403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.11.48.txt
 ## swap threshold exceeded
## server overview
2025-11-20.11.48 load[0] mem[63/53] mysql[1/9] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1433         189          38         739         731
Swap:          1999        1472         527
 11:48:01 up  2:07,  0 users,  load average: 0.63, 0.72, 0.60
## system overview
top - 11:48:01 up  2:07,  0 users,  load average: 0.63, 0.72, 0.60
Tasks: 200 total,   6 running, 193 sleeping,   0 stopped,   1 zombie
%Cpu(s): 53.1 us, 43.8 sy,  0.0 ni,  3.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   169024 free,  1493328 used,   757948 buff/cache
KiB Swap:  2047996 total,   540412 free,  1507584 used.   724148 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1793 mysql     20   0 1463376 222276   3304 S  25.0  9.2   1:43.56 /usr/sbin+
     1 root      20   0   44268   3316   1476 S  12.5  0.1   0:11.77 /usr/lib/+
  1211 cloudw    20   0  353712  15972  10492 S  12.5  0.7   0:00.02 /opt/cpan+
  1286 nigeria   20   0  404052  16140  10384 S  12.5  0.7   0:00.02 /opt/cpan+
   486 polkitd   20   0  612240   1124    776 S   6.2  0.0   0:01.15 /usr/lib/+
  1295 cloudsms  20   0  404052  15616  10164 S   6.2  0.6   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.43 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.38 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:07.54 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.36 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.48 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:16.69 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.45 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:01.65 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.46 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   3360   3144 S   0.0  0.1   0:04.59 /usr/lib/+
   387 root      20   0   45352    252    248 S   0.0  0.0   0:00.38 /usr/lib/+
   410 root      16  -4   55532    304    176 R   0.0  0.0   0:00.75 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0   24712   1156    836 D   0.0  0.0   0:01.86 /usr/lib/+
   471 root      20   0   52852    324    224 S   0.0  0.0   0:00.01 /usr/sbin+
   474 dbus      20   0   58736   1356    680 R   0.0  0.1   0:04.21 /usr/bin/+
   476 rpc       20   0   69256     72     12 S   0.0  0.0   0:00.01 /sbin/rpc+
   487 root      20   0   21540    408    320 S   0.0  0.0   0:00.17 /usr/sbin+
   492 root      20   0  152780    240    196 S   0.0  0.0   0:00.00 /usr/sbin+
   493 root      20   0  224280   5452   1040 S   0.0  0.2   0:00.25 queueproc+
   507 nscd      20   0  928956   1388    716 S   0.0  0.1   0:06.32 /usr/sbin+
   515 root      20   0  195208     68     68 S   0.0  0.0   0:00.00 /usr/sbin+
   516 root      20   0    4388    156    152 S   0.0  0.0   0:00.00 /usr/sbin+
   518 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
   543 root      20   0   24208    196    172 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0  124480    524    392 S   0.0  0.0   0:00.23 /usr/sbin+
   562 root      20   0  108296    180    176 S   0.0  0.0   0:00.00 /sbin/age+
   563 root      20   0  114704    180    180 S   0.0  0.0   0:00.02 /bin/bash
   613 mailnull  20   0   89120   1328    412 S   0.0  0.1   0:00.20 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   675 root       0 -20       0      0      0 S   0.0  0.0   0:02.49 [loop0]
   735 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   736 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   844 wp-tool+  20   0  445028    324    196 S   0.0  0.0   0:00.00 sw-engine+
   931 root      20   0  153404    396    316 S   0.0  0.0   0:00.15 pure-ftpd+
   932 root      20   0  572372   1052    480 S   0.0  0.0   0:00.75 /usr/bin/+
   933 systuser  20   0  112268     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   935 systuser  20   0  114016  15192   2516 S   0.0  0.6   0:02.12 /usr/loca+
   936 root      20   0 1277056   6144    164 S   0.0  0.3   0:21.12 /usr/bin/+
   937 root      20   0  445028   1384   1272 S   0.0  0.1   0:00.32 sw-engine+
   938 systuser  20   0   11796     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   942 root      20   0  111304    544    436 S   0.0  0.0   0:01.03 /usr/sbin+
   943 systuser  20   0   11348     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   944 root      20   0 1349832   8488    128 S   0.0  0.4   0:28.08 /usr/bin/+
   945 root      20   0   51508    612    432 S   0.0  0.0   0:00.12 /usr/sbin+
   946 telegraf  20   0 5654304  35796   5880 S   0.0  1.5   0:04.65 /usr/loca+
   947 memcach+  20   0  342400    232    232 S   0.0  0.0   0:00.16 /usr/bin/+
   948 root      20   0 1763312 528708    196 S   0.0 21.8   0:14.87 /usr/loca+
   949 root      20   0  389508    748    540 S   0.0  0.0   0:00.29 php-fpm: +
   950 root      20   0  261160   6228   1764 S   0.0  0.3   0:01.76 cpsrvd (S+
   953 root      20   0  388892    348    264 S   0.0  0.0   0:00.24 php-fpm: +
   958 root      20   0  240976   3220   2584 S   0.0  0.1   0:02.27 /usr/sbin+
   986 root      20   0  396248    656    472 S   0.0  0.0   0:00.25 php-fpm: +
   990 root      20   0  439788   1176   1084 S   0.0  0.0   0:00.35 php-fpm: +
   994 root      20   0  400740   3096    716 S   0.0  0.1   0:01.11 php-fpm: +
   996 named     20   0  785456  33660   1608 S   0.0  1.4   0:05.44 /usr/sbin+
  1013 cpanelc+  20   0   10100   3176   2412 R   0.0  0.1   0:06.11 /usr/loca+
  1093 dovenull  20   0   46912   2092   1516 S   0.0  0.1   0:00.13 dovecot/p+
  1094 dovenull  20   0   47888   2952   1744 S   0.0  0.1   0:00.14 dovecot/i+
  1095 dovecot   20   0   10320    292    176 S   0.0  0.0   0:00.03 dovecot/a+
  1096 root      20   0   10452    492    312 S   0.0  0.0   0:00.09 dovecot/l+
  1097 dovenull  20   0   46916   2320   1696 S   0.0  0.1   0:00.12 dovecot/p+
  1098 dovenull  20   0   47868   2804   1744 S   0.0  0.1   0:00.12 dovecot/i+
  1104 root      20   0   24396   2180    540 S   0.0  0.1   0:00.07 dovecot/c+
  1110 dovecot   20   0   13568    644    444 S   0.0  0.0   0:00.02 dovecot/s+
  1130 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  1145 systuser  20   0  157704   3072   1096 S   0.0  0.1   0:00.06 SonarPush+
  1170 dovecot   20   0   41192   1512   1044 S   0.0  0.1   0:00.33 dovecot/a+
  1175 wp-tool+  20   0  412368  28432   1440 S   0.0  1.2   0:02.63 /usr/bin/+
  1176 wp-tool+  20   0  387528   9320   1500 S   0.0  0.4   0:00.16 /usr/bin/+
  1193 root      20   0  162436   5836   4344 S   0.0  0.2   0:00.01 sshd: roo+
  1194 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
  1196 nobody    20   0  277188  16448   2740 S   0.0  0.7   0:00.00 /usr/sbin+
  1213 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  1214 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1215 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1216 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1217 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1218 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1219 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1220 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1222 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1223 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1224 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1225 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1227 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1228 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  1229 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  1230 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
  1231 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
  1234 root      20   0  167452   1320    776 S   0.0  0.1   0:00.16 dnsadmin +
  1235 root      20   0  262228  19276   1356 S   0.0  0.8   0:00.56 cpdavd - +
  1237 root      20   0  209308  19496   2136 S   0.0  0.8   0:01.16 tailwatchd
  1260 root      20   0  160240   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
  1261 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  1262 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  1263 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  1264 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  1265 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  1266 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  1269 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  1270 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  1271 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
  1272 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  1273 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  1274 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  1275 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  1282 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  1284 saboakin  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
  1285 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  1289 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  1291 pactpay   20   0  479860  16172  10576 S   0.0  0.7   0:00.00 /opt/cpan+
  1293 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
  1299 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
  1669 root      20   0  299272    604    440 S   0.0  0.0   0:00.21 php-fpm: +
  1701 root      38  18  130416   1392    728 S   0.0  0.1   0:00.02 cpanellog+
  1959 root      20   0  266992   7380    740 S   0.0  0.3   0:00.72 /usr/sbin+
  1962 root      20   0   12816    400    296 S   0.0  0.0   0:00.90 /usr/loca+
  1963 root      20   0   12732    368    292 S   0.0  0.0   0:00.77 /usr/loca+
  1964 root      20   0   12860    416    296 S   0.0  0.0   0:00.84 /usr/loca+
  1968 root      20   0   53340    216    216 S   0.0  0.0   0:00.05 /usr/loca+
  2014 root      20   0  181996   8988   1168 S   0.0  0.4   0:07.17 lfd - sle+
 18294 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 18303 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.12 [kworker]
 25497 root      20   0       0      0      0 S   0.0  0.0   0:00.30 [kworker/+
 41201 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 56404 root      20   0  248036 117544   1084 S   0.0  4.9   0:03.18 /usr/loca+
 64340 root      20   0  249300 118764   1080 S   0.0  4.9   0:00.25 spamd chi+
 64341 root      20   0  248036 116840    416 S   0.0  4.8   0:00.00 spamd chi+
 67652 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 80005 nobody    20   0  277564  20312   4708 S   0.0  0.8   0:02.65 /usr/sbin+
 81222 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 83918 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 90334 nobody    20   0  277524  19924   4848 S   0.0  0.8   0:01.40 /usr/sbin+
 92025 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 92049 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 92417 nobody    20   0  277760  20180   4796 S   0.0  0.8   0:01.24 /usr/sbin+
 95180 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 95863 nobody    20   0  277764  19572   4636 S   0.0  0.8   0:00.86 /usr/sbin+
 96792 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 97817 nobody    20   0  277896  19524   4484 S   0.0  0.8   0:00.66 /usr/sbin+
 97838 nobody    20   0  277760  19144   4256 S   0.0  0.8   0:00.60 /usr/sbin+
 98099 nobody    20   0  277892  19168   4384 S   0.0  0.8   0:00.76 /usr/sbin+
 98183 nobody    20   0  277760  19204   4260 S   0.0  0.8   0:00.61 /usr/sbin+
 98199 nobody    20   0  277888  19440   4544 S   0.0  0.8   0:00.52 /usr/sbin+
 98202 nobody    20   0  277760  19348   4380 S   0.0  0.8   0:00.54 /usr/sbin+
 98596 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 98701 nobody    20   0  277760  19344   4384 S   0.0  0.8   0:00.56 /usr/sbin+
 98714 nobody    20   0  277868  19436   4444 S   0.0  0.8   0:00.42 /usr/sbin+
 98715 nobody    20   0  277736  19228   4432 S   0.0  0.8   0:00.40 /usr/sbin+
100665 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
100685 worencom  20   0   38480   4056   3036 S   0.0  0.2   0:00.00 dovecot/i+
100955 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
101713 nobody    20   0  277916  18796   4008 S   0.0  0.8   0:00.20 /usr/sbin+
101732 nobody    20   0  277772  18340   3552 S   0.0  0.8   0:00.23 /usr/sbin+
102188 nobody    20   0  277760  18404   3888 S   0.0  0.8   0:00.12 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:40   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    09:40   0:07  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    09:40   0:16  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   09:40   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   09:40   0:01  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kvm-irqfd-clean]
root        675  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [loop0]
root        735  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/loop0-8]
root        736  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root      25497  0.0  0.0      0     0 ?        S    10:10   0:00  \_ [kworker/1:2]
root      41201  0.0  0.0      0     0 ?        S    10:31   0:00  \_ [kworker/u200:1]
root      67652  0.0  0.0      0     0 ?        S    11:04   0:00  \_ [kworker/1:1]
root      81222  0.0  0.0      0     0 ?        S    11:20   0:00  \_ [kworker/u200:0]
root      83918  0.0  0.0      0     0 ?        D    11:24   0:00  \_ [kworker/0:0]
root      92025  0.0  0.0      0     0 ?        R    11:34   0:00  \_ [kworker/0:2]
root      92049  0.0  0.0      0     0 ?        S    11:34   0:00  \_ [kworker/1:3]
root      95180  0.0  0.0      0     0 ?        S    11:38   0:00  \_ [kworker/1:4]
root      96792  0.0  0.0      0     0 ?        S    11:40   0:00  \_ [kworker/0:1]
root      98596  0.0  0.0      0     0 ?        D    11:42   0:00  \_ [kworker/0:4]
root     100665  0.0  0.0      0     0 ?        D    11:44   0:00  \_ [kworker/u200:2]
root       1299  0.0  0.0      0     0 ?        R    11:48   0:00  |   \_ [kworker/u200:2]
root     100955  0.0  0.0      0     0 ?        S    11:45   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44268  3316 ?        Ss   09:40   0:11 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.1  40244  3360 ?        Ss   09:40   0:04 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   252 ?        Ss   09:40   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   304 ?        S<sl 09:40   0:00 /sbin/auditd
root        470  0.0  0.0  24712  1156 ?        Ss   09:40   0:01 /usr/lib/systemd/systemd-logind
root        471  0.0  0.0  52852   324 ?        Ss   09:40   0:00 /usr/sbin/smartd -n -q never
dbus        474  0.0  0.0  58736  1356 ?        Ss   09:40   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         476  0.0  0.0  69256    72 ?        Ss   09:40   0:00 /sbin/rpcbind -w
polkitd     486  0.0  0.0 612240  1124 ?        Ssl  09:40   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        487  0.0  0.0  21540   408 ?        Ss   09:40   0:00 /usr/sbin/irqbalance --foreground
root        492  0.0  0.0 152780   240 ?        Ss   09:40   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        493  0.0  0.2 224280  5452 ?        Ss   09:40   0:00 queueprocd - waiting up to 60s to process a task
nscd        507  0.0  0.0 928956  1388 ?        Ssl  09:40   0:06 /usr/sbin/nscd
root        515  0.0  0.0 195208    68 ?        Ssl  09:40   0:00 /usr/sbin/gssproxy -D
root        516  0.0  0.0   4388   156 ?        Ss   09:40   0:00 /usr/sbin/acpid
root        543  0.0  0.0  24208   196 ?        Ss   09:40   0:00 /usr/sbin/atd -f
root        545  0.0  0.0 124480   524 ?        Ss   09:40   0:00 /usr/sbin/crond -n
root       1213  0.0  0.0 183048  2152 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root       1229  0.0  0.0 113284  1212 ?        Ss   11:48   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       1230  0.0  0.0 108052   360 ?        S    11:48   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       1231  0.0  0.0 113288  1516 ?        S    11:48   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       1300  0.0  0.0 153672  1776 ?        R    11:48   0:00  |               \_ ps auxf
root       1214  0.0  0.0 183048  2156 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root       1262  0.0  0.0  20164   808 ?        Ss   11:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       1215  0.0  0.0 183048  2156 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root       1274  0.0  0.0  20164   808 ?        Ss   11:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root       1216  0.0  0.0 183048  2156 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root       1269  0.0  0.0  20164   804 ?        Ss   11:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root       1217  0.0  0.0 183048  2156 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root       1265  0.0  0.0  20164   804 ?        Ss   11:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       1218  0.0  0.0 183048  2152 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root       1270  0.0  0.0  20164   808 ?        Ss   11:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       1219  0.0  0.0 183048  2152 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root       1263  0.0  0.0  20164   964 ?        Ss   11:48   0:00  |   \_ jailshell (cloudsms) [1289] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   1289  0.0  0.0  20164   260 ?        S    11:48   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   1293  0.0  0.0 113284  1212 ?        S    11:48   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   1295  0.0  0.6 404052 15616 ?        S    11:48   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root       1220  0.0  0.0 183048  2152 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root       1272  0.0  0.0  20164   808 ?        Ss   11:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       1222  0.0  0.0 183048  2148 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root       1261  0.0  0.0  20164   808 ?        Ss   11:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       1223  0.0  0.0 183048  2148 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root       1264  0.0  0.0  20164   804 ?        Ss   11:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       1224  0.0  0.0 183048  2148 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root       1271  0.0  0.0  20164   812 ?        Ss   11:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       1225  0.0  0.0 183048  2148 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root       1275  0.0  0.0  20164   968 ?        Ss   11:48   0:00  |   \_ jailshell (pactpay) [1285] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    1285  0.0  0.0  20164   260 ?        S    11:48   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    1291  0.0  0.6 479860 16172 ?        Sl   11:48   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       1227  0.0  0.0 183048  2148 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root       1273  0.0  0.0  20164   964 ?        Ss   11:48   0:00  |   \_ jailshell (nigeria) [1282] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    1282  0.0  0.0  20164   260 ?        S    11:48   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    1286  0.0  0.6 404052 16140 ?        R    11:48   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root       1228  0.0  0.0 183044  2212 ?        R    11:48   0:00  \_ /usr/sbin/CROND -n
root        562  0.0  0.0 108296   180 tty1     Ss+  09:40   0:00 /sbin/agetty --noclear tty1 linux
root        563  0.0  0.0 114704   180 ttyS0    Ss+  09:40   0:00 /bin/bash
mailnull    613  0.0  0.0  89120  1328 ?        Ss   09:40   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        931  0.0  0.0 153404   396 ?        Ss   09:40   0:00 pure-ftpd (SERVER)
root        932  0.0  0.0 572372  1052 ?        Ssl  09:40   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    933  0.0  0.0 112268    56 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.6 114016 15192 ?        Ssl  09:40   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        936  0.2  0.2 1277056 6144 ?        Ssl  09:40   0:21 /usr/bin/checkstatus
root        937  0.0  0.0 445028  1384 ?        Ss   09:40   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+    844  0.0  0.0 445028   324 ?        S    11:47   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    938  0.0  0.0  11796    32 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    939  0.0  0.0 111608    60 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        942  0.0  0.0 111304   544 ?        Ss   09:40   0:01 /usr/sbin/sshd -D
root        518  0.0  0.1 111304  4272 ?        Ss   11:47   0:00  \_ sshd: [accepted]
root       1193  1.0  0.2 162436  5836 ?        Ss   11:48   0:00  \_ sshd: root [priv]
sshd       1194  0.0  0.1 115644  2628 ?        S    11:48   0:00      \_ sshd: root [net]
systuser    943  0.0  0.0  11348    24 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        944  0.3  0.3 1349832 8488 ?        Ssl  09:40   0:28 /usr/bin/cspdaemon
root        945  0.0  0.0  51508   612 ?        Ss   09:40   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1093  0.0  0.0  46912  2092 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1094  0.0  0.1  47888  2952 ?        S    09:40   0:00  \_ dovecot/imap-login
dovecot    1095  0.0  0.0  10320   292 ?        S    09:40   0:00  \_ dovecot/anvil
root       1096  0.0  0.0  10452   492 ?        S    09:40   0:00  \_ dovecot/log
dovenull   1097  0.0  0.0  46916  2320 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47868  2804 ?        S    09:40   0:00  \_ dovecot/imap-login
root       1104  0.0  0.0  24396  2180 ?        S    09:40   0:00  \_ dovecot/config
dovecot    1110  0.0  0.0  13568   644 ?        S    09:40   0:00  \_ dovecot/stats
dovecot    1170  0.0  0.0  41192  1512 ?        S    09:40   0:00  \_ dovecot/auth
worencom 100685  0.0  0.1  38480  4056 ?        S    11:44   0:00  \_ dovecot/imap
telegraf    946  0.0  1.4 5654304 35796 ?       SLsl 09:40   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    947  0.0  0.0 342400   232 ?        Ssl  09:40   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        948  0.1 21.8 1763312 528708 ?      Ssl  09:40   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        949  0.0  0.0 389508   748 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        950  0.0  0.2 261160  6228 ?        Ss   09:40   0:01 cpsrvd (SSL) - waiting for connections                   
root       1130  0.0  0.0      0     0 ?        Z    11:47   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.0 388892   348 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        958  0.0  0.1 240976  3220 ?        Ssl  09:40   0:02 /usr/sbin/rsyslogd -n
root        986  0.0  0.0 396248   656 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        990  0.0  0.0 439788  1176 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        994  0.0  0.1 400740  3096 ?        Ss   09:40   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
named       996  0.0  1.3 785456 33660 ?        Ssl  09:40   0:05 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
cpanelc+   1013  0.0  0.1  10100  3176 ?        Ss   09:40   0:06 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1145  0.0  0.1 157704  3072 ?        S    09:40   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1175  0.0  1.1 412368 28432 ?        Ss   09:40   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1176  0.0  0.3 387528  9320 ?        Ss   09:40   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1234  0.0  0.0 167452  1320 ?        Ss   09:40   0:00 dnsadmin - dormant mode
root       1235  0.0  0.7 262228 19276 ?        Ss   09:40   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1237  0.0  0.8 209308 19496 ?        Ss   09:40   0:01 tailwatchd
root       1669  0.0  0.0 299272   604 ?        Ss   09:40   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1701  0.0  0.0 130416  1392 ?        SN   09:40   0:00 cpanellogd - sleeping for logs
mysql      1793  1.3  9.1 1463376 222276 ?      Sl   09:40   1:43 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1959  0.0  0.3 266992  7380 ?        Ss   09:40   0:00 /usr/sbin/httpd -k start
root       1962  0.0  0.0  12816   400 ?        S    09:40   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1963  0.0  0.0  12732   368 ?        S    09:40   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1964  0.0  0.0  12860   416 ?        S    09:40   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1968  0.0  0.0  53340   216 ?        S    09:40   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    80005  0.1  0.8 277564 20312 ?        S    11:19   0:02  \_ /usr/sbin/httpd -k start
nobody    90334  0.1  0.8 277524 19924 ?        S    11:31   0:01  \_ /usr/sbin/httpd -k start
nobody    92417  0.1  0.8 277760 20180 ?        S    11:34   0:01  \_ /usr/sbin/httpd -k start
nobody    95863  0.1  0.8 277764 19572 ?        S    11:39   0:00  \_ /usr/sbin/httpd -k start
nobody    97817  0.1  0.8 277896 19524 ?        S    11:41   0:00  \_ /usr/sbin/httpd -k start
nobody    97838  0.1  0.7 277760 19144 ?        S    11:41   0:00  \_ /usr/sbin/httpd -k start
nobody    98099  0.1  0.7 277892 19168 ?        S    11:41   0:00  \_ /usr/sbin/httpd -k start
cloudw     1211  0.0  0.6 353712 16236 ?        S    11:48   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    98183  0.1  0.7 277760 19204 ?        S    11:41   0:00  \_ /usr/sbin/httpd -k start
nobody    98199  0.1  0.8 277888 19440 ?        S    11:41   0:00  \_ /usr/sbin/httpd -k start
nobody    98202  0.1  0.7 277760 19348 ?        S    11:41   0:00  \_ /usr/sbin/httpd -k start
nobody    98701  0.1  0.7 277760 19344 ?        S    11:42   0:00  \_ /usr/sbin/httpd -k start
nobody    98714  0.1  0.8 277868 19436 ?        S    11:42   0:00  \_ /usr/sbin/httpd -k start
nobody    98715  0.1  0.7 277736 19228 ?        S    11:42   0:00  \_ /usr/sbin/httpd -k start
nobody   101713  0.1  0.7 277916 18796 ?        S    11:46   0:00  \_ /usr/sbin/httpd -k start
nobody   101732  0.1  0.7 277772 18340 ?        S    11:46   0:00  \_ /usr/sbin/httpd -k start
nobody   102188  0.1  0.7 277760 18404 ?        S    11:46   0:00  \_ /usr/sbin/httpd -k start
nobody     1196  0.0  0.6 277188 16448 ?        S    11:48   0:00  \_ /usr/sbin/httpd -k start
root       2014  0.0  0.3 181996  8988 ?        Rs   09:40   0:07 lfd - scanning log files
oysipao+  18294  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+  18303  0.0  0.0   3152    36 ?        S    10:01   0:00  \_ [kworker]
root      56404  0.0  4.8 248036 117544 ?       Ss   10:49   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      64340  0.0  4.9 249300 118764 ?       S    11:00   0:00  \_ spamd child
root      64341  0.0  4.8 248036 116840 ?       S    11:00   0:00  \_ spamd child
## mysql stats
Uptime: 29365  Threads: 4  Questions: 518051  Slow queries: 0  Opens: 3966  Flush tables: 1  Open tables: 2000  Queries per second avg: 17.641
*************************** 1. row ***************************
     Id: 8774
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: cleaning up
   Info: NULL
*************************** 2. row ***************************
     Id: 8775
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 8778
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 8781
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.133.34 TIME_WAIT
      1 114.119.145.187 TIME_WAIT
      1 15.235.96.54 TIME_WAIT
      1 192.178.4.98 TIME_WAIT
      1 192.178.4.99 TIME_WAIT
      1 ::1 TIME_WAIT
      1 5.255.231.163 TIME_WAIT
      1 5.255.231.84 TIME_WAIT
      1 87.250.224.91 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      4 206.232.2.77 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 11:48:01 WAT
   Restart Time: Thursday, 20-Nov-2025 03:38:40 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 9 minutes 21 seconds
   Server load: 0.63 0.72 0.60
   Total accesses: 38644 - Total Traffic: 999.8 MB - Total Duration: 62078925
   CPU Usage: u8.65 s3.84 cu500.52 cs395.06 - 3.09% CPU load
   1.32 requests/sec - 34.9 kB/second - 26.5 kB/request - 1606.43 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

K__KRK_KW.KRK.K._.K..K.._.......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID       Acc     M CPU    SS   Req   Dur    Conn  Child  Slot     Client     Protocol         VHost                                      Request
   0-0  98701  2/103/2014  K 2.85  2     306 1003192  66.9  2.46  61.33 192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=2110445447 HTTP/1.1
   1-0  98714  0/82/1911   _ 2.07  0     0   44334258 0.0   1.85  51.13 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   2-0  92417  0/217/1928  _ 5.56  0     25  986744   0.0   5.63  50.79 116.203.129.16 http/1.1 cloudsms.com.ng:443    GET /cron/process_queue5.php HTTP/1.1
   3-0  97817  12/126/2255 K 2.94  3     398 1018687  366.5 5.53  54.60 192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=185276570 HTTP/1.1
   4-0  98715  0/80/1928   R 1.60  79    298 977175   0.0   1.75  48.27 114.10.145.88  http/1.1
   5-0  95863  8/164/1722  K 4.10  2     255 805223   245.7 3.70  44.84 192.178.4.102  http/1.1 team.cloudware.ng:443  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2228288
   6-0  80005  0/505/1741  _ 11.51 0     24  882508   0.0   11.25 43.28 206.232.2.77   http/1.1 agradio.ng:443         GET /{{{ data.editLink
   7-0  101713 6/35/1890   K 0.85  3     264 886229   186.5 0.88  53.34 192.178.4.99   http/1.1 team.cloudware.ng:443  GET /?l=802371929 HTTP/1.1
   8-0  1196   0/1/1666    W 0.00  0     0   863313   0.0   0.00  57.32 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   9-0  -      0/0/2033    . 0.00  24    0   898041   0.0   0.00  46.04 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   10-0 90334  2/239/1691  K 6.42  3     253 886182   64.5  6.29  42.95 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=2694497333 HTTP/1.1
   11-0 97838  0/122/1804  R 2.49  1     24  798310   0.0   3.54  39.63 185.84.71.103  http/1.1 nigeriadecide.org:443
   12-0 101732 10/40/1417  K 1.06  0     295 782610   307.5 1.10  39.33 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=4264264893 HTTP/1.1
   13-0 -      0/0/1343    . 0.00  78    4   706124   0.0   0.00  33.36 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   14-0 98099  7/128/1219  K 3.34  0     310 635519   216.2 3.42  31.92 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=1513568711 HTTP/1.1
   15-0 -      0/0/1148    . 0.00  81    0   517134   0.0   0.00  27.27 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-0 102188 0/22/860    _ 0.74  0     26  433246   0.0   0.58  25.53 116.203.129.16 http/1.1 cloudsms.com.ng:443    GET /cron/process_queue1.php HTTP/1.1
   17-0 -      0/0/1070    . 0.00  23    0   559978   0.0   0.00  27.83 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 98183  2/115/1188  K 2.87  4     397 499981   68.4  2.70  24.35 192.178.4.96   http/1.1 team.cloudware.ng:443  GET /?l=3922932056 HTTP/1.1
   19-0 -      0/0/1292    . 0.00  355   0   562823   0.0   0.00  36.02 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 -      0/0/1178    . 0.00  220   0   567414   0.0   0.00  30.61 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 98199  2/101/907   K 2.10  2     260 349963   67.6  2.22  18.15 192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=2196852791 HTTP/1.1
   22-0 -      0/0/1016    . 0.00  329   0   425033   0.0   0.00  25.78 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -      0/0/447     . 0.00  80    0   208661   0.0   0.00  10.72 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 98202  0/109/552   _ 2.12  0     334 270804   0.0   2.31  13.36 206.232.2.77   http/1.1 agradio.ng:443         GET /{{{ data.editLink
   25-0 -      0/0/543     . 0.00  716   0   276383   0.0   0.00  13.91 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -      0/0/14      . 0.00  1257  0   7758     0.0   0.00  0.26  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -      0/0/475     . 0.00  1099  0   233214   0.0   0.00  13.25 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -      0/0/231     . 0.00  502   0   127638   0.0   0.00  5.41  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -      0/0/483     . 0.00  622   0   242729   0.0   0.00  13.15 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -      0/0/150     . 0.00  1240  0   68176    0.0   0.00  2.88  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -      0/0/49      . 0.00  1255  0   18776    0.0   0.00  0.89  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -      0/0/23      . 0.00  1258  0   15181    0.0   0.00  0.31  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -      0/0/5       . 0.00  1621  0   879      0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -      0/0/19      . 0.00  29076 0   9074     0.0   0.00  0.45  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -      0/0/4       . 0.00  29126 0   2048     0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -      0/0/2       . 0.00  29143 0   738      0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -      0/0/8       . 0.00  29133 0   3463     0.0   0.00  0.19  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -      0/0/4       . 0.00  29127 0   1877     0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -      0/0/2       . 0.00  29138 0   599      0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -      0/0/6       . 0.00  29132 0   3057     0.0   0.00  0.15  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -      0/0/3       . 0.00  29128 0   840      0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -      0/0/227     . 0.00  28234 0   110452   0.0   0.00  5.70  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -      0/0/9       . 0.00  29131 0   4927     0.0   0.00  0.24  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -      0/0/154     . 0.00  28610 0   84969    0.0   0.00  4.58  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -      0/0/13      . 0.00  29098 0   6975     0.0   0.00  0.32  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 952
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...23)
   index usage: 16%, cache usage: 22%
   total entries stored since starting: 25036
   total entries replaced since starting: 0
   total entries expired since starting: 24071
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 16 hit, 41 miss
   total removes since starting: 13 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit