403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.12.12.txt
 ## swap threshold exceeded
## server overview
2025-11-08.12.12 load[0] mem[63/65] mysql[1/11] httpd[20]
              total        used        free      shared  buff/cache   available
Mem:           2363        1429         116          51         818         714
Swap:          1999        1381         618
 12:12:01 up  2:25,  0 users,  load average: 0.88, 0.92, 0.89
## system overview
top - 12:12:01 up  2:25,  0 users,  load average: 0.88, 0.92, 0.89
Tasks: 215 total,   5 running, 208 sleeping,   0 stopped,   2 zombie
%Cpu(s): 46.9 us, 28.1 sy,  0.0 ni, 25.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   108172 free,  1474292 used,   837836 buff/cache
KiB Swap:  2047996 total,   633852 free,  1414144 used.   720688 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1773 mysql     20   0 1458588 238828   3604 S  75.0  9.9   3:34.69 /usr/sbin+
 90874 nigeria   20   0  400652  15932  10216 S  25.0  0.7   0:00.04 /opt/cpan+
     1 root      20   0   44424   3492   1536 S  12.5  0.1   0:14.10 /usr/lib/+
   357 root      20   0   39496   1956   1640 S   6.2  0.1   0:05.64 /usr/lib/+
 71949 cloudw    20   0  471320   9088   5048 S   6.2  0.4   0:01.40 php-fpm: +
 90876 pactpay   20   0  476724  17112  11408 S   6.2  0.7   0:00.02 /opt/cpan+
 90879 root      20   0  160220   2060   1580 R   6.2  0.1   0:00.01 top -bcn1
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.00 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.19 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:11.11 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.16 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.54 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:13.48 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   243 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   259 root       0 -20       0      0      0 S   0.0  0.0   0:01.45 [kworker/+
   268 root       0 -20       0      0      0 S   0.0  0.0   0:01.15 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.63 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   384 root      20   0   45352    372    216 S   0.0  0.0   0:00.35 /usr/lib/+
   407 root      16  -4   55532    516    388 S   0.0  0.0   0:00.96 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0  224280   7580   1348 S   0.0  0.3   0:00.27 queueproc+
   491 rpc       20   0   69256    212    108 S   0.0  0.0   0:00.01 /sbin/rpc+
   512 dbus      20   0   58768   1472    708 S   0.0  0.1   0:04.75 /usr/bin/+
   538 root      20   0   21540    432    324 S   0.0  0.0   0:00.19 /usr/sbin+
   539 root      20   0   52852    396    300 S   0.0  0.0   0:00.01 /usr/sbin+
   540 root      20   0   24896   1476    840 S   0.0  0.1   0:02.12 /usr/lib/+
   541 root      20   0  152780    228    184 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0    4388    128    124 S   0.0  0.0   0:00.00 /usr/sbin+
   544 polkitd   20   0  610540    968    512 S   0.0  0.0   0:01.26 /usr/lib/+
   547 nscd      20   0  928956   1504    808 S   0.0  0.1   0:04.66 /usr/sbin+
   566 root      20   0  195208     44     44 S   0.0  0.0   0:00.00 /usr/sbin+
   582 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   586 root      20   0  124472    488    360 S   0.0  0.0   0:00.25 /usr/sbin+
   588 root      20   0   24208    160    136 S   0.0  0.0   0:00.00 /usr/sbin+
   605 root      20   0  114704    136    136 S   0.0  0.0   0:00.02 /bin/bash
   606 root      20   0  108296    148    144 S   0.0  0.0   0:00.00 /sbin/age+
   616 mailnull  20   0   89116   4028   1008 S   0.0  0.2   0:00.17 /usr/sbin+
   679 root       0 -20       0      0      0 S   0.0  0.0   0:02.46 [loop0]
   709 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   969 systuser  20   0   11796     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   971 root      20   0 1763032 195212   1164 S   0.0  8.1   0:13.61 /usr/loca+
   975 root      20   0  249168   4900   1464 S   0.0  0.2   0:02.75 /usr/sbin+
   976 named     20   0 1186804  34056   1816 S   0.0  1.4   0:05.03 /usr/sbin+
   977 root      20   0  397344   3136    716 S   0.0  0.1   0:02.67 php-fpm: +
   982 systuser  20   0  114016  12912   2576 S   0.0  0.5   0:02.14 /usr/loca+
   983 root      20   0  572372    928    360 S   0.0  0.0   0:00.82 /usr/bin/+
   985 memcach+  20   0  342400      4      4 S   0.0  0.0   0:00.18 /usr/bin/+
   986 cpanelc+  20   0   10340   3504   2436 S   0.0  0.1   0:07.17 /usr/loca+
   987 root      20   0  386112    820    608 S   0.0  0.0   0:00.27 php-fpm: +
   988 systuser  20   0   11348     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   989 root      20   0  385496    744    536 S   0.0  0.0   0:00.27 php-fpm: +
   990 root      20   0  153404    376    296 S   0.0  0.0   0:00.19 pure-ftpd+
   992 systuser  20   0  111608   1560      0 S   0.0  0.1   0:00.00 /usr/loca+
   995 root      20   0  436392  11392  11180 S   0.0  0.5   0:00.33 php-fpm: +
   998 root      20   0  392856    572    404 S   0.0  0.0   0:00.25 php-fpm: +
  1006 telegraf  20   0 5654048  36024   5492 S   0.0  1.5   0:05.10 /usr/loca+
  1010 root      20   0   51508    576    412 S   0.0  0.0   0:00.13 /usr/sbin+
  1012 root      20   0  261032  27880   5512 S   0.0  1.2   0:01.45 cpsrvd (S+
  1024 root      20   0  445028   2648   2648 S   0.0  0.1   0:00.05 sw-engine+
  1025 systuser  20   0  112524   1984      0 S   0.0  0.1   0:00.01 /usr/loca+
  1031 root      20   0  111304    512    408 S   0.0  0.0   0:01.34 /usr/sbin+
  1129 dovenull  20   0   46984   2712   1932 S   0.0  0.1   0:00.14 dovecot/p+
  1130 dovenull  20   0   47744   3520   2232 S   0.0  0.1   0:00.11 dovecot/i+
  1131 dovecot   20   0   10320    404    288 S   0.0  0.0   0:00.02 dovecot/a+
  1132 root      20   0   10452    580    376 S   0.0  0.0   0:00.11 dovecot/l+
  1133 dovenull  20   0   47188   2644   1708 S   0.0  0.1   0:00.19 dovecot/p+
  1134 dovenull  20   0   47500   3416   2232 S   0.0  0.1   0:00.10 dovecot/i+
  1142 root      20   0   24528   2604    552 S   0.0  0.1   0:00.07 dovecot/c+
  1144 dovecot   20   0   13568    664    436 S   0.0  0.0   0:00.01 dovecot/s+
  1204 systuser  20   0  157704   2896    864 S   0.0  0.1   0:00.06 SonarPush+
  1217 wp-tool+  20   0  410452  36044   2024 S   0.0  1.5   0:07.38 /usr/bin/+
  1218 wp-tool+  20   0  387528  13404   1780 S   0.0  0.6   0:00.16 /usr/bin/+
  1221 dovecot   20   0   41168   1516   1068 S   0.0  0.1   0:00.21 dovecot/a+
  1264 root      20   0  209016  20380   2916 S   0.0  0.8   0:01.11 tailwatchd
  1266 root      20   0  167452   1464    860 S   0.0  0.1   0:00.16 dnsadmin +
  1268 root      20   0  183900   6448   3216 S   0.0  0.3   0:00.53 cpdavd - +
  1699 root      20   0  299272    964    584 S   0.0  0.0   0:00.23 php-fpm: +
  1717 root      38  18  130416   1444    720 S   0.0  0.1   0:00.02 cpanellog+
  1947 root      20   0  267032   8220    812 S   0.0  0.3   0:00.65 /usr/sbin+
  1952 root      20   0   12832    436    324 S   0.0  0.0   0:01.03 /usr/loca+
  1953 root      20   0   12732    400    320 S   0.0  0.0   0:00.85 /usr/loca+
  1954 root      20   0   12872    404    280 S   0.0  0.0   0:00.93 /usr/loca+
  1963 root      20   0   53268    196    196 S   0.0  0.0   0:00.05 /usr/loca+
  2286 root      20   0  182088  11096   1212 S   0.0  0.5   0:08.79 lfd - sle+
 10754 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10763 oysipao+  20   0    3152    520     28 S   0.0  0.0   0:00.14 [kworker]
 40228 root      20   0  248032 119724   3100 S   0.0  4.9   0:03.28 /usr/loca+
 47195 root      20   0  259304 125916   2948 S   0.0  5.2   0:01.06 spamd chi+
 47196 root      20   0  248032 117188    604 S   0.0  4.8   0:00.00 spamd chi+
 50503 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 54240 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 68001 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 71252 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 73427 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 74758 nobody    20   0  277532  20080   4488 S   0.0  0.8   0:01.05 /usr/sbin+
 76930 worencom  20   0   38484   3584   2568 S   0.0  0.1   0:00.00 dovecot/i+
 77613 cloudw    20   0  471840   9500   5084 S   0.0  0.4   0:00.96 php-fpm: +
 79320 nobody    20   0  277896  19248   3952 S   0.0  0.8   0:00.45 /usr/sbin+
 80859 nobody    20   0  277528  19316   4132 S   0.0  0.8   0:00.73 /usr/sbin+
 82096 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 83628 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 84079 root      20   0 1276100  10752    596 S   0.0  0.4   0:00.05 /usr/bin/+
 84123 root      20   0 1277056  11884    596 S   0.0  0.5   0:00.06 /usr/bin/+
 84976 nobody    20   0  277840  19932   4356 S   0.0  0.8   0:00.66 /usr/sbin+
 85108 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 86312 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 86570 nobody    20   0  277564  18968   3872 S   0.0  0.8   0:00.36 /usr/sbin+
 86591 nobody    20   0  277884  19584   4048 R   0.0  0.8   0:00.32 /usr/sbin+
 86596 nobody    20   0  277780  19500   4168 S   0.0  0.8   0:00.27 /usr/sbin+
 86598 nobody    20   0  277880  19316   3792 S   0.0  0.8   0:00.36 /usr/sbin+
 86844 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 87358 nobody    20   0  277552  19524   4284 S   0.0  0.8   0:00.42 /usr/sbin+
 87815 nobody    20   0  277532  18608   3636 S   0.0  0.8   0:00.16 /usr/sbin+
 88645 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 88732 nobody    20   0  277592  18776   3608 S   0.0  0.8   0:00.03 /usr/sbin+
 88779 cloudw    20   0  471784   9144   4740 S   0.0  0.4   0:00.19 php-fpm: +
 88926 cloudw    20   0  471784   9152   4748 S   0.0  0.4   0:00.18 php-fpm: +
 89012 nobody    20   0  277880  19020   3856 S   0.0  0.8   0:00.22 /usr/sbin+
 89053 cloudw    20   0  471784   9148   4744 S   0.0  0.4   0:00.18 php-fpm: +
 89085 nobody    20   0  277564  19152   3928 S   0.0  0.8   0:00.28 /usr/sbin+
 89160 nobody    20   0  277528  18692   3752 S   0.0  0.8   0:00.17 /usr/sbin+
 89432 nobody    20   0  277532  18796   3832 S   0.0  0.8   0:00.21 /usr/sbin+
 89689 nobody    20   0  277540  18764   3764 S   0.0  0.8   0:00.14 /usr/sbin+
 89839 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 90192 nobody    20   0  277556  18568   3588 S   0.0  0.8   0:00.07 /usr/sbin+
 90201 nobody    20   0  277868  18772   3688 S   0.0  0.8   0:00.12 /usr/sbin+
 90208 nobody    20   0  277536  18468   3532 S   0.0  0.8   0:00.13 /usr/sbin+
 90209 nobody    20   0  277880  18732   3612 S   0.0  0.8   0:00.10 /usr/sbin+
 90210 nobody    20   0  277556  18640   3624 S   0.0  0.8   0:00.07 /usr/sbin+
 90425 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 90434 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 90639 nigeria   20   0  397064   5612   2368 S   0.0  0.2   0:00.01 php-fpm: +
 90655 healtho+  20   0  459292  69680   4216 S   0.0  2.9   0:03.34 php-fpm: +
 90658 healtho+  20   0  459292  69672   4208 S   0.0  2.9   0:03.02 php-fpm: +
 90667 healtho+  20   0  457244  67624   4208 S   0.0  2.8   0:02.38 php-fpm: +
 90716 cloudw    20   0   62108   6536   4468 S   0.0  0.3   0:00.01 dovecot/l+
 90726 root      20   0   86572  10056   5056 S   0.0  0.4   0:00.02 /usr/sbin+
 90729 mailnull  20   0   86784   6208   1144 S   0.0  0.3   0:00.00 /usr/sbin+
 90732 mailnull  20   0   89500   5852   2588 S   0.0  0.2   0:00.00 /usr/sbin+
 90739 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 90770 nigeria   20   0  397064   5612   2368 S   0.0  0.2   0:00.00 php-fpm: +
 90778 nobody    20   0  277096  16424   2068 S   0.0  0.7   0:00.00 /usr/sbin+
 90779 root      20   0  162436   5832   4336 S   0.0  0.2   0:00.01 sshd: roo+
 90780 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 90781 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 90791 root      20   0  183040   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 90792 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 90793 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 90796 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 90797 root      20   0  183040   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 90798 root      20   0  183040   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 90799 root      20   0  183040   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 90800 root      20   0  183040   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 90801 root      20   0  183040   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 90803 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 90805 root      20   0  183040   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 90808 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 90810 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 90811 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 90839 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 90840 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 90841 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 90842 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 90843 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 90849 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 90850 root      20   0   20164    988    784 R   0.0  0.0   0:00.00 /usr/loca+
 90851 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 90852 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 90853 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 90869 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 90872 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 90883 cloudw    20   0  352096  15236  10128 S   0.0  0.6   0:00.00 /opt/cpan+
 90886 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 90887 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 90889 cloudsms  20   0  113284    384    200 R   0.0  0.0   0:00.00 /usr/loca+
 90890 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 90891 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 90892 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [setupvir+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    09:46   0:11  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:46   0:13  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        243  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        245  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        259  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/1:1H]
root        268  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        582  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        679  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [loop0]
root        709  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      50503  0.0  0.0      0     0 ?        S    11:05   0:00  \_ [kworker/u200:2]
root      54240  0.0  0.0      0     0 ?        S    11:11   0:00  \_ [kworker/1:0]
root      68001  0.0  0.0      0     0 ?        S    11:34   0:00  \_ [kworker/0:0]
root      71252  0.0  0.0      0     0 ?        S    11:40   0:00  \_ [kworker/1:1]
root      73427  0.0  0.0      0     0 ?        S    11:44   0:00  \_ [kworker/0:2]
root      82096  0.0  0.0      0     0 ?        S    11:58   0:00  \_ [kworker/0:1]
root      83628  0.0  0.0      0     0 ?        S    12:00   0:00  \_ [kworker/u200:0]
root      85108  0.0  0.0      0     0 ?        S    12:02   0:00  \_ [kworker/1:3]
root      86312  0.0  0.0      0     0 ?        S    12:04   0:00  \_ [kworker/1:4]
root      86844  0.0  0.0      0     0 ?        S    12:05   0:00  \_ [kworker/0:3]
root      88645  0.0  0.0      0     0 ?        S    12:08   0:00  \_ [kworker/0:4]
root      89839  0.0  0.0      0     0 ?        S    12:10   0:00  \_ [kworker/1:2]
root          1  0.1  0.1  44424  3492 ?        Ss   09:46   0:14 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.0  39496  1956 ?        Ss   09:46   0:05 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   372 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   516 ?        S<sl 09:46   0:00 /sbin/auditd
root        489  0.0  0.3 224280  7580 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
rpc         491  0.0  0.0  69256   212 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        512  0.0  0.0  58768  1472 ?        Ss   09:46   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        538  0.0  0.0  21540   432 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        539  0.0  0.0  52852   396 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
root        540  0.0  0.0  24896  1476 ?        Ss   09:46   0:02 /usr/lib/systemd/systemd-logind
root        541  0.0  0.0 152780   228 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        542  0.0  0.0   4388   128 ?        Ss   09:46   0:00 /usr/sbin/acpid
polkitd     544  0.0  0.0 610540   968 ?        Ssl  09:46   0:01 /usr/lib/polkit-1/polkitd --no-debug
nscd        547  0.0  0.0 928956  1504 ?        Ssl  09:46   0:04 /usr/sbin/nscd
root        566  0.0  0.0 195208    44 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        586  0.0  0.0 124472   488 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root      90791  0.0  0.0 183040  2140 ?        S    12:12   0:00  \_ /usr/sbin/CROND -n
root      90808  0.0  0.0 113284  1212 ?        Ss   12:12   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      90810  0.0  0.0 108052   360 ?        S    12:12   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      90811  0.0  0.0 113288  1516 ?        S    12:12   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      90894  0.0  0.0 153840  2096 ?        R    12:12   0:00  |               \_ ps auxf
root      90792  0.0  0.0 183040  2144 ?        S    12:12   0:00  \_ /usr/sbin/CROND -n
root      90842  0.0  0.0  20164   808 ?        Ss   12:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      90793  0.0  0.0 183040  2144 ?        S    12:12   0:00  \_ /usr/sbin/CROND -n
root      90843  0.0  0.0  20164   808 ?        Ss   12:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      90796  0.0  0.0 183040  2144 ?        S    12:12   0:00  \_ /usr/sbin/CROND -n
root      90841  0.0  0.0  20164   808 ?        Ss   12:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      90797  0.0  0.0 183040  2140 ?        S    12:12   0:00  \_ /usr/sbin/CROND -n
root      90850  0.0  0.0  20164   988 ?        Ss   12:12   0:00  |   \_ jailshell (cloudsms) [90895] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  90895  0.0  0.0  20164   264 ?        S    12:12   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      90798  0.0  0.0 183040  2140 ?        S    12:12   0:00  \_ /usr/sbin/CROND -n
root      90839  0.0  0.0  20164   804 ?        Ss   12:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      90799  0.0  0.0 183040  2140 ?        S    12:12   0:00  \_ /usr/sbin/CROND -n
root      90849  0.0  0.0  20164   808 ?        Ss   12:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      90800  0.0  0.0 183040  2140 ?        S    12:12   0:00  \_ /usr/sbin/CROND -n
root      90840  0.0  0.0  20164   988 ?        Ss   12:12   0:00  |   \_ jailshell (cloudsms) [90886] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  90886  0.0  0.0  20164   260 ?        R    12:12   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
cloudsms  90887  0.0  0.0      0     0 ?        Z    12:12   0:00  |           \_ [bash] <defunct>
root      90801  0.0  0.0 183040  2140 ?        S    12:12   0:00  \_ /usr/sbin/CROND -n
root      90851  0.0  0.0  20164   984 ?        Ss   12:12   0:00  |   \_ jailshell (cloudsms) [90890] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  90890  0.0  0.0  20164   260 ?        S    12:12   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  90891  0.0  0.0 113284  1212 ?        S    12:12   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  90893  0.0  0.1 131852  3324 ?        R    12:12   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/bin/php -q -f /home/cloudsms/public_html/cron/process_queue3.php
root      90803  0.0  0.0 183040  2140 ?        S    12:12   0:00  \_ /usr/sbin/CROND -n
root      90853  0.0  0.0  20164   968 ?        Ss   12:12   0:00  |   \_ jailshell (pactpay) [90872] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   90872  0.0  0.0  20164   264 ?        S    12:12   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   90876  0.0  0.7 476724 17484 ?        S    12:12   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      90805  0.0  0.0 183040  2136 ?        S    12:12   0:00  \_ /usr/sbin/CROND -n
root      90852  0.0  0.0  20164   964 ?        Ss   12:12   0:00      \_ jailshell (nigeria) [90869] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   90869  0.0  0.0  20164   260 ?        S    12:12   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   90874  0.0  0.6 400652 15932 ?        S    12:12   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        588  0.0  0.0  24208   160 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        605  0.0  0.0 114704   136 ttyS0    Ss+  09:46   0:00 /bin/bash
root        606  0.0  0.0 108296   148 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    616  0.0  0.1  89116  4028 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  90732  0.0  0.2  89500  5852 ?        S    12:11   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    969  0.0  0.0  11796    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        971  0.1  8.0 1763032 195212 ?      Ssl  09:46   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        975  0.0  0.2 249168  4900 ?        Ssl  09:46   0:02 /usr/sbin/rsyslogd -n
named       976  0.0  1.4 1186804 34056 ?       Ssl  09:46   0:05 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        977  0.0  0.1 397344  3136 ?        Ss   09:46   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    71949  0.0  0.3 471320  9088 ?        S    11:41   0:01  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    77613  0.0  0.3 471840  9500 ?        S    11:50   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    88779  0.0  0.3 471784  9144 ?        S    12:08   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    88926  0.0  0.3 471784  9152 ?        S    12:08   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw    89053  0.0  0.3 471784  9148 ?        S    12:08   0:00  \_ php-fpm: pool edoocds_cloudware_ng
nigeria   90639  0.0  0.2 397064  5612 ?        S    12:11   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  90655 18.5  2.8 459292 69680 ?        S    12:11   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  90658 17.7  2.8 459292 69672 ?        S    12:11   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  90667 15.8  2.7 457244 67624 ?        S    12:11   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   90770  0.0  0.2 397064  5612 ?        S    12:11   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    982  0.0  0.5 114016 12912 ?        Ssl  09:46   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        983  0.0  0.0 572372   928 ?        Ssl  09:46   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
memcach+    985  0.0  0.0 342400     4 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    986  0.0  0.1  10340  3504 ?        Ss   09:46   0:07 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        987  0.0  0.0 386112   820 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    988  0.0  0.0  11348    36 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        989  0.0  0.0 385496   744 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        990  0.0  0.0 153404   376 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
systuser    992  0.0  0.0 111608  1560 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        995  0.0  0.4 436392 11392 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        998  0.0  0.0 392856   572 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
telegraf   1006  0.0  1.4 5654048 36024 ?       SLsl 09:46   0:05 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1010  0.0  0.0  51508   576 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1129  0.0  0.1  46984  2712 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1130  0.0  0.1  47744  3520 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1131  0.0  0.0  10320   404 ?        S    09:46   0:00  \_ dovecot/anvil
root       1132  0.0  0.0  10452   580 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1133  0.0  0.1  47188  2644 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1134  0.0  0.1  47500  3416 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1142  0.0  0.1  24528  2604 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1144  0.0  0.0  13568   664 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1221  0.0  0.0  41168  1516 ?        S    09:46   0:00  \_ dovecot/auth
worencom  76930  0.0  0.1  38484  3584 ?        S    11:49   0:00  \_ dovecot/imap
root      90434  0.0  0.1  41052  2728 ?        S    12:11   0:00  \_ dovecot/auth -w
cloudw    90716  0.1  0.2  62108  6536 ?        S    12:11   0:00  \_ dovecot/lmtp
root       1012  0.0  1.1 261032 27880 ?        Ss   09:46   0:01 cpsrvd (SSL) - waiting for connections                   
root      90739  0.0  0.0      0     0 ?        Z    12:11   0:00  \_ [cpaneld - servi] <defunct>
root       1024  0.0  0.1 445028  2648 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser   1025  0.0  0.0 112524  1984 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1031  0.0  0.0 111304   512 ?        Ss   09:46   0:01 /usr/sbin/sshd -D
root      90425  0.0  0.1 111304  4268 ?        Ss   12:11   0:00  \_ sshd: [accepted]
root      90779  1.0  0.2 162436  5832 ?        Ss   12:12   0:00  \_ sshd: root [priv]
sshd      90780  0.0  0.1 115644  2628 ?        S    12:12   0:00  |   \_ sshd: root [net]
root      90781  0.0  0.1 111304  4260 ?        Ss   12:12   0:00  \_ sshd: [accepted]
systuser   1204  0.0  0.1 157704  2896 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1217  0.0  1.4 410452 36044 ?        Ss   09:46   0:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1218  0.0  0.5 387528 13404 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.8 209016 20380 ?        Ss   09:46   0:01 tailwatchd
root       1266  0.0  0.0 167452  1464 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1268  0.0  0.2 183900  6448 ?        Ss   09:46   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1699  0.0  0.0 299272   964 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1444 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1773  2.4  9.8 1458588 238828 ?      Sl   09:46   3:34 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  0.3 267032  8220 ?        Ss   09:46   0:00 /usr/sbin/httpd -k start
root       1952  0.0  0.0  12832   436 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1953  0.0  0.0  12732   400 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1954  0.0  0.0  12872   404 ?        S    09:46   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1963  0.0  0.0  53268   196 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    74758  0.0  0.8 277532 20080 ?        S    11:46   0:01  \_ /usr/sbin/httpd -k start
nobody    79320  0.0  0.7 277896 19248 ?        S    11:53   0:00  \_ /usr/sbin/httpd -k start
nobody    80859  0.0  0.7 277528 19316 ?        S    11:56   0:00  \_ /usr/sbin/httpd -k start
nobody    84976  0.1  0.8 277840 19932 ?        S    12:01   0:00  \_ /usr/sbin/httpd -k start
nobody    86570  0.0  0.7 277564 18968 ?        S    12:04   0:00  \_ /usr/sbin/httpd -k start
nobody    86591  0.0  0.8 277884 19584 ?        S    12:04   0:00  \_ /usr/sbin/httpd -k start
nobody    86596  0.0  0.8 277780 19500 ?        S    12:04   0:00  \_ /usr/sbin/httpd -k start
nobody    86598  0.0  0.7 277880 19316 ?        S    12:04   0:00  \_ /usr/sbin/httpd -k start
nobody    87358  0.1  0.8 277552 19524 ?        S    12:05   0:00  \_ /usr/sbin/httpd -k start
nobody    87815  0.0  0.7 277532 18608 ?        S    12:06   0:00  \_ /usr/sbin/httpd -k start
nobody    88732  0.0  0.7 277592 18776 ?        S    12:08   0:00  \_ /usr/sbin/httpd -k start
nobody    89012  0.1  0.7 277880 19020 ?        S    12:08   0:00  \_ /usr/sbin/httpd -k start
nobody    89085  0.1  0.7 277564 19152 ?        S    12:09   0:00  \_ /usr/sbin/httpd -k start
nobody    89160  0.0  0.7 277528 18692 ?        S    12:09   0:00  \_ /usr/sbin/httpd -k start
nobody    89432  0.1  0.7 277532 18796 ?        S    12:09   0:00  \_ /usr/sbin/httpd -k start
nobody    89689  0.1  0.7 277540 18764 ?        S    12:10   0:00  \_ /usr/sbin/httpd -k start
nobody    90192  0.0  0.7 277556 18568 ?        S    12:10   0:00  \_ /usr/sbin/httpd -k start
nobody    90201  0.1  0.7 277868 18772 ?        S    12:10   0:00  \_ /usr/sbin/httpd -k start
nobody    90208  0.1  0.7 277536 18468 ?        S    12:10   0:00  \_ /usr/sbin/httpd -k start
nobody    90209  0.1  0.7 277880 18732 ?        S    12:10   0:00  \_ /usr/sbin/httpd -k start
nobody    90210  0.0  0.7 277556 18640 ?        S    12:10   0:00  \_ /usr/sbin/httpd -k start
cloudw    90883  0.0  0.6 352096 15236 ?        S    12:12   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    90778  0.0  0.6 277096 16424 ?        S    12:12   0:00  \_ /usr/sbin/httpd -k start
root       2286  0.1  0.4 182088 11096 ?        Ss   09:46   0:08 lfd - sleeping
oysipao+  10754  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+  10763  0.0  0.0   3152   520 ?        S    10:01   0:00  \_ [kworker]
root      40228  0.0  4.9 248032 119724 ?       Ss   10:50   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      47195  0.0  5.2 259304 125916 ?       S    11:00   0:01  \_ spamd child
root      47196  0.0  4.8 248032 117188 ?       S    11:00   0:00  \_ spamd child
root      84079  0.0  0.4 1276100 10752 ?       Ssl  12:00   0:00 /usr/bin/cspdaemon
root      84123  0.0  0.4 1277056 11884 ?       Ssl  12:00   0:00 /usr/bin/checkstatus
root      90726  0.2  0.4  86572 10056 ?        Ss   12:11   0:00 /usr/sbin/exim -Mc 1vHgrJ-00000000NbI-0mBm
mailnull  90729  0.0  0.2  86784  6208 ?        S    12:11   0:00  \_ /usr/sbin/exim -Mc 1vHgrJ-00000000NbI-0mBm
## mysql stats
Uptime: 30427  Threads: 6  Questions: 1579295  Slow queries: 0  Opens: 3529  Flush tables: 1  Open tables: 1986  Queries per second avg: 51.904
*************************** 1. row ***************************
     Id: 23000
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-08' LIMIT 1
*************************** 2. row ***************************
     Id: 23001
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 23003
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 23006
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 5. row ***************************
     Id: 23007
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 6. row ***************************
     Id: 23008
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 159.26.110.63 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 ::1 TIME_WAIT
      1 200.58.127.65 TIME_WAIT
      1 200.80.10.159 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 54.39.210.231 TIME_WAIT
      1 66.249.70.198 TIME_WAIT
      1 74.7.228.26 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     15 124.248.184.195 TIME_WAIT
     38 103.253.27.139 TIME_WAIT
     38 103.253.27.28 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 12:12:01 WAT
   Restart Time: Saturday, 08-Nov-2025 03:45:00 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 27 minutes
   Server load: 0.88 0.92 0.89
   Total accesses: 44998 - Total Traffic: 675.6 MB - Total Duration: 38388473
   CPU Usage: u4.7 s2.23 cu408.87 cs271.32 - 2.26% CPU load
   1.48 requests/sec - 22.7 kB/second - 15.4 kB/request - 853.115 ms/request
   19 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

_W_W.K.WC.RKWWK.K._KKK.RKWWK....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client      Protocol             VHost                                         Request
   0-0  86570 0/87/2490  _ 1.28 0    25  2281375 0.0   1.67  41.21 116.203.134.67  http/1.1 cloudsms.com.ng:443           GET /cron/process_queue4.php HTTP/1.1
   1-0  90778 0/0/2495   W 0.00 0    0   1795223 0.0   0.00  44.14 103.253.27.28   http/1.1 health.oyostate.gov.ng:443    POST //xmlrpc.php HTTP/1.1
   2-0  87358 0/121/2209 _ 1.25 0    24  2294823 0.0   1.48  39.39 128.140.8.200   http/1.1 cloudsms.com.ng:443           GET /cron/process_queue3.php HTTP/1.1
   3-0  79320 0/123/2218 W 2.21 224  0   2990227 0.0   8.62  38.18 173.199.190.174 http/1.1 edoocds.cloudware.ng:443      GET /postnews.php?ARRAY=7o2230223n313736323630333639372p2231223
   4-0  -     0/0/2312   . 0.00 65   0   2203242 0.0   0.00  39.98 ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   5-0  80859 1/269/2320 K 2.45 2    6   2097880 10.8  2.56  31.05 20.0.53.98      http/1.1 nigeriadecide.org:443         GET /polling_unit_locator.php?get_polling_unit=&lga=Kalgo&state
   6-0  -     0/0/2389   . 0.00 64   0   1358948 0.0   0.00  35.39 ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   7-0  87815 0/33/2077  W 0.61 184  0   1087862 0.0   0.63  28.46 173.199.190.174 http/1.1 edoocds.cloudware.ng:443      GET /postnews.php?ARRAY=7o2230223n313736323630333733372p2231223
   8-0  86591 1/80/2264  C 1.18 6    38  1849111 0.5   1.37  29.79 102.90.81.213   http/1.1 developers.cloudsms.com.ng:80 GET /api.php?&userid=42366540&password=P%40ssw0rd&type=5&destin
   9-0  -     0/0/2396   . 0.00 56   0   1984650 0.0   0.00  34.58 ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   10-0 89012 0/63/1663  R 0.61 0    79  2380135 0.0   1.69  27.86 103.253.27.139  http/1.1
   11-0 89085 4/135/2176 K 1.24 3    265 1109734 125.5 0.92  32.55 66.249.70.192   http/1.1 schoolplus.cloudware.ng:80    GET /?p=2660265017 HTTP/1.1
   12-0 86596 0/74/1960  W 0.83 164  0   1046295 0.0   0.95  27.16 173.199.190.174 http/1.1 edoocds.cloudware.ng:443      GET /postnews.php?ARRAY=7o2230223n313736323630333735372p2231223
   13-0 88732 0/11/1568  W 0.02 204  0   984473  0.0   0.09  25.17 173.199.190.174 http/1.1 edoocds.cloudware.ng:443      GET /postnews.php?ARRAY=7o2230223n313736323630333731372p2231223
   14-0 84976 1/174/1788 K 2.28 2    6   836510  9.9   2.47  22.64 20.0.53.96      http/1.1 nigeriadecide.org:443         GET /polling_unit_category.php?lga=Wasagu/danko&state=Kebbi HTT
   15-0 -     0/0/1612   . 0.00 66   0   787803  0.0   0.00  23.86 ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   16-0 89160 1/46/1422  K 0.47 1    4   1970558 24.0  0.59  23.79 66.249.66.194   http/1.1 health.oyostate.gov.ng:443    GET /wp-content/themes/thegov/js/theme-addons.js?ver=6.8.3 HTTP
   17-0 -     0/0/1247   . 0.00 63   0   1091252 0.0   0.00  15.00 ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   18-0 89432 0/56/1678  _ 0.67 0    0   2100440 0.0   0.79  21.70 ::1             http/1.1 chs1.nescrow.com.ng:80        GET //whm-server-status HTTP/1.0
   19-0 89689 1/35/1333  K 0.70 0    351 1057612 31.1  0.54  16.28 66.249.70.199   http/1.1 schoolplus.cloudware.ng:80    GET /?p=2453004432 HTTP/1.1
   20-0 90192 2/26/881   K 0.41 2    293 486082  61.1  0.27  15.11 66.249.70.193   http/1.1 schoolplus.cloudware.ng:80    GET /?p=4112118579 HTTP/1.1
   21-0 86598 2/153/338  K 1.71 4    400 663316  65.6  1.32  3.99  66.249.70.196   http/1.1 schoolplus.cloudware.ng:80    GET /?p=691197754 HTTP/1.1
   22-0 -     0/0/1785   . 0.00 34   0   792393  0.0   0.00  24.61 ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   23-0 90201 0/27/758   R 0.48 0    356 480454  0.0   0.55  8.79  34.234.197.175  http/1.1
   24-0 90208 6/26/103   K 0.75 0    319 57083   187.4 0.57  1.82  66.249.70.198   http/1.1 schoolplus.cloudware.ng:80    GET /?p=2158444302 HTTP/1.1
   25-0 90209 0/23/42    W 0.37 0    0   24363   0.0   0.43  0.61  ::1             http/1.1 chs1.nescrow.com.ng:80        GET //whm-server-status HTTP/1.0
   26-0 90210 1/24/35    W 0.13 0    0   21876   30.8  0.29  0.34  66.249.70.197   http/1.1 schoolplus.cloudware.ng:80    GET /?p=4191395744 HTTP/1.1
   27-0 74758 1/267/270  K 3.91 1    263 1499935 30.2  4.66  4.67  66.249.70.194   http/1.1 schoolplus.cloudware.ng:80    GET /?p=2413625770 HTTP/1.1
   28-0 -     0/0/9      . 0.00 59   0   6259    0.0   0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   29-0 -     0/0/269    . 0.00 766  0   134925  0.0   0.00  6.92  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   30-0 -     0/0/8      . 0.00 4537 0   2127    0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   31-0 -     0/0/2      . 0.00 4557 0   13      0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   32-0 -     0/0/6      . 0.00 4543 0   2739    0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   33-0 -     0/0/2      . 0.00 4560 0   1       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   34-0 -     0/0/5      . 0.00 4538 0   2035    0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   35-0 -     0/0/7      . 0.00 4532 0   2468    0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   36-0 -     0/0/78     . 0.00 4281 0   121446  0.0   0.00  0.71  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   37-0 -     0/0/4      . 0.00 4542 0   2767    0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   38-0 -     0/0/193    . 0.00 4083 0   241489  0.0   0.00  1.67  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   39-0 -     0/0/3      . 0.00 4551 0   50      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   40-0 -     0/0/5      . 0.00 4541 0   2478    0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   41-0 -     0/0/21     . 0.00 4488 0   11757   0.0   0.00  0.53  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   42-0 -     0/0/8      . 0.00 4531 0   3645    0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   43-0 -     0/0/3      . 0.00 4548 0   709     0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   44-0 -     0/0/3      . 0.00 4553 0   703     0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   45-0 -     0/0/2      . 0.00 4559 0   2       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   46-0 -     0/0/9      . 0.00 4519 0   2869    0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   47-0 -     0/0/172    . 0.00 4106 0   242408  0.0   0.00  3.68  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   48-0 -     0/0/8      . 0.00 4530 0   2838    0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   49-0 -     0/0/10     . 0.00 4533 0   5104    0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   50-0 -     0/0/160    . 0.00 4191 0   174079  0.0   0.00  1.68  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   51-0 -     0/0/7      . 0.00 4534 0   2028    0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
   52-0 -     0/0/175    . 0.00 4323 0   89852   0.0   0.00  1.23  ::1             http/1.1 chs1.nescrow.com.ng:80        OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 444
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 18 seconds, (range: 1...83)
   index usage: 7%, cache usage: 10%
   total entries stored since starting: 11942
   total entries replaced since starting: 0
   total entries expired since starting: 11490
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 45 miss
   total removes since starting: 9 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit