403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.11.30.txt
 ## swap threshold exceeded
## server overview
2025-11-08.11.30 load[1] mem[66/61] mysql[3/11] httpd[8]
              total        used        free      shared  buff/cache   available
Mem:           2363        1472         112          36         778         680
Swap:          1999        1301         698
 11:30:01 up  1:43,  0 users,  load average: 1.27, 1.16, 1.49
## system overview
top - 11:30:01 up  1:43,  0 users,  load average: 1.27, 1.16, 1.49
Tasks: 212 total,   5 running, 206 sleeping,   0 stopped,   1 zombie
%Cpu(s): 85.3 us, 14.7 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   114136 free,  1508848 used,   797316 buff/cache
KiB Swap:  2047996 total,   715172 free,  1332824 used.   696404 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1773 mysql     20   0 1458588 237200   4244 S 143.8  9.8   2:36.14 /usr/sbin+
 65675 nigeria   20   0  400652  15940  10220 S  18.8  0.7   0:00.07 /opt/cpan+
 65759 cloudw    20   0  351952  15232  10128 S   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44424   3488   1532 S   0.0  0.1   0:10.32 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.74 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.14 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:07.65 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.11 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.11 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:12.14 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   243 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   259 root       0 -20       0      0      0 S   0.0  0.0   0:01.27 [kworker/+
   268 root       0 -20       0      0      0 S   0.0  0.0   0:01.01 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.50 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39496   8664   8352 S   0.0  0.4   0:04.17 /usr/lib/+
   384 root      20   0   45352    372    216 S   0.0  0.0   0:00.35 /usr/lib/+
   407 root      16  -4   55532    492    364 S   0.0  0.0   0:00.70 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0  224280   7256   1128 S   0.0  0.3   0:00.22 queueproc+
   491 rpc       20   0   69256    232    124 S   0.0  0.0   0:00.01 /sbin/rpc+
   512 dbus      20   0   58768   1472    708 S   0.0  0.1   0:03.40 /usr/bin/+
   538 root      20   0   21540    432    324 S   0.0  0.0   0:00.14 /usr/sbin+
   539 root      20   0   52852    476    380 S   0.0  0.0   0:00.01 /usr/sbin+
   540 root      20   0   24896   1480    844 S   0.0  0.1   0:01.52 /usr/lib/+
   541 root      20   0  152780    228    184 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0    4388    128    124 S   0.0  0.0   0:00.00 /usr/sbin+
   544 polkitd   20   0  610540    972    516 S   0.0  0.0   0:00.90 /usr/lib/+
   547 nscd      20   0  928956   1520    816 S   0.0  0.1   0:03.31 /usr/sbin+
   566 root      20   0  195208     44     44 S   0.0  0.0   0:00.00 /usr/sbin+
   582 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   586 root      20   0  124472    492    364 S   0.0  0.0   0:00.18 /usr/sbin+
   588 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   605 root      20   0  114704    136    136 S   0.0  0.0   0:00.02 /bin/bash
   606 root      20   0  108296    148    144 S   0.0  0.0   0:00.00 /sbin/age+
   616 mailnull  20   0   89116   3784    764 S   0.0  0.2   0:00.13 /usr/sbin+
   679 root       0 -20       0      0      0 S   0.0  0.0   0:02.44 [loop0]
   709 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   969 systuser  20   0   11796     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   971 root      20   0 1763032 294844   1024 S   0.0 12.2   0:13.52 /usr/loca+
   975 root      20   0  232784  10636   7272 S   0.0  0.4   0:02.01 /usr/sbin+
   976 named     20   0  637928  32492   1504 S   0.0  1.3   0:03.64 /usr/sbin+
   977 root      20   0  397344   3124    708 S   0.0  0.1   0:01.92 php-fpm: +
   982 systuser  20   0  114016  12748   2540 S   0.0  0.5   0:01.56 /usr/loca+
   983 root      20   0  572372    928    360 S   0.0  0.0   0:00.61 /usr/bin/+
   985 memcach+  20   0  342400      4      4 S   0.0  0.0   0:00.13 /usr/bin/+
   986 cpanelc+  20   0   10340   3288   2428 S   0.0  0.1   0:05.11 /usr/loca+
   987 root      20   0  386112    892    680 S   0.0  0.0   0:00.21 php-fpm: +
   988 systuser  20   0   11348     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   989 root      20   0  385496    744    536 S   0.0  0.0   0:00.22 php-fpm: +
   990 root      20   0  153404    376    296 S   0.0  0.0   0:00.14 pure-ftpd+
   992 systuser  20   0  111608   1560      0 S   0.0  0.1   0:00.00 /usr/loca+
   995 root      20   0  436392  11344  11132 S   0.0  0.5   0:00.27 php-fpm: +
   998 root      20   0  392856    268    188 S   0.0  0.0   0:00.20 php-fpm: +
  1006 telegraf  20   0 5654048  36764   5716 S   0.0  1.5   0:03.74 /usr/loca+
  1010 root      20   0   51508    576    412 S   0.0  0.0   0:00.10 /usr/sbin+
  1012 root      20   0  261160   7088   2028 S   0.0  0.3   0:00.98 cpsrvd (S+
  1024 root      20   0  445028   2648   2648 S   0.0  0.1   0:00.05 sw-engine+
  1025 systuser  20   0  112524   1984      0 S   0.0  0.1   0:00.01 /usr/loca+
  1031 root      20   0  111304    512    408 S   0.0  0.0   0:00.99 /usr/sbin+
  1129 dovenull  20   0   46912   2756   2140 S   0.0  0.1   0:00.10 dovecot/p+
  1130 dovenull  20   0   47460   3444   2312 S   0.0  0.1   0:00.07 dovecot/i+
  1131 dovecot   20   0   10320    420    304 S   0.0  0.0   0:00.02 dovecot/a+
  1132 root      20   0   10452    584    380 S   0.0  0.0   0:00.07 dovecot/l+
  1133 dovenull  20   0   47188   2948   2076 S   0.0  0.1   0:00.14 dovecot/p+
  1134 dovenull  20   0   47500   3232   2204 S   0.0  0.1   0:00.08 dovecot/i+
  1142 root      20   0   24556   2600    552 S   0.0  0.1   0:00.06 dovecot/c+
  1144 dovecot   20   0   13568    724    496 S   0.0  0.0   0:00.01 dovecot/s+
  1204 systuser  20   0  157704   2948    916 S   0.0  0.1   0:00.05 SonarPush+
  1217 wp-tool+  20   0  410452  35768   1748 S   0.0  1.5   0:05.30 /usr/bin/+
  1218 wp-tool+  20   0  387528  13148   1524 S   0.0  0.5   0:00.14 /usr/bin/+
  1221 dovecot   20   0   41168   1516   1068 S   0.0  0.1   0:00.15 dovecot/a+
  1264 root      20   0  209272  20640   3260 S   0.0  0.9   0:00.87 tailwatchd
  1266 root      20   0  167452   1464    860 S   0.0  0.1   0:00.13 dnsadmin +
  1268 root      20   0  262228  22632   4776 S   0.0  0.9   0:00.41 cpdavd - +
  1699 root      20   0  299272    964    584 S   0.0  0.0   0:00.16 php-fpm: +
  1717 root      38  18  130416   1444    720 S   0.0  0.1   0:00.01 cpanellog+
  1947 root      20   0  267032   8220    812 S   0.0  0.3   0:00.46 /usr/sbin+
  1952 root      20   0   12768    432    324 S   0.0  0.0   0:00.73 /usr/loca+
  1953 root      20   0   12732    400    320 S   0.0  0.0   0:00.60 /usr/loca+
  1954 root      20   0   12776    404    280 S   0.0  0.0   0:00.66 /usr/loca+
  1963 root      20   0   53268    196    196 S   0.0  0.0   0:00.05 /usr/loca+
  2286 root      20   0  181784  10740   1212 S   0.0  0.4   0:06.25 lfd - sle+
  8194 root      20   0       0      0      0 S   0.0  0.0   0:00.96 [kworker/+
 10754 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10763 oysipao+  20   0    3152    528     36 S   0.0  0.0   0:00.10 [kworker]
 40228 root      20   0  248032 119780   3156 S   0.0  4.9   0:02.99 /usr/loca+
 42483 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 43750 nobody    20   0  277620  20192   4772 S   0.0  0.8   0:02.32 /usr/sbin+
 45152 nobody    20   0  277652  20580   4720 S   0.0  0.9   0:02.63 /usr/sbin+
 46911 root      20   0 1276100  10556    592 S   0.0  0.4   0:00.07 /usr/bin/+
 46948 root      20   0 1277056  11568    592 S   0.0  0.5   0:00.06 /usr/bin/+
 47195 root      20   0  258652 125684   3200 S   0.0  5.2   0:00.53 spamd chi+
 47196 root      20   0  248032 117192    608 S   0.0  4.8   0:00.00 spamd chi+
 47741 nobody    20   0  277584  19896   4604 S   0.0  0.8   0:01.76 /usr/sbin+
 48296 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 48878 nobody    20   0  277648  19948   4592 S   0.0  0.8   0:01.90 /usr/sbin+
 50503 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 51449 nobody    20   0  277908  20132   4488 S   0.0  0.8   0:01.48 /usr/sbin+
 52088 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 54240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 56247 nobody    20   0  277592  19236   4140 S   0.0  0.8   0:01.28 /usr/sbin+
 57329 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 57352 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 61006 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 61300 nobody    20   0  277880  19380   4060 S   0.0  0.8   0:00.42 /usr/sbin+
 61481 nobody    20   0  277560  19284   4180 S   0.0  0.8   0:00.44 /usr/sbin+
 62022 nobody    20   0  277884  19036   3884 S   0.0  0.8   0:00.42 /usr/sbin+
 62143 worencom  20   0   38484   4040   3020 S   0.0  0.2   0:00.00 dovecot/i+
 62156 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 63050 nobody    20   0  277884  18920   3816 S   0.0  0.8   0:00.36 /usr/sbin+
 64389 nobody    20   0  277880  18800   3676 S   0.0  0.8   0:00.16 /usr/sbin+
 64403 nobody    20   0  277884  18884   3748 S   0.0  0.8   0:00.10 /usr/sbin+
 64433 nobody    20   0  277556  18740   3752 S   0.0  0.8   0:00.11 /usr/sbin+
 64518 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64619 nobody    20   0  277884  18952   3752 S   0.0  0.8   0:00.11 /usr/sbin+
 64925 root      20   0   41052   2784   2124 S   0.0  0.1   0:00.00 dovecot/a+
 65109 nobody    20   0  277884  18768   3664 S   0.0  0.8   0:00.09 /usr/sbin+
 65159 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65216 mailnull  20   0   90252   9692   4244 S   0.0  0.4   0:00.01 /usr/sbin+
 65456 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 65470 healtho+  20   0  457240  67640   4220 S   0.0  2.8   0:02.35 php-fpm: +
 65484 root      20   0   28936   2372   1948 S   0.0  0.1   0:00.00 dovecot/q+
 65515 healtho+  20   0  457240  67568   4216 S   0.0  2.8   0:01.70 php-fpm: +
 65523 healtho+  20   0  457240  67572   4216 S   0.0  2.8   0:01.70 php-fpm: +
 65556 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 65564 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 65578 root      20   0  162436   5840   4344 S   0.0  0.2   0:00.01 sshd: roo+
 65579 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: roo+
 65597 nigeria   20   0  397064   5612   2372 S   0.0  0.2   0:00.00 php-fpm: +
 65606 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 65608 root      20   0  183040   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 65609 root      20   0  183040   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 65611 root      20   0  183040   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 65612 root      20   0  183040   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 65613 root      20   0  183040   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 65614 root      20   0  183040   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 65615 root      20   0  183040   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 65616 root      20   0  183040   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 65617 root      20   0  183040   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 65618 root      20   0  183040   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 65620 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 65622 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 65623 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 65625 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 65641 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 65648 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 65650 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 65651 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 65652 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 65653 root      20   0   20164    808    632 R   0.0  0.0   0:00.00 /usr/loca+
 65654 root      20   0   20164    804    632 R   0.0  0.0   0:00.00 /usr/loca+
 65655 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 65656 root      20   0   20164    808    632 R   0.0  0.0   0:00.00 /usr/loca+
 65657 root      20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /bin/sh -+
 65658 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 65659 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 65661 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 65662 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 65665 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 65667 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 65668 root      20   0  113284   1476   1256 S   0.0  0.1   0:00.00 bash /usr+
 65670 root      20   0  188212  11104   5152 S   0.0  0.5   0:00.02 /usr/loca+
 65673 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 65678 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 65688 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 65691 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 65695 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 65699 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 65701 root      20   0  111304   4448   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 65703 cloudsms  20   0  400652  15148   9844 S   0.0  0.6   0:00.01 /opt/cpan+
 65704 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65706 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 65714 root      20   0  160224   2352   1640 S   0.0  0.1   0:00.00 top -n 2 +
 65752 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 65768 root      20   0  113284    220      0 R   0.0  0.0   0:00.00 bash /usr+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:46   0:07  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:46   0:12  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        243  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        245  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        259  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/1:1H]
root        268  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        582  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        679  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [loop0]
root        709  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root       8194  0.0  0.0      0     0 ?        S    09:57   0:00  \_ [kworker/u200:0]
root      42483  0.0  0.0      0     0 ?        S    10:54   0:00  \_ [kworker/0:3]
root      48296  0.0  0.0      0     0 ?        S    11:02   0:00  \_ [kworker/1:1]
root      50503  0.0  0.0      0     0 ?        S    11:05   0:00  \_ [kworker/u200:2]
root      52088  0.0  0.0      0     0 ?        S    11:08   0:00  \_ [kworker/0:1]
root      54240  0.0  0.0      0     0 ?        S    11:11   0:00  \_ [kworker/1:0]
root      57329  0.0  0.0      0     0 ?        S    11:16   0:00  \_ [kworker/1:5]
root      57352  0.0  0.0      0     0 ?        S    11:16   0:00  \_ [kworker/0:0]
root      61006  0.0  0.0      0     0 ?        S    11:22   0:00  \_ [kworker/0:2]
root      62156  0.0  0.0      0     0 ?        S    11:24   0:00  \_ [kworker/1:3]
root      64518  0.0  0.0      0     0 ?        S    11:28   0:00  \_ [kworker/0:4]
root      65159  0.0  0.0      0     0 ?        S    11:29   0:00  \_ [kworker/0:5]
root      65704  0.0  0.0      0     0 ?        S    11:30   0:00  \_ [kworker/u200:1]
root          1  0.1  0.1  44424  3488 ?        Ss   09:46   0:10 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.3  39496  8664 ?        Ss   09:46   0:04 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   372 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   492 ?        S<sl 09:46   0:00 /sbin/auditd
root        489  0.0  0.2 224280  7256 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
rpc         491  0.0  0.0  69256   232 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        512  0.0  0.0  58768  1472 ?        Ss   09:46   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        538  0.0  0.0  21540   432 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        539  0.0  0.0  52852   476 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
root        540  0.0  0.0  24896  1480 ?        Ss   09:46   0:01 /usr/lib/systemd/systemd-logind
root        541  0.0  0.0 152780   228 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        542  0.0  0.0   4388   128 ?        Ss   09:46   0:00 /usr/sbin/acpid
polkitd     544  0.0  0.0 610540   972 ?        Ssl  09:46   0:00 /usr/lib/polkit-1/polkitd --no-debug
nscd        547  0.0  0.0 928956  1520 ?        Ssl  09:46   0:03 /usr/sbin/nscd
root        566  0.0  0.0 195208    44 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        586  0.0  0.0 124472   492 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      65606  0.0  0.0 183044  2148 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      65658  0.0  0.0 113284  1212 ?        Ss   11:30   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      65668  0.0  0.0 113284  1476 ?        R    11:30   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      65768  0.0  0.0      0     0 ?        Z    11:30   0:00  |           \_ [bash] <defunct>
root      65608  0.0  0.0 183040  2148 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      65657  0.0  0.0 113284  1208 ?        Ss   11:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      65673  0.0  0.0 108052   360 ?        S    11:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      65678  0.0  0.0 113288  1516 ?        S    11:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      65770  0.0  0.0 153840  2104 ?        R    11:30   0:00  |               \_ ps auxf
root      65609  0.0  0.0 183040  2148 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      65648  0.0  0.0  20164   808 ?        Ss   11:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      65611  0.0  0.0 183040  2148 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      65650  0.0  0.0  20164   812 ?        Ss   11:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      65612  0.0  0.0 183040  2148 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      65652  0.0  0.0  20164   808 ?        Ss   11:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      65613  0.0  0.0 183040  2148 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      65656  0.0  0.0  20164   988 ?        Ss   11:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      65769  0.0  0.2  38648  6324 ?        R    11:30   0:00  |       \_ /usr/local/cpanel/bin/setupvirtfs 1014
root      65614  0.0  0.0 183040  2148 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      65662  0.0  0.0  20164   804 ?        Ss   11:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      65615  0.0  0.0 183040  2148 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      65654  0.0  0.0  20164   804 ?        Ss   11:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      65616  0.0  0.0 183040  2144 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      65659  0.0  0.0  20164   808 ?        Ss   11:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      65617  0.0  0.0 183040  2144 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      65655  0.0  0.0  20164   968 ?        Ss   11:30   0:00  |   \_ jailshell (cloudsms) [65691] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  65691  0.0  0.0  20164   260 ?        S    11:30   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  65699  0.0  0.0 113284  1212 ?        S    11:30   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  65703  0.0  0.6 400652 15148 ?        S    11:30   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      65618  0.0  0.0 183040  2144 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      65661  0.0  0.0  20164   808 ?        Ss   11:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      65620  0.0  0.0 183040  2140 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      65653  0.0  0.0  20164   808 ?        Ss   11:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      65622  0.0  0.0 183040  2140 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      65651  0.0  0.0 113284  1212 ?        Ss   11:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      65670  0.0  0.4 188212 11104 ?        S    11:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      65714  0.0  0.0 160224  2352 ?        S    11:30   0:00  |           \_ top -n 2 -b -c
root      65623  0.0  0.0 183040  2140 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      65665  0.0  0.0  20164   968 ?        Ss   11:30   0:00  |   \_ jailshell (pactpay) [65688] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   65688  0.0  0.0  20164   260 ?        S    11:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   65695  0.0  0.7 476724 17484 ?        S    11:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      65625  0.0  0.0 183040  2140 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      65641  0.0  0.0  20164   968 ?        Ss   11:30   0:00      \_ jailshell (nigeria) [65667] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   65667  0.0  0.0  20164   260 ?        S    11:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   65675  0.0  0.6 400652 15940 ?        S    11:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        588  0.0  0.0  24208     0 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        605  0.0  0.0 114704   136 ttyS0    Ss+  09:46   0:00 /bin/bash
root        606  0.0  0.0 108296   148 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    616  0.0  0.1  89116  3784 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  65216  0.0  0.4  90252  9692 ?        S    11:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    969  0.0  0.0  11796    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        971  0.2 12.1 1763032 294844 ?      Ssl  09:46   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        975  0.0  0.4 232784 10636 ?        Ssl  09:46   0:02 /usr/sbin/rsyslogd -n
named       976  0.0  1.3 637928 32492 ?        Ssl  09:46   0:03 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        977  0.0  0.1 397344  3124 ?        Ss   09:46   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  65470 13.1  2.7 457240 67640 ?        R    11:29   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  65515 14.1  2.7 457240 67568 ?        S    11:29   0:01  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  65523 15.4  2.7 457240 67572 ?        S    11:29   0:01  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   65597  0.0  0.2 397064  5612 ?        S    11:30   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    982  0.0  0.5 114016 12748 ?        Ssl  09:46   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        983  0.0  0.0 572372   928 ?        Ssl  09:46   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
memcach+    985  0.0  0.0 342400     4 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    986  0.0  0.1  10340  3288 ?        Rs   09:46   0:05 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        987  0.0  0.0 386112   892 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    988  0.0  0.0  11348    36 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        989  0.0  0.0 385496   744 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        990  0.0  0.0 153404   376 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
systuser    992  0.0  0.0 111608  1560 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        995  0.0  0.4 436392 11344 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        998  0.0  0.0 392856   268 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
telegraf   1006  0.0  1.5 5654048 36764 ?       SLsl 09:46   0:03 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1010  0.0  0.0  51508   576 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1129  0.0  0.1  46912  2756 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1130  0.0  0.1  47460  3444 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1131  0.0  0.0  10320   420 ?        S    09:46   0:00  \_ dovecot/anvil
root       1132  0.0  0.0  10452   584 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1133  0.0  0.1  47188  2948 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1134  0.0  0.1  47500  3232 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1142  0.0  0.1  24556  2600 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1144  0.0  0.0  13568   724 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1221  0.0  0.0  41168  1516 ?        S    09:46   0:00  \_ dovecot/auth
worencom  62143  0.0  0.1  38484  4040 ?        S    11:24   0:00  \_ dovecot/imap
root      64925  0.0  0.1  41052  2784 ?        S    11:28   0:00  \_ dovecot/auth -w
root      65484  0.0  0.0  28936  2372 ?        S    11:29   0:00  \_ dovecot/quota-status -p postfix
root       1012  0.0  0.2 261160  7088 ?        Ss   09:46   0:00 cpsrvd (SSL) - waiting for connections                   
root      65556  0.0  0.0      0     0 ?        Z    11:29   0:00  \_ [cpaneld - servi] <defunct>
root       1024  0.0  0.1 445028  2648 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser   1025  0.0  0.0 112524  1984 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1031  0.0  0.0 111304   512 ?        Ss   09:46   0:00 /usr/sbin/sshd -D
root      65456  0.0  0.1 111304  4264 ?        Ss   11:29   0:00  \_ sshd: [accepted]
root      65564  0.0  0.1 111304  4264 ?        Ss   11:29   0:00  \_ sshd: [accepted]
root      65578  0.5  0.2 162436  5840 ?        Ss   11:29   0:00  \_ sshd: root [priv]
sshd      65579  0.0  0.1 115644  2632 ?        S    11:29   0:00  |   \_ sshd: root [net]
root      65701  0.0  0.1 111304  4448 ?        Ss   11:30   0:00  \_ sshd: [accepted]
sshd      65706  0.0  0.1 115644  2628 ?        S    11:30   0:00      \_ sshd: [net]
systuser   1204  0.0  0.1 157704  2948 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1217  0.0  1.4 410452 35768 ?        Ss   09:46   0:05 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1218  0.0  0.5 387528 13148 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.8 209272 20640 ?        Ss   09:46   0:00 tailwatchd
root       1266  0.0  0.0 167452  1464 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1268  0.0  0.9 262228 22632 ?        Ss   09:46   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1699  0.0  0.0 299272   964 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1444 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1773  2.5  9.8 1458588 237200 ?      Sl   09:46   2:36 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  0.3 267032  8220 ?        Ss   09:46   0:00 /usr/sbin/httpd -k start
root       1952  0.0  0.0  12768   432 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1953  0.0  0.0  12732   400 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1954  0.0  0.0  12776   404 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1963  0.0  0.0  53268   196 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    43750  0.1  0.8 277620 20192 ?        S    10:55   0:02  \_ /usr/sbin/httpd -k start
nobody    45152  0.1  0.8 277652 20580 ?        S    10:58   0:02  \_ /usr/sbin/httpd -k start
nobody    47741  0.1  0.8 277584 19896 ?        S    11:01   0:01  \_ /usr/sbin/httpd -k start
nobody    48878  0.1  0.8 277648 19948 ?        S    11:03   0:01  \_ /usr/sbin/httpd -k start
nobody    51449  0.1  0.8 277908 20132 ?        S    11:07   0:01  \_ /usr/sbin/httpd -k start
nobody    56247  0.1  0.7 277592 19236 ?        S    11:14   0:01  \_ /usr/sbin/httpd -k start
nobody    61300  0.0  0.8 277880 19380 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    61481  0.1  0.7 277560 19284 ?        S    11:23   0:00  \_ /usr/sbin/httpd -k start
nobody    62022  0.1  0.7 277884 19036 ?        S    11:24   0:00  \_ /usr/sbin/httpd -k start
nobody    63050  0.1  0.7 277884 18920 ?        S    11:25   0:00  \_ /usr/sbin/httpd -k start
nobody    64389  0.1  0.7 277880 18800 ?        S    11:27   0:00  \_ /usr/sbin/httpd -k start
cloudw    65759  0.0  0.6 352096 15232 ?        S    11:30   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    64403  0.0  0.7 277884 18884 ?        S    11:27   0:00  \_ /usr/sbin/httpd -k start
nobody    64433  0.0  0.7 277556 18740 ?        S    11:28   0:00  \_ /usr/sbin/httpd -k start
nobody    64619  0.0  0.7 277884 18952 ?        S    11:28   0:00  \_ /usr/sbin/httpd -k start
nobody    65109  0.1  0.7 277884 18768 ?        S    11:29   0:00  \_ /usr/sbin/httpd -k start
root       2286  0.1  0.4 181784 10740 ?        Ss   09:46   0:06 lfd - sleeping
oysipao+  10754  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+  10763  0.0  0.0   3152   528 ?        S    10:01   0:00  \_ [kworker]
root      40228  0.1  4.9 248032 119780 ?       Ss   10:50   0:02 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      47195  0.0  5.1 258652 125684 ?       S    11:00   0:00  \_ spamd child
root      47196  0.0  4.8 248032 117192 ?       S    11:00   0:00  \_ spamd child
root      46911  0.0  0.4 1276100 10556 ?       Ssl  11:00   0:00 /usr/bin/cspdaemon
root      46948  0.0  0.4 1277056 11568 ?       Ssl  11:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 27908  Threads: 4  Questions: 1149612  Slow queries: 0  Opens: 3053  Flush tables: 1  Open tables: 1983  Queries per second avg: 41.192
*************************** 1. row ***************************
     Id: 16765
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 16769
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 16775
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 16777
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 ::1 TIME_WAIT
      1 20.222.66.73 TIME_WAIT
      1 207.46.13.18 TIME_WAIT
      1 66.249.70.195 TIME_WAIT
      1 68.221.67.173 TIME_WAIT
      1 68.221.75.18 TIME_WAIT
      1 68.221.75.25 TIME_WAIT
      1 74.7.228.209 TIME_WAIT
      1 74.7.230.62 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     39 103.253.27.139 TIME_WAIT
     39 103.253.27.28 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 11:30:02 WAT
   Restart Time: Saturday, 08-Nov-2025 03:45:00 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 7 hours 45 minutes 1 second
   Server load: 1.27 1.16 1.49
   Total accesses: 32097 - Total Traffic: 466.2 MB - Total Duration: 18337698
   CPU Usage: u10.11 s3.94 cu299.58 cs194.08 - 1.82% CPU load
   1.15 requests/sec - 17.1 kB/second - 14.9 kB/request - 571.321 ms/request
   8 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

KK_K.W.__WW._KK___..............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS  Req   Dur   Conn  Child  Slot     Client     Protocol           VHost                           Request
   0-0  65109 2/20/1825  K 0.30  3    340 1088622 59.8  0.37  29.71 66.249.70.192  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2773972717 HTTP/1.1
   1-0  63050 4/79/1842  K 1.54  3    297 1006683 125.1 1.51  31.34 66.249.70.195  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2997590935 HTTP/1.1
   2-0  47741 0/448/1675 _ 5.95  0    25  1089112 0.0   6.67  30.69 128.140.8.200  http/1.1 cloudsms.com.ng:443        GET /cron/process_queue3.php HTTP/1.1
   3-0  48878 1/568/1837 K 6.58  1    464 978532  32.5  7.29  25.51 66.249.70.196  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2538401616 HTTP/1.1
   4-0  -     0/0/1814   . 0.00  101  0   1044645 0.0   0.00  28.63 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   5-0  61300 0/110/1737 W 1.35  0    0   963405  0.0   1.56  24.26 103.253.27.28  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   6-0  -     0/0/1866   . 0.00  25   0   1075587 0.0   0.00  26.94 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   7-0  51449 0/377/1457 _ 16.32 0    294 857124  0.0   5.26  21.20 66.249.70.197  http/1.1 schoolplus.cloudware.ng:80 GET /?p=91018148 HTTP/1.1
   8-0  56247 0/369/1734 _ 4.53  0    26  740372  0.0   4.98  21.18 116.203.134.67 http/1.1 cloudsms.com.ng:443        GET /cron/process_queue4.php HTTP/1.1
   9-0  45152 0/863/1943 W 34.37 0    0   1018779 0.0   8.69  25.18 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   10-0 61481 0/112/1218 W 1.45  0    0   757906  0.0   1.66  18.67 103.253.27.139 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   11-0 -     0/0/1444   . 0.00  56   0   810520  0.0   0.00  22.00 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-0 62022 0/94/1382  _ 1.63  0    0   760761  0.0   2.29  18.40 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   13-0 64389 1/35/1105  K 0.66  0    360 671005  30.2  0.70  17.38 66.249.70.197  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2194900565 HTTP/1.1
   14-0 43750 3/727/1150 K 7.58  0    374 645868  91.9  8.39  15.84 66.249.70.198  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4246235508 HTTP/1.1
   15-0 64403 0/31/813   _ 0.21  1    389 442131  0.0   0.31  12.12 103.253.27.139 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   16-0 64433 0/25/975   _ 0.42  0    0   562003  0.0   0.45  16.00 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   17-0 64619 0/30/929   _ 0.33  1    417 476263  0.0   0.40  10.92 103.253.27.28  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   18-0 -     0/0/1103   . 0.00  1089 0   537321  0.0   0.00  14.29 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/909    . 0.00  1307 0   466098  0.0   0.00  12.03 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/331    . 0.00  1076 0   228646  0.0   0.00  5.21  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/130    . 0.00  1306 0   121479  0.0   0.00  1.71  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/1140   . 0.00  143  0   573870  0.0   0.00  16.71 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/728    . 0.00  245  0   455894  0.0   0.00  8.23  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/72     . 0.00  2015 0   33687   0.0   0.00  1.22  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/18     . 0.00  1975 0   7478    0.0   0.00  0.17  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/8      . 0.00  2009 0   2104    0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/3      . 0.00  2035 0   1155    0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/2      . 0.00  2041 0   5       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/16     . 0.00  1976 0   7009    0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/8      . 0.00  2017 0   2127    0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/2      . 0.00  2037 0   13      0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/6      . 0.00  2023 0   2739    0.0   0.00  0.12  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/2      . 0.00  2040 0   1       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/5      . 0.00  2018 0   2035    0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/7      . 0.00  2012 0   2468    0.0   0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/78     . 0.00  1761 0   121446  0.0   0.00  0.71  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/4      . 0.00  2022 0   2767    0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/193    . 0.00  1564 0   241489  0.0   0.00  1.67  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/3      . 0.00  2031 0   50      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/5      . 0.00  2021 0   2478    0.0   0.00  0.12  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/21     . 0.00  1968 0   11757   0.0   0.00  0.53  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/8      . 0.00  2011 0   3645    0.0   0.00  0.14  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/3      . 0.00  2028 0   709     0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/3      . 0.00  2033 0   703     0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/2      . 0.00  2039 0   2       0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/9      . 0.00  1999 0   2869    0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/172    . 0.00  1587 0   242408  0.0   0.00  3.68  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/8      . 0.00  2010 0   2838    0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/10     . 0.00  2013 0   5104    0.0   0.00  0.22  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/160    . 0.00  1671 0   174079  0.0   0.00  1.68  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/7      . 0.00  2014 0   2028    0.0   0.00  0.08  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/175    . 0.00  1804 0   89852   0.0   0.00  1.23  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 310
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 28 seconds, (range: 1...102)
   index usage: 5%, cache usage: 7%
   total entries stored since starting: 8827
   total entries replaced since starting: 0
   total entries expired since starting: 8513
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 25 miss
   total removes since starting: 4 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit