403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-08.12.45.txt
 ## swap threshold exceeded
## server overview
2025-11-08.12.45 load[0] mem[64/68] mysql[5/11] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1414          98          51         850         713
Swap:          1999        1429         570
 12:45:01 up  2:58,  0 users,  load average: 0.63, 0.79, 0.89
## system overview
top - 12:45:01 up  2:58,  0 users,  load average: 0.63, 0.79, 0.89
Tasks: 215 total,   7 running, 207 sleeping,   0 stopped,   1 zombie
%Cpu(s): 80.0 us, 20.0 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   100492 free,  1448680 used,   871128 buff/cache
KiB Swap:  2047996 total,   584188 free,  1463808 used.   729684 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1773 mysql     20   0 1458588 255264   3424 S 100.0 10.5   4:25.08 /usr/sbin+
  7064 healtho+  20   0  459292  69676   4212 R  23.5  2.9   0:05.04 php-fpm: +
  7470 nigeria   20   0  400652  15936  10220 S  11.8  0.7   0:00.05 /opt/cpan+
  7497 root      20   0  160224   2356   1636 S   5.9  0.1   0:00.01 top -n 2 +
  7551 cloudw    20   0  282524  10728   7504 R   5.9  0.4   0:00.01 /opt/cpan+
  7556 cloudsms  20   0  400652  15140   9828 R   5.9  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44424   3528   1572 S   0.0  0.1   0:16.78 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.24 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.23 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:13.90 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.21 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.89 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:14.28 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   102 root      20   0       0      0      0 S   0.0  0.0   0:00.23 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   243 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   244 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   259 root       0 -20       0      0      0 S   0.0  0.0   0:01.60 [kworker/+
   268 root       0 -20       0      0      0 S   0.0  0.0   0:01.28 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.74 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39496   6116   5800 S   0.0  0.3   0:06.50 /usr/lib/+
   384 root      20   0   45352    372    216 S   0.0  0.0   0:00.35 /usr/lib/+
   407 root      16  -4   55532    504    376 S   0.0  0.0   0:01.09 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 root      20   0  224280   7576   1348 S   0.0  0.3   0:00.28 queueproc+
   491 rpc       20   0   69256    212    108 S   0.0  0.0   0:00.02 /sbin/rpc+
   512 dbus      20   0   58768   1472    708 S   0.0  0.1   0:05.77 /usr/bin/+
   538 root      20   0   21540    432    324 S   0.0  0.0   0:00.23 /usr/sbin+
   539 root      20   0   52852    356    260 S   0.0  0.0   0:00.01 /usr/sbin+
   540 root      20   0   24896   1476    840 S   0.0  0.1   0:02.58 /usr/lib/+
   541 root      20   0  152780    220    176 S   0.0  0.0   0:00.00 /usr/sbin+
   542 root      20   0    4388    128    124 S   0.0  0.0   0:00.00 /usr/sbin+
   544 polkitd   20   0  610540    928    472 S   0.0  0.0   0:01.52 /usr/lib/+
   547 nscd      20   0  928956   1504    808 S   0.0  0.1   0:05.74 /usr/sbin+
   566 root      20   0  195208     44     44 S   0.0  0.0   0:00.00 /usr/sbin+
   582 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   586 root      20   0  124472    488    360 S   0.0  0.0   0:00.31 /usr/sbin+
   588 root      20   0   24208    160    136 S   0.0  0.0   0:00.00 /usr/sbin+
   605 root      20   0  114704    136    136 S   0.0  0.0   0:00.02 /bin/bash
   606 root      20   0  108296    148    144 S   0.0  0.0   0:00.00 /sbin/age+
   616 mailnull  20   0   89116   3956    940 S   0.0  0.2   0:00.19 /usr/sbin+
   679 root       0 -20       0      0      0 S   0.0  0.0   0:02.48 [loop0]
   709 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   729 nobody    20   0  277592  19932   4344 S   0.0  0.8   0:00.84 /usr/sbin+
   969 systuser  20   0   11796     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   971 root      20   0 1763032 143732    552 S   0.0  5.9   0:13.69 /usr/loca+
   975 root      20   0  249168   8656   5176 S   0.0  0.4   0:03.23 /usr/sbin+
   976 named     20   0 1186804  35196   1844 S   0.0  1.5   0:06.15 /usr/sbin+
   977 root      20   0  397344   3136    716 S   0.0  0.1   0:03.31 php-fpm: +
   982 systuser  20   0  114016  13024   2628 S   0.0  0.5   0:02.58 /usr/loca+
   983 root      20   0  572372    924    356 S   0.0  0.0   0:00.99 /usr/bin/+
   985 memcach+  20   0  342400      4      4 S   0.0  0.0   0:00.22 /usr/bin/+
   986 cpanelc+  20   0   10460   3676   2464 R   0.0  0.2   0:08.74 /usr/loca+
   987 root      20   0  386112    884    672 S   0.0  0.0   0:00.32 php-fpm: +
   988 systuser  20   0   11348     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   989 root      20   0  385496    736    528 S   0.0  0.0   0:00.33 php-fpm: +
   990 root      20   0  153404    380    296 S   0.0  0.0   0:00.24 pure-ftpd+
   992 systuser  20   0  111608   1560      0 S   0.0  0.1   0:00.00 /usr/loca+
   995 root      20   0  436392  11392  11180 S   0.0  0.5   0:00.40 php-fpm: +
   998 root      20   0  392856    572    404 S   0.0  0.0   0:00.30 php-fpm: +
  1006 telegraf  20   0 5654048  36492   5724 S   0.0  1.5   0:06.17 /usr/loca+
  1010 root      20   0   51508    576    412 S   0.0  0.0   0:00.15 /usr/sbin+
  1012 root      20   0  261164  27604   5076 S   0.0  1.1   0:01.75 cpsrvd (S+
  1024 root      20   0  445028   2648   2648 S   0.0  0.1   0:00.05 sw-engine+
  1025 systuser  20   0  112524   1984      0 S   0.0  0.1   0:00.01 /usr/loca+
  1031 root      20   0  111304    512    408 S   0.0  0.0   0:01.51 /usr/sbin+
  1129 dovenull  20   0   46984   2944   2164 S   0.0  0.1   0:00.17 dovecot/p+
  1130 dovenull  20   0   47744   3696   2296 S   0.0  0.2   0:00.15 dovecot/i+
  1131 dovecot   20   0   10320    404    288 S   0.0  0.0   0:00.04 dovecot/a+
  1132 root      20   0   10452    580    376 S   0.0  0.0   0:00.13 dovecot/l+
  1133 dovenull  20   0   47188   2892   1956 S   0.0  0.1   0:00.24 dovecot/p+
  1134 dovenull  20   0   47644   3628   2320 S   0.0  0.1   0:00.13 dovecot/i+
  1142 root      20   0   24528   2604    552 S   0.0  0.1   0:00.09 dovecot/c+
  1144 dovecot   20   0   13568    660    436 S   0.0  0.0   0:00.03 dovecot/s+
  1204 systuser  20   0  157704   2888    864 S   0.0  0.1   0:00.07 SonarPush+
  1217 wp-tool+  20   0  410452  35768   1748 S   0.0  1.5   0:08.99 /usr/bin/+
  1218 wp-tool+  20   0  387528  13172   1548 S   0.0  0.5   0:00.17 /usr/bin/+
  1221 dovecot   20   0   41168   1520   1064 S   0.0  0.1   0:00.25 dovecot/a+
  1264 root      20   0  209324  20424   2908 S   0.0  0.8   0:01.38 tailwatchd
  1266 root      20   0  167452   1464    860 S   0.0  0.1   0:00.19 dnsadmin +
  1268 root      20   0  183900   6600   3372 S   0.0  0.3   0:00.62 cpdavd - +
  1699 root      20   0  299272    928    548 S   0.0  0.0   0:00.28 php-fpm: +
  1717 root      38  18  130416   1448    720 S   0.0  0.1   0:00.02 cpanellog+
  1930 nobody    20   0  277592  19288   4012 S   0.0  0.8   0:00.32 /usr/sbin+
  1947 root      20   0  267032   8220    812 S   0.0  0.3   0:00.80 /usr/sbin+
  1952 root      20   0   12828    436    324 S   0.0  0.0   0:01.27 /usr/loca+
  1953 root      20   0   12732    400    320 S   0.0  0.0   0:01.06 /usr/loca+
  1954 root      20   0   12864    404    280 S   0.0  0.0   0:01.14 /usr/loca+
  1963 root      20   0   53268    196    196 S   0.0  0.0   0:00.05 /usr/loca+
  2286 root      20   0  182360  11452   1212 S   0.0  0.5   0:10.79 lfd - sle+
  2619 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
  4230 nobody    20   0  277532  19436   4052 S   0.0  0.8   0:00.44 /usr/sbin+
  4397 cloudw    20   0  471840   9428   5040 S   0.0  0.4   0:00.38 php-fpm: +
  4798 nobody    20   0  277528  19296   3980 S   0.0  0.8   0:00.28 /usr/sbin+
  5052 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  5277 nobody    20   0  277884  19148   3760 S   0.0  0.8   0:00.39 /usr/sbin+
  5759 nobody    20   0  277536  18608   3620 S   0.0  0.8   0:00.13 /usr/sbin+
  5840 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6068 mailnull  20   0   89288   5732   2504 S   0.0  0.2   0:00.00 /usr/sbin+
  6326 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6399 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
  6474 cloudw    20   0  471784   9144   4740 S   0.0  0.4   0:00.18 php-fpm: +
  6603 cloudw    20   0  471784   9144   4736 S   0.0  0.4   0:00.18 php-fpm: +
  6722 cloudw    20   0  471784   9148   4744 S   0.0  0.4   0:00.18 php-fpm: +
  7031 healtho+  20   0  459292  69676   4212 S   0.0  2.9   0:06.00 php-fpm: +
  7045 healtho+  20   0  459292  70184   4260 S   0.0  2.9   0:05.66 php-fpm: +
  7282 nobody    20   0  277884  18628   3604 S   0.0  0.8   0:00.02 /usr/sbin+
  7366 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
  7371 root      20   0  162436   5836   4340 S   0.0  0.2   0:00.01 sshd: roo+
  7372 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: roo+
  7402 agradio   20   0  416180  29272   4628 S   0.0  1.2   0:00.18 php-fpm: +
  7409 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  7410 root      20   0  183040   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  7411 root      20   0  183040   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  7413 root      20   0  183040   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  7414 root      20   0  183040   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  7415 root      20   0  183040   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  7416 root      20   0  183040   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  7417 root      20   0  183040   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  7418 root      20   0  183040   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  7419 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  7420 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  7421 root      20   0  183040   2136   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  7422 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  7424 root      20   0  183040   2140   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  7431 nobody    20   0  277092  16444   2092 S   0.0  0.7   0:00.00 /usr/sbin+
  7432 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
  7433 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  7439 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  7440 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  7441 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  7442 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
  7445 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  7446 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
  7447 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  7448 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  7449 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  7450 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  7451 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  7452 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  7454 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  7455 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
  7457 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
  7458 root      20   0  188224  11124   5152 S   0.0  0.5   0:00.01 /usr/loca+
  7464 cloudsms  20   0  400652  15148   9844 S   0.0  0.6   0:00.01 /opt/cpan+
  7465 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
  7466 root      20   0  114256   2428   1280 S   0.0  0.1   0:00.00 bash /usr+
  7468 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
  7476 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  7479 pactpay   20   0  476724  17480  11728 S   0.0  0.7   0:00.02 /opt/cpan+
  7504 nigeria   20   0  397064   5612   2368 S   0.0  0.2   0:00.00 php-fpm: +
  7543 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
  7553 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  7554 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
  7558 root      20   0  114256   1148      0 R   0.0  0.0   0:00.00 bash /usr+
 10754 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10763 oysipao+  20   0    3152    520     28 S   0.0  0.0   0:00.18 [kworker]
 40228 root      20   0  248032 119724   3100 S   0.0  4.9   0:03.52 /usr/loca+
 47195 root      20   0  259304 125816   2636 S   0.0  5.2   0:01.91 spamd chi+
 47196 root      20   0  248032 117188    604 S   0.0  4.8   0:00.00 spamd chi+
 71949 cloudw    20   0  471856   9448   5048 S   0.0  0.4   0:02.78 php-fpm: +
 79320 nobody    20   0  277896  19904   4424 S   0.0  0.8   0:02.38 /usr/sbin+
 83628 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 84079 root      20   0 1276100  10752    596 S   0.0  0.4   0:00.07 /usr/bin/+
 84123 root      20   0 1277056  11692    596 S   0.0  0.5   0:00.07 /usr/bin/+
 86312 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 90209 nobody    20   0  277880  20344   4572 S   0.0  0.8   0:02.35 /usr/sbin+
 90900 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 93235 nobody    20   0  277884  20120   4488 S   0.0  0.8   0:01.79 /usr/sbin+
 93404 nobody    20   0  277868  20228   4364 S   0.0  0.8   0:01.41 /usr/sbin+
 93465 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 97279 nobody    20   0  277572  19504   4140 S   0.0  0.8   0:00.92 /usr/sbin+
 97286 nobody    20   0  277572  19632   4132 S   0.0  0.8   0:00.92 /usr/sbin+
 99333 nobody    20   0  277552  19260   4052 S   0.0  0.8   0:01.24 /usr/sbin+
 99433 nobody    20   0  277556  19436   4368 S   0.0  0.8   0:01.04 /usr/sbin+
 99641 nobody    20   0  277884  20340   4444 S   0.0  0.8   0:01.20 /usr/sbin+
 99761 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 99784 nobody    20   0  277492  19056   4032 S   0.0  0.8   0:01.08 /usr/sbin+
 99795 nobody    20   0  277568  19428   4196 S   0.0  0.8   0:01.22 /usr/sbin+
100237 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
101972 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:46   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:46   0:13  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:46   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:46   0:14  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:46   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [deferwq]
root        102  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ata_sff]
root        243  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_0]
root        244  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_0]
root        245  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ttm_swap]
root        259  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/1:1H]
root        268  0.0  0.0      0     0 ?        S<   09:46   0:01  \_ [kworker/0:1H]
root        277  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [xprtiod]
root        582  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [kvm-irqfd-clean]
root        679  0.0  0.0      0     0 ?        S<   09:46   0:02  \_ [loop0]
root        709  0.0  0.0      0     0 ?        S    09:46   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   09:46   0:00  \_ [ext4-rsv-conver]
root      83628  0.0  0.0      0     0 ?        S    12:00   0:00  \_ [kworker/u200:0]
root      86312  0.0  0.0      0     0 ?        S    12:04   0:00  \_ [kworker/1:4]
root      90900  0.0  0.0      0     0 ?        S    12:12   0:00  \_ [kworker/u200:1]
root      93465  0.0  0.0      0     0 ?        S    12:17   0:00  \_ [kworker/0:1]
root      99761  0.0  0.0      0     0 ?        S    12:28   0:00  \_ [kworker/0:2]
root     100237  0.0  0.0      0     0 ?        S    12:29   0:00  \_ [kworker/1:3]
root     101972  0.0  0.0      0     0 ?        S    12:32   0:00  \_ [kworker/0:3]
root       2619  0.0  0.0      0     0 ?        S    12:36   0:00  \_ [kworker/1:0]
root       5052  0.0  0.0      0     0 ?        S    12:40   0:00  \_ [kworker/0:0]
root       5840  0.0  0.0      0     0 ?        S    12:42   0:00  \_ [kworker/1:1]
root       6326  0.0  0.0      0     0 ?        S    12:43   0:00  \_ [kworker/1:2]
root          1  0.1  0.1  44424  3528 ?        Ss   09:46   0:16 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  39496  6116 ?        Ss   09:46   0:06 /usr/lib/systemd/systemd-journald
root        384  0.0  0.0  45352   372 ?        Ss   09:46   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   504 ?        S<sl 09:46   0:01 /sbin/auditd
root        489  0.0  0.3 224280  7576 ?        Ss   09:46   0:00 queueprocd - waiting up to 60s to process a task
rpc         491  0.0  0.0  69256   212 ?        Ss   09:46   0:00 /sbin/rpcbind -w
dbus        512  0.0  0.0  58768  1472 ?        Ss   09:46   0:05 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        538  0.0  0.0  21540   432 ?        Ss   09:46   0:00 /usr/sbin/irqbalance --foreground
root        539  0.0  0.0  52852   356 ?        Ss   09:46   0:00 /usr/sbin/smartd -n -q never
root        540  0.0  0.0  24896  1476 ?        Ss   09:46   0:02 /usr/lib/systemd/systemd-logind
root        541  0.0  0.0 152780   220 ?        Ss   09:46   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        542  0.0  0.0   4388   128 ?        Ss   09:46   0:00 /usr/sbin/acpid
polkitd     544  0.0  0.0 610540   928 ?        Ssl  09:46   0:01 /usr/lib/polkit-1/polkitd --no-debug
nscd        547  0.0  0.0 928956  1504 ?        Ssl  09:46   0:05 /usr/sbin/nscd
root        566  0.0  0.0 195208    44 ?        Ssl  09:46   0:00 /usr/sbin/gssproxy -D
root        586  0.0  0.0 124472   488 ?        Ss   09:46   0:00 /usr/sbin/crond -n
root       7410  0.0  0.0 183040  2144 ?        S    12:45   0:00  \_ /usr/sbin/CROND -n
root       7442  0.0  0.0 113284  1208 ?        Ss   12:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       7457  0.0  0.0 108052   356 ?        S    12:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       7468  0.0  0.0 113288  1516 ?        S    12:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       7559  0.0  0.0 153840  2096 ?        R    12:45   0:00  |               \_ ps auxf
root       7411  0.0  0.0 183040  2148 ?        S    12:45   0:00  \_ /usr/sbin/CROND -n
root       7448  0.0  0.0  20164   808 ?        Ss   12:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       7413  0.0  0.0 183040  2148 ?        S    12:45   0:00  \_ /usr/sbin/CROND -n
root       7449  0.0  0.0  20164   804 ?        Ss   12:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       7414  0.0  0.0 183040  2148 ?        S    12:45   0:00  \_ /usr/sbin/CROND -n
root       7432  0.0  0.0  20164   988 ?        Ss   12:45   0:00  |   \_ jailshell (cloudsms) [7553] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   7553  0.0  0.0  20164   264 ?        S    12:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   7554  0.0  0.0 113284  1212 ?        S    12:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   7556  0.0  0.6 400652 15404 ?        S    12:45   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root       7415  0.0  0.0 183040  2148 ?        S    12:45   0:00  \_ /usr/sbin/CROND -n
root       7440  0.0  0.0  20164   808 ?        Ss   12:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       7416  0.0  0.0 183040  2148 ?        S    12:45   0:00  \_ /usr/sbin/CROND -n
root       7433  0.0  0.0  20164   964 ?        Ss   12:45   0:00  |   \_ jailshell (cloudsms) [7454] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms   7454  0.0  0.0  20164   260 ?        S    12:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms   7455  0.0  0.0 113284  1212 ?        S    12:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms   7464  0.0  0.6 400652 15148 ?        S    12:45   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root       7417  0.0  0.0 183040  2144 ?        S    12:45   0:00  \_ /usr/sbin/CROND -n
root       7451  0.0  0.0  20164   804 ?        Ss   12:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       7418  0.0  0.0 183040  2144 ?        S    12:45   0:00  \_ /usr/sbin/CROND -n
root       7439  0.0  0.0  20164   804 ?        Ss   12:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       7419  0.0  0.0 183040  2140 ?        S    12:45   0:00  \_ /usr/sbin/CROND -n
root       7450  0.0  0.0  20164   808 ?        Ss   12:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       7420  0.0  0.0 183040  2140 ?        S    12:45   0:00  \_ /usr/sbin/CROND -n
root       7441  0.0  0.0  20164   808 ?        Ss   12:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       7421  0.0  0.0 183040  2136 ?        S    12:45   0:00  \_ /usr/sbin/CROND -n
root       7452  0.0  0.0 113284  1212 ?        Ss   12:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root       7458  0.0  0.4 188224 11124 ?        S    12:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root       7497  0.0  0.0 160224  2356 ?        S    12:45   0:00  |           \_ top -n 2 -b -c
root       7422  0.0  0.0 183040  2140 ?        S    12:45   0:00  \_ /usr/sbin/CROND -n
root       7445  0.0  0.0  20164   968 ?        Ss   12:45   0:00  |   \_ jailshell (pactpay) [7476] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    7476  0.0  0.0  20164   264 ?        S    12:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    7479  0.0  0.7 476724 17480 ?        S    12:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       7424  0.0  0.0 183040  2140 ?        S    12:45   0:00  \_ /usr/sbin/CROND -n
root       7446  0.0  0.0  20164   968 ?        Ss   12:45   0:00      \_ jailshell (nigeria) [7465] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    7465  0.0  0.0  20164   256 ?        S    12:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    7470  0.0  0.6 400652 15936 ?        S    12:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        588  0.0  0.0  24208   160 ?        Ss   09:46   0:00 /usr/sbin/atd -f
root        605  0.0  0.0 114704   136 ttyS0    Ss+  09:46   0:00 /bin/bash
root        606  0.0  0.0 108296   148 tty1     Ss+  09:46   0:00 /sbin/agetty --noclear tty1 linux
mailnull    616  0.0  0.1  89116  3956 ?        Ss   09:46   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   6068  0.0  0.2  89288  5732 ?        S    12:42   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    969  0.0  0.0  11796    44 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        971  0.1  5.9 1763032 143732 ?      Ssl  09:46   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        975  0.0  0.3 249168  8656 ?        Ssl  09:46   0:03 /usr/sbin/rsyslogd -n
named       976  0.0  1.4 1186804 35196 ?       Ssl  09:46   0:06 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        977  0.0  0.1 397344  3136 ?        Ss   09:46   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    71949  0.0  0.3 471856  9448 ?        S    11:41   0:02  \_ php-fpm: pool edoocds_cloudware_ng
cloudw     4397  0.1  0.3 471840  9428 ?        S    12:39   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw     6474  0.1  0.3 471784  9144 ?        S    12:43   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw     6603  0.1  0.3 471784  9144 ?        S    12:43   0:00  \_ php-fpm: pool edoocds_cloudware_ng
cloudw     6722  0.2  0.3 471784  9148 ?        S    12:43   0:00  \_ php-fpm: pool edoocds_cloudware_ng
healtho+   7031 15.0  2.8 459292 69676 ?        S    12:44   0:06  \_ php-fpm: pool health_oyostate_gov_ng
healtho+   7045 15.2  2.8 459292 70184 ?        S    12:44   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+   7064 15.3  2.8 459292 69676 ?        R    12:44   0:05  \_ php-fpm: pool health_oyostate_gov_ng
nigeria    7504  0.0  0.2 397064  5612 ?        S    12:45   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    982  0.0  0.5 114016 13024 ?        Ssl  09:46   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        983  0.0  0.0 572372   924 ?        Ssl  09:46   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
memcach+    985  0.0  0.0 342400     4 ?        Ssl  09:46   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    986  0.0  0.1  10460  3676 ?        Ss   09:46   0:08 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        987  0.0  0.0 386112   884 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
agradio    7402 18.0  1.2 416180 29272 ?        S    12:45   0:00  \_ php-fpm: pool agradio_ng
systuser    988  0.0  0.0  11348    36 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        989  0.0  0.0 385496   736 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        990  0.0  0.0 153404   380 ?        Ss   09:46   0:00 pure-ftpd (SERVER)
systuser    992  0.0  0.0 111608  1560 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        995  0.0  0.4 436392 11392 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        998  0.0  0.0 392856   572 ?        Ss   09:46   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
telegraf   1006  0.0  1.5 5654048 36492 ?       SLsl 09:46   0:06 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root       1010  0.0  0.0  51508   576 ?        Ss   09:46   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1129  0.0  0.1  46984  2944 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1130  0.0  0.1  47744  3696 ?        S    09:46   0:00  \_ dovecot/imap-login
dovecot    1131  0.0  0.0  10320   404 ?        S    09:46   0:00  \_ dovecot/anvil
root       1132  0.0  0.0  10452   580 ?        S    09:46   0:00  \_ dovecot/log
dovenull   1133  0.0  0.1  47188  2892 ?        S    09:46   0:00  \_ dovecot/pop3-login
dovenull   1134  0.0  0.1  47644  3628 ?        S    09:46   0:00  \_ dovecot/imap-login
root       1142  0.0  0.1  24528  2604 ?        S    09:46   0:00  \_ dovecot/config
dovecot    1144  0.0  0.0  13568   660 ?        S    09:46   0:00  \_ dovecot/stats
dovecot    1221  0.0  0.0  41168  1520 ?        S    09:46   0:00  \_ dovecot/auth
root       6399  0.0  0.1  60820  4512 ?        S    12:43   0:00  \_ dovecot/lmtp
root       1012  0.0  1.1 261164 27604 ?        Ss   09:46   0:01 cpsrvd (SSL) - waiting for connections                   
root       7366  0.0  0.0      0     0 ?        Z    12:44   0:00  \_ [webmaild - serv] <defunct>
root       1024  0.0  0.1 445028  2648 ?        Ss   09:46   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
systuser   1025  0.0  0.0 112524  1984 ?        Ssl  09:46   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root       1031  0.0  0.0 111304   512 ?        Ss   09:46   0:01 /usr/sbin/sshd -D
root       7371  0.3  0.2 162436  5836 ?        Ss   12:44   0:00  \_ sshd: root [priv]
sshd       7372  0.0  0.1 115644  2632 ?        S    12:44   0:00      \_ sshd: root [net]
systuser   1204  0.0  0.1 157704  2888 ?        S    09:46   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1217  0.0  1.4 410452 35768 ?        Ss   09:46   0:08 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1218  0.0  0.5 387528 13172 ?        Ss   09:46   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1264  0.0  0.8 209324 20424 ?        Ss   09:46   0:01 tailwatchd
root       1266  0.0  0.0 167452  1464 ?        Ss   09:46   0:00 dnsadmin - dormant mode
root       1268  0.0  0.2 183900  6600 ?        Ss   09:46   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1699  0.0  0.0 299272   928 ?        Ss   09:46   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1717  0.0  0.0 130416  1448 ?        SN   09:46   0:00 cpanellogd - sleeping for logs
mysql      1773  2.4 10.5 1458588 255264 ?      Sl   09:46   4:25 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  0.3 267032  8220 ?        Ss   09:46   0:00 /usr/sbin/httpd -k start
root       1952  0.0  0.0  12828   436 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1953  0.0  0.0  12732   400 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1954  0.0  0.0  12864   404 ?        S    09:46   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1963  0.0  0.0  53268   196 ?        S    09:46   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    79320  0.0  0.8 277896 19904 ?        S    11:53   0:02  \_ /usr/sbin/httpd -k start
nobody    90209  0.1  0.8 277880 20344 ?        S    12:10   0:02  \_ /usr/sbin/httpd -k start
nobody    93235  0.1  0.8 277884 20120 ?        S    12:16   0:01  \_ /usr/sbin/httpd -k start
nobody    93404  0.0  0.8 277868 20228 ?        S    12:17   0:01  \_ /usr/sbin/httpd -k start
nobody    97279  0.0  0.8 277572 19504 ?        S    12:23   0:00  \_ /usr/sbin/httpd -k start
nobody    97286  0.0  0.8 277572 19632 ?        S    12:23   0:00  \_ /usr/sbin/httpd -k start
nobody    99333  0.1  0.7 277552 19260 ?        S    12:27   0:01  \_ /usr/sbin/httpd -k start
nobody    99433  0.0  0.8 277556 19436 ?        S    12:27   0:01  \_ /usr/sbin/httpd -k start
nobody    99641  0.1  0.8 277884 20340 ?        S    12:28   0:01  \_ /usr/sbin/httpd -k start
nobody    99784  0.1  0.7 277492 19056 ?        S    12:28   0:01  \_ /usr/sbin/httpd -k start
nobody    99795  0.1  0.8 277568 19428 ?        S    12:28   0:01  \_ /usr/sbin/httpd -k start
nobody      729  0.1  0.8 277592 19932 ?        S    12:33   0:00  \_ /usr/sbin/httpd -k start
nobody     1930  0.0  0.7 277592 19288 ?        S    12:34   0:00  \_ /usr/sbin/httpd -k start
nobody     4230  0.1  0.8 277532 19436 ?        S    12:39   0:00  \_ /usr/sbin/httpd -k start
nobody     4798  0.0  0.7 277528 19296 ?        S    12:39   0:00  \_ /usr/sbin/httpd -k start
nobody     5277  0.1  0.7 277884 19148 ?        S    12:40   0:00  \_ /usr/sbin/httpd -k start
cloudw     7551  0.0  0.6 351952 15232 ?        S    12:45   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody     5759  0.0  0.7 277536 18608 ?        S    12:42   0:00  \_ /usr/sbin/httpd -k start
nobody     7282  0.1  0.7 277884 18628 ?        S    12:44   0:00  \_ /usr/sbin/httpd -k start
nobody     7431  0.0  0.6 277092 16444 ?        S    12:45   0:00  \_ /usr/sbin/httpd -k start
root       2286  0.1  0.4 182360 11452 ?        Ss   09:46   0:10 lfd - sleeping
oysipao+  10754  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+  10763  0.0  0.0   3152   520 ?        S    10:01   0:00  \_ [kworker]
root      40228  0.0  4.9 248032 119724 ?       Ss   10:50   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      47195  0.0  5.1 259304 125816 ?       S    11:00   0:01  \_ spamd child
root      47196  0.0  4.8 248032 117188 ?       S    11:00   0:00  \_ spamd child
root      84079  0.0  0.4 1276100 10752 ?       Ssl  12:00   0:00 /usr/bin/cspdaemon
root      84123  0.0  0.4 1277056 11692 ?       Ssl  12:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 32407  Threads: 6  Questions: 1952569  Slow queries: 0  Opens: 4007  Flush tables: 1  Open tables: 1992  Queries per second avg: 60.251
*************************** 1. row ***************************
     Id: 29023
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 29024
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 29032
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 29036
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.35 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 198.54.114.63 TIME_WAIT
      1 ::1 TIME_WAIT
      1 34.72.176.129 TIME_WAIT
      1 54.39.6.36 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 66.249.70.200 TIME_WAIT
      3 203.75.213.2 TIME_WAIT
      8 104.248.90.230 TIME_WAIT
     39 103.253.27.28 TIME_WAIT
     40 103.253.27.139 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 08-Nov-2025 12:45:01 WAT
   Restart Time: Saturday, 08-Nov-2025 03:45:00 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 9 hours
   Server load: 0.63 0.79 0.89
   Total accesses: 55827 - Total Traffic: 859.3 MB - Total Duration: 60970073
   CPU Usage: u13.06 s5.69 cu496.64 cs337.39 - 2.63% CPU load
   1.72 requests/sec - 27.2 kB/second - 15.8 kB/request - 1092.13 ms/request
   15 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

_KR_WWKWKWKWW_.._..W...K.K.W....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS  Req   Dur   Conn  Child  Slot     Client      Protocol           VHost                                        Request
   0-0  7282  0/6/2856   _ 0.06  0    32  3778357 0.0   0.07  45.77 52.45.194.165   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/blog/2019elections/assets/c
   1-0  99333 5/360/3039 K 6.15  2    303 2978898 155.3 4.06  51.83 66.249.70.192   http/1.1 schoolplus.cloudware.ng:80 GET /?p=294261815 HTTP/1.1
   2-0  93404 0/404/2689 R 6.60  0    334 3709773 0.0   5.37  45.85 103.253.27.139  http/1.1
   3-0  79320 0/602/2697 _ 10.93 0    390 4968471 0.0   15.88 45.44 66.249.70.200   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1717637526 HTTP/1.1
   4-0  1930  0/71/2719  W 1.07  116  0   2896590 0.0   1.35  46.26 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630353738352p2231223
   5-0  4230  0/107/2789 W 1.81  0    0   2792005 0.0   1.79  37.56 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   6-0  729   1/238/2869 K 2.71  0    426 2030643 31.6  3.09  40.94 66.249.70.198   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2751372843 HTTP/1.1
   7-0  4798  0/64/2540  W 1.27  76   0   2439426 0.0   1.08  34.48 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630353832352p2231223
   8-0  99433 1/260/2717 K 3.68  1    341 2484139 30.7  4.09  36.92 66.249.70.196   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2572541654 HTTP/1.1
   9-0  97279 0/247/2915 W 5.14  96   0   3182918 0.0   4.97  42.73 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630353830352p2231223
   10-0 99641 2/295/2142 K 5.13  4    307 2620387 62.2  4.70  35.49 66.249.70.193   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1580842247 HTTP/1.1
   11-0 5759  0/31/2620  W 0.46  56   0   1733384 0.0   0.55  40.51 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630353834352p2231223
   12-0 5277  0/83/2263  W 1.47  0    0   1571632 0.0   1.59  34.89 66.249.70.194   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2087198779 HTTP/1.1
   13-0 7431  0/1/1837   _ 0.00  0    1   1581405 0.0   0.02  32.08 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   14-0 -     0/0/2339   . 0.00  160  0   1522184 0.0   0.00  40.92 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 -     0/0/1704   . 0.00  946  0   828699  0.0   0.00  25.13 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 93235 0/418/1849 _ 7.82  0    0   3001173 0.0   7.43  31.25 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   17-0 -     0/0/1316   . 0.00  944  0   1124959 0.0   0.00  16.06 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 -     0/0/1817   . 0.00  395  0   3586377 0.0   0.00  24.30 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 99784 0/239/1836 W 4.03  150  0   1496323 0.0   5.82  27.14 173.199.190.174 http/1.1 edoocds.cloudware.ng:443   GET /postnews.php?ARRAY=7o2230223n313736323630353735312p2231223
   20-0 -     0/0/952    . 0.00  938  0   511438  0.0   0.00  15.97 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/536    . 0.00  880  0   1248512 0.0   0.00  9.75  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/1929   . 0.00  882  0   824477  0.0   0.00  26.07 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 97286 1/221/1066 K 3.46  2    409 1563571 31.8  3.75  14.37 66.249.70.197   http/1.1 schoolplus.cloudware.ng:80 GET /?p=712067813 HTTP/1.1
   24-0 -     0/0/314    . 0.00  653  0   1235713 0.0   0.00  6.38  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 90209 5/836/855  K 7.83  3    406 801139  156.8 12.02 12.19 66.249.70.195   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2235729496 HTTP/1.1
   26-0 -     0/0/237    . 0.00  559  0   633520  0.0   0.00  3.63  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 99795 0/355/638  W 6.15  0    0   1974795 0.0   4.25  9.11  103.253.27.28   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   28-0 -     0/0/346    . 0.00  153  0   672034  0.0   0.00  5.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/340    . 0.00  970  0   168303  0.0   0.00  8.07  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/70     . 0.00  1011 0   31830   0.0   0.00  0.83  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/32     . 0.00  972  0   15979   0.0   0.00  0.53  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/19     . 0.00  1218 0   7018    0.0   0.00  0.29  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/34     . 0.00  1181 0   30745   0.0   0.00  0.56  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/17     . 0.00  1178 0   4967    0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/28     . 0.00  1180 0   14042   0.0   0.00  0.43  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/78     . 0.00  6261 0   121446  0.0   0.00  0.71  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/4      . 0.00  6522 0   2767    0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/193    . 0.00  6063 0   241489  0.0   0.00  1.67  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/3      . 0.00  6531 0   50      0.0   0.00  0.01  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/5      . 0.00  6521 0   2478    0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/21     . 0.00  6468 0   11757   0.0   0.00  0.53  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/8      . 0.00  6511 0   3645    0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/3      . 0.00  6528 0   709     0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/3      . 0.00  6533 0   703     0.0   0.00  0.02  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/2      . 0.00  6539 0   2       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/9      . 0.00  6499 0   2869    0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/172    . 0.00  6086 0   242408  0.0   0.00  3.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/8      . 0.00  6510 0   2838    0.0   0.00  0.03  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/10     . 0.00  6513 0   5104    0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/160    . 0.00  6171 0   174079  0.0   0.00  1.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/7      . 0.00  6514 0   2028    0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/175    . 0.00  6303 0   89852   0.0   0.00  1.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 339
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 37 seconds, (range: 0...115)
   index usage: 5%, cache usage: 8%
   total entries stored since starting: 14241
   total entries replaced since starting: 0
   total entries expired since starting: 13889
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 55 miss
   total removes since starting: 13 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit