403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.12.33.txt
 ## swap threshold exceeded
## server overview
2025-11-20.12.33 load[0] mem[65/58] mysql[1/9] httpd[16]
              total        used        free      shared  buff/cache   available
Mem:           2363        1450         121          45         791         682
Swap:          1999        1506         493
 12:33:01 up  2:52,  0 users,  load average: 0.30, 0.43, 0.49
## system overview
top - 12:33:02 up  2:52,  0 users,  load average: 0.30, 0.43, 0.49
Tasks: 205 total,   7 running, 197 sleeping,   0 stopped,   1 zombie
%Cpu(s): 59.4 us, 25.0 sy,  0.0 ni, 15.6 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   138508 free,  1471580 used,   810212 buff/cache
KiB Swap:  2047996 total,   505568 free,  1542428 used.   712740 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1793 mysql     20   0 1463376 230124   3352 S  80.0  9.5   2:22.45 /usr/sbin+
 38811 nigeria   20   0  404052  16140  10380 R  20.0  0.7   0:00.03 /opt/cpan+
     1 root      20   0   44268   3336   1484 S  13.3  0.1   0:15.67 /usr/lib/+
   410 root      16  -4   55532    504    376 S   6.7  0.0   0:01.09 /sbin/aud+
   487 root      20   0   21540    408    320 S   6.7  0.0   0:00.23 /usr/sbin+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.59 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.51 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:10.27 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.48 [migratio+
    14 root      20   0       0      0      0 R   0.0  0.0   0:01.95 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:17.52 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.26 [kauditd]
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.57 [kworker/+
   266 root       0 -20       0      0      0 S   0.0  0.0   0:01.80 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.62 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   39500   5260   5028 S   0.0  0.2   0:06.44 /usr/lib/+
   387 root      20   0   45352    252    248 S   0.0  0.0   0:00.38 /usr/lib/+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0   24712   1180    836 S   0.0  0.0   0:02.51 /usr/lib/+
   471 root      20   0   52852    276    180 S   0.0  0.0   0:00.01 /usr/sbin+
   474 dbus      20   0   58644   1412    680 S   0.0  0.1   0:05.69 /usr/bin/+
   476 rpc       20   0   69256     72     12 S   0.0  0.0   0:00.01 /sbin/rpc+
   486 polkitd   20   0  612240   1092    744 S   0.0  0.0   0:01.53 /usr/lib/+
   492 root      20   0  152780    248    204 S   0.0  0.0   0:00.00 /usr/sbin+
   493 root      20   0  224280   5440   1028 S   0.0  0.2   0:00.27 queueproc+
   507 nscd      20   0  928956   1384    712 S   0.0  0.1   0:08.64 /usr/sbin+
   515 root      20   0  195208     68     68 S   0.0  0.0   0:00.00 /usr/sbin+
   516 root      20   0    4388    156    152 S   0.0  0.0   0:00.00 /usr/sbin+
   543 root      20   0   24208    180    156 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0  124480    520    388 S   0.0  0.0   0:00.30 /usr/sbin+
   562 root      20   0  108296    180    176 S   0.0  0.0   0:00.00 /sbin/age+
   563 root      20   0  114704    180    180 S   0.0  0.0   0:00.02 /bin/bash
   613 mailnull  20   0   89116   3800    892 S   0.0  0.2   0:00.29 /usr/sbin+
   632 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   675 root       0 -20       0      0      0 S   0.0  0.0   0:02.51 [loop0]
   735 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   736 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   931 root      20   0  153404    396    316 S   0.0  0.0   0:00.21 pure-ftpd+
   932 root      20   0  572372   1052    480 S   0.0  0.0   0:00.97 /usr/bin/+
   933 systuser  20   0  112268     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   935 systuser  20   0  114016  15316   2596 S   0.0  0.6   0:02.76 /usr/loca+
   936 root      20   0 1277056   6144    164 S   0.0  0.3   0:21.13 /usr/bin/+
   937 root      20   0  445028   1384   1272 S   0.0  0.1   0:00.43 sw-engine+
   938 systuser  20   0   11796     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   942 root      20   0  111304    544    436 S   0.0  0.0   0:01.50 /usr/sbin+
   943 systuser  20   0   11348     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   944 root      20   0 1349832   8612    128 S   0.0  0.4   0:28.11 /usr/bin/+
   945 root      20   0   51508    608    428 S   0.0  0.0   0:00.16 /usr/sbin+
   946 telegraf  20   0 5654304  35268   5908 S   0.0  1.5   0:06.10 /usr/loca+
   947 memcach+  20   0  342400    232    232 S   0.0  0.0   0:00.22 /usr/bin/+
   948 root      20   0 1763312 424948    280 S   0.0 17.6   0:14.87 /usr/loca+
   949 root      20   0  389508    552    460 S   0.0  0.0   0:00.35 php-fpm: +
   950 root      20   0  261160   6344   1672 S   0.0  0.3   0:02.06 cpsrvd (S+
   953 root      20   0  388892    348    264 S   0.0  0.0   0:00.30 php-fpm: +
   958 root      20   0  249168   4908   4188 S   0.0  0.2   0:03.19 /usr/sbin+
   986 root      20   0  396248    508    416 S   0.0  0.0   0:00.32 php-fpm: +
   990 root      20   0  439788   1176   1084 S   0.0  0.0   0:00.41 php-fpm: +
   994 root      20   0  400740   3092    712 S   0.0  0.1   0:01.51 php-fpm: +
   996 named     20   0  924724  35384   2004 S   0.0  1.5   0:07.11 /usr/sbin+
  1013 cpanelc+  20   0   10360   3300   2412 S   0.0  0.1   0:08.27 /usr/loca+
  1093 dovenull  20   0   47284   3076   2200 S   0.0  0.1   0:00.19 dovecot/p+
  1094 dovenull  20   0   47888   3140   1876 S   0.0  0.1   0:00.20 dovecot/i+
  1095 dovecot   20   0   10320    292    176 S   0.0  0.0   0:00.04 dovecot/a+
  1096 root      20   0   10452    488    308 S   0.0  0.0   0:00.12 dovecot/l+
  1097 dovenull  20   0   47176   2992   2200 S   0.0  0.1   0:00.16 dovecot/p+
  1098 dovenull  20   0   47996   3200   1928 S   0.0  0.1   0:00.18 dovecot/i+
  1104 root      20   0   24528   2580    544 S   0.0  0.1   0:00.09 dovecot/c+
  1110 dovecot   20   0   13568    640    440 S   0.0  0.0   0:00.02 dovecot/s+
  1145 systuser  20   0  157704   3068   1092 S   0.0  0.1   0:00.07 SonarPush+
  1170 dovecot   20   0   41192   1544   1048 S   0.0  0.1   0:00.40 dovecot/a+
  1175 wp-tool+  20   0  412368  27520   1620 S   0.0  1.1   0:03.48 /usr/bin/+
  1176 wp-tool+  20   0  387528   8672   1540 S   0.0  0.4   0:00.18 /usr/bin/+
  1234 root      20   0  167452   1320    776 S   0.0  0.1   0:00.19 dnsadmin +
  1235 root      20   0  262224  24108   6180 S   0.0  1.0   0:01.47 cpdavd - +
  1237 root      20   0  209308  19812   2456 S   0.0  0.8   0:01.54 tailwatchd
  1669 root      20   0  299272    604    440 S   0.0  0.0   0:00.27 php-fpm: +
  1701 root      38  18  130416   1396    724 S   0.0  0.1   0:00.02 cpanellog+
  1959 root      20   0  266992   7380    740 S   0.0  0.3   0:00.93 /usr/sbin+
  1962 root      20   0   12804    400    296 S   0.0  0.0   0:01.22 /usr/loca+
  1963 root      20   0   12732    368    292 S   0.0  0.0   0:01.05 /usr/loca+
  1964 root      20   0   12820    416    296 S   0.0  0.0   0:01.14 /usr/loca+
  1968 root      20   0   53340    216    216 S   0.0  0.0   0:00.05 /usr/loca+
  2014 root      20   0  182468  10020   1168 S   0.0  0.4   0:09.81 lfd - sle+
 18294 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 18303 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.17 [kworker]
 19186 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 22239 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 24512 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 27158 nobody    20   0  277696  19760   4612 S   0.0  0.8   0:01.16 /usr/sbin+
 30732 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 31055 nobody    20   0  277696  19116   4296 S   0.0  0.8   0:00.58 /usr/sbin+
 31064 nobody    20   0  277760  19152   4332 S   0.0  0.8   0:00.81 /usr/sbin+
 31091 nobody    20   0  277760  18760   4212 S   0.0  0.8   0:00.49 /usr/sbin+
 31256 nobody    20   0  277760  18988   4504 S   0.0  0.8   0:00.61 /usr/sbin+
 31344 nobody    20   0  277760  19596   4608 S   0.0  0.8   0:00.71 /usr/sbin+
 31542 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 32100 nobody    20   0  277760  19112   4336 S   0.0  0.8   0:00.79 /usr/sbin+
 32137 nobody    20   0  277760  19516   4548 S   0.0  0.8   0:00.71 /usr/sbin+
 32555 nobody    20   0  277892  19228   4280 S   0.0  0.8   0:00.55 /usr/sbin+
 33126 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 33324 nobody    20   0  277940  19272   4292 S   0.0  0.8   0:00.44 /usr/sbin+
 33884 nobody    20   0  277796  18836   4000 S   0.0  0.8   0:00.55 /usr/sbin+
 35067 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 35992 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 36622 nobody    20   0  277492  18104   3864 S   0.0  0.7   0:00.17 /usr/sbin+
 36633 nobody    20   0  277760  18616   3800 S   0.0  0.8   0:00.26 /usr/sbin+
 36634 nobody    20   0  277484  18132   3916 S   0.0  0.7   0:00.21 /usr/sbin+
 36650 nobody    20   0  277828  18320   3912 S   0.0  0.8   0:00.29 /usr/sbin+
 36652 nobody    20   0  277760  18728   3988 S   0.0  0.8   0:00.23 /usr/sbin+
 36653 nobody    20   0  277760  18120   3732 S   0.0  0.7   0:00.11 /usr/sbin+
 37402 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 38015 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 38089 nobody    20   0  277052  15648   2044 S   0.0  0.6   0:00.00 /usr/sbin+
 38104 nobody    20   0  277760  17776   3344 S   0.0  0.7   0:00.07 /usr/sbin+
 38105 nobody    20   0  277760  17824   3444 S   0.0  0.7   0:00.08 /usr/sbin+
 38144 nobody    20   0  277760  17724   3324 S   0.0  0.7   0:00.06 /usr/sbin+
 38171 root      20   0  111304   4264   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 38244 nobody    20   0  277792  18448   3724 S   0.0  0.8   0:00.06 /usr/sbin+
 38276 nobody    20   0  277760  17864   3432 S   0.0  0.7   0:00.09 /usr/sbin+
 38288 nobody    20   0  277760  17652   3280 S   0.0  0.7   0:00.07 /usr/sbin+
 38368 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 38393 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 38409 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 38418 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 38472 root      20   0  111304   4444   3404 S   0.0  0.2   0:00.00 sshd: [ac+
 38473 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 38489 root      20   0  111304   4444   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 38490 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 38647 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 38664 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 38700 root      20   0  157100   5072   3784 S   0.0  0.2   0:00.00 sshd: unk+
 38703 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: unk+
 38707 nigeria   20   0  400460   5572   2328 S   0.0  0.2   0:00.00 php-fpm: +
 38736 root      20   0  183048   2148   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 38737 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 38738 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 38740 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 38742 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 38743 root      20   0  135252   1492   1104 R   0.0  0.1   0:00.00 /usr/sbin+
 38744 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 38745 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 38746 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38748 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 38750 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 38751 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 38752 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 38767 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 38769 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 38770 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38771 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38772 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38773 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 38774 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
 38777 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 /usr/loca+
 38787 cloudw    20   0  353712  15980  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 38794 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 38796 pactpay   20   0  480124  17316  11580 S   0.0  0.7   0:00.02 /opt/cpan+
 38807 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 38814 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 38825 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 38826 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 38827 cloudsms  20   0  131852   3320   2384 R   0.0  0.1   0:00.00 /usr/loca+
 38828 root      20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
 41201 root      20   0       0      0      0 D   0.0  0.0   0:00.14 [kworker/+
 56404 root      20   0  248036 117164   1080 S   0.0  4.8   0:03.49 /usr/loca+
 64340 root      20   0  249300 118552   1284 S   0.0  4.9   0:00.48 spamd chi+
 64341 root      20   0  248036 116460    416 S   0.0  4.8   0:00.00 spamd chi+
100665 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:40   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    09:40   0:10  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:40   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:40   0:17  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:40   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [kauditd]
root        243  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   09:40   0:01  \_ [kworker/0:1H]
root        266  0.0  0.0      0     0 ?        S<   09:40   0:01  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [xprtiod]
root        632  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [kvm-irqfd-clean]
root        675  0.0  0.0      0     0 ?        S<   09:40   0:02  \_ [loop0]
root        735  0.0  0.0      0     0 ?        S    09:40   0:00  \_ [jbd2/loop0-8]
root        736  0.0  0.0      0     0 ?        S<   09:40   0:00  \_ [ext4-rsv-conver]
root      41201  0.0  0.0      0     0 ?        S    10:31   0:00  \_ [kworker/u200:1]
root     100665  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/u200:2]
root      19186  0.0  0.0      0     0 ?        S    12:09   0:00  \_ [kworker/0:1]
root      22239  0.0  0.0      0     0 ?        S    12:13   0:00  \_ [kworker/1:2]
root      24512  0.0  0.0      0     0 ?        S    12:16   0:00  \_ [kworker/0:4]
root      30732  0.0  0.0      0     0 ?        S    12:24   0:00  \_ [kworker/0:3]
root      31542  0.0  0.0      0     0 ?        S    12:25   0:00  \_ [kworker/1:1]
root      33126  0.0  0.0      0     0 ?        S    12:27   0:00  \_ [kworker/1:4]
root      35067  0.0  0.0      0     0 ?        S    12:29   0:00  \_ [kworker/0:0]
root      35992  0.0  0.0      0     0 ?        S    12:30   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44268  3336 ?        Ss   09:40   0:15 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.2  39500  5260 ?        Ss   09:40   0:06 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   252 ?        Ss   09:40   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   504 ?        S<sl 09:40   0:01 /sbin/auditd
root        470  0.0  0.0  24712  1180 ?        Ss   09:40   0:02 /usr/lib/systemd/systemd-logind
root        471  0.0  0.0  52852   276 ?        Ss   09:40   0:00 /usr/sbin/smartd -n -q never
dbus        474  0.0  0.0  58644  1412 ?        Ss   09:40   0:05 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         476  0.0  0.0  69256    72 ?        Ss   09:40   0:00 /sbin/rpcbind -w
polkitd     486  0.0  0.0 612240  1092 ?        Ssl  09:40   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        487  0.0  0.0  21540   408 ?        Ss   09:40   0:00 /usr/sbin/irqbalance --foreground
root        492  0.0  0.0 152780   248 ?        Ss   09:40   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        493  0.0  0.2 224280  5440 ?        Ss   09:40   0:00 queueprocd - waiting up to 60s to process a task
nscd        507  0.0  0.0 928956  1384 ?        Ssl  09:40   0:08 /usr/sbin/nscd
root        515  0.0  0.0 195208    68 ?        Ssl  09:40   0:00 /usr/sbin/gssproxy -D
root        516  0.0  0.0   4388   156 ?        Ss   09:40   0:00 /usr/sbin/acpid
root        543  0.0  0.0  24208   180 ?        Ss   09:40   0:00 /usr/sbin/atd -f
root        545  0.0  0.0 124480   520 ?        Ss   09:40   0:00 /usr/sbin/crond -n
root      38736  0.0  0.0 183048  2148 ?        S    12:33   0:00  \_ /usr/sbin/CROND -n
root      38750  0.0  0.0 113284  1212 ?        Ss   12:33   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      38751  0.0  0.0 108052   356 ?        S    12:33   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      38752  0.0  0.0 113288  1516 ?        S    12:33   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      38830  0.0  0.0 153840  2096 ?        R    12:33   0:00  |               \_ ps auxf
root      38737  0.0  0.0 183048  2156 ?        S    12:33   0:00  \_ /usr/sbin/CROND -n
root      38772  0.0  0.0  20164   808 ?        Ss   12:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      38738  0.0  0.0 183048  2156 ?        S    12:33   0:00  \_ /usr/sbin/CROND -n
root      38773  0.0  0.0  20164   808 ?        Ss   12:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      38740  0.0  0.0 183048  2152 ?        S    12:33   0:00  \_ /usr/sbin/CROND -n
root      38774  0.0  0.0  20164   992 ?        Ss   12:33   0:00  |   \_ jailshell (cloudsms) [38825] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  38825  0.0  0.0  20164   264 ?        S    12:33   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  38826  0.0  0.0 113284  1212 ?        S    12:33   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  38827  0.0  0.3 322496  8580 ?        R    12:33   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      38742  0.0  0.0 183048  2152 ?        S    12:33   0:00  \_ /usr/sbin/CROND -n
root      38771  0.0  0.0  20164   808 ?        Ss   12:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      38744  0.0  0.0 183048  2148 ?        S    12:33   0:00  \_ /usr/sbin/CROND -n
root      38770  0.0  0.0  20164   808 ?        Ss   12:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      38745  0.0  0.0 183048  2148 ?        S    12:33   0:00  \_ /usr/sbin/CROND -n
root      38777  0.0  0.0  20164   988 ?        Ss   12:33   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      38828  0.0  0.0  20164   260 ?        R    12:33   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      38746  0.0  0.0 183048  2144 ?        S    12:33   0:00  \_ /usr/sbin/CROND -n
root      38767  0.0  0.0  20164   968 ?        Ss   12:33   0:00  |   \_ jailshell (pactpay) [38794] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   38794  0.0  0.0  20164   264 ?        S    12:33   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   38796  0.0  0.7 480124 17316 ?        S    12:33   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      38748  0.0  0.0 183048  2144 ?        S    12:33   0:00  \_ /usr/sbin/CROND -n
root      38769  0.0  0.0  20164   964 ?        Ss   12:33   0:00      \_ jailshell (nigeria) [38807] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   38807  0.0  0.0  20164   260 ?        S    12:33   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   38811  0.0  0.6 404052 16140 ?        S    12:33   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        562  0.0  0.0 108296   180 tty1     Ss+  09:40   0:00 /sbin/agetty --noclear tty1 linux
root        563  0.0  0.0 114704   180 ttyS0    Ss+  09:40   0:00 /bin/bash
mailnull    613  0.0  0.1  89116  3800 ?        Ss   09:40   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        931  0.0  0.0 153404   396 ?        Ss   09:40   0:00 pure-ftpd (SERVER)
root        932  0.0  0.0 572372  1052 ?        Ssl  09:40   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    933  0.0  0.0 112268    56 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    935  0.0  0.6 114016 15316 ?        Ssl  09:40   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        936  0.2  0.2 1277056 6144 ?        Ssl  09:40   0:21 /usr/bin/checkstatus
root        937  0.0  0.0 445028  1384 ?        Ss   09:40   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  38368  0.0  0.0 445028   320 ?        S    12:32   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    938  0.0  0.0  11796    32 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    939  0.0  0.0 111608    60 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        942  0.0  0.0 111304   544 ?        Ss   09:40   0:01 /usr/sbin/sshd -D
root      38015  0.0  0.1 111304  4264 ?        Ss   12:32   0:00  \_ sshd: [accepted]
root      38171  0.0  0.1 111304  4264 ?        Ss   12:32   0:00  \_ sshd: [accepted]
root      38393  0.0  0.1 111304  4268 ?        Ss   12:32   0:00  \_ sshd: [accepted]
root      38409  0.0  0.1 111304  4268 ?        Ss   12:32   0:00  \_ sshd: [accepted]
sshd      38418  0.0  0.1 115644  2628 ?        S    12:32   0:00  |   \_ sshd: [net]
root      38472  0.0  0.1 111304  4444 ?        Ss   12:32   0:00  \_ sshd: [accepted]
sshd      38473  0.0  0.1 115644  2632 ?        S    12:32   0:00  |   \_ sshd: [net]
root      38489  0.0  0.1 111304  4444 ?        Ss   12:32   0:00  \_ sshd: [accepted]
sshd      38490  0.0  0.1 115644  2632 ?        S    12:32   0:00  |   \_ sshd: [net]
root      38647  0.0  0.1 111304  4264 ?        Ss   12:32   0:00  \_ sshd: [accepted]
root      38700  0.0  0.2 157100  5072 ?        Ss   12:32   0:00  \_ sshd: unknown [priv]
sshd      38703  0.0  0.1 115644  2632 ?        S    12:32   0:00      \_ sshd: unknown [net]
systuser    943  0.0  0.0  11348    24 ?        Ssl  09:40   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        944  0.2  0.3 1349832 8612 ?        Ssl  09:40   0:28 /usr/bin/cspdaemon
root        945  0.0  0.0  51508   608 ?        Ss   09:40   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1093  0.0  0.1  47284  3076 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1094  0.0  0.1  47888  3140 ?        S    09:40   0:00  \_ dovecot/imap-login
dovecot    1095  0.0  0.0  10320   292 ?        S    09:40   0:00  \_ dovecot/anvil
root       1096  0.0  0.0  10452   488 ?        S    09:40   0:00  \_ dovecot/log
dovenull   1097  0.0  0.1  47176  2992 ?        S    09:40   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47996  3200 ?        S    09:40   0:00  \_ dovecot/imap-login
root       1104  0.0  0.1  24528  2580 ?        S    09:40   0:00  \_ dovecot/config
dovecot    1110  0.0  0.0  13568   640 ?        S    09:40   0:00  \_ dovecot/stats
dovecot    1170  0.0  0.0  41192  1544 ?        S    09:40   0:00  \_ dovecot/auth
root      37402  0.0  0.1  60820  4512 ?        S    12:31   0:00  \_ dovecot/lmtp
telegraf    946  0.0  1.4 5654304 35268 ?       SLsl 09:40   0:06 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    947  0.0  0.0 342400   232 ?        Ssl  09:40   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        948  0.1 17.5 1763312 424948 ?      Ssl  09:40   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        949  0.0  0.0 389508   552 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        950  0.0  0.2 261160  6344 ?        Ss   09:40   0:02 cpsrvd (SSL) - waiting for connections                   
root      38664  0.0  0.0      0     0 ?        Z    12:32   0:00  \_ [cpaneld - servi] <defunct>
root        953  0.0  0.0 388892   348 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        958  0.0  0.2 249168  4908 ?        Ssl  09:40   0:03 /usr/sbin/rsyslogd -n
root        986  0.0  0.0 396248   508 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        990  0.0  0.0 439788  1176 ?        Ss   09:40   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        994  0.0  0.1 400740  3092 ?        Ss   09:40   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   38707  0.0  0.2 400460  5572 ?        S    12:32   0:00  \_ php-fpm: pool nigeriadecide_org
named       996  0.0  1.4 924724 35384 ?        Ssl  09:40   0:07 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
cpanelc+   1013  0.0  0.1  10360  3300 ?        Ss   09:40   0:08 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1145  0.0  0.1 157704  3068 ?        S    09:40   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1175  0.0  1.1 412368 27520 ?        Ss   09:40   0:03 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1176  0.0  0.3 387528  8672 ?        Ss   09:40   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1234  0.0  0.0 167452  1320 ?        Ss   09:40   0:00 dnsadmin - dormant mode
root       1235  0.0  0.9 262224 24108 ?        Ss   09:40   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1237  0.0  0.8 209308 19812 ?        Ss   09:40   0:01 tailwatchd
root       1669  0.0  0.0 299272   604 ?        Ss   09:40   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1701  0.0  0.0 130416  1396 ?        SN   09:40   0:00 cpanellogd - sleeping for logs
mysql      1793  1.3  9.5 1463376 230124 ?      Sl   09:40   2:22 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1959  0.0  0.3 266992  7380 ?        Ss   09:40   0:00 /usr/sbin/httpd -k start
root       1962  0.0  0.0  12804   400 ?        S    09:40   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1963  0.0  0.0  12732   368 ?        S    09:40   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1964  0.0  0.0  12820   416 ?        S    09:40   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1968  0.0  0.0  53340   216 ?        S    09:40   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    27158  0.1  0.8 277696 19760 ?        S    12:19   0:01  \_ /usr/sbin/httpd -k start
nobody    31055  0.1  0.7 277696 19116 ?        S    12:24   0:00  \_ /usr/sbin/httpd -k start
nobody    31064  0.1  0.7 277760 19152 ?        S    12:24   0:00  \_ /usr/sbin/httpd -k start
nobody    31091  0.0  0.7 277760 18760 ?        S    12:24   0:00  \_ /usr/sbin/httpd -k start
nobody    31256  0.1  0.7 277760 18988 ?        S    12:24   0:00  \_ /usr/sbin/httpd -k start
nobody    31344  0.1  0.8 277760 19596 ?        S    12:24   0:00  \_ /usr/sbin/httpd -k start
cloudw    38787  0.0  0.6 353712 15980 ?        S    12:33   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    32100  0.1  0.7 277760 19112 ?        S    12:25   0:00  \_ /usr/sbin/httpd -k start
nobody    32137  0.1  0.8 277760 19516 ?        S    12:25   0:00  \_ /usr/sbin/httpd -k start
nobody    32555  0.1  0.7 277892 19228 ?        S    12:26   0:00  \_ /usr/sbin/httpd -k start
nobody    33324  0.1  0.7 277940 19272 ?        S    12:27   0:00  \_ /usr/sbin/httpd -k start
nobody    33884  0.1  0.7 277796 18836 ?        S    12:27   0:00  \_ /usr/sbin/httpd -k start
nobody    36622  0.1  0.7 277492 18104 ?        S    12:30   0:00  \_ /usr/sbin/httpd -k start
nobody    36633  0.1  0.7 277760 18616 ?        S    12:30   0:00  \_ /usr/sbin/httpd -k start
nobody    36634  0.1  0.7 277484 18132 ?        S    12:30   0:00  \_ /usr/sbin/httpd -k start
nobody    36650  0.2  0.7 277828 18320 ?        S    12:30   0:00  \_ /usr/sbin/httpd -k start
nobody    36652  0.1  0.7 277760 18728 ?        S    12:30   0:00  \_ /usr/sbin/httpd -k start
nobody    36653  0.0  0.7 277760 18120 ?        S    12:30   0:00  \_ /usr/sbin/httpd -k start
nobody    38089  0.0  0.6 277052 15648 ?        S    12:32   0:00  \_ /usr/sbin/httpd -k start
nobody    38104  0.1  0.7 277760 17776 ?        S    12:32   0:00  \_ /usr/sbin/httpd -k start
nobody    38105  0.1  0.7 277760 17824 ?        S    12:32   0:00  \_ /usr/sbin/httpd -k start
nobody    38144  0.1  0.7 277760 17724 ?        S    12:32   0:00  \_ /usr/sbin/httpd -k start
nobody    38244  0.1  0.7 277792 18448 ?        S    12:32   0:00  \_ /usr/sbin/httpd -k start
nobody    38276  0.2  0.7 277760 17864 ?        S    12:32   0:00  \_ /usr/sbin/httpd -k start
nobody    38288  0.2  0.7 277760 17652 ?        S    12:32   0:00  \_ /usr/sbin/httpd -k start
root       2014  0.0  0.4 182468 10020 ?        Ss   09:40   0:09 lfd - sleeping
oysipao+  18294  0.0  0.0   3148     8 ?        Ss   10:01   0:00 [kworker]
oysipao+  18303  0.0  0.0   3152    36 ?        S    10:01   0:00  \_ [kworker]
root      56404  0.0  4.8 248036 117164 ?       Ss   10:49   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      64340  0.0  4.8 249300 118552 ?       S    11:00   0:00  \_ spamd child
root      64341  0.0  4.8 248036 116460 ?       S    11:00   0:00  \_ spamd child
## mysql stats
Uptime: 32066  Threads: 4  Questions: 760566  Slow queries: 0  Opens: 4895  Flush tables: 1  Open tables: 2000  Queries per second avg: 23.718
*************************** 1. row ***************************
     Id: 12101
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-20' LIMIT 1
*************************** 2. row ***************************
     Id: 12105
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 12109
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 4. row ***************************
     Id: 12110
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 12112
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 15.235.98.160 TIME_WAIT
      1 192.178.4.100 TIME_WAIT
      1 ::1 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 108.162.221.36 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      4 108.162.221.35 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 12:33:02 WAT
   Restart Time: Thursday, 20-Nov-2025 03:38:40 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 54 minutes 21 seconds
   Server load: 0.30 0.43 0.49
   Total accesses: 53244 - Total Traffic: 1.3 GB - Total Duration: 68775455
   CPU Usage: u6.69 s3.35 cu684.63 cs538.78 - 3.85% CPU load
   1.66 requests/sec - 42.8 kB/second - 25.8 kB/request - 1291.7 ms/request
   16 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

_KRRR_R_RWKKR.K____K_RWRK.......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur    Conn  Child  Slot     Client     Protocol              VHost                             Request
   0-0  31256 0/101/2625 _ 2.59 1     340 1326720  0.0   2.69  78.44 192.178.4.103  http/1.1 team.cloudware.ng:443           GET /?l=2684451910 HTTP/1.1
   1-0  31344 1/218/2672 K 3.10 0     391 44685439 36.6  2.88  69.11 192.178.4.98   http/1.1 team.cloudware.ng:443           GET /?l=303797892 HTTP/1.1
   2-0  31055 0/122/2565 R 2.70 54    18  1309981  0.0   3.01  75.15 182.188.56.31  http/1.1
   3-0  32555 0/106/3010 R 2.28 50    6   1360845  0.0   3.07  73.07 197.211.57.13  http/1.1
   4-0  33324 0/146/2621 R 1.89 53    16  1324362  0.0   1.56  64.74 182.188.56.31  http/1.1
   5-0  32100 0/208/2472 _ 3.61 1     24  1098083  0.0   3.19  60.16 116.203.129.16 http/1.1 cloudsms.com.ng:443             GET /cron/process_queue5.php HTTP/1.1
   6-0  38089 0/0/2321   R 0.00 50    0   1164845  0.0   0.00  58.04 197.211.57.13  http/1.1
   7-0  33884 0/233/2613 _ 2.04 0     25  1192705  0.0   2.07  67.96 128.140.8.200  http/1.1 cloudsms.com.ng:443             GET /cron/process_queue3.php HTTP/1.1
   8-0  36622 0/29/2256  R 1.00 51    1   1176265  0.0   0.77  74.63 182.188.56.31  http/1.1 health.oyostate.gov.ng:443
   9-0  38104 0/11/2623  W 0.29 0     0   1195757  0.0   0.29  63.50 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   10-0 38105 4/13/2303  K 0.34 2     258 1135776  124.5 0.38  56.63 192.178.4.101  http/1.1 team.cloudware.ng:443           GET /?l=3727823178 HTTP/1.1
   11-0 36633 7/63/2437  K 1.08 1     349 1108245  215.4 1.08  54.62 192.178.4.104  http/1.1 team.cloudware.ng:443           GET /?l=3048397326 HTTP/1.1
   12-0 27158 0/209/2231 R 4.95 53    0   1149103  0.0   5.28  55.12 182.188.56.31  http/1.1
   13-0 -     0/0/1945   . 0.00 22    0   990655   0.0   0.00  47.57 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   14-0 32137 2/133/1843 K 3.06 0     319 940209   63.8  3.13  50.11 192.178.4.99   http/1.1 team.cloudware.ng:443           GET /?l=595327089 HTTP/1.1
   15-0 36634 0/38/1812  _ 0.93 1     22  810735   0.0   0.94  39.28 116.203.129.16 http/1.1 cloudsms.com.ng:443             GET /cron/process_queue2.php HTTP/1.1
   16-0 36650 0/49/1684  _ 1.28 0     0   812814   0.0   1.32  41.62 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   17-0 38144 0/10/1536  _ 0.26 1     22  798535   0.0   0.29  39.94 116.203.134.67 http/1.1 cloudsms.com.ng:443             GET /cron/process_queue4.php HTTP/1.1
   18-0 38244 0/57/2001  _ 0.06 0     273 914986   0.0   0.10  39.80 192.178.4.96   http/1.1 team.cloudware.ng:443           GET /?l=1432962235 HTTP/1.1
   19-0 36652 23/59/1954 K 0.96 0     30  746368   20.6  0.98  45.30 185.9.16.102   http/1.1 proxy-subdomains-vhost.localhos GET /wp-content/up.php HTTP/1.1
   20-0 38276 0/15/1642  _ 0.38 1     24  711006   0.0   0.40  39.17 116.203.129.16 http/1.1 cloudsms.com.ng:443             GET /cron/process_queue1.php HTTP/1.1
   21-0 36653 0/17/1101  R 0.45 81    343 449556   0.0   0.51  23.01 107.189.27.59  http/1.1 nescrow.com.ng:443
   22-0 31064 1/198/1273 W 3.40 0     0   527175   34.7  3.49  30.96 192.178.4.100  http/1.1 team.cloudware.ng:443           GET /?l=3607153144 HTTP/1.1
   23-0 31091 0/85/532   R 2.15 51    0   252208   0.0   2.18  12.90 182.188.56.31  http/1.1 health.oyostate.gov.ng:443
   24-0 38288 4/11/744   K 0.28 0     305 371397   129.9 0.32  18.32 192.178.4.105  http/1.1 team.cloudware.ng:443           GET /?l=848161027 HTTP/1.1
   25-0 -     0/0/547    . 0.00 23    0   278294   0.0   0.00  14.01 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 -     0/0/14     . 0.00 3958  0   7758     0.0   0.00  0.26  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/475    . 0.00 3799  0   233214   0.0   0.00  13.25 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 -     0/0/231    . 0.00 3202  0   127638   0.0   0.00  5.41  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/483    . 0.00 3322  0   242729   0.0   0.00  13.15 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/150    . 0.00 3941  0   68176    0.0   0.00  2.88  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 -     0/0/49     . 0.00 3956  0   18776    0.0   0.00  0.89  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/23     . 0.00 3959  0   15181    0.0   0.00  0.31  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 -     0/0/5      . 0.00 4321  0   879      0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -     0/0/19     . 0.00 31776 0   9074     0.0   0.00  0.45  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/4      . 0.00 31826 0   2048     0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/2      . 0.00 31844 0   738      0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/8      . 0.00 31834 0   3463     0.0   0.00  0.19  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/4      . 0.00 31827 0   1877     0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/2      . 0.00 31839 0   599      0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/6      . 0.00 31832 0   3057     0.0   0.00  0.15  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/3      . 0.00 31828 0   840      0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/227    . 0.00 30935 0   110452   0.0   0.00  5.70  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/9      . 0.00 31831 0   4927     0.0   0.00  0.24  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/154    . 0.00 31310 0   84969    0.0   0.00  4.58  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/13     . 0.00 31798 0   6975     0.0   0.00  0.32  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 916
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 12 seconds, (range: 0...47)
   index usage: 16%, cache usage: 21%
   total entries stored since starting: 33356
   total entries replaced since starting: 0
   total entries expired since starting: 32426
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 16 hit, 48 miss
   total removes since starting: 14 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit