403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-10.02.45.txt
 ## swap threshold exceeded
## server overview
2025-11-10.02.45 load[0] mem[70/58] mysql[6/9] httpd[19]
              total        used        free      shared  buff/cache   available
Mem:           2363        1639          73          37         651         524
Swap:          1999        1255         744
 02:45:02 up  1:51,  0 users,  load average: 1.83, 1.10, 0.97
## system overview
top - 02:45:02 up  1:51,  0 users,  load average: 1.83, 1.10, 0.97
Tasks: 210 total,   7 running, 202 sleeping,   0 stopped,   1 zombie
%Cpu(s): 87.9 us, 12.1 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   116140 free,  1645660 used,   658500 buff/cache
KiB Swap:  2047996 total,   762620 free,  1285376 used.   569620 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1851 mysql     20   0 1462012 235844   2812 S 111.8  9.7   2:00.02 /usr/sbin+
 67843 agradio   20   0  413524  33000   3792 R  35.3  1.4   0:00.15 php-fpm: +
 66012 wp-tool+  20   0  431324  67028   8908 S  11.8  2.8   0:01.16 /usr/bin/+
 67830 nigeria   20   0  400652  15932  10212 S  11.8  0.7   0:00.05 /opt/cpan+
     1 root      20   0   44420   3416   1488 S   0.0  0.1   0:09.71 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.56 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.16 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:07.99 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.15 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.00 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:10.90 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   109 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   254 root       0 -20       0      0      0 S   0.0  0.0   0:01.13 [kworker/+
   273 root      20   0       0      0      0 S   0.0  0.0   0:00.41 [jbd2/vda+
   274 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:01.03 [kworker/+
   357 root      20   0   40244   6492   6160 S   0.0  0.3   0:03.75 /usr/lib/+
   385 root      20   0   45352    236    116 S   0.0  0.0   0:00.35 /usr/lib/+
   411 root      16  -4   55532    344    216 S   0.0  0.0   0:00.60 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   481 polkitd   20   0  612240    996    600 S   0.0  0.0   0:00.95 /usr/lib/+
   482 dbus      20   0   58608   1356    648 S   0.0  0.1   0:03.62 /usr/bin/+
   494 rpc       20   0   69256    156      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   521 root      20   0   52852    364    272 S   0.0  0.0   0:00.01 /usr/sbin+
   523 root      20   0   21540    404    296 S   0.0  0.0   0:00.14 /usr/sbin+
   528 root      20   0  224276   6920   1112 S   0.0  0.3   0:00.18 queueproc+
   533 root      20   0  152780    140     96 S   0.0  0.0   0:00.00 /usr/sbin+
   539 root      20   0   24896   1460    824 S   0.0  0.1   0:01.59 /usr/lib/+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388     64     60 S   0.0  0.0   0:00.00 /usr/sbin+
   551 nscd      20   0  928956   1288    588 S   0.0  0.1   0:03.37 /usr/sbin+
   562 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    488    320 S   0.0  0.0   0:00.19 /usr/sbin+
   583 root      20   0  108296     68     64 S   0.0  0.0   0:00.00 /sbin/age+
   584 root      20   0  114704     44     44 S   0.0  0.0   0:00.02 /bin/bash
   598 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   629 mailnull  20   0   90820   3752    720 S   0.0  0.2   0:00.12 /usr/sbin+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:01.93 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   938 telegraf  20   0 5654048  34516   3708 S   0.0  1.4   0:03.85 /usr/loca+
   941 root      20   0   51656   1140    748 S   0.0  0.0   0:00.12 /usr/sbin+
   942 root      20   0  153404    320    236 S   0.0  0.0   0:00.14 pure-ftpd+
   943 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.00 /usr/loca+
   944 root      20   0  111304    428    324 S   0.0  0.0   0:00.85 /usr/sbin+
   945 systuser  20   0   13012     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   946 systuser  20   0  113932     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   949 root      20   0 1763112 317292    640 S   0.0 13.1   0:13.83 /usr/loca+
   950 root      20   0  436392  11236  11032 S   0.0  0.5   0:00.32 php-fpm: +
   952 named     20   0  718804  34920   1500 S   0.0  1.4   0:05.51 /usr/sbin+
   960 root      20   0  392856    648    464 S   0.0  0.0   0:00.28 php-fpm: +
   961 root      20   0  232784   5928   5232 S   0.0  0.2   0:01.84 /usr/sbin+
   962 root      20   0  397344   3224    652 S   0.0  0.1   0:01.48 php-fpm: +
   965 root      20   0  261416   6588   1652 S   0.0  0.3   0:01.90 cpsrvd (S+
   967 root      20   0  445028   2604   2604 S   0.0  0.1   0:00.05 sw-engine+
   969 memcach+  20   0  342400    120    120 S   0.0  0.0   0:00.15 /usr/bin/+
   970 cpanelc+  20   0   10484   3496   2344 S   0.0  0.1   0:05.41 /usr/loca+
   982 root      20   0  385496    508    408 S   0.0  0.0   0:00.27 php-fpm: +
   985 root      20   0  386112    688    484 S   0.0  0.0   0:00.25 php-fpm: +
   986 systuser  20   0  113272     80      0 S   0.0  0.0   0:00.00 /usr/loca+
   992 systuser  20   0  114016  12868   2660 S   0.0  0.5   0:01.64 /usr/loca+
   993 root      20   0  572372    808    216 S   0.0  0.0   0:00.66 /usr/bin/+
  1087 dovecot   20   0   10320    484    368 S   0.0  0.0   0:00.01 dovecot/a+
  1168 root      20   0  248160 117988   1244 S   0.0  4.9   0:03.59 /usr/loca+
  1181 systuser  20   0  157704   2292    232 S   0.0  0.1   0:00.05 SonarPush+
  1219 wp-tool+  20   0  410452  36844   1748 S   0.0  1.5   0:05.68 /usr/bin/+
  1220 wp-tool+  20   0  387528  13196   1572 S   0.0  0.5   0:00.15 /usr/bin/+
  1249 root      20   0  209356  12004   2416 S   0.0  0.5   0:00.73 tailwatchd
  1252 root      20   0  183900   6024   2796 S   0.0  0.2   0:00.46 cpdavd - +
  1253 root      20   0  167452   3340   1968 S   0.0  0.1   0:00.20 dnsadmin +
  1749 root      20   0  299272    768    388 S   0.0  0.0   0:00.18 php-fpm: +
  1799 root      38  18  130416   1424    700 S   0.0  0.1   0:00.01 cpanellog+
  1947 root      20   0  267112  31024   5436 S   0.0  1.3   0:00.82 /usr/sbin+
  2095 root      20   0  181588  10536   1196 S   0.0  0.4   0:06.16 lfd - sle+
  5800 root      20   0  183048   1008    448 S   0.0  0.0   0:00.00 /usr/sbin+
  5849 root      20   0  113284    380    200 S   0.0  0.0   0:00.00 /bin/sh -+
  5867 root      20   0  108056     92     20 S   0.0  0.0   0:00.00 sleep 5h +
  5913 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
  5923 oysipao+  20   0    3152    488      0 S   0.0  0.0   0:00.13 [kworker]
  6471 root      20   0  265416 132168   2984 S   0.0  5.5   0:01.22 spamd chi+
  6472 root      20   0  248160 117224    516 S   0.0  4.8   0:00.00 spamd chi+
 10342 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 22574 root      20   0   12840   1388   1180 S   0.0  0.1   0:00.43 /usr/loca+
 22575 root      20   0   12732   1364   1180 S   0.0  0.1   0:00.36 /usr/loca+
 22576 root      20   0   12872   1400   1180 S   0.0  0.1   0:00.39 /usr/loca+
 22578 dovenull  20   0   46912   3900   2872 S   0.0  0.2   0:00.07 dovecot/p+
 22579 dovenull  20   0   47428   4360   2940 S   0.0  0.2   0:00.04 dovecot/i+
 22580 root      20   0   10452   1204    832 S   0.0  0.0   0:00.05 dovecot/l+
 22581 dovenull  20   0   46912   3880   2856 S   0.0  0.2   0:00.07 dovecot/p+
 22582 dovenull  20   0   47372   4260   2880 S   0.0  0.2   0:00.08 dovecot/i+
 22583 root      20   0   24528  11880   1000 S   0.0  0.5   0:00.04 dovecot/c+
 22584 dovecot   20   0   13572   1132    864 S   0.0  0.0   0:00.01 dovecot/s+
 22588 dovecot   20   0   41056   2192   1424 S   0.0  0.1   0:00.11 dovecot/a+
 22589 root      20   0   53252  10972   1588 S   0.0  0.5   0:00.04 /usr/loca+
 41160 root      20   0 1341636  11188    600 S   0.0  0.5   0:00.08 /usr/bin/+
 41194 root      20   0 1277568  12684    596 S   0.0  0.5   0:00.08 /usr/bin/+
 45086 nobody    20   0  277788  36552   4844 S   0.0  1.5   0:02.81 /usr/sbin+
 47828 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 49028 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 49206 nobody    20   0  277984  36612   4772 S   0.0  1.5   0:01.96 /usr/sbin+
 49218 nobody    20   0  277792  36552   4852 S   0.0  1.5   0:02.00 /usr/sbin+
 49219 nobody    20   0  277728  36444   4808 S   0.0  1.5   0:01.95 /usr/sbin+
 51787 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 55187 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 56440 nobody    20   0  277652  36096   4528 S   0.0  1.5   0:01.21 /usr/sbin+
 57793 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 57885 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 57959 nobody    20   0  277792  36200   4504 S   0.0  1.5   0:00.88 /usr/sbin+
 58963 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 60040 nobody    20   0  277864  36108   4356 S   0.0  1.5   0:00.93 /usr/sbin+
 60050 nobody    20   0  277992  36040   4316 S   0.0  1.5   0:00.72 /usr/sbin+
 60064 nobody    20   0  277704  36084   4472 S   0.0  1.5   0:00.74 /usr/sbin+
 60071 nobody    20   0  277984  36128   4400 S   0.0  1.5   0:00.94 /usr/sbin+
 62182 nobody    20   0  277660  35828   4252 S   0.0  1.5   0:00.37 /usr/sbin+
 63144 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 63786 nobody    20   0  277856  35648   3920 S   0.0  1.5   0:00.20 /usr/sbin+
 64256 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64444 nobody    20   0  278004  35736   4032 S   0.0  1.5   0:00.19 /usr/sbin+
 65278 nobody    20   0  277660  35268   3712 S   0.0  1.5   0:00.12 /usr/sbin+
 65412 nobody    20   0  277860  35620   3892 S   0.0  1.5   0:00.12 /usr/sbin+
 65443 nobody    20   0  277596  34996   3512 S   0.0  1.4   0:00.03 /usr/sbin+
 65450 nobody    20   0  277588  35200   3716 S   0.0  1.5   0:00.09 /usr/sbin+
 65451 nobody    20   0  277984  35652   3968 S   0.0  1.5   0:00.18 /usr/sbin+
 65782 nobody    20   0  277180  32568   1608 S   0.0  1.3   0:00.00 /usr/sbin+
 65795 nobody    20   0  277660  35288   3728 S   0.0  1.5   0:00.06 /usr/sbin+
 65916 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65962 nobody    20   0  277864  35404   3672 S   0.0  1.5   0:00.11 /usr/sbin+
 65978 nobody    20   0  277660  35468   3908 S   0.0  1.5   0:00.07 /usr/sbin+
 65979 nobody    20   0  277612  35156   3652 S   0.0  1.5   0:00.06 /usr/sbin+
 66831 healtho+  20   0  459288  69808   4240 S   0.0  2.9   0:02.97 php-fpm: +
 66837 nigeria   20   0  397784   9260   3900 S   0.0  0.4   0:00.21 php-fpm: +
 67263 healtho+  20   0  455192  65592   4216 S   0.0  2.7   0:01.37 php-fpm: +
 67690 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 67753 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67755 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67756 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67757 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67758 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67759 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67760 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67761 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67762 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67764 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67766 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67767 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67769 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 67779 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67780 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67781 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 /usr/loca+
 67783 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 67784 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67785 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67786 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 67787 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67788 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 67789 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 67791 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67793 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 67796 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 67801 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 67802 root      20   0  114252   2396   1264 S   0.0  0.1   0:00.00 bash /usr+
 67804 root      20   0  188224  11112   5152 S   0.0  0.5   0:00.01 /usr/loca+
 67810 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 67820 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 67822 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 67828 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 67829 pactpay   20   0  476724  17480  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 67840 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 67848 cloudsms  20   0  400652  15144   9844 S   0.0  0.6   0:00.01 /opt/cpan+
 67852 root      20   0  160224   2352   1636 S   0.0  0.1   0:00.00 top -n 2 +
 67877 cloudw    20   0  350316  16884  10452 R   0.0  0.7   0:00.01 /opt/cpan+
 67908 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 67927 root      20   0   38124   4464   2416 R   0.0  0.2   0:00.00 /usr/loca+
 67928 root      20   0  114252   1140      0 R   0.0  0.0   0:00.00 bash /usr+
 67929 wp-tool+  20   0  431324  58120      0 R   0.0  2.4   0:00.00 /usr/bin/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:54   0:07  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:54   0:10  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        109  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        251  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:01  \_ [kworker/1:1H]
root        273  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        274  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        280  0.0  0.0      0     0 ?        S<   00:54   0:01  \_ [kworker/0:1H]
root        416  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        598  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   00:54   0:01  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root      10342  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/u200:1]
root      47828  0.0  0.0      0     0 ?        S    02:12   0:00  \_ [kworker/1:3]
root      49028  0.0  0.0      0     0 ?        S    02:14   0:00  \_ [kworker/u200:0]
root      51787  0.0  0.0      0     0 ?        S    02:19   0:00  \_ [kworker/0:1]
root      55187  0.0  0.0      0     0 ?        S    02:25   0:00  \_ [kworker/0:0]
root      57793  0.0  0.0      0     0 ?        S    02:30   0:00  \_ [kworker/1:0]
root      57885  0.0  0.0      0     0 ?        S    02:30   0:00  \_ [kworker/1:4]
root      58963  0.0  0.0      0     0 ?        S    02:32   0:00  \_ [kworker/0:2]
root      63144  0.0  0.0      0     0 ?        S    02:39   0:00  \_ [kworker/0:3]
root      64256  0.0  0.0      0     0 ?        S    02:41   0:00  \_ [kworker/1:1]
root      65916  0.0  0.0      0     0 ?        S    02:44   0:00  \_ [kworker/0:4]
root          1  0.1  0.1  44420  3416 ?        Ss   00:54   0:09 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  40244  6492 ?        Ss   00:54   0:03 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45352   236 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   344 ?        S<sl 00:54   0:00 /sbin/auditd
polkitd     481  0.0  0.0 612240   996 ?        Ssl  00:54   0:00 /usr/lib/polkit-1/polkitd --no-debug
dbus        482  0.0  0.0  58608  1356 ?        Ss   00:54   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         494  0.0  0.0  69256   156 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        521  0.0  0.0  52852   364 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0  21540   404 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        528  0.0  0.2 224276  6920 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        533  0.0  0.0 152780   140 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        539  0.0  0.0  24896  1460 ?        Ss   00:54   0:01 /usr/lib/systemd/systemd-logind
root        544  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388    64 ?        Ss   00:54   0:00 /usr/sbin/acpid
nscd        551  0.0  0.0 928956  1288 ?        Ssl  00:54   0:03 /usr/sbin/nscd
root        562  0.0  0.0  24208     0 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   488 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       5800  0.0  0.0 183048  1008 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5849  0.0  0.0 113284   380 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       5867  0.0  0.0 108056    92 ?        S    01:00   0:00  |       \_ sleep 5h 14m
root      67753  0.0  0.0 183044  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      67793  0.0  0.0 113284  1212 ?        Ss   02:45   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      67802  0.0  0.0 114252  2396 ?        S    02:45   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      67755  0.0  0.0 183044  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      67796  0.0  0.0 113284  1208 ?        Ss   02:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      67801  0.0  0.0 108052   356 ?        S    02:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      67810  0.0  0.0 113288  1516 ?        S    02:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      67930  0.0  0.0 153840  2092 ?        R    02:45   0:00  |               \_ ps auxf
root      67756  0.0  0.0 183044  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      67779  0.0  0.0  20164   808 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      67757  0.0  0.0 183044  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      67780  0.0  0.0  20164   804 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      67758  0.0  0.0 183044  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      67787  0.0  0.0  20164   808 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      67759  0.0  0.0 183044  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      67784  0.0  0.0  20164   808 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      67760  0.0  0.0 183044  2144 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      67785  0.0  0.0  20164   804 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      67761  0.0  0.0 183044  2144 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      67789  0.0  0.0  20164   968 ?        Ss   02:45   0:00  |   \_ jailshell (cloudsms) [67828] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  67828  0.0  0.0  20164   264 ?        S    02:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  67840  0.0  0.0 113284  1212 ?        S    02:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  67848  0.0  0.6 400652 15144 ?        S    02:45   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      67762  0.0  0.0 183044  2144 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      67791  0.0  0.0  20164   808 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      67764  0.0  0.0 183044  2140 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      67781  0.0  0.0  20164   988 ?        Ss   02:45   0:00  |   \_ jailshell (cloudsms) [67931] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      67931  0.0  0.0  20164   264 ?        R    02:45   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      67766  0.0  0.0 183044  2140 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      67783  0.0  0.0 113284  1212 ?        Ss   02:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      67804  1.0  0.4 188224 11112 ?        S    02:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      67852  0.0  0.0 160224  2352 ?        S    02:45   0:00  |           \_ top -n 2 -b -c
root      67767  0.0  0.0 183044  2144 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      67788  0.0  0.0  20164   960 ?        Ss   02:45   0:00  |   \_ jailshell (pactpay) [67822] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   67822  0.0  0.0  20164   256 ?        S    02:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   67829  2.0  0.7 476724 17480 ?        S    02:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      67769  0.0  0.0 183044  2140 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      67786  0.0  0.0  20164   968 ?        Ss   02:45   0:00      \_ jailshell (nigeria) [67820] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   67820  0.0  0.0  20164   260 ?        S    02:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   67830  5.0  0.6 400652 15932 ?        S    02:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        583  0.0  0.0 108296    68 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
root        584  0.0  0.0 114704    44 ttyS0    Ss+  00:54   0:00 /bin/bash
mailnull    629  0.0  0.1  90820  3752 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
telegraf    938  0.0  1.4 5654048 34516 ?       SLsl 00:54   0:03 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        941  0.0  0.0  51656  1140 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1087  0.0  0.0  10320   484 ?        S    00:54   0:00  \_ dovecot/anvil
dovenull  22578  0.0  0.1  46912  3900 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  22579  0.0  0.1  47428  4360 ?        S    01:28   0:00  \_ dovecot/imap-login
root      22580  0.0  0.0  10452  1204 ?        S    01:28   0:00  \_ dovecot/log
dovenull  22581  0.0  0.1  46912  3880 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  22582  0.0  0.1  47372  4260 ?        S    01:28   0:00  \_ dovecot/imap-login
root      22583  0.0  0.4  24528 11880 ?        S    01:28   0:00  \_ dovecot/config
dovecot   22584  0.0  0.0  13572  1132 ?        S    01:28   0:00  \_ dovecot/stats
dovecot   22588  0.0  0.0  41056  2192 ?        S    01:28   0:00  \_ dovecot/auth
root        942  0.0  0.0 153404   320 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    943  0.0  0.0  10132    44 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        944  0.0  0.0 111304   428 ?        Ss   00:54   0:00 /usr/sbin/sshd -D
systuser    945  0.0  0.0  13012    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    946  0.0  0.0 113932    72 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        949  0.2 13.1 1763112 317292 ?      Ssl  00:54   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        950  0.0  0.4 436392 11236 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       952  0.0  1.4 718804 34920 ?        Ssl  00:54   0:05 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        960  0.0  0.0 392856   648 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        961  0.0  0.2 232784  5928 ?        Ssl  00:54   0:01 /usr/sbin/rsyslogd -n
root        962  0.0  0.1 397344  3224 ?        Ss   00:54   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  66831 11.0  2.8 459288 69808 ?        S    02:44   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   66837  0.8  0.3 397784  9260 ?        S    02:44   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  67263  9.7  2.7 455192 65592 ?        S    02:44   0:01  \_ php-fpm: pool health_oyostate_gov_ng
root        965  0.0  0.2 261416  6588 ?        Ss   00:54   0:01 cpsrvd (SSL) - waiting for connections                   
root      67690  0.0  0.0      0     0 ?        Z    02:44   0:00  \_ [cpaneld - servi] <defunct>
root        967  0.0  0.1 445028  2604 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
memcach+    969  0.0  0.0 342400   120 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    970  0.0  0.1  10484  3496 ?        Ss   00:54   0:05 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 385496   508 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.0 386112   688 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
agradio   67843  0.0  1.4 415640 34464 ?        D    02:45   0:00  \_ php-fpm: pool agradio_ng
systuser    986  0.0  0.0 113272    80 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    992  0.0  0.5 114016 12868 ?        Ssl  00:54   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        993  0.0  0.0 572372   808 ?        Ssl  00:54   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1168  0.0  4.8 248160 117988 ?       Ss   00:54   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6471  0.0  5.4 265416 132168 ?       S    01:00   0:01  \_ spamd child
root       6472  0.0  4.8 248160 117224 ?       S    01:00   0:00  \_ spamd child
systuser   1181  0.0  0.0 157704  2292 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1219  0.0  1.5 410452 36844 ?        Ss   00:54   0:05 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1220  0.0  0.5 387528 13196 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+  66012  2.1  2.7 431324 67028 ?        S    02:44   0:01  \_ /usr/bin/sw-engine -d auto_prepend_file=/usr/local/cpanel/3rdparty/wp-toolkit/scripts/scheduled-task-prepend-file.php /usr/local/cpanel/3rdparty/wp-toolkit/plib/scripts/instances-auto-update.php
wp-tool+  67929  0.0  0.0   9564   896 ?        S    02:45   0:00      \_ sh -c /usr/local/cpanel/3rdparty/wp-toolkit//bin/wpt-panopticon -user nigeria -operation file-mode -work-dir /home/nigeria/public_html/blog -path /home/nigeria/public_html/blog/wp-config.php
root       1249  0.0  0.4 209356 12004 ?        Ss   00:54   0:00 tailwatchd
root       1252  0.0  0.2 183900  6024 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1253  0.0  0.1 167452  3340 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1749  0.0  0.0 299272   768 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1799  0.0  0.0 130416  1424 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1851  1.8  9.7 1462012 235844 ?      Sl   00:54   2:00 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  1.2 267112 31024 ?        Ss   00:54   0:00 /usr/sbin/httpd -k start
root      22574  0.0  0.0  12840  1388 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      22575  0.0  0.0  12732  1364 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      22576  0.0  0.0  12872  1400 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      22589  0.0  0.4  53252 10972 ?        S    01:28   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    45086  0.1  1.5 277788 36552 ?        S    02:07   0:02  \_ /usr/sbin/httpd -k start
nobody    49206  0.1  1.5 277984 36612 ?        S    02:14   0:01  \_ /usr/sbin/httpd -k start
nobody    49218  0.1  1.5 277792 36552 ?        S    02:14   0:02  \_ /usr/sbin/httpd -k start
nobody    49219  0.1  1.5 277728 36444 ?        S    02:14   0:01  \_ /usr/sbin/httpd -k start
nobody    56440  0.1  1.4 277652 36096 ?        S    02:27   0:01  \_ /usr/sbin/httpd -k start
nobody    57959  0.0  1.4 277792 36200 ?        S    02:30   0:00  \_ /usr/sbin/httpd -k start
nobody    60040  0.1  1.4 277864 36108 ?        S    02:34   0:00  \_ /usr/sbin/httpd -k start
nobody    60050  0.1  1.4 277992 36040 ?        S    02:34   0:00  \_ /usr/sbin/httpd -k start
nobody    60064  0.1  1.4 277704 36084 ?        S    02:34   0:00  \_ /usr/sbin/httpd -k start
nobody    60071  0.1  1.4 277984 36128 ?        S    02:34   0:00  \_ /usr/sbin/httpd -k start
nobody    62182  0.0  1.4 277660 35828 ?        S    02:37   0:00  \_ /usr/sbin/httpd -k start
nobody    63786  0.0  1.4 277856 35648 ?        S    02:40   0:00  \_ /usr/sbin/httpd -k start
nobody    64444  0.0  1.4 278004 35736 ?        S    02:41   0:00  \_ /usr/sbin/httpd -k start
nobody    65278  0.0  1.4 277660 35268 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    65412  0.1  1.4 277860 35620 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
nobody    65443  0.0  1.4 277596 34996 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
nobody    65450  0.0  1.4 277588 35200 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
nobody    65451  0.1  1.4 277984 35652 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
nobody    65782  0.0  1.3 277180 32568 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
nobody    65795  0.0  1.4 277660 35288 ?        S    02:43   0:00  \_ /usr/sbin/httpd -k start
nobody    65962  0.1  1.4 277864 35404 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    65978  0.1  1.4 277660 35468 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    65979  0.1  1.4 277612 35156 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
root       2095  0.0  0.4 181588 10536 ?        Ss   00:54   0:06 lfd - sleeping
oysipao+   5913  0.0  0.0   3148   412 ?        Ss   01:00   0:00 [kworker]
oysipao+   5923  0.0  0.0   3152   488 ?        S    01:00   0:00  \_ [kworker]
root      41160  0.0  0.4 1341636 11188 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      41194  0.0  0.5 1277568 12684 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 6648  Threads: 4  Questions: 783171  Slow queries: 0  Opens: 3550  Flush tables: 1  Open tables: 1997  Queries per second avg: 117.805
*************************** 1. row ***************************
     Id: 12045
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 12046
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 12050
   User: agradio_wp607
   Host: localhost
     db: agradio_wp607
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 12055
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.148.184 TIME_WAIT
      1 114.119.154.181 TIME_WAIT
      1 142.44.225.221 TIME_WAIT
      1 154.30.70.40 TIME_WAIT
      1 157.55.39.14 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 ::1 TIME_WAIT
      1 207.32.143.35 TIME_WAIT
      1 47.128.97.68 TIME_WAIT
      1 52.167.144.183 TIME_WAIT
      1 66.42.61.4 TIME_WAIT
      1 84.37.225.242 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      4 127.0.0.1 TIME_WAIT
     39 157.20.32.131 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 10-Nov-2025 02:45:02 WAT
   Restart Time: Monday, 10-Nov-2025 00:54:18 WAT
   Parent Server Config. Generation: 3
   Parent Server MPM Generation: 2
   Server uptime: 1 hour 50 minutes 44 seconds
   Server load: 1.83 1.10 0.97
   Total accesses: 27649 - Total Traffic: 536.0 MB - Total Duration: 12892711
   CPU Usage: u11.84 s4.73 cu269.33 cs188.92 - 7.15% CPU load
   4.16 requests/sec - 82.6 kB/second - 19.8 kB/request - 466.299 ms/request
   18 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

W__RRRK_RRKRRWKKRR__KKK.........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS  Req  Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-2  63786 0/43/1800   W 0.76  0    0   668926 0.0   0.78  27.26 66.249.70.32   http/1.1 support.cloudware.ng:443   GET /?c=2273033981 HTTP/1.1
   1-2  62182 0/103/1701  _ 1.25  0    8   767154 0.0   1.31  29.86 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   2-2  60040 0/242/1536  _ 5.13  0    5   732961 0.0   2.97  30.05 3.208.146.193  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/images/blog/assets/css/blog/blog
   3-2  57959 0/206/1505  R 3.34  101  1   710530 0.0   3.56  33.65 10.30.9.122    http/1.1 theforge.com.ng:80         GET / HTTP/1.1
   4-2  65278 0/27/1783   R 0.49  39   277 765183 0.0   0.52  30.06 66.249.70.36   http/1.1 support.cloudware.ng:443   GET /?c=2587228565 HTTP/1.1
   5-2  64444 0/41/1565   R 0.68  59   6   733675 0.0   0.79  28.45 3.218.103.254  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/2019elections/images/pollin
   6-2  60050 19/172/1255 K 2.89  1    7   661892 99.9  2.70  31.56 144.76.19.157  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Kwara&lga=Oyun&ward=Igosun
   7-2  65412 0/29/1244   _ 0.40  1    5   594910 0.0   0.44  23.62 74.7.230.36    http/1.1 salutem.com.ng:443         GET /robots.txt HTTP/1.1
   8-2  65443 0/5/1254    R 0.09  97   255 852431 0.0   0.11  43.45 66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=1255697690 HTTP/1.1
   9-2  56440 0/266/1384  R 4.76  3    355 697138 0.0   4.83  26.15 162.62.231.139 http/1.1
   10-2 49206 2/443/1085  K 7.63  1    406 550482 65.8  8.33  21.50 66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=4184551875 HTTP/1.1
   11-2 65782 0/0/1254    R 0.00  67   0   595500 0.0   0.00  23.94 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-2 65450 0/17/957    R 0.33  63   367 416805 0.0   0.33  17.89 66.249.70.34   http/1.1 support.cloudware.ng:443   GET /?c=2643024898 HTTP/1.1
   13-2 65451 0/36/870    W 0.98  0    0   464600 0.0   0.79  18.20 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   14-2 49218 2/504/1063  K 7.61  0    487 523124 64.8  9.10  19.68 66.249.70.38   http/1.1 support.cloudware.ng:443   GET /?c=744177555 HTTP/1.1
   15-2 45086 8/604/1050  K 13.05 0    353 494054 244.7 10.82 21.85 66.249.70.37   http/1.1 support.cloudware.ng:443   GET /?c=3744522432 HTTP/1.1
   16-2 49219 0/442/544   R 7.91  79   340 238718 0.0   8.02  9.37  157.20.32.131  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   17-2 60064 0/162/352   R 3.04  107  197 129459 0.0   3.07  5.21  5.196.80.240   http/1.1 salutem.com.ng:443         GET /.git/config HTTP/1.1
   18-2 60071 0/200/644   _ 3.90  0    0   326201 0.0   3.93  12.15 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   19-2 65795 0/14/783    _ 0.20  0    692 391623 0.0   0.42  15.13 157.20.32.131  http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   20-2 65962 3/21/525    K 0.49  3    362 254894 95.0  0.52  9.36  66.249.70.36   http/1.1 support.cloudware.ng:443   GET /?c=3153262776 HTTP/1.1
   21-2 65978 3/15/684    K 0.25  2    405 296451 95.7  0.33  11.44 66.249.70.34   http/1.1 support.cloudware.ng:443   GET /?c=2368054748 HTTP/1.1
   22-2 65979 5/14/279    K 0.18  3    343 127510 155.8 0.26  4.33  66.249.70.35   http/1.1 support.cloudware.ng:443   GET /?c=1658477727 HTTP/1.1
   23-2 -     0/0/510     . 0.00  1775 0   203678 0.0   0.00  7.59  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-2 -     0/0/100     . 0.00  2292 0   37166  0.0   0.00  1.34  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-2 -     0/0/31      . 0.00  2294 0   5168   0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-2 -     0/0/46      . 0.00  2296 0   6117   0.0   0.00  0.25  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-2 -     0/0/47      . 0.00  2297 0   3811   0.0   0.00  0.17  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-2 -     0/0/163     . 0.00  1778 0   67061  0.0   0.00  2.53  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-2 -     0/0/26      . 0.00  2290 0   3509   0.0   0.00  0.12  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-2 -     0/0/301     . 0.00  2289 0   139777 0.0   0.00  6.21  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-2 -     0/0/57      . 0.00  4353 0   25684  0.0   0.00  0.85  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-2 -     0/0/47      . 0.00  4510 0   16198  0.0   0.00  0.55  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-2 -     0/0/39      . 0.00  4508 0   6961   0.0   0.00  0.27  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-2 -     0/0/197     . 0.00  4100 0   47049  0.0   0.00  5.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-2 -     0/0/41      . 0.00  4489 0   15983  0.0   0.00  0.73  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-2 -     0/0/42      . 0.00  4490 0   10575  0.0   0.00  0.39  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-2 -     0/0/316     . 0.00  3668 0   106128 0.0   0.00  8.14  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-2 -     0/0/59      . 0.00  4361 0   27054  0.0   0.00  0.90  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-2 -     0/0/22      . 0.00  4521 0   1654   0.0   0.00  0.09  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-2 -     0/0/149     . 0.00  4193 0   69209  0.0   0.00  2.91  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-2 -     0/0/56      . 0.00  4498 0   11193  0.0   0.00  0.59  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-2 -     0/0/60      . 0.00  4520 0   33165  0.0   0.00  0.80  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-2 -     0/0/26      . 0.00  4501 0   1149   0.0   0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-2 -     0/0/36      . 0.00  4519 0   5070   0.0   0.00  0.26  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-2 -     0/0/30      . 0.00  4491 0   3132   0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-2 -     0/0/32      . 0.00  4360 0   20691  0.0   0.00  0.65  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-1 -     0/0/34      . 0.00  4704 0   9383   0.0   0.00  0.28  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-1 -     0/0/8       . 0.00  4778 0   989    0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-1 -     0/0/57      . 0.00  4608 261 20913  0.0   0.00  0.84  66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=3683647426 HTTP/1.1
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 715
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 13 seconds, (range: 0...68)
   index usage: 12%, cache usage: 17%
   total entries stored since starting: 10829
   total entries replaced since starting: 0
   total entries expired since starting: 10112
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 29 miss
   total removes since starting: 2 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit