01.00 /usr/sbin+
  8738 root      30  10  113284   1484   1272 S   0.0  0.1   0:00.00 /bin/bash+
  8745 root      30  10  132964   4364    828 S   0.0  0.2   0:00.00 ConfigSer+
  8757 root      30  10  108056    356    284 S   0.0  0.0   0:00.00 sleep 152+
  8819 root      20   0       0      0      0 R   0.0  0.0   0:00.02 [kworker/+
  9046 root      30  10  113284   1496   1256 S   0.0  0.1   0:00.00 bash /etc+
  9047 root      30  10  113644    980    832 S   0.0  0.0   0:00.00 awk -v pr+
  9100 root      30  10  108056    356    284 S   0.0  0.0   0:00.00 sleep 697
  9116 nobody    20   0  277760  19820   4352 S   0.0  0.8   0:00.93 /usr/sbin+
 10060 nobody    20   0  277764  19532   4296 S   0.0  0.8   0:00.53 /usr/sbin+
 10101 nobody    20   0  277512  19928   4568 S   0.0  0.8   0:00.67 /usr/sbin+
 10116 nobody    20   0  277760  19544   4332 S   0.0  0.8   0:00.86 /usr/sbin+
 11241 nobody    20   0  277500  19300   4148 S   0.0  0.8   0:00.60 /usr/sbin+
 11958 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12136 nobody    20   0  277764  19460   4244 S   0.0  0.8   0:00.39 /usr/sbin+
 12969 nobody    20   0  277892  19320   3976 S   0.0  0.8   0:00.35 /usr/sbin+
 12978 nobody    20   0  277504  19072   4072 S   0.0  0.8   0:00.24 /usr/sbin+
 12980 nobody    20   0  277500  18900   4008 S   0.0  0.8   0:00.25 /usr/sbin+
 12994 nobody    20   0  277760  19052   3964 S   0.0  0.8   0:00.37 /usr/sbin+
 12995 nobody    20   0  277764  18968   3888 S   0.0  0.8   0:00.32 /usr/sbin+
 13483 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 13832 nobody    20   0  277764  19324   4044 S   0.0  0.8   0:00.24 /usr/sbin+
 13838 nobody    20   0  277496  19108   4028 S   0.0  0.8   0:00.24 /usr/sbin+
 14154 nobody    20   0  277492  18808   3892 S   0.0  0.8   0:00.26 /usr/sbin+
 15102 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 15209 root      20   0  111304   4436   3404 S   0.0  0.2   0:00.00 sshd: [ac+
 15210 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 15344 nobody    20   0  277892  18688   3656 S   0.0  0.8   0:00.08 /usr/sbin+
 15423 nobody    20   0  277904  18704   3672 S   0.0  0.8   0:00.05 /usr/sbin+
 15630 nigeria   20   0  400460   5176   2188 S   0.0  0.2   0:00.00 php-fpm: +
 15673 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 15680 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 15685 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15687 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15688 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15690 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15691 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15692 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15693 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15695 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15697 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15699 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15701 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 15702 root      20   0  111304   4436   3400 S   0.0  0.2   0:00.00 sshd: [ac+
 15703 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 15705 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 15714 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 15731 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 15732 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 15734 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 15735 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 15736 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 15740 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 15741 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 15742 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 15744 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 15753 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.00 /opt/cpan+
 15756 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 15768 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 15775 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 15783 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 15785 cloudsms  20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
 90007 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 93655 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 98479 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 99520 root      20   0  123576    668    436 S   0.0  0.0   0:00.00 /usr/sbin+
100208 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
101933 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:54   0:10  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:54   0:11  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        251  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        252  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        253  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   00:54   0:01  \_ [kworker/0:1H]
root        267  0.0  0.0      0     0 ?        S<   00:54   0:01  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        669  0.0  0.0      0     0 ?        S<   00:54   0:03  \_ [loop0]
root        683  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        684  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root      90007  0.0  0.0      0     0 ?        S    02:50   0:00  \_ [kworker/0:5]
root      93655  0.0  0.0      0     0 ?        S    02:54   0:00  \_ [kworker/1:0]
root      98479  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/u200:0]
root     100208  0.0  0.0      0     0 ?        S    03:02   0:00  \_ [kworker/0:3]
root     101933  0.0  0.0      0     0 ?        S    03:04   0:00  \_ [kworker/1:3]
root       3155  0.0  0.0      0     0 ?        S    03:08   0:00  \_ [kworker/1:5]
root       3925  0.0  0.0      0     0 ?        S    03:09   0:00  \_ [kworker/u200:1]
root       5518  0.0  0.0      0     0 ?        S    03:11   0:00  \_ [kworker/0:0]
root       8819  0.0  0.0      0     0 ?        S    03:15   0:00  \_ [kworker/1:2]
root      11958  0.0  0.0      0     0 ?        S    03:19   0:00  \_ [kworker/0:1]
root      13483  0.0  0.0      0     0 ?        S    03:21   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44256  3348 ?        Ss   00:54   0:12 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.2  40244  5612 ?        Ss   00:54   0:04 /usr/lib/systemd/systemd-journald
root        381  0.0  0.0  45352   268 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   504 ?        S<sl 00:54   0:00 /sbin/auditd
polkitd     476  0.0  0.0 612240   852 ?        Ssl  00:54   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        477  0.0  0.0  58724  1344 ?        Ss   00:54   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         486  0.0  0.0  69256   148 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        495  0.0  0.0  24688  1168 ?        Ss   00:54   0:02 /usr/lib/systemd/systemd-logind
root        499  0.0  0.0  52852   336 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        503  0.0  0.0 152780   132 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        505  0.0  0.0 994492  1392 ?        Ssl  00:54   0:06 /usr/sbin/nscd
root        506  0.0  0.2 224144  6368 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        508  0.0  0.0  21540   408 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        515  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        547  0.0  0.0   4388    36 ?        Ss   00:54   0:00 /usr/sbin/acpid
root        555  0.0  0.0 124480   448 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root      15685  0.0  0.0 183048  2156 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      15701  0.0  0.0 113284  1208 ?        Ss   03:24   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      15703  0.0  0.0 108052   356 ?        S    03:24   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      15705  0.0  0.0 113288  1520 ?        S    03:24   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      15786  0.0  0.0 153840  2092 ?        R    03:24   0:00  |               \_ ps auxf
root      15687  0.0  0.0 183048  2156 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      15734  0.0  0.0  20164   804 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      15688  0.0  0.0 183048  2156 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      15735  0.0  0.0  20164   808 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      15690  0.0  0.0 183048  2152 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      15736  0.0  0.0  20164   808 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      15691  0.0  0.0 183048  2152 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      15731  0.0  0.0  20164   984 ?        Ss   03:24   0:00  |   \_ jailshell (cloudsms) [15783] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  15783  0.0  0.0  20164   260 ?        S    03:24   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  15785  0.0  0.0 113284  1212 ?        S    03:24   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  15787  0.0  0.4 399656 10968 ?        R    03:24   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      15692  0.0  0.0 183048  2152 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      15732  0.0  0.0  20164   804 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      15693  0.0  0.0 183048  2148 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      15740  0.0  0.0  20164   808 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      15695  0.0  0.0 183048  2148 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      15742  0.0  0.0  20164   808 ?        Ss   03:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      15697  0.0  0.0 183048  2148 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      15744  0.0  0.0  20164   964 ?        Ss   03:24   0:00  |   \_ jailshell (pactpay) [15768] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   15768  0.0  0.0  20164   260 ?        S    03:24   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   15770  0.0  0.7 480124 17316 ?        S    03:24   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      15699  0.0  0.0 183048  2148 ?        S    03:24   0:00  \_ /usr/sbin/CROND -n
root      15741  0.0  0.0  20164   960 ?        Ss   03:24   0:00      \_ jailshell (nigeria) [15756] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   15756  0.0  0.0  20164   256 ?        S    03:24   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   15758  0.0  0.6 404052 16136 ?        S    03:24   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0  24208    72 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        568  0.0  0.0 114704    36 ttyS0    Ss+  00:54   0:00 /bin/bash
root        572  0.0  0.0 108296    52 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
mailnull    609  0.0  0.1  89116  3936 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        920  0.0  0.0 153404   308 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    921  0.0  0.0  10388    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        923  0.0  0.0  51508   504 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1116  0.0  0.1  46912  2572 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1117  0.0  0.1  47592  3160 ?        S    00:54   0:00  \_ dovecot/imap-login
dovecot    1118  0.0  0.0  10320   460 ?        S    00:54   0:00  \_ dovecot/anvil
root       1119  0.0  0.0  10452   624 ?        S    00:54   0:00  \_ dovecot/log
dovenull   1120  0.0  0.0  46912  2064 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1121  0.0  0.1  47336  3180 ?        S    00:54   0:00  \_ dovecot/imap-login
root       1128  0.0  0.0  24564  2312 ?        S    00:54   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   604 ?        S    00:54   0:00  \_ dovecot/stats
dovecot    1190  0.0  0.0  41276  1660 ?        S    00:54   0:00  \_ dovecot/auth
root      15102  0.0  0.1  60820  4512 ?        S    03:23   0:00  \_ dovecot/lmtp
systuser    925  0.0  0.0 113676  1848 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    926  0.0  0.0 342400     0 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
telegraf    927  0.0  1.6 5654048 38784 ?       SLsl 00:54   0:05 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    928  0.0  0.6 114016 14796 ?        Ssl  00:54   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        929  0.3  0.3 1349832 9352 ?        Ssl  00:54   0:30 /usr/bin/cspdaemon
root        930  0.2  0.4 1277312 11308 ?       Ssl  00:54   0:23 /usr/bin/checkstatus
systuser    931  0.0  0.0  12660    60 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        933  0.0  0.2 240976  6308 ?        Ssl  00:54   0:02 /usr/sbin/rsyslogd -n
root        935  0.0  0.4 439788 11508 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       936  0.0  1.4 989260 34392 ?        Ssl  00:54   0:06 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        938  0.0  0.2 261028  6552 ?        Ss   00:54   0:01 cpsrvd (SSL) - waiting for connections                   
root      15673  0.0  0.0      0     0 ?        Z    03:23   0:00  \_ [cpaneld - servi] <defunct>
root        942  0.0  0.1 400740  2888 ?        Ss   00:54   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  15504 20.5  2.9 465248 71100 ?        R    03:23   0:04  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   15630  0.0  0.2 400460  5176 ?        S    03:23   0:00  \_ php-fpm: pool nigeriadecide_org
root        947  0.1  7.7 1763312 187636 ?      Ssl  00:54   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        964  0.0  0.0 111304   412 ?        Ss   00:54   0:01 /usr/sbin/sshd -D
root      15209  0.0  0.1 111304  4436 ?        Ss   03:23   0:00  \_ sshd: [accepted]
sshd      15210  0.0  0.1 115644  2628 ?        S    03:23   0:00  |   \_ sshd: [net]
root      15702  0.0  0.1 111304  4436 ?        Ss   03:24   0:00  \_ sshd: [accepted]
sshd      15714  0.0  0.1 115644  2628 ?        S    03:24   0:00      \_ sshd: [net]
root        972  0.0  0.0 389508   736 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
cpanelc+    979  0.0  0.1  10612  3528 ?        Ss   00:54   0:07 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 396248   676 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        984  0.0  0.0 388892   684 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.1 445028  3236 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  15680  0.0  0.0 445028   320 ?        S    03:24   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    986  0.0  0.0 113272  1820 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        987  0.0  0.0 572372   864 ?        Ssl  00:54   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1133  0.0  0.1 157708  2860 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  4.9 248320 119680 ?       Ss   00:54   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7285  0.0  5.3 265396 128580 ?       S    01:00   0:01  \_ spamd child
root       7286  0.0  4.8 248320 117500 ?       S    01:00   0:00  \_ spamd child
wp-tool+   1258  0.0  1.3 412368 32420 ?        Ss   00:54   0:03 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1259  0.0  0.5 387528 13076 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1294  0.0  0.1 167452  3208 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1298  0.0  1.0 262224 24368 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1300  0.0  0.4 209644 11476 ?        Ss   00:54   0:02 tailwatchd
root       1692  0.0  0.0 299272   904 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1709  0.0  0.0 130416  1432 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1752  2.2 12.5 1467384 303924 ?      Sl   00:54   3:20 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1943  0.0  0.3 266992  8052 ?        Ss   00:54   0:00 /usr/sbin/httpd -k start
root       1945  0.0  0.0  12852   428 ?        S    00:54   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1946  0.0  0.0  12732   300 ?        S    00:54   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1947  0.0  0.0  12892   356 ?        S    00:54   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1952  0.0  0.0  53268    92 ?        S    00:54   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     2654  0.1  0.8 277764 20520 ?        S    03:07   0:01  \_ /usr/sbin/httpd -k start
nobody     3065  0.1  0.8 277904 20480 ?        S    03:07   0:01  \_ /usr/sbin/httpd -k start
nobody     6787  0.0  0.7 277760 19284 ?        S    03:12   0:00  \_ /usr/sbin/httpd -k start
nobody     7824  0.1  0.8 277568 19712 ?        S    03:13   0:01  \_ /usr/sbin/httpd -k start
nobody     9116  0.1  0.8 277760 19820 ?        S    03:15   0:00  \_ /usr/sbin/httpd -k start
nobody    10060  0.1  0.8 277764 19532 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
nobody    10101  0.1  0.8 277512 19928 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
nobody    10116  0.1  0.8 277760 19544 ?        S    03:16   0:00  \_ /usr/sbin/httpd -k start
nobody    11241  0.1  0.7 277500 19300 ?        S    03:18   0:00  \_ /usr/sbin/httpd -k start
nobody    12136  0.1  0.8 277764 19460 ?        S    03:19   0:00  \_ /usr/sbin/httpd -k start
nobody    12969  0.1  0.7 277892 19320 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    12978  0.1  0.7 277504 19072 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    12980  0.1  0.7 277500 18900 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    12994  0.1  0.7 277760 19052 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    12995  0.1  0.7 277764 18968 ?        S    03:20   0:00  \_ /usr/sbin/httpd -k start
nobody    13832  0.1  0.7 277764 19324 ?        S    03:21   0:00  \_ /usr/sbin/httpd -k start
cloudw    15753  0.0  0.6 353712 15976 ?        S    03:24   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    13838  0.1  0.7 277496 19108 ?        S    03:21   0:00  \_ /usr/sbin/httpd -k start
nobody    14154  0.2  0.7 277492 18808 ?        S    03:21   0:00  \_ /usr/sbin/httpd -k start
nobody    15344  0.2  0.7 277892 18688 ?        S    03:23   0:00  \_ /usr/sbin/httpd -k start
nobody    15423  0.1  0.7 277904 18704 ?        S    03:23   0:00  \_ /usr/sbin/httpd -k start
root       2017  0.0  0.4 182364 11140 ?        Ss   00:54   0:08 lfd - sleeping
oysipao+   6770  0.0  0.0   3148   416 ?        Ss   01:00   0:00 [kworker]
oysipao+   6775  0.0  0.0   3152   508 ?        S    01:00   0:00  \_ [kworker]
root      99520  0.0  0.0 123576   668 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
root       8738  0.0  0.0 113284  1484 ?        SN   03:15   0:00  \_ /bin/bash /bin/run-parts /etc/cron.daily
root       9046  0.0  0.0 113284  1496 ?        SN   03:15   0:00      \_ bash /etc/cron.daily/maldet
root       9100  0.0  0.0 108056   356 ?        SN   03:15   0:00      |   \_ sleep 697
root       9047  0.0  0.0 113644   980 ?        SN   03:15   0:00      \_ awk -v progname=/etc/cron.daily/maldet progname { ????   print progname ":\n" ????   progname=""; ???       } ???       { print; }
root       8745  0.0  0.1 132964  4364 ?        SN   03:15   0:00 ConfigServer Version Check
root       8757  0.0  0.0 108056   356 ?        SN   03:15   0:00  \_ sleep 15284
## mysql stats
Uptime: 8985  Threads: 4  Questions: 1511506  Slow queries: 0  Opens: 5435  Flush tables: 1  Open tables: 2000  Queries per second avg: 168.225
*************************** 1. row ***************************
     Id: 23233
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 23237
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 23238
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-20' LIMIT 1
*************************** 4. row ***************************
     Id: 23241
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 5. row ***************************
     Id: 23242
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 6. row ***************************
     Id: 23243
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.157.111 TIME_WAIT
      1 15.235.96.251 TIME_WAIT
      1 170.106.73.216 TIME_WAIT
      1 ::1 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 34.200.249.161 TIME_WAIT
     36 157.15.40.56 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 03:24:02 WAT
   Restart Time: Thursday, 20-Nov-2025 00:54:23 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 2 hours 29 minutes 38 seconds
   Server load: 0.55 0.65 0.78
   Total accesses: 55548 - Total Traffic: 1.2 GB - Total Duration: 33224257
   CPU Usage: u8 s3.76 cu595.73 cs445.28 - 11.7% CPU load
   6.19 requests/sec - 137.6 kB/second - 22.2 kB/request - 598.118 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

CWKRKKK__..WKK__..K....W___.R...................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  11241 2/96/2631  C 2.46 6    626 1410847 22.8  2.60  51.00 52.167.144.206 http/1.1 cloudware.ng:443           GET /it-solutions-for-all-industries/ HTTP/1.1
   1-0  6787  0/57/2252  W 1.23 454  0   1415133 0.0   1.39  48.42 105.113.5.186  http/1.1 oysipa.oyostate.gov.ng:443 GET /download_documents/OYO-STATE-PPP-POLICY-AND-FRAMEWORK.pdf
   2-0  15344 7/13/2473  K 0.30 1    343 1420039 221.6 0.35  57.00 192.178.4.99   http/1.1 team.cloudware.ng:443      GET /?l=4174417181 HTTP/1.1
   3-0  2654  0/278/2763 R 6.70 22   349 1530768 0.0   7.18  61.26 34.200.249.161 http/1.1
   4-0  14154 3/42/2406  K 1.07 3    338 1554481 99.5  1.08  48.13 192.178.4.96   http/1.1 team.cloudware.ng:443      GET /?l=1377551677 HTTP/1.1
   5-0  3065  2/297/2423 K 6.79 2    340 1667974 65.3  6.90  67.61 192.178.4.104  http/1.1 team.cloudware.ng:443      GET /?l=4294504022 HTTP/1.1
   6-0  13832 5/45/2382  K 0.93 0    409 1354606 154.4 1.05  52.24 192.178.4.100  http/1.1 team.cloudware.ng:443      GET /?l=2996009380 HTTP/1.1
   7-0  13838 0/46/2203  _ 0.99 0    0   1428832 0.0   1.02  46.42 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   8-0  12136 0/70/2237  _ 1.62 0    387 1268870 0.0   2.31  49.01 192.178.4.105  http/1.1 team.cloudware.ng:443      GET /?l=1716133356 HTTP/1.1
   9-0  -     0/0/2278   . 0.00 9    0   1505092 0.0   0.00  61.06 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-0 -     0/0/2076   . 0.00 11   0   1224617 0.0   0.00  46.36 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   11-0 7824  0/176/2263 W 4.08 0    0   1516988 0.0   4.83  51.75 157.15.40.56   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   12-0 9116  3/163/2202 K 3.84 3    341 1291299 94.8  4.06  52.08 192.178.4.105  http/1.1 team.cloudware.ng:443      GET /?l=1060389522 HTTP/1.1
   13-0 12969 5/63/1824  K 1.37 0    337 990734  154.5 1.53  37.29 192.178.4.102  http/1.1 team.cloudware.ng:443      GET /?l=303824381 HTTP/1.1
   14-0 15423 0/8/1583   _ 0.17 1    302 906507  0.0   0.20  32.04 192.178.4.96   http/1.1 team.cloudware.ng:443      GET /?l=1388318450 HTTP/1.1
   15-0 12978 0/47/1715  _ 0.92 1    338 1061745 0.0   0.96  35.19 157.15.40.56   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   16-0 -     0/0/1212   . 0.00 127  0   710596  0.0   0.00  26.97 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 -     0/0/1623   . 0.00 215  0   885899  0.0   0.00  33.65 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 12980 3/54/1513  K 1.12 0    342 798668  95.7  1.01  30.16 192.178.4.103  http/1.1 team.cloudware.ng:443      GET /?l=2024910747 HTTP/1.1
   19-0 -     0/0/1318   . 0.00 214  0   739946  0.0   0.00  25.34 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/881    . 0.00 197  0   488664  0.0   0.00  19.39 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/1080   . 0.00 218  0   625690  0.0   0.00  22.69 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/1335   . 0.00 200  0   739386  0.0   0.00  29.31 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 10060 0/107/1266 W 2.23 0    0   769892  0.0   2.07  30.43 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   24-0 12994 0/67/1203  _ 1.48 0    344 602818  0.0   1.59  24.57 192.178.4.101  http/1.1 team.cloudware.ng:443      GET /?l=1092794752 HTTP/1.1
   25-0 10101 0/125/950  _ 2.66 1    266 572294  0.0   2.87  17.94 192.178.4.97   http/1.1 team.cloudware.ng:443      GET /?l=2056985002 HTTP/1.1
   26-0 10116 0/147/1291 _ 4.94 0    396 819737  0.0   3.72  27.57 192.178.4.98   http/1.1 team.cloudware.ng:443      GET /?l=2349550206 HTTP/1.1
   27-0 -     0/0/159    . 0.00 216  0   115717  0.0   0.00  2.72  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 12995 0/57/795   R 1.36 36   7   454139  0.0   1.48  15.31 102.89.76.196  http/1.1
   29-0 -     0/0/941    . 0.00 210  0   595075  0.0   0.00  15.15 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/526    . 0.00 198  0   329914  0.0   0.00  10.70 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/515    . 0.00 201  0   553534  0.0   0.00  11.15 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/1143   . 0.00 220  0   680068  0.0   0.00  21.12 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/845    . 0.00 2118 0   471702  0.0   0.00  18.85 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/260    . 0.00 2119 0   148688  0.0   0.00  4.15  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/157    . 0.00 5886 0   115547  0.0   0.00  4.68  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/466    . 0.00 5793 0   274598  0.0   0.00  9.11  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/22     . 0.00 5885 0   10578   0.0   0.00  0.40  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/23     . 0.00 5819 0   11684   0.0   0.00  0.51  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/25     . 0.00 5820 0   15119   0.0   0.00  0.63  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/4      . 0.00 6109 0   1340    0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/115    . 0.00 5603 0   65290   0.0   0.00  3.06  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/2      . 0.00 6117 0   7       0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/7      . 0.00 6093 0   2574    0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/4      . 0.00 6107 0   1141    0.0   0.00  0.06  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/2      . 0.00 6116 0   60      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/4      . 0.00 6108 0   244     0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/147    . 0.00 5563 0   75011   0.0   0.00  3.67  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/3      . 0.00 6110 0   77      0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 914
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...43)
   index usage: 16%, cache usage: 21%
   total entries stored since starting: 29069
   total entries replaced since starting: 0
   total entries expired since starting: 28136
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 113 miss
   total removes since starting: 21 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit