403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-22.02.54.txt
 ## swap threshold exceeded
## server overview
2025-11-22.02.54 load[0] mem[59/61] mysql[1/8] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1262         142          50         957         864
Swap:          1999        1331         668
 02:54:01 up  1:57,  0 users,  load average: 0.42, 0.22, 0.23
## system overview
top - 02:54:01 up  1:57,  0 users,  load average: 0.42, 0.22, 0.23
Tasks: 208 total,   2 running, 205 sleeping,   0 stopped,   1 zombie
%Cpu(s): 56.2 us, 40.6 sy,  0.0 ni,  3.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   129696 free,  1309372 used,   981232 buff/cache
KiB Swap:  2047996 total,   685052 free,  1362944 used.   868832 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1816 mysql     20   0 1457824 229264   2856 S  33.3  9.5   1:22.02 /usr/sbin+
 84190 nigeria   20   0  404052  16140  10384 S  13.3  0.7   0:00.02 /opt/cpan+
  2021 root      20   0  181884  10664   1120 S   6.7  0.4   0:06.26 lfd - sle+
 71736 nobody    20   0  277584  20396   4800 S   6.7  0.8   0:01.38 /usr/sbin+
 75613 nobody    20   0  277916  19920   4296 S   6.7  0.8   0:00.89 /usr/sbin+
 84185 pactpay   20   0  480124  17312  11572 S   6.7  0.7   0:00.01 /opt/cpan+
 84195 cloudsms  20   0  404052  15612  10164 S   6.7  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44396   3296   1460 S   0.0  0.1   0:09.64 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.37 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.31 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:06.64 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.29 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.99 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:10.26 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kauditd]
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:01.03 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:00.90 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.40 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   356 root      20   0   40244   6436   6132 S   0.0  0.3   0:03.80 /usr/lib/+
   380 root      20   0   45352    244     72 S   0.0  0.0   0:00.33 /usr/lib/+
   406 root      16  -4   55532    488    360 S   0.0  0.0   0:00.57 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   483 root      20   0   21540    384    276 S   0.0  0.0   0:00.15 /usr/sbin+
   485 root      20   0   24712   1168    808 S   0.0  0.0   0:01.69 /usr/lib/+
   486 root      20   0  152780    116     76 S   0.0  0.0   0:00.00 /usr/sbin+
   487 root      20   0  224148   5688    980 S   0.0  0.2   0:00.15 queueproc+
   488 root      20   0   52852    260    164 S   0.0  0.0   0:00.00 /usr/sbin+
   495 polkitd   20   0  612240    896    464 S   0.0  0.0   0:01.03 /usr/lib/+
   498 dbus      20   0   58748   1344    612 S   0.0  0.1   0:03.90 /usr/bin/+
   506 rpc       20   0   69256    148     44 S   0.0  0.0   0:00.01 /sbin/rpc+
   518 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   520 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   543 nscd      20   0  928956   1388    688 S   0.0  0.1   0:05.17 /usr/sbin+
   554 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124476    440    308 S   0.0  0.0   0:00.20 /usr/sbin+
   577 root      20   0  108296     44     40 S   0.0  0.0   0:00.00 /sbin/age+
   578 root      20   0  114704      8      8 S   0.0  0.0   0:00.02 /bin/bash
   595 mailnull  20   0   90824   3824    752 S   0.0  0.2   0:00.23 /usr/sbin+
   628 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:02.84 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  572372    976    392 S   0.0  0.0   0:00.69 /usr/bin/+
   920 root      20   0  232784   5680   5072 S   0.0  0.2   0:01.84 /usr/sbin+
   926 root      20   0 1689392 306152    144 S   0.0 12.6   0:13.50 /usr/loca+
   927 named     20   0 1054792  35192   1976 S   0.0  1.5   0:03.63 /usr/sbin+
   930 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.15 /usr/bin/+
   931 root      20   0  389508    544    336 S   0.0  0.0   0:00.25 php-fpm: +
   932 root      20   0  445028   3228   3116 S   0.0  0.1   0:00.33 sw-engine+
   939 root      20   0  439788  11344  11012 S   0.0  0.5   0:00.28 php-fpm: +
   941 systuser  20   0  113932   2064      0 S   0.0  0.1   0:00.01 /usr/loca+
   943 root      20   0  388892    520    316 S   0.0  0.0   0:00.23 php-fpm: +
   944 cpanelc+  20   0   10608   3528   2324 S   0.0  0.1   0:05.55 /usr/loca+
   946 systuser  20   0  114016  15772   2604 S   0.0  0.7   0:01.82 /usr/loca+
   949 systuser  20   0  113016   1600      0 S   0.0  0.1   0:00.00 /usr/loca+
   958 root      20   0  396248    504    328 S   0.0  0.0   0:00.24 php-fpm: +
   959 root      20   0  111304    392    292 S   0.0  0.0   0:00.74 /usr/sbin+
   960 root      20   0   51508    488    328 S   0.0  0.0   0:00.14 /usr/sbin+
   962 root      20   0  261024   6364   1536 S   0.0  0.3   0:00.97 cpsrvd (S+
   965 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   972 root      20   0  400740   2644    640 S   0.0  0.1   0:00.80 php-fpm: +
   973 root      20   0  153404    280    200 S   0.0  0.0   0:00.14 pure-ftpd+
   974 root      20   0 1277312  10432     40 S   0.0  0.4   0:28.01 /usr/bin/+
   975 root      20   0 1276356   9348      8 S   0.0  0.4   0:25.48 /usr/bin/+
   977 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   992 telegraf  20   0 5654304  36040   5492 S   0.0  1.5   0:04.06 /usr/loca+
  1079 dovenull  20   0   47136   3216   2232 S   0.0  0.1   0:00.21 dovecot/p+
  1080 dovenull  20   0   47392   3388   2288 S   0.0  0.1   0:00.14 dovecot/i+
  1081 dovecot   20   0   10320    372    260 S   0.0  0.0   0:00.06 dovecot/a+
  1082 root      20   0   10452    488    308 S   0.0  0.0   0:00.15 dovecot/l+
  1083 dovenull  20   0   47300   3216   2192 S   0.0  0.1   0:00.31 dovecot/p+
  1084 dovenull  20   0   47424   2744   1712 S   0.0  0.1   0:00.08 dovecot/i+
  1090 root      20   0   24396   2168    496 S   0.0  0.1   0:00.06 dovecot/c+
  1091 dovecot   20   0   13568    584    380 S   0.0  0.0   0:00.01 dovecot/s+
  1141 root      20   0  247944 116904    876 S   0.0  4.8   0:03.69 /usr/loca+
  1153 dovecot   20   0   41156   1496   1020 S   0.0  0.1   0:00.42 dovecot/a+
  1158 systuser  20   0  157704   2812    828 S   0.0  0.1   0:00.05 SonarPush+
  1177 wp-tool+  20   0  387528  13052   1424 S   0.0  0.5   0:00.14 /usr/bin/+
  1178 wp-tool+  20   0  412368  32152   1364 S   0.0  1.3   0:02.41 /usr/bin/+
  1261 root      20   0  262228  21348   3488 S   0.0  0.9   0:00.45 cpdavd - +
  1262 root      20   0  209248  10916   1452 S   0.0  0.5   0:01.03 tailwatchd
  1263 root      20   0  167452   2168    792 S   0.0  0.1   0:00.19 dnsadmin +
  1662 root      38  18  130416   1432    696 S   0.0  0.1   0:00.02 cpanellog+
  1690 root      20   0  299272    672    292 S   0.0  0.0   0:00.19 php-fpm: +
  1927 root      20   0  267052   8332    640 S   0.0  0.3   0:00.60 /usr/sbin+
  1929 root      20   0   12840    324    228 S   0.0  0.0   0:00.70 /usr/loca+
  1930 root      20   0   12732    300    224 S   0.0  0.0   0:00.61 /usr/loca+
  1931 root      20   0   12880    332    228 S   0.0  0.0   0:00.64 /usr/loca+
  1939 root      20   0   53268     60     60 S   0.0  0.0   0:00.04 /usr/loca+
  4410 root      20   0  183048    572     32 S   0.0  0.0   0:00.00 /usr/sbin+
  4453 root      20   0  113284    180      0 S   0.0  0.0   0:00.00 /bin/sh -+
  4476 root      20   0  108056     76      0 S   0.0  0.0   0:00.00 sleep 4h +
  4531 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
  4539 oysipao+  20   0    3152    512     24 S   0.0  0.0   0:00.13 [kworker]
  6717 root      20   0  249208 118404   1060 S   0.0  4.9   0:00.55 spamd chi+
  6719 root      20   0  247944 116292    288 S   0.0  4.8   0:00.00 spamd chi+
 27127 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 57550 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 60213 nobody    20   0  277640  20644   4748 S   0.0  0.9   0:02.56 /usr/sbin+
 61773 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 63157 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 66402 nobody    20   0  277596  20608   4856 S   0.0  0.9   0:02.14 /usr/sbin+
 68512 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 69703 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 69778 nobody    20   0  277596  20496   4804 S   0.0  0.8   0:01.61 /usr/sbin+
 70871 nobody    20   0  277560  20188   4640 S   0.0  0.8   0:01.56 /usr/sbin+
 70872 nobody    20   0  277932  20528   4796 S   0.0  0.8   0:01.60 /usr/sbin+
 72695 nobody    20   0  277584  20244   4700 S   0.0  0.8   0:01.19 /usr/sbin+
 73780 nobody    20   0  277908  20168   4684 S   0.0  0.8   0:01.02 /usr/sbin+
 74054 nobody    20   0  277908  19900   4404 S   0.0  0.8   0:01.05 /usr/sbin+
 74239 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 75550 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 76263 nobody    20   0  277584  19764   4364 S   0.0  0.8   0:00.95 /usr/sbin+
 79520 nobody    20   0  277528  19984   4544 S   0.0  0.8   0:00.70 /usr/sbin+
 80786 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 80855 nobody    20   0  277520  19296   4008 S   0.0  0.8   0:00.48 /usr/sbin+
 82182 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 82223 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 82282 nobody    20   0  277520  19244   3964 S   0.0  0.8   0:00.24 /usr/sbin+
 82531 mailnull  20   0   91204   4904   1744 S   0.0  0.2   0:00.00 /usr/sbin+
 82791 nobody    20   0  277520  19108   3864 S   0.0  0.8   0:00.17 /usr/sbin+
 83548 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 83756 nobody    20   0  277520  18860   3620 S   0.0  0.8   0:00.14 /usr/sbin+
 83971 nigeria   20   0  400460   5200   2384 S   0.0  0.2   0:00.01 php-fpm: +
 84040 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 84078 root      20   0  111304   4448   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 84079 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 84082 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 84083 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 84111 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 84120 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 84121 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 84122 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 84123 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 84124 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 84125 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 84126 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 84127 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 84128 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 84129 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 84130 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 84131 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 84132 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 84133 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 84134 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 84135 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 84136 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 84137 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 84138 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 84139 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 84161 root      20   0  160248   2068   1580 R   0.0  0.1   0:00.00 top -bcn1
 84162 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 84163 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 84164 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 84165 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 84166 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 84167 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 84168 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 84169 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 84170 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 84171 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 84172 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 84173 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 84174 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 84175 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 84176 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 84184 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 84186 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 84187 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 84188 robocal+  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 84189 saboakin  20   0       0      0      0 D   0.0  0.0   0:00.00 [jailshel+
 84191 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:56   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    00:56   0:06  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:56   0:10  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:56   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kauditd]
root        244  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   00:56   0:01  \_ [kworker/1:1H]
root        270  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [xprtiod]
root        628  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   00:56   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   00:56   0:00  \_ [ext4-rsv-conver]
root      27127  0.0  0.0      0     0 ?        S    01:33   0:00  \_ [kworker/u200:1]
root      57550  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/1:3]
root      61773  0.0  0.0      0     0 ?        S    02:24   0:00  \_ [kworker/1:0]
root      63157  0.0  0.0      0     0 ?        S    02:26   0:00  \_ [kworker/0:3]
root      68512  0.0  0.0      0     0 ?        S    02:34   0:00  \_ [kworker/0:2]
root      69703  0.0  0.0      0     0 ?        S    02:35   0:00  \_ [kworker/u200:0]
root      74239  0.0  0.0      0     0 ?        S    02:42   0:00  \_ [kworker/0:1]
root      75550  0.0  0.0      0     0 ?        S    02:44   0:00  \_ [kworker/1:2]
root      80786  0.0  0.0      0     0 ?        S    02:49   0:00  \_ [kworker/0:0]
root      82182  0.0  0.0      0     0 ?        S    02:51   0:00  \_ [kworker/1:1]
root      82223  0.0  0.0      0     0 ?        S    02:51   0:00  \_ [kworker/1:4]
root      83548  0.0  0.0      0     0 ?        S    02:53   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44396  3296 ?        Ss   00:56   0:09 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.2  40244  6436 ?        Ss   00:56   0:03 /usr/lib/systemd/systemd-journald
root        380  0.0  0.0  45352   244 ?        Ss   00:56   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   488 ?        S<sl 00:56   0:00 /sbin/auditd
root        483  0.0  0.0  21540   384 ?        Ss   00:56   0:00 /usr/sbin/irqbalance --foreground
root        485  0.0  0.0  24712  1168 ?        Ss   00:56   0:01 /usr/lib/systemd/systemd-logind
root        486  0.0  0.0 152780   116 ?        Ss   00:56   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        487  0.0  0.2 224148  5688 ?        Ss   00:56   0:00 queueprocd - waiting up to 60s to process a task
root        488  0.0  0.0  52852   260 ?        Ss   00:56   0:00 /usr/sbin/smartd -n -q never
polkitd     495  0.0  0.0 612240   896 ?        Ssl  00:56   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        498  0.0  0.0  58748  1344 ?        Ss   00:56   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         506  0.0  0.0  69256   148 ?        Ss   00:56   0:00 /sbin/rpcbind -w
root        518  0.0  0.0   4388    36 ?        Ss   00:56   0:00 /usr/sbin/acpid
root        520  0.0  0.0 195208     0 ?        Ssl  00:56   0:00 /usr/sbin/gssproxy -D
nscd        543  0.0  0.0 928956  1388 ?        Ssl  00:56   0:05 /usr/sbin/nscd
root        554  0.0  0.0  24208     0 ?        Ss   00:56   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 124476   440 ?        Ss   00:56   0:00 /usr/sbin/crond -n
root       4410  0.0  0.0 183048   572 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       4453  0.0  0.0 113284   180 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       4476  0.0  0.0 108056    76 ?        S    01:00   0:00  |       \_ sleep 4h 19m
root      84121  0.0  0.0 183044  2148 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      84137  0.0  0.0 113284  1212 ?        Ss   02:54   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      84138  0.0  0.0 108052   356 ?        S    02:54   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      84139  0.0  0.0 113288  1516 ?        S    02:54   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      84197  0.0  0.0 153840  2092 ?        R    02:54   0:00  |               \_ ps auxf
root      84122  0.0  0.0 183044  2148 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      84176  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      84123  0.0  0.0 183044  2148 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      84167  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      84124  0.0  0.0 183044  2148 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      84172  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      84125  0.0  0.0 183044  2148 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      84173  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      84126  0.0  0.0 183044  2144 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      84162  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      84127  0.0  0.0 183044  2144 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      84165  0.0  0.0  20164   964 ?        Ss   02:54   0:00  |   \_ jailshell (cloudsms) [84187] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  84187  0.0  0.0  20164   260 ?        S    02:54   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  84191  0.0  0.0 113284  1212 ?        S    02:54   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  84195  0.0  0.6 404052 15612 ?        S    02:54   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      84128  0.0  0.0 183044  2144 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      84174  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      84129  0.0  0.0 183044  2144 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      84175  0.0  0.0  20164   808 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      84130  0.0  0.0 183044  2140 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      84166  0.0  0.0  20164   804 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      84131  0.0  0.0 183044  2140 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      84164  0.0  0.0  20164   804 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      84132  0.0  0.0 183044  2140 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      84169  0.0  0.0  20164   804 ?        Ss   02:54   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      84133  0.0  0.0 183044  2144 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      84163  0.0  0.0  20164   968 ?        Ss   02:54   0:00  |   \_ jailshell (pactpay) [84184] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   84184  0.0  0.0  20164   260 ?        S    02:54   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   84185  0.0  0.7 480124 17312 ?        S    02:54   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      84134  0.0  0.0 183044  2144 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      84168  0.0  0.0  20164   964 ?        Ss   02:54   0:00  |   \_ jailshell (robocallscloudsm) [84188]  /home/robocallscloudsm/public_html && /usr/local/bin/php artisan schedule:run >> /dev/null 2>&1
robocal+  84188  0.0  0.0      0     0 ?        D    02:54   0:00  |       \_ [jailshell]
root      84135  0.0  0.0 183044  2140 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      84170  0.0  0.0  20164   964 ?        Ss   02:54   0:00  |   \_ jailshell (nigeria) [84186] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   84186  0.0  0.0  20164   260 ?        S    02:54   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   84190  0.0  0.6 404052 16140 ?        S    02:54   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      84136  0.0  0.0 183044  2144 ?        S    02:54   0:00  \_ /usr/sbin/CROND -n
root      84171  0.0  0.0  20164   960 ?        Ss   02:54   0:00      \_ jailshell (saboakin) [84189] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  84189  0.0  0.0      0     0 ?        R    02:54   0:00          \_ [jailshell]
root        577  0.0  0.0 108296    44 tty1     Ss+  00:56   0:00 /sbin/agetty --noclear tty1 linux
root        578  0.0  0.0 114704     8 ttyS0    Ss+  00:56   0:00 /bin/bash
mailnull    595  0.0  0.1  90824  3824 ?        Ss   00:56   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  82531  0.0  0.2  91204  4904 ?        S    02:51   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 572372   976 ?        Ssl  00:56   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        920  0.0  0.2 232784  5680 ?        Ssl  00:56   0:01 /usr/sbin/rsyslogd -n
root        926  0.1 12.6 1689392 306152 ?      Ssl  00:56   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       927  0.0  1.4 1054792 35192 ?       Ssl  00:56   0:03 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
memcach+    930  0.0  0.0 342400     0 ?        Ssl  00:56   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        931  0.0  0.0 389508   544 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        932  0.0  0.1 445028  3228 ?        Ss   00:56   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  84120  0.0  0.0 445028   320 ?        S    02:54   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        939  0.0  0.4 439788 11344 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    941  0.0  0.0 113932  2064 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 388892   520 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    944  0.0  0.1  10608  3528 ?        Rs   00:56   0:05 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    946  0.0  0.6 114016 15772 ?        Ssl  00:56   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    949  0.0  0.0 113016  1600 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        958  0.0  0.0 396248   504 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        959  0.0  0.0 111304   392 ?        Ss   00:56   0:00 /usr/sbin/sshd -D
root      84078  0.0  0.1 111304  4448 ?        Ss   02:53   0:00  \_ sshd: [accepted]
sshd      84079  0.0  0.1 115644  2628 ?        S    02:53   0:00  |   \_ sshd: [net]
root      84082  0.0  0.1 111304  4272 ?        Ss   02:53   0:00  \_ sshd: [accepted]
sshd      84083  0.0  0.1 115644  2632 ?        S    02:53   0:00      \_ sshd: [net]
root        960  0.0  0.0  51508   488 ?        Ss   00:56   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1079  0.0  0.1  47136  3216 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  47392  3388 ?        S    00:56   0:00  \_ dovecot/imap-login
dovecot    1081  0.0  0.0  10320   372 ?        S    00:56   0:00  \_ dovecot/anvil
root       1082  0.0  0.0  10452   488 ?        S    00:56   0:00  \_ dovecot/log
dovenull   1083  0.0  0.1  47300  3216 ?        S    00:56   0:00  \_ dovecot/pop3-login
dovenull   1084  0.0  0.1  47424  2744 ?        S    00:56   0:00  \_ dovecot/imap-login
root       1090  0.0  0.0  24396  2168 ?        S    00:56   0:00  \_ dovecot/config
dovecot    1091  0.0  0.0  13568   584 ?        S    00:56   0:00  \_ dovecot/stats
dovecot    1153  0.0  0.0  41156  1496 ?        S    00:56   0:00  \_ dovecot/auth
root      84040  0.0  0.1  41052  2728 ?        S    02:53   0:00  \_ dovecot/auth -w
root        962  0.0  0.2 261024  6364 ?        Ss   00:56   0:00 cpsrvd (SSL) - waiting for connections                   
root      84111  0.0  0.0      0     0 ?        Z    02:53   0:00  \_ [cpaneld - servi] <defunct>
systuser    965  0.0  0.0  14068    48 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        972  0.0  0.1 400740  2644 ?        Ss   00:56   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   83971  0.0  0.2 400460  5200 ?        S    02:53   0:00  \_ php-fpm: pool nigeriadecide_org
root        973  0.0  0.0 153404   280 ?        Ss   00:56   0:00 pure-ftpd (SERVER)
root        974  0.3  0.4 1277312 10432 ?       Ssl  00:56   0:28 /usr/bin/checkstatus
root        975  0.3  0.3 1276356 9348 ?        Ssl  00:56   0:25 /usr/bin/cspdaemon
systuser    977  0.0  0.0  10132    44 ?        Ssl  00:56   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    992  0.0  1.4 5654304 36040 ?       SLsl 00:56   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1141  0.0  4.8 247944 116904 ?       Ss   00:56   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6717  0.0  4.8 249208 118404 ?       S    01:02   0:00  \_ spamd child
root       6719  0.0  4.8 247944 116292 ?       S    01:02   0:00  \_ spamd child
systuser   1158  0.0  0.1 157704  2812 ?        S    00:56   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1177  0.0  0.5 387528 13052 ?        Ss   00:56   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1178  0.0  1.3 412368 32152 ?        Rs   00:56   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1261  0.0  0.8 262228 21348 ?        Ss   00:56   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1262  0.0  0.4 209248 10916 ?        Ss   00:56   0:01 tailwatchd
root       1263  0.0  0.0 167452  2168 ?        Ss   00:56   0:00 dnsadmin - dormant mode
root       1662  0.0  0.0 130416  1432 ?        SN   00:56   0:00 cpanellogd - sleeping for logs
root       1690  0.0  0.0 299272   672 ?        Ss   00:56   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
mysql      1816  1.1  9.4 1457824 229264 ?      Sl   00:56   1:22 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1927  0.0  0.3 267052  8332 ?        Ss   00:56   0:00 /usr/sbin/httpd -k start
root       1929  0.0  0.0  12840   324 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1930  0.0  0.0  12732   300 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1931  0.0  0.0  12880   332 ?        S    00:56   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53268    60 ?        S    00:56   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    60213  0.1  0.8 277640 20644 ?        S    02:21   0:02  \_ /usr/sbin/httpd -k start
nobody    66402  0.1  0.8 277596 20608 ?        S    02:30   0:02  \_ /usr/sbin/httpd -k start
nobody    69778  0.1  0.8 277596 20496 ?        S    02:35   0:01  \_ /usr/sbin/httpd -k start
nobody    70871  0.1  0.8 277560 20188 ?        S    02:37   0:01  \_ /usr/sbin/httpd -k start
nobody    70872  0.1  0.8 277932 20528 ?        S    02:37   0:01  \_ /usr/sbin/httpd -k start
nobody    71736  0.1  0.8 277584 20396 ?        S    02:38   0:01  \_ /usr/sbin/httpd -k start
nobody    72695  0.1  0.8 277584 20244 ?        S    02:39   0:01  \_ /usr/sbin/httpd -k start
nobody    73780  0.1  0.8 277908 20168 ?        S    02:41   0:01  \_ /usr/sbin/httpd -k start
nobody    74054  0.1  0.8 277908 19900 ?        S    02:41   0:01  \_ /usr/sbin/httpd -k start
nobody    75613  0.1  0.8 277916 19920 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    76263  0.1  0.8 277584 19764 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    79520  0.1  0.8 277528 19984 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    80855  0.1  0.7 277520 19296 ?        S    02:49   0:00  \_ /usr/sbin/httpd -k start
nobody    82282  0.1  0.7 277520 19244 ?        S    02:51   0:00  \_ /usr/sbin/httpd -k start
nobody    82791  0.1  0.7 277520 19108 ?        S    02:51   0:00  \_ /usr/sbin/httpd -k start
nobody    83756  0.3  0.7 277520 18860 ?        S    02:53   0:00  \_ /usr/sbin/httpd -k start
root       2021  0.0  0.4 181884 10664 ?        Ss   00:56   0:06 lfd - sleeping
oysipao+   4531  0.0  0.0   3148   412 ?        Ss   01:00   0:00 [kworker]
oysipao+   4539  0.0  0.0   3152   512 ?        S    01:00   0:00  \_ [kworker]
## mysql stats
Uptime: 7030  Threads: 5  Questions: 446232  Slow queries: 0  Opens: 2552  Flush tables: 1  Open tables: 2000  Queries per second avg: 63.475
*************************** 1. row ***************************
     Id: 8437
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 8438
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 8441
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 4. row ***************************
     Id: 8442
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 8444
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 13.216.9.63 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 18.232.190.199 TIME_WAIT
      1 192.178.4.101 TIME_WAIT
      1 192.178.4.98 TIME_WAIT
      1 192.178.4.99 TIME_WAIT
      1 ::1 TIME_WAIT
      1 3.211.219.254 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 22-Nov-2025 02:54:01 WAT
   Restart Time: Saturday, 22-Nov-2025 00:56:55 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 57 minutes 6 seconds
   Server load: 0.42 0.22 0.23
   Total accesses: 31332 - Total Traffic: 775.6 MB - Total Duration: 14857098
   CPU Usage: u13.04 s5.24 cu386.04 cs312.21 - 10.2% CPU load
   4.46 requests/sec - 113.0 kB/second - 25.3 kB/request - 474.183 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

_KKKKW.KK_KK...K_...._KK........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS  Req  Dur   Conn  Child  Slot     Client      Protocol         VHost                                      Request
   0-0  73780 0/190/1496 _ 4.48  0    271 731700 0.0   4.36  35.50 192.178.4.103   http/1.1 team.cloudware.ng:443  GET /?l=506334241 HTTP/1.1
   1-0  80855 2/77/1652  K 2.07  2    396 737326 66.2  2.20  42.95 192.178.4.98    http/1.1 team.cloudware.ng:443  GET /?l=1274429399 HTTP/1.1
   2-0  74054 7/184/1578 K 4.40  1    352 764861 221.4 4.68  43.09 192.178.4.97    http/1.1 team.cloudware.ng:443  GET /?l=1736431690 HTTP/1.1
   3-0  79520 1/115/1544 K 3.17  0    355 878059 34.5  3.10  38.75 192.178.4.105   http/1.1 team.cloudware.ng:443  GET /?l=2513811447 HTTP/1.1
   4-0  76263 7/161/1591 K 4.10  1    341 765716 221.0 4.27  38.74 192.178.4.96    http/1.1 team.cloudware.ng:443  GET /?l=1825720352 HTTP/1.1
   5-0  82791 0/27/1404  W 0.68  0    0   614910 0.0   0.76  31.21 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   6-0  -     0/0/1751   . 0.00  8    0   748892 0.0   0.00  39.71 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   7-0  75613 2/143/1810 K 3.83  0    356 790581 65.0  4.00  40.91 192.178.4.102   http/1.1 team.cloudware.ng:443  GET /?l=4070991084 HTTP/1.1
   8-0  71736 3/248/1635 K 5.75  0    389 695189 94.1  6.01  40.08 192.178.4.98    http/1.1 team.cloudware.ng:443  GET /?l=2499531299 HTTP/1.1
   9-0  83756 0/23/1151  _ 0.63  0    3   574636 0.0   0.64  29.46 34.231.118.144  http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/blog/blog/blog/images/2019electi
   10-0 82282 1/44/1103  K 0.95  1    264 536754 35.1  1.04  26.74 192.178.4.97    http/1.1 team.cloudware.ng:443  GET /?l=2324816114 HTTP/1.1
   11-0 66402 1/381/1475 K 9.14  1    401 700177 35.8  12.03 39.32 192.178.4.104   http/1.1 team.cloudware.ng:443  GET /?l=1480333237 HTTP/1.1
   12-0 -     0/0/936    . 0.00  655  0   374563 0.0   0.00  20.56 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   13-0 -     0/0/1319   . 0.00  725  0   763925 0.0   0.00  35.13 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   14-0 -     0/0/1243   . 0.00  505  0   613759 0.0   0.00  31.43 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 72695 2/207/799  K 4.98  3    293 400428 65.1  5.17  20.39 192.178.4.101   http/1.1 team.cloudware.ng:443  GET /?l=224715645 HTTP/1.1
   16-0 69778 0/300/1087 _ 6.84  0    0   515599 0.0   7.74  26.42 ::1             http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   17-0 -     0/0/625    . 0.00  890  0   310465 0.0   0.00  15.56 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 -     0/0/1432   . 0.00  392  0   532938 0.0   0.00  44.51 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-0 -     0/0/332    . 0.00  909  0   159610 0.0   0.00  7.69  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 -     0/0/453    . 0.00  982  0   187237 0.0   0.00  9.93  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 70871 0/267/837  _ 6.78  0    154 439518 0.0   7.11  21.77 217.113.194.227 http/1.1 team.cloudware.ng:80   GET /var/cache/prod/pools/VV6jqwmg-R/R/Z/?C=M;O=D HTTP/1.1
   22-0 60213 1/462/1069 K 10.85 2    31  527574 5.8   11.35 25.59 66.249.70.1     http/1.1 test.cloudware.ng:443  GET /?2996676828?goodscode=2992750098 HTTP/1.1
   23-0 70872 2/283/775  K 7.57  1    345 532364 64.5  7.27  18.79 192.178.4.98    http/1.1 team.cloudware.ng:443  GET /?l=2300390445 HTTP/1.1
   24-0 -     0/0/243    . 0.00  1103 0   115317 0.0   0.00  5.86  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/7      . 0.00  4791 0   3826   0.0   0.00  0.18  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/3      . 0.00  4818 0   753    0.0   0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/3      . 0.00  4815 0   57     0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/4      . 0.00  4803 0   743    0.0   0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/8      . 0.00  4797 0   4677   0.0   0.00  0.21  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/3      . 0.00  4819 0   14     0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/503    . 0.00  2660 0   236742 0.0   0.00  12.77 ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/2      . 0.00  4845 0   7      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/5      . 0.00  4800 0   1824   0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/2      . 0.00  4842 0   21     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/145    . 0.00  4403 0   57340  0.0   0.00  3.26  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/234    . 0.00  3953 0   102124 0.0   0.00  5.53  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/2      . 0.00  4826 0   4587   0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/3      . 0.00  4821 0   34     0.0   0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/2      . 0.00  4844 0   8      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/3      . 0.00  4807 0   4408   0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/5      . 0.00  4801 0   2050   0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/9      . 0.00  4808 0   4574   0.0   0.00  0.23  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/2      . 0.00  4841 0   12     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/31     . 0.00  4708 0   20604  0.0   0.00  0.82  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/458    . 0.00  3387 0   169465 0.0   0.00  9.10  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/2      . 0.00  4849 0   4      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/3      . 0.00  4816 0   766    0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/2      . 0.00  4843 0   48     0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/2      . 0.00  4814 0   10     0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/3      . 0.00  4799 0   695    0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/7      . 0.00  4792 0   3150   0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/4      . 0.00  4795 0   538    0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/13     . 0.00  4793 0   8196   0.0   0.00  0.36  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00  4806 0   519    0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/1      . 0.00  4830 0   0      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/110    . 0.00  4401 0   48080  0.0   0.00  2.48  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/44     . 0.00  4684 0   13507  0.0   0.00  0.78  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   58-0 -     0/0/12     . 0.00  4802 0   7269   0.0   0.00  0.33  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   59-0 -     0/0/6      . 0.00  4786 0   1848   0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   60-0 -     0/0/1      . 0.00  4839 0   1      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   61-0 -     0/0/48     . 0.00  4677 0   10684  0.0   0.00  0.71  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   62-0 -     0/0/2      . 0.00  4811 0   7      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   63-0 -     0/0/1      . 0.00  4837 0   0      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   64-0 -     0/0/5      . 0.00  4798 0   1750   0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   65-0 -     0/0/1      . 0.00  4835 0   0      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   66-0 -     0/0/1      . 0.00  4836 0   0      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   67-0 -     0/0/2      . 0.00  4813 0   6      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   68-0 -     0/0/5      . 0.00  4787 0   859    0.0   0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   69-0 -     0/0/74     . 0.00  4555 0   36843  0.0   0.00  1.92  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   70-0 -     0/0/149    . 0.00  4192 0   74918  0.0   0.00  4.57  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   71-0 -     0/0/1      . 0.00  4831 0   0      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   72-0 -     0/0/1      . 0.00  4834 0   0      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   73-0 -     0/0/6      . 0.00  4790 0   3305   0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   74-0 -     0/0/6      . 0.00  4785 0   2230   0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   75-0 -     0/0/1      . 0.00  4833 0   0      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   76-0 -     0/0/1      . 0.00  4832 0   0      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   77-0 -     0/0/40     . 0.00  4694 0   15854  0.0   0.00  0.86  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   78-0 -     0/0/1      . 0.00  4838 0   0      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   79-0 -     0/0/1      . 0.00  4829 0   0      0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 948
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 1...41)
   index usage: 16%, cache usage: 22%
   total entries stored since starting: 22517
   total entries replaced since starting: 0
   total entries expired since starting: 21564
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 17 miss
   total removes since starting: 5 hit, 7 miss
Youez - 2016 - github.com/yon3zu
LinuXploit