403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-23.11.48.txt
 ## swap threshold exceeded
## server overview
2025-11-23.11.48 load[0] mem[69/57] mysql[1/7] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1561         119          50         682         582
Swap:          1999        1248         751
 11:48:01 up  1:47,  0 users,  load average: 0.79, 0.73, 0.59
## system overview
top - 11:48:01 up  1:47,  0 users,  load average: 0.79, 0.73, 0.59
Tasks: 211 total,   8 running, 202 sleeping,   0 stopped,   1 zombie
%Cpu(s): 61.3 us, 38.7 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    95880 free,  1623956 used,   700464 buff/cache
KiB Swap:  2047996 total,   769076 free,  1278920 used.   571036 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 81154 healtho+  20   0  460640  67480   4224 R  31.2  2.8   0:01.57 php-fpm: +
 81174 healtho+  20   0  460636  67512   4224 R  12.5  2.8   0:01.55 php-fpm: +
   356 root      20   0   39500   7208   6896 S   6.2  0.3   0:03.91 /usr/lib/+
  1838 mysql     20   0 1463560 229200   3456 R   6.2  9.5   1:31.34 /usr/sbin+
 71440 nobody    20   0  277916  20484   4600 S   6.2  0.8   0:01.07 /usr/sbin+
 73626 nobody    20   0  277584  19876   4520 S   6.2  0.8   0:00.77 /usr/sbin+
 81345 pactpay   20   0  479860  16168  10572 S   6.2  0.7   0:00.01 /opt/cpan+
 81350 saboakin  20   0  404052  15612  10156 S   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44412   3556   1516 S   0.0  0.1   0:11.53 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     5 root      20   0       0      0      0 S   0.0  0.0   0:00.90 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.44 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.24 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:06.22 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.23 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.09 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:11.24 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kauditd]
   242 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   250 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.18 [kworker/+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   266 root       0 -20       0      0      0 S   0.0  0.0   0:01.15 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.39 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   384 root      20   0   45352    244    104 S   0.0  0.0   0:00.37 /usr/lib/+
   409 root      16  -4   55532    500    368 S   0.0  0.0   0:00.60 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   487 polkitd   20   0  612240   2864    364 S   0.0  0.1   0:00.95 /usr/lib/+
   489 root      20   0   21540    380    268 S   0.0  0.0   0:00.14 /usr/sbin+
   493 nscd      20   0  994492   1284    576 S   0.0  0.1   0:04.47 /usr/sbin+
   494 root      20   0  152780     96     56 S   0.0  0.0   0:00.00 /usr/sbin+
   496 root      20   0   24704   1156    792 D   0.0  0.0   0:01.59 /usr/lib/+
   513 rpc       20   0   69256    160     52 S   0.0  0.0   0:00.01 /sbin/rpc+
   516 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   531 root      20   0   52852    356    260 S   0.0  0.0   0:00.01 /usr/sbin+
   535 dbus      20   0   57020   1324    620 R   0.0  0.1   0:03.54 /usr/bin/+
   552 root      20   0  224144   6360   1348 S   0.0  0.3   0:00.21 queueproc+
   553 root      20   0    4388     24     20 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124480    428    296 S   0.0  0.0   0:00.18 /usr/sbin+
   566 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   578 root      20   0  108296     32     28 S   0.0  0.0   0:00.00 /sbin/age+
   579 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   608 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   630 mailnull  20   0   89124   4440    812 S   0.0  0.2   0:00.22 /usr/sbin+
   658 root       0 -20       0      0      0 S   0.0  0.0   0:02.40 [loop0]
   673 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   675 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   932 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   934 root      20   0  445028   3200   3088 S   0.0  0.1   0:00.31 sw-engine+
   936 systuser  20   0  113676     72      0 S   0.0  0.0   0:00.00 /usr/loca+
   937 systuser  20   0  114016  12844   2640 S   0.0  0.5   0:01.63 /usr/loca+
   939 root      20   0  111304    364    264 S   0.0  0.0   0:00.85 /usr/sbin+
   940 systuser  20   0   12660     64      0 S   0.0  0.0   0:00.00 /usr/loca+
   944 root      20   0 1763224 409664    888 S   0.0 16.9   0:13.90 /usr/loca+
   949 named     20   0  990264  32208   1764 S   0.0  1.3   0:03.31 /usr/sbin+
   951 root      20   0  400740   2972    612 S   0.0  0.1   0:00.97 php-fpm: +
   955 root      20   0  389508    688    472 S   0.0  0.0   0:00.23 php-fpm: +
   957 root      20   0   51508    644    456 S   0.0  0.0   0:00.12 /usr/sbin+
   958 root      20   0  153404    252    168 S   0.0  0.0   0:00.15 pure-ftpd+
   959 systuser  20   0  113272     76      0 S   0.0  0.0   0:00.00 /usr/loca+
   968 root      20   0  396248    564    384 S   0.0  0.0   0:00.23 php-fpm: +
   970 cpanelc+  20   0   10028   3268   2448 S   0.0  0.1   0:05.16 /usr/loca+
   972 root      20   0  232784   7096   5920 S   0.0  0.3   0:01.88 /usr/sbin+
   973 root      20   0 1350088   9588      0 S   0.0  0.4   0:25.96 /usr/bin/+
   974 root      20   0  261156   7224   2216 S   0.0  0.3   0:03.18 cpsrvd (S+
   975 telegraf  20   0 5654048  35924   5668 S   0.0  1.5   0:03.83 /usr/loca+
   976 root      20   0  572372    748    164 S   0.0  0.0   0:00.62 /usr/bin/+
   997 root      20   0  439788  11232  11028 S   0.0  0.5   0:00.25 php-fpm: +
   998 root      20   0 1277312  10388     28 S   0.0  0.4   0:21.06 /usr/bin/+
  1002 root      20   0  388892    452    360 S   0.0  0.0   0:00.21 php-fpm: +
  1006 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.13 /usr/bin/+
  1099 dovenull  20   0   47252   3548   2476 S   0.0  0.1   0:00.22 dovecot/p+
  1100 dovenull  20   0   47484   3852   2560 S   0.0  0.2   0:00.09 dovecot/i+
  1101 dovecot   20   0   10320    236    116 S   0.0  0.0   0:00.04 dovecot/a+
  1102 root      20   0   10452    472    280 S   0.0  0.0   0:00.12 dovecot/l+
  1103 dovenull  20   0   47316   3692   2584 S   0.0  0.2   0:00.25 dovecot/p+
  1104 dovenull  20   0   47440   3732   2576 S   0.0  0.2   0:00.08 dovecot/i+
  1109 root      20   0   24564   2368    500 S   0.0  0.1   0:00.06 dovecot/c+
  1110 dovecot   20   0   13568    536    328 S   0.0  0.0   0:00.01 dovecot/s+
  1135 systuser  20   0  157704   2976    948 S   0.0  0.1   0:00.04 SonarPush+
  1146 wp-tool+  20   0  387528  13020   1392 S   0.0  0.5   0:00.14 /usr/bin/+
  1147 wp-tool+  20   0  412368  32000   1312 S   0.0  1.3   0:02.24 /usr/bin/+
  1197 dovecot   20   0   41156   1488   1020 S   0.0  0.1   0:00.28 dovecot/a+
  1258 root      20   0  167452   1308    708 S   0.0  0.1   0:00.13 dnsadmin +
  1262 root      20   0  209340  21280   3764 S   0.0  0.9   0:01.08 tailwatchd
  1263 root      20   0  183900   6688   3460 S   0.0  0.3   0:01.93 cpdavd - +
  1634 root      20   0  299272    752    376 S   0.0  0.0   0:00.16 php-fpm: +
  1673 root      38  18  130416   1432    700 S   0.0  0.1   0:00.01 cpanellog+
  2047 root      20   0  267052   8176    680 S   0.0  0.3   0:00.49 /usr/sbin+
  2068 root      20   0   12784    388    252 S   0.0  0.0   0:00.73 /usr/loca+
  2069 root      20   0   12732    360    248 S   0.0  0.0   0:00.63 /usr/loca+
  2070 root      20   0   12812    328    216 S   0.0  0.0   0:00.68 /usr/loca+
  2079 root      20   0   53256     40     40 S   0.0  0.0   0:00.05 /usr/loca+
  2194 root      20   0  181780  10480   1152 S   0.0  0.4   0:06.07 lfd - sle+
  2828 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  2835 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.12 [kworker]
 39734 root      20   0  247944 121116   4580 S   0.0  5.0   0:03.09 /usr/loca+
 43004 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 48387 root      20   0  265948 130580   3156 S   0.0  5.4   0:02.58 spamd chi+
 48388 root      20   0  247944 117960   1460 S   0.0  4.9   0:00.00 spamd chi+
 56134 nobody    20   0  277908  21252   5028 S   0.0  0.9   0:03.26 /usr/sbin+
 60414 nobody    20   0  277708  20900   4996 S   0.0  0.9   0:02.61 /usr/sbin+
 62111 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64240 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 66148 nobody    20   0  277632  20564   4880 S   0.0  0.8   0:01.99 /usr/sbin+
 67037 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 69958 nobody    20   0  277908  20492   4680 S   0.0  0.8   0:01.47 /usr/sbin+
 71316 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 71349 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 73362 nobody    20   0  277664  19840   4432 S   0.0  0.8   0:00.79 /usr/sbin+
 74259 nobody    20   0  277792  20236   4544 S   0.0  0.8   0:00.95 /usr/sbin+
 74810 root      20   0       0      0      0 D   0.0  0.0   0:00.01 [kworker/+
 74891 nobody    20   0  277780  19760   4372 S   0.0  0.8   0:00.66 /usr/sbin+
 75371 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 75515 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 77262 nobody    20   0  277520  19532   4204 S   0.0  0.8   0:00.57 /usr/sbin+
 77273 nobody    20   0  277780  19816   4352 S   0.0  0.8   0:00.51 /usr/sbin+
 78334 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 78363 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 78365 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 79505 nobody    20   0  277780  19752   4152 S   0.0  0.8   0:00.25 /usr/sbin+
 79952 root      20   0   60820   4508   3524 S   0.0  0.2   0:00.00 dovecot/l+
 80180 nobody    20   0  277944  19536   4016 S   0.0  0.8   0:00.14 /usr/sbin+
 80648 nobody    20   0  277780  19036   3732 S   0.0  0.8   0:00.10 /usr/sbin+
 80782 mailnull  20   0   90256   9708   4240 S   0.0  0.4   0:00.00 /usr/sbin+
 80829 root      20   0  111304   4444   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 80830 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 81048 nobody    20   0  277784  18892   3604 S   0.0  0.8   0:00.05 /usr/sbin+
 81122 root      20   0   28936   2368   1948 S   0.0  0.1   0:00.00 dovecot/q+
 81124 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 81134 nobody    20   0  277780  18812   3540 S   0.0  0.8   0:00.01 /usr/sbin+
 81144 healtho+  20   0  460772  67524   4220 S   0.0  2.8   0:01.87 php-fpm: +
 81198 wp-tool+  20   0  445028    552    380 S   0.0  0.0   0:00.00 sw-engine+
 81246 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 81252 nigeria   20   0  400460   5556   2408 S   0.0  0.2   0:00.02 php-fpm: +
 81263 nobody    20   0  277504  18044   3156 S   0.0  0.7   0:00.00 /usr/sbin+
 81276 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 81277 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 81278 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 81279 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 81280 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 81281 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 81282 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 81283 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 81284 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 81285 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 81286 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 81287 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 81288 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 81290 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 81291 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 81292 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 81293 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 81294 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 81316 root      20   0  160248   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 81317 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 81318 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 81319 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 81320 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 81321 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 81322 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 81323 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 81324 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 81326 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 81327 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 81328 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 81330 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 81331 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 81332 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 81336 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 81342 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 81343 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 81344 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 81346 nigeria   20   0  403064  13512   9136 R   0.0  0.6   0:00.00 /opt/cpan+
 81347 cloudsms  20   0  404052  15612  10128 S   0.0  0.6   0:00.00 /opt/cpan+
 81348 saboakin  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 81349 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 81352 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 81353 cloudsms  20   0  131872   3324   2384 R   0.0  0.1   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    10:00   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kworker/0:0H]
root          5  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [kworker/u200:0]
root          6  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    10:00   0:06  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    10:00   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    10:00   0:11  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   10:00   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   10:00   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [deferwq]
root        104  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [kauditd]
root        242  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [scsi_tmf_0]
root        250  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [scsi_eh_1]
root        251  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   10:00   0:01  \_ [kworker/1:1H]
root        256  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [ttm_swap]
root        266  0.0  0.0      0     0 ?        S<   10:00   0:01  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [xprtiod]
root        608  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [kvm-irqfd-clean]
root        658  0.0  0.0      0     0 ?        S<   10:00   0:02  \_ [loop0]
root        673  0.0  0.0      0     0 ?        S    10:00   0:00  \_ [jbd2/loop0-8]
root        675  0.0  0.0      0     0 ?        S<   10:00   0:00  \_ [ext4-rsv-conver]
root      43004  0.0  0.0      0     0 ?        S    10:55   0:00  \_ [kworker/1:4]
root      62111  0.0  0.0      0     0 ?        S    11:21   0:00  \_ [kworker/1:1]
root      64240  0.0  0.0      0     0 ?        S    11:24   0:00  \_ [kworker/0:3]
root      67037  0.0  0.0      0     0 ?        S    11:28   0:00  \_ [kworker/1:2]
root      71316  0.0  0.0      0     0 ?        S    11:34   0:00  \_ [kworker/0:1]
root      71349  0.0  0.0      0     0 ?        S    11:34   0:00  \_ [kworker/1:0]
root      74810  0.0  0.0      0     0 ?        S    11:39   0:00  \_ [kworker/0:0]
root      75371  0.0  0.0      0     0 ?        S    11:39   0:00  \_ [kworker/u200:1]
root      75515  0.0  0.0      0     0 ?        S    11:40   0:00  \_ [kworker/1:3]
root      78334  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/1:5]
root      78363  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/0:2]
root      78365  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44412  3556 ?        Ss   10:00   0:11 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.2  39500  7208 ?        Ss   10:00   0:03 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   244 ?        Ss   10:00   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   500 ?        S<sl 10:00   0:00 /sbin/auditd
polkitd     487  0.0  0.1 612240  2864 ?        Ssl  10:00   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        489  0.0  0.0  21540   380 ?        Ss   10:00   0:00 /usr/sbin/irqbalance --foreground
nscd        493  0.0  0.0 994492  1284 ?        Ssl  10:00   0:04 /usr/sbin/nscd
root        494  0.0  0.0 152780    96 ?        Ss   10:00   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        496  0.0  0.0  24704  1156 ?        Ss   10:00   0:01 /usr/lib/systemd/systemd-logind
rpc         513  0.0  0.0  69256   160 ?        Ss   10:00   0:00 /sbin/rpcbind -w
root        516  0.0  0.0 195208     0 ?        Ssl  10:00   0:00 /usr/sbin/gssproxy -D
root        531  0.0  0.0  52852   356 ?        Ss   10:00   0:00 /usr/sbin/smartd -n -q never
dbus        535  0.0  0.0  57020  1324 ?        Ss   10:00   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        552  0.0  0.2 224144  6360 ?        Ss   10:00   0:00 queueprocd - waiting up to 60s to process a task
root        553  0.0  0.0   4388    24 ?        Ss   10:00   0:00 /usr/sbin/acpid
root        564  0.0  0.0 124480   428 ?        Ss   10:00   0:00 /usr/sbin/crond -n
root      81276  0.0  0.0 183048  2152 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root      81292  0.0  0.0 113284  1208 ?        Ss   11:48   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      81293  0.0  0.0 108052   356 ?        S    11:48   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      81294  0.0  0.0 113288  1520 ?        S    11:48   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      81355  0.0  0.0 153840  2092 ?        R    11:48   0:00  |               \_ ps auxf
root      81277  0.0  0.0 183048  2152 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root      81328  0.0  0.0  20164   808 ?        Ss   11:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      81278  0.0  0.0 183048  2152 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root      81318  0.0  0.0  20164   960 ?        Ss   11:48   0:00  |   \_ jailshell (cloudsms) [81336] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  81336  0.0  0.0      0     0 ?        R    11:48   0:00  |       \_ [jailshell]
root      81279  0.0  0.0 183048  2152 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root      81331  0.0  0.0  20164   804 ?        Ss   11:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      81280  0.0  0.0 183048  2152 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root      81327  0.0  0.0  20164   804 ?        Ss   11:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      81281  0.0  0.0 183048  2148 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root      81324  0.0  0.0  20164   804 ?        Ss   11:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      81282  0.0  0.0 183048  2148 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root      81330  0.0  0.0  20164   808 ?        Ss   11:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      81283  0.0  0.0 183048  2148 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root      81321  0.0  0.0  20164   968 ?        Ss   11:48   0:00  |   \_ jailshell (cloudsms) [81349] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  81349  0.0  0.0  20164   264 ?        S    11:48   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  81352  0.0  0.0 113284  1212 ?        S    11:48   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  81353  0.0  0.6 404052 15872 ?        S    11:48   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue.php
root      81284  0.0  0.0 183048  2144 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root      81320  0.0  0.0  20164   808 ?        Ss   11:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      81285  0.0  0.0 183048  2144 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root      81319  0.0  0.0  20164   808 ?        Ss   11:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      81286  0.0  0.0 183048  2144 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root      81326  0.0  0.0  20164   804 ?        Ss   11:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      81287  0.0  0.0 183048  2144 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root      81317  0.0  0.0  20164   808 ?        Ss   11:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      81288  0.0  0.0 183048  2144 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root      81332  0.0  0.0  20164   964 ?        Ss   11:48   0:00  |   \_ jailshell (pactpay) [81342] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   81342  0.0  0.0  20164   264 ?        S    11:48   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   81345  0.0  0.6 480124 16780 ?        S    11:48   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      81290  0.0  0.0 183048  2144 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root      81322  0.0  0.0  20164   964 ?        Ss   11:48   0:00  |   \_ jailshell (nigeria) [81343] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   81343  0.0  0.0  20164   260 ?        S    11:48   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   81346  0.0  0.6 404052 16140 ?        S    11:48   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      81291  0.0  0.0 183048  2144 ?        S    11:48   0:00  \_ /usr/sbin/CROND -n
root      81323  0.0  0.0  20164   964 ?        Ss   11:48   0:00      \_ jailshell (saboakin) [81348] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  81348  0.0  0.0      0     0 ?        R    11:48   0:00          \_ [jailshell]
root        566  0.0  0.0  24208     0 ?        Ss   10:00   0:00 /usr/sbin/atd -f
root        578  0.0  0.0 108296    32 tty1     Ss+  10:00   0:00 /sbin/agetty --noclear tty1 linux
root        579  0.0  0.0 114704     0 ttyS0    Ss+  10:00   0:00 /bin/bash
mailnull    630  0.0  0.1  89124  4440 ?        Ss   10:00   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  80782  0.0  0.4  90256  9708 ?        S    11:47   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    932  0.0  0.0  10388    48 ?        Ssl  10:00   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        934  0.0  0.1 445028  3200 ?        Ss   10:00   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  81198  0.0  0.0 445028   552 ?        S    11:47   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    936  0.0  0.0 113676    72 ?        Ssl  10:00   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    937  0.0  0.5 114016 12844 ?        Ssl  10:00   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.0 111304   364 ?        Ss   10:00   0:00 /usr/sbin/sshd -D
root      80829  0.0  0.1 111304  4444 ?        Ss   11:47   0:00  \_ sshd: [accepted]
sshd      80830  0.0  0.1 115644  2628 ?        S    11:47   0:00      \_ sshd: [net]
systuser    940  0.0  0.0  12660    64 ?        Ssl  10:00   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        944  0.2 16.9 1763224 409664 ?      Ssl  10:00   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       949  0.0  1.3 990264 32208 ?        Ssl  10:00   0:03 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        951  0.0  0.1 400740  2972 ?        Ss   10:00   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  81144 13.3  2.7 460772 67524 ?        S    11:47   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  81154 12.2  2.7 460640 67480 ?        R    11:47   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  81174 14.2  2.7 460636 67512 ?        R    11:47   0:01  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   81252  0.6  0.2 400460  5556 ?        S    11:47   0:00  \_ php-fpm: pool nigeriadecide_org
root        955  0.0  0.0 389508   688 ?        Ss   10:00   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        957  0.0  0.0  51508   644 ?        Ss   10:00   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1099  0.0  0.1  47252  3548 ?        S    10:00   0:00  \_ dovecot/pop3-login
dovenull   1100  0.0  0.1  47484  3852 ?        S    10:00   0:00  \_ dovecot/imap-login
dovecot    1101  0.0  0.0  10320   236 ?        S    10:00   0:00  \_ dovecot/anvil
root       1102  0.0  0.0  10452   472 ?        S    10:00   0:00  \_ dovecot/log
dovenull   1103  0.0  0.1  47316  3692 ?        S    10:00   0:00  \_ dovecot/pop3-login
dovenull   1104  0.0  0.1  47440  3732 ?        S    10:00   0:00  \_ dovecot/imap-login
root       1109  0.0  0.0  24564  2368 ?        S    10:00   0:00  \_ dovecot/config
dovecot    1110  0.0  0.0  13568   536 ?        S    10:00   0:00  \_ dovecot/stats
dovecot    1197  0.0  0.0  41156  1488 ?        S    10:00   0:00  \_ dovecot/auth
root      79952  0.0  0.1  60820  4508 ?        S    11:46   0:00  \_ dovecot/lmtp
root      81122  0.0  0.0  28936  2368 ?        S    11:47   0:00  \_ dovecot/quota-status -p postfix
root      81124  0.0  0.1  41052  2724 ?        S    11:47   0:00  \_ dovecot/auth -w
root        958  0.0  0.0 153404   252 ?        Ss   10:00   0:00 pure-ftpd (SERVER)
systuser    959  0.0  0.0 113272    76 ?        Ssl  10:00   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        968  0.0  0.0 396248   564 ?        Ss   10:00   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
cpanelc+    970  0.0  0.1  10028  3268 ?        Ss   10:00   0:05 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        972  0.0  0.2 232784  7096 ?        Ssl  10:00   0:01 /usr/sbin/rsyslogd -n
root        973  0.4  0.3 1350088 9588 ?        Ssl  10:00   0:25 /usr/bin/cspdaemon
root        974  0.0  0.2 261156  7224 ?        Ss   10:00   0:03 cpsrvd (SSL) - waiting for connections                   
root      81246  0.0  0.0      0     0 ?        Z    11:47   0:00  \_ [webmaild - serv] <defunct>
telegraf    975  0.0  1.4 5654048 35924 ?       SLsl 10:00   0:03 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        976  0.0  0.0 572372   748 ?        Ssl  10:00   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        997  0.0  0.4 439788 11232 ?        Ss   10:00   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        998  0.3  0.4 1277312 10388 ?       Ssl  10:00   0:21 /usr/bin/checkstatus
root       1002  0.0  0.0 388892   452 ?        Ss   10:00   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
memcach+   1006  0.0  0.0 342400     0 ?        Ssl  10:00   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser   1135  0.0  0.1 157704  2976 ?        S    10:00   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1146  0.0  0.5 387528 13020 ?        Ss   10:00   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1147  0.0  1.3 412368 32000 ?        Ss   10:00   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1258  0.0  0.0 167452  1308 ?        Ss   10:00   0:00 dnsadmin - dormant mode
root       1262  0.0  0.8 209340 21280 ?        Ss   10:00   0:01 tailwatchd
root       1263  0.0  0.2 183900  6688 ?        Ss   10:00   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1634  0.0  0.0 299272   752 ?        Ss   10:00   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1432 ?        SN   10:00   0:00 cpanellogd - sleeping for logs
mysql      1838  1.4  9.4 1463560 229200 ?      Sl   10:00   1:31 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2047  0.0  0.3 267052  8176 ?        Ss   10:00   0:00 /usr/sbin/httpd -k start
root       2068  0.0  0.0  12784   388 ?        S    10:00   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2069  0.0  0.0  12732   360 ?        S    10:00   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2070  0.0  0.0  12812   328 ?        S    10:00   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2079  0.0  0.0  53256    40 ?        S    10:00   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    56134  0.1  0.8 277908 21252 ?        S    11:13   0:03  \_ /usr/sbin/httpd -k start
nobody    60414  0.1  0.8 277708 20900 ?        S    11:18   0:02  \_ /usr/sbin/httpd -k start
nobody    66148  0.1  0.8 277632 20564 ?        S    11:26   0:01  \_ /usr/sbin/httpd -k start
nobody    69958  0.1  0.8 277908 20492 ?        S    11:31   0:01  \_ /usr/sbin/httpd -k start
nobody    71440  0.1  0.8 277916 20484 ?        S    11:34   0:01  \_ /usr/sbin/httpd -k start
nobody    73362  0.1  0.8 277664 19840 ?        S    11:36   0:00  \_ /usr/sbin/httpd -k start
nobody    73626  0.1  0.8 277584 19876 ?        S    11:37   0:00  \_ /usr/sbin/httpd -k start
nobody    74259  0.1  0.8 277792 20236 ?        S    11:38   0:00  \_ /usr/sbin/httpd -k start
nobody    74891  0.1  0.8 277780 19760 ?        S    11:39   0:00  \_ /usr/sbin/httpd -k start
nobody    77262  0.1  0.8 277520 19532 ?        S    11:42   0:00  \_ /usr/sbin/httpd -k start
nobody    77273  0.1  0.8 277780 19816 ?        S    11:42   0:00  \_ /usr/sbin/httpd -k start
nobody    79505  0.1  0.8 277780 19752 ?        S    11:45   0:00  \_ /usr/sbin/httpd -k start
nobody    80180  0.1  0.8 277944 19536 ?        S    11:46   0:00  \_ /usr/sbin/httpd -k start
nobody    80648  0.1  0.7 277780 19036 ?        S    11:46   0:00  \_ /usr/sbin/httpd -k start
nobody    81048  0.2  0.7 277784 18892 ?        S    11:47   0:00  \_ /usr/sbin/httpd -k start
nobody    81134  0.0  0.7 277780 18812 ?        S    11:47   0:00  \_ /usr/sbin/httpd -k start
nobody    81263  0.0  0.7 277504 18044 ?        S    11:47   0:00  \_ /usr/sbin/httpd -k start
root       2194  0.0  0.4 181780 10480 ?        Ss   10:01   0:06 lfd - sleeping
oysipao+   2828  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+   2835  0.0  0.0   3152   492 ?        S    10:01   0:00  \_ [kworker]
root      39734  0.0  5.0 247944 121116 ?       Ss   10:50   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      48387  0.0  5.3 265948 130580 ?       S    11:02   0:02  \_ spamd child
root      48388  0.0  4.8 247944 117960 ?       S    11:02   0:00  \_ spamd child
## mysql stats
Uptime: 28140  Threads: 5  Questions: 590348  Slow queries: 0  Opens: 2758  Flush tables: 1  Open tables: 1996  Queries per second avg: 20.978
*************************** 1. row ***************************
     Id: 8898
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 8899
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 8900
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-23' LIMIT 1
*************************** 4. row ***************************
     Id: 8904
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 8907
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.133.35 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 18.205.213.231 TIME_WAIT
      1 18.210.58.238 TIME_WAIT
      1 192.178.4.100 TIME_WAIT
      1 192.178.4.97 TIME_WAIT
      1 192.178.4.99 TIME_WAIT
      1 ::1 TIME_WAIT
      1 23.22.105.143 TIME_WAIT
      1 3.227.180.70 TIME_WAIT
      1 34.148.243.8 TIME_WAIT
      1 34.205.170.13 TIME_WAIT
      1 34.206.193.60 TIME_WAIT
      1 35.170.205.140 TIME_WAIT
      1 43.155.188.157 TIME_WAIT
      1 43.248.109.63 TIME_WAIT
      1 51.222.168.49 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 52.0.41.164 TIME_WAIT
      1 74.7.227.17 TIME_WAIT
      1 74.7.229.244 TIME_WAIT
      1 74.7.244.23 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     91 159.65.137.58 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 23-Nov-2025 11:48:02 WAT
   Restart Time: Sunday, 23-Nov-2025 03:59:04 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 7 hours 48 minutes 58 seconds
   Server load: 0.79 0.73 0.59
   Total accesses: 34698 - Total Traffic: 698.1 MB - Total Duration: 58301540
   CPU Usage: u11.35 s4.32 cu376.26 cs278.65 - 2.38% CPU load
   1.23 requests/sec - 25.4 kB/second - 20.6 kB/request - 1680.26 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

K_KKK_WK_WKWKK._W.._............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS  Req   Dur    Conn  Child  Slot     Client     Protocol           VHost                           Request
   0-0  56134 1/643/1923  K 12.86 4    342 841727   33.4  15.25 40.36 192.178.4.97   http/1.1 team.cloudware.ng:443      GET /?l=2531794738 HTTP/1.1
   1-0  69958 0/310/1736  _ 5.91  0    0   796024   0.0   5.92  35.85 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   2-0  80648 2/19/1887   K 0.39  4    384 743178   63.2  0.47  37.71 192.178.4.97   http/1.1 team.cloudware.ng:443      GET /?l=547242185 HTTP/1.1
   3-0  60414 5/558/2096  K 10.15 3    352 812765   158.0 12.15 37.85 192.178.4.103  http/1.1 team.cloudware.ng:443      GET /?l=1977093427 HTTP/1.1
   4-0  81048 2/7/1781    K 0.14  0    361 730971   65.4  0.17  39.77 192.178.4.101  http/1.1 team.cloudware.ng:443      GET /?l=3281965812 HTTP/1.1
   5-0  74259 0/187/1892  _ 3.59  1    25  922915   0.0   3.84  42.97 128.140.8.200  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue3.php HTTP/1.1
   6-0  79505 0/50/1915   W 1.13  0    0   44147334 0.0   0.89  34.67 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   7-0  66148 10/389/1723 K 8.13  0    427 715248   318.8 8.89  32.81 192.178.4.102  http/1.1 team.cloudware.ng:443      GET /?l=3323960097 HTTP/1.1
   8-0  80180 0/31/1571   _ 0.48  1    387 590588   0.0   0.55  29.09 159.65.137.58  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   9-0  71440 0/225/1234  W 4.03  0    0   582179   0.0   5.37  26.16 159.65.137.58  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   10-0 73362 1/169/1340  K 2.94  2    154 556326   17.2  4.44  25.44 172.213.11.155 http/1.1 nigeriadecide.org:443      GET / HTTP/1.1
   11-0 81134 2/5/1888    W 0.03  0    0   775635   65.6  0.08  36.53 192.178.4.99   http/1.1 team.cloudware.ng:443      GET /?l=3544879301 HTTP/1.1
   12-0 81263 1/1/1258    K 0.00  1    450 572225   36.0  0.04  29.58 192.178.4.100  http/1.1 team.cloudware.ng:443      GET /?l=2125755469 HTTP/1.1
   13-0 77262 6/100/1529  K 2.48  0    347 874305   186.4 2.35  31.06 192.178.4.96   http/1.1 team.cloudware.ng:443      GET /?l=598909578 HTTP/1.1
   14-0 -     0/0/1298    . 0.00  52   0   444380   0.0   0.00  19.37 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 77273 0/103/1226  _ 1.90  1    344 546410   0.0   2.09  27.50 159.65.137.58  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   16-0 73626 0/160/694   W 3.08  0    0   323971   0.0   3.03  15.20 159.65.137.58  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   17-0 -     0/0/1227    . 0.00  3    0   491304   0.0   0.00  21.33 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 -     0/0/1117    . 0.00  451  0   524188   0.0   0.00  25.24 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 74891 0/127/386   _ 2.63  0    0   207129   0.0   2.83  8.37  216.244.66.226 http/1.1 theforge.com.ng:80         GET /robots.txt HTTP/1.1
   20-0 -     0/0/728     . 0.00  1908 0   186269   0.0   0.00  8.70  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/508     . 0.00  388  0   270061   0.0   0.00  13.11 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/929     . 0.00  1527 0   277885   0.0   0.00  13.34 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/437     . 0.00  1918 0   179424   0.0   0.00  8.94  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/37      . 0.00  1920 0   5301     0.0   0.00  0.52  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/670     . 0.00  1921 0   327387   0.0   0.00  15.99 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/958     . 0.00  27   0   491724   0.0   0.00  23.43 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/180     . 0.00  1526 0   102991   0.0   0.00  4.33  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/436     . 0.00  627  0   210989   0.0   0.00  10.75 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/89      . 0.00  1923 0   45248    0.0   0.00  2.10  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/5       . 0.00  1911 0   5446     0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 848
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 16 seconds, (range: 0...51)
   index usage: 14%, cache usage: 20%
   total entries stored since starting: 18661
   total entries replaced since starting: 0
   total entries expired since starting: 17809
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 65 miss
   total removes since starting: 4 hit, 16 miss
Youez - 2016 - github.com/yon3zu
LinuXploit