403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-10.04.30.txt
 ## swap threshold exceeded
## server overview
2025-11-10.04.30 load[0] mem[65/66] mysql[7/26] httpd[7]
              total        used        free      shared  buff/cache   available
Mem:           2363        1438          93          25         832         720
Swap:          1999        1553         446
 04:30:02 up  3:36,  0 users,  load average: 0.23, 0.28, 0.36
## system overview
top - 04:30:02 up  3:36,  0 users,  load average: 0.23, 0.28, 0.36
Tasks: 204 total,   5 running, 198 sleeping,   0 stopped,   1 zombie
%Cpu(s): 84.4 us, 15.6 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   101120 free,  1463852 used,   855328 buff/cache
KiB Swap:  2047996 total,   457692 free,  1590304 used.   746996 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1851 mysql     20   0 1466700 255920   4716 S 162.5 10.6   4:00.56 /usr/sbin+
 24144 nigeria   20   0  400652  15932  10220 R  12.5  0.7   0:00.05 /opt/cpan+
 17499 nobody    20   0  277588  19000   4464 S   6.2  0.8   0:00.98 /usr/sbin+
     1 root      20   0   44420   3484   1552 S   0.0  0.1   0:18.06 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.14 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.32 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:15.15 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.30 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.01 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:23.76 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   109 root      20   0       0      0      0 S   0.0  0.0   0:00.25 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   254 root       0 -20       0      0      0 S   0.0  0.0   0:02.60 [kworker/+
   273 root      20   0       0      0      0 S   0.0  0.0   0:00.74 [jbd2/vda+
   274 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:02.43 [kworker/+
   357 root      20   0   39500   1464   1196 S   0.0  0.1   0:06.85 /usr/lib/+
   385 root      20   0   45352     56     52 S   0.0  0.0   0:00.35 /usr/lib/+
   411 root      16  -4   55532    208    108 S   0.0  0.0   0:01.09 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   481 polkitd   20   0  612240    824    552 S   0.0  0.0   0:01.84 /usr/lib/+
   482 dbus      20   0   58716   1352    612 S   0.0  0.1   0:07.14 /usr/bin/+
   494 rpc       20   0   69256     36     32 S   0.0  0.0   0:00.02 /sbin/rpc+
   521 root      20   0   52852    292    208 S   0.0  0.0   0:00.01 /usr/sbin+
   523 root      20   0   21540    348    264 S   0.0  0.0   0:00.29 /usr/sbin+
   528 root      20   0  224276   3252    940 S   0.0  0.1   0:00.24 queueproc+
   533 root      20   0  152780    104     60 S   0.0  0.0   0:00.01 /usr/sbin+
   539 root      20   0   24896   1160    792 S   0.0  0.0   0:03.10 /usr/lib/+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388     28     24 S   0.0  0.0   0:00.00 /usr/sbin+
   551 nscd      20   0  928956   1328    688 S   0.0  0.1   0:06.59 /usr/sbin+
   562 root      20   0   24208     16     12 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    424    292 S   0.0  0.0   0:00.38 /usr/sbin+
   583 root      20   0  108296     40     36 S   0.0  0.0   0:00.00 /sbin/age+
   584 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   598 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   629 mailnull  20   0   90820   3768    852 S   0.0  0.2   0:00.21 /usr/sbin+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:04.49 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   938 telegraf  20   0 5654048  34424   5996 S   0.0  1.4   0:07.37 /usr/loca+
   941 root      20   0   51656    492    324 S   0.0  0.0   0:00.19 /usr/sbin+
   942 root      20   0  153404    264    180 S   0.0  0.0   0:00.28 pure-ftpd+
   943 systuser  20   0   10132      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   944 root      20   0  111304    372    268 S   0.0  0.0   0:01.51 /usr/sbin+
   945 systuser  20   0   13012      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   946 systuser  20   0  113932     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   949 root      20   0 1901856 359612    484 S   0.0 14.9   0:35.23 /usr/loca+
   950 root      20   0  436392    408    320 S   0.0  0.0   0:00.56 php-fpm: +
   952 named     20   0  718804  26908   1812 S   0.0  1.1   0:09.55 /usr/sbin+
   960 root      20   0  392856    396    312 S   0.0  0.0   0:00.49 php-fpm: +
   961 root      20   0  257360   1460    988 S   0.0  0.1   0:03.42 /usr/sbin+
   962 root      20   0  397344   2544    608 S   0.0  0.1   0:02.53 php-fpm: +
   965 root      20   0  261416   6440   1740 S   0.0  0.3   0:02.84 cpsrvd (S+
   967 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   969 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.28 /usr/bin/+
   970 cpanelc+  20   0   10484   3468   2308 S   0.0  0.1   0:10.48 /usr/loca+
   982 root      20   0  385496    428    336 S   0.0  0.0   0:00.49 php-fpm: +
   985 root      20   0  386112    436    348 S   0.0  0.0   0:00.45 php-fpm: +
   986 systuser  20   0  113272     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   992 systuser  20   0  114016   9192   2676 S   0.0  0.4   0:03.13 /usr/loca+
   993 root      20   0  572372    748    276 S   0.0  0.0   0:01.21 /usr/bin/+
  1087 dovecot   20   0   10320    412    300 S   0.0  0.0   0:00.03 dovecot/a+
  1168 root      20   0  248160   2780    756 S   0.0  0.1   0:04.34 /usr/loca+
  1181 systuser  20   0  157704   2936    960 S   0.0  0.1   0:00.08 SonarPush+
  1219 wp-tool+  20   0  410452  10348   1408 S   0.0  0.4   0:10.91 /usr/bin/+
  1220 wp-tool+  20   0  387528   3284   1428 S   0.0  0.1   0:00.20 /usr/bin/+
  1249 root      20   0  209356   9540   2032 S   0.0  0.4   0:01.24 tailwatchd
  1252 root      20   0  183900   6692   3460 S   0.0  0.3   0:01.08 cpdavd - +
  1253 root      20   0  167452   1224    676 S   0.0  0.1   0:00.28 dnsadmin +
  1749 root      20   0  299272    472    308 S   0.0  0.0   0:00.34 php-fpm: +
  1799 root      38  18  130416   1364    704 S   0.0  0.1   0:00.03 cpanellog+
  1947 root      20   0  267112   5080    560 S   0.0  0.2   0:01.19 /usr/sbin+
  2095 root      20   0  182192   8536   1116 S   0.0  0.4   0:11.83 lfd - sle+
  5800 root      20   0  183048     28     28 S   0.0  0.0   0:00.00 /usr/sbin+
  5849 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
  5867 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 5h +
  5913 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  5923 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.28 [kworker]
  6471 root      20   0  265416  90300   2024 S   0.0  3.7   0:02.51 spamd chi+
  6472 root      20   0  248160   1352    444 S   0.0  0.1   0:00.00 spamd chi+
  8576 nobody    20   0  277728  19964   4808 S   0.0  0.8   0:01.95 /usr/sbin+
  8686 root      20   0 1275844  10340    596 S   0.0  0.4   0:00.07 /usr/bin/+
  8722 root      20   0 1277312  11696    596 S   0.0  0.5   0:00.07 /usr/bin/+
  9142 nobody    20   0  277984  20428   4868 S   0.0  0.8   0:02.20 /usr/sbin+
  9604 nobody    20   0  277668  19952   4620 R   0.0  0.8   0:01.44 /usr/sbin+
 12252 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 13182 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 14146 nobody    20   0  277980  19844   4736 S   0.0  0.8   0:01.33 /usr/sbin+
 16160 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 16222 nobody    20   0  277660  19552   4616 S   0.0  0.8   0:01.04 /usr/sbin+
 16314 nobody    20   0  277856  19524   4336 S   0.0  0.8   0:01.11 /usr/sbin+
 17259 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 17494 nobody    20   0  277592  18728   4256 S   0.0  0.8   0:00.85 /usr/sbin+
 17500 nobody    20   0  277660  18632   4240 S   0.0  0.8   0:00.86 /usr/sbin+
 18164 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 19307 nobody    20   0  277660  19016   4444 S   0.0  0.8   0:00.77 /usr/sbin+
 19826 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 20280 nobody    20   0  277856  18528   4236 S   0.0  0.8   0:00.54 /usr/sbin+
 20647 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 21119 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 22574 root      20   0   12848    328    220 S   0.0  0.0   0:01.04 /usr/loca+
 22575 root      20   0   12732    292    216 S   0.0  0.0   0:00.88 /usr/loca+
 22576 root      20   0   12896    340    224 S   0.0  0.0   0:00.95 /usr/loca+
 22578 dovenull  20   0   46912   1928   1428 S   0.0  0.1   0:00.16 dovecot/p+
 22579 dovenull  20   0   48028   2808   1756 S   0.0  0.1   0:00.16 dovecot/i+
 22580 root      20   0   10452    480    316 S   0.0  0.0   0:00.13 dovecot/l+
 22581 dovenull  20   0   46912   1872   1364 S   0.0  0.1   0:00.19 dovecot/p+
 22582 dovenull  20   0   47896   2736   1748 S   0.0  0.1   0:00.18 dovecot/i+
 22583 root      20   0   24528   2060    512 S   0.0  0.1   0:00.08 dovecot/c+
 22584 dovecot   20   0   13572    632    440 S   0.0  0.0   0:00.03 dovecot/s+
 22588 dovecot   20   0   41144   1464   1020 S   0.0  0.1   0:00.27 dovecot/a+
 22589 root      20   0   53252     68     68 S   0.0  0.0   0:00.04 /usr/loca+
 22647 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 22727 nobody    20   0  277984  18520   4032 S   0.0  0.8   0:00.19 /usr/sbin+
 23698 nobody    20   0  277596  17212   3440 S   0.0  0.7   0:00.03 /usr/sbin+
 23765 healtho+  20   0  459288  69456   4216 S   0.0  2.9   0:05.01 php-fpm: +
 23949 nigeria   20   0  397064   5396   2368 S   0.0  0.2   0:00.00 php-fpm: +
 23989 healtho+  20   0  443040  52900   4220 S   0.0  2.2   0:00.69 php-fpm: +
 24025 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 24034 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 24037 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 24038 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 24039 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 24040 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 24041 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 24042 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 24045 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 24046 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 24048 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 24049 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 24050 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 24051 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 24052 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 24053 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 24055 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 24060 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 24062 root      20   0  113460   1488   1260 R   0.0  0.1   0:00.00 bash /usr+
 24064 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 24073 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 24074 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 /usr/loca+
 24075 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 24076 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 24078 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 24079 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 24081 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 24083 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 24087 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 24088 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 24089 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 24090 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 24093 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 24097 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 24099 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 24106 root      20   0  188212  11100   5148 S   0.0  0.5   0:00.01 /usr/loca+
 24110 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 24118 root      20   0  188860  12948   5544 D   0.0  0.5   0:00.05 /usr/loca+
 24120 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 24127 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 24133 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 24151 root      20   0  160224   2380   1636 S   0.0  0.1   0:00.00 top -n 2 +
 24177 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 24178 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 24181 cloudsms  20   0  400652  15144   9844 S   0.0  0.6   0:00.01 /opt/cpan+
 24205 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 77151 root      20   0       0      0      0 S   0.0  0.0   0:00.24 [kworker/+
 92409 root      30  10  132964     28     24 S   0.0  0.0   0:00.00 ConfigSer+
 92420 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 8028
 96504 nobody    20   0  277920  20792   4896 S   0.0  0.9   0:03.32 /usr/sbin+
 98696 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:54   0:15  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:54   0:23  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        109  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        251  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:02  \_ [kworker/1:1H]
root        273  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        274  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        280  0.0  0.0      0     0 ?        S<   00:54   0:02  \_ [kworker/0:1H]
root        416  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        598  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   00:54   0:04  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root      77151  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/u200:0]
root      98696  0.0  0.0      0     0 ?        S    03:39   0:00  \_ [kworker/u200:1]
root      12252  0.0  0.0      0     0 ?        S    04:06   0:00  \_ [kworker/1:1]
root      13182  0.0  0.0      0     0 ?        S    04:08   0:00  \_ [kworker/0:5]
root      16160  0.0  0.0      0     0 ?        S    04:14   0:00  \_ [kworker/0:0]
root      17259  0.0  0.0      0     0 ?        S    04:16   0:00  \_ [kworker/1:3]
root      18164  0.0  0.0      0     0 ?        S    04:18   0:00  \_ [kworker/0:2]
root      19826  0.0  0.0      0     0 ?        S    04:21   0:00  \_ [kworker/1:0]
root      20647  0.0  0.0      0     0 ?        S    04:23   0:00  \_ [kworker/0:1]
root      21119  0.0  0.0      0     0 ?        S    04:24   0:00  \_ [kworker/1:2]
root      22647  0.0  0.0      0     0 ?        S    04:27   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44420  3484 ?        Ss   00:54   0:18 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.0  39500  1464 ?        Ss   00:54   0:06 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45352    56 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   208 ?        S<sl 00:54   0:01 /sbin/auditd
polkitd     481  0.0  0.0 612240   824 ?        Ssl  00:54   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        482  0.0  0.0  58716  1352 ?        Ss   00:54   0:07 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         494  0.0  0.0  69256    36 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        521  0.0  0.0  52852   292 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0  21540   348 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        528  0.0  0.1 224276  3252 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        533  0.0  0.0 152780   104 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        539  0.0  0.0  24896  1160 ?        Ss   00:54   0:03 /usr/lib/systemd/systemd-logind
root        544  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388    28 ?        Ss   00:54   0:00 /usr/sbin/acpid
nscd        551  0.0  0.0 928956  1328 ?        Rsl  00:54   0:06 /usr/sbin/nscd
root        562  0.0  0.0  24208    16 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   424 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       5800  0.0  0.0 183048    28 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5849  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       5867  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 5h 14m
root      24034  0.0  0.0 183048  2144 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      24060  0.0  0.0 113284  1212 ?        Ss   04:30   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      24062  0.0  0.0 114252  2416 ?        S    04:30   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      24221  0.0  0.0 114252  1148 ?        R    04:30   0:00  |           \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      24037  0.0  0.0 183048  2144 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      24079  0.0  0.0 113284  1212 ?        Ss   04:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      24099  0.0  0.0 108052   360 ?        S    04:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      24110  0.0  0.0 113288  1516 ?        S    04:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      24218  0.0  0.0 153840  2088 ?        R    04:30   0:00  |               \_ ps auxf
root      24038  0.0  0.0 183044  2152 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      24083  0.0  0.0  20164   808 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      24039  0.0  0.0 183044  2152 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      24093  0.0  0.0  20164   808 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      24040  0.0  0.0 183044  2152 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      24078  0.0  0.0  20164   804 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      24041  0.0  0.0 183044  2152 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      24088  0.0  0.0  20164   808 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      24042  0.0  0.0 183044  2152 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      24081  0.0  0.0  20164   808 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      24045  0.0  0.0 183044  2152 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      24090  0.0  0.0  20164   808 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      24046  0.0  0.0 183044  2148 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      24064  0.0  0.0  20164   988 ?        Ss   04:30   0:00  |   \_ jailshell (cloudsms) [24177] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  24177  0.0  0.0  20164   260 ?        S    04:30   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  24178  0.0  0.0 113284  1212 ?        S    04:30   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  24181  0.0  0.6 400652 15144 ?        S    04:30   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      24048  0.0  0.0 183044  2148 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      24087  0.0  0.0  20164   808 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      24049  0.0  0.0 183044  2148 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      24074  0.0  0.0  20164   984 ?        Ss   04:30   0:00  |   \_ jailshell (cloudsms) [24222] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      24222  0.0  0.0  20164   256 ?        R    04:30   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      24050  0.0  0.0 183044  2144 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      24089  0.0  0.0  20164   812 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      24051  0.0  0.0 183044  2140 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      24076  0.0  0.0 113284  1212 ?        Ss   04:30   0:00  |   \_ /bin/sh -c /usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache
root      24118  0.0  0.5 188860 12948 ?        R    04:30   0:00  |       \_ /usr/local/cpanel/bin/update_db_cache
root      24052  0.0  0.0 183044  2140 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      24097  0.0  0.0 113284  1212 ?        Ss   04:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      24106  0.0  0.4 188212 11100 ?        S    04:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      24151  0.0  0.0 160224  2380 ?        S    04:30   0:00  |           \_ top -n 2 -b -c
root      24053  0.0  0.0 183044  2140 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      24075  0.0  0.0  20164   964 ?        Ss   04:30   0:00  |   \_ jailshell (pactpay) [24120] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   24120  0.0  0.0  20164   256 ?        S    04:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   24127  0.0  0.7 476724 17484 ?        S    04:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      24055  0.0  0.0 183044  2144 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      24073  0.0  0.0  20164   964 ?        Ss   04:30   0:00      \_ jailshell (nigeria) [24133] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   24133  0.0  0.0  20164   260 ?        S    04:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   24144  0.0  0.6 400652 15932 ?        R    04:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        583  0.0  0.0 108296    40 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
root        584  0.0  0.0 114704     0 ttyS0    Ss+  00:54   0:00 /bin/bash
mailnull    629  0.0  0.1  90820  3768 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
telegraf    938  0.0  1.4 5654048 34424 ?       SLsl 00:54   0:07 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        941  0.0  0.0  51656   492 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1087  0.0  0.0  10320   412 ?        S    00:54   0:00  \_ dovecot/anvil
dovenull  22578  0.0  0.0  46912  1928 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  22579  0.0  0.1  48028  2808 ?        S    01:28   0:00  \_ dovecot/imap-login
root      22580  0.0  0.0  10452   480 ?        S    01:28   0:00  \_ dovecot/log
dovenull  22581  0.0  0.0  46912  1872 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  22582  0.0  0.1  47896  2736 ?        S    01:28   0:00  \_ dovecot/imap-login
root      22583  0.0  0.0  24528  2060 ?        S    01:28   0:00  \_ dovecot/config
dovecot   22584  0.0  0.0  13572   632 ?        S    01:28   0:00  \_ dovecot/stats
dovecot   22588  0.0  0.0  41144  1464 ?        S    01:28   0:00  \_ dovecot/auth
root        942  0.0  0.0 153404   264 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    943  0.0  0.0  10132     0 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        944  0.0  0.0 111304   372 ?        Ss   00:54   0:01 /usr/sbin/sshd -D
systuser    945  0.0  0.0  13012     0 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    946  0.0  0.0 113932    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        949  0.2 14.8 1901856 359612 ?      Ssl  00:54   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
root        950  0.0  0.0 436392   408 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       952  0.0  1.1 718804 26908 ?        Ssl  00:54   0:09 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        960  0.0  0.0 392856   396 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        961  0.0  0.0 257360  1460 ?        Ssl  00:54   0:03 /usr/sbin/rsyslogd -n
root        962  0.0  0.1 397344  2544 ?        Ss   00:54   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  23765 11.1  2.8 459288 69456 ?        S    04:29   0:05  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   23949  0.0  0.2 397064  5396 ?        S    04:29   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  23989 11.5  2.1 443040 52900 ?        S    04:29   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root        965  0.0  0.2 261416  6440 ?        Ss   00:54   0:02 cpsrvd (SSL) - waiting for connections                   
root      24025  0.0  0.0      0     0 ?        Z    04:29   0:00  \_ [cpaneld - servi] <defunct>
root        967  0.0  0.0 445028     0 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
memcach+    969  0.0  0.0 342400     0 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    970  0.0  0.1  10484  3468 ?        Ss   00:54   0:10 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 385496   428 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.0 386112   436 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    986  0.0  0.0 113272    56 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    992  0.0  0.3 114016  9192 ?        Ssl  00:54   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        993  0.0  0.0 572372   748 ?        Ssl  00:54   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1168  0.0  0.1 248160  2780 ?        Ss   00:54   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6471  0.0  3.7 265416 90300 ?        S    01:00   0:02  \_ spamd child
root       6472  0.0  0.0 248160  1352 ?        S    01:00   0:00  \_ spamd child
systuser   1181  0.0  0.1 157704  2936 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1219  0.0  0.4 410452 10348 ?        Ss   00:54   0:10 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1220  0.0  0.1 387528  3284 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1249  0.0  0.3 209356  9540 ?        Ss   00:54   0:01 tailwatchd
root       1252  0.0  0.2 183900  6692 ?        Ss   00:54   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1253  0.0  0.0 167452  1224 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1749  0.0  0.0 299272   472 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1799  0.0  0.0 130416  1364 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1851  1.8 10.5 1466700 255920 ?      Sl   00:54   4:00 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  0.2 267112  5080 ?        Ss   00:54   0:01 /usr/sbin/httpd -k start
root      22574  0.0  0.0  12848   328 ?        S    01:28   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      22575  0.0  0.0  12732   292 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      22576  0.0  0.0  12896   340 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      22589  0.0  0.0  53252    68 ?        S    01:28   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    96504  0.1  0.8 277920 20792 ?        S    03:35   0:03  \_ /usr/sbin/httpd -k start
nobody     8576  0.1  0.8 277728 19964 ?        S    04:00   0:01  \_ /usr/sbin/httpd -k start
nobody     9142  0.1  0.8 277984 20428 ?        S    04:01   0:02  \_ /usr/sbin/httpd -k start
nobody     9604  0.0  0.8 277668 19952 ?        S    04:02   0:01  \_ /usr/sbin/httpd -k start
root      24219  0.0  0.0   6728   416 ?        S    04:30   0:00  |   \_ /usr/sbin/suexec 1029 1031 ea-php72
nobody    14146  0.1  0.8 277980 19844 ?        S    04:10   0:01  \_ /usr/sbin/httpd -k start
nobody    16222  0.1  0.8 277660 19552 ?        S    04:14   0:01  \_ /usr/sbin/httpd -k start
nobody    16314  0.1  0.8 277856 19524 ?        S    04:14   0:01  \_ /usr/sbin/httpd -k start
nobody    17494  0.1  0.7 277592 18728 ?        S    04:16   0:00  \_ /usr/sbin/httpd -k start
nobody    17499  0.1  0.7 277588 19000 ?        S    04:16   0:00  \_ /usr/sbin/httpd -k start
nobody    17500  0.1  0.7 277660 18632 ?        S    04:16   0:00  \_ /usr/sbin/httpd -k start
nobody    19307  0.1  0.7 277660 19016 ?        S    04:20   0:00  \_ /usr/sbin/httpd -k start
nobody    20280  0.1  0.7 277856 18528 ?        S    04:22   0:00  \_ /usr/sbin/httpd -k start
nobody    22727  0.1  0.7 277984 18520 ?        S    04:27   0:00  \_ /usr/sbin/httpd -k start
nobody    23698  0.0  0.7 277596 17212 ?        S    04:29   0:00  \_ /usr/sbin/httpd -k start
root       2095  0.0  0.3 182192  8536 ?        Ss   00:54   0:11 lfd - sleeping
oysipao+   5913  0.0  0.0   3148     8 ?        Ss   01:00   0:00 [kworker]
oysipao+   5923  0.0  0.0   3152    36 ?        S    01:00   0:00  \_ [kworker]
root      92409  0.0  0.0 132964    28 ?        SN   03:29   0:00 ConfigServer Version Check
root      92420  0.0  0.0 108056     0 ?        SN   03:29   0:00  \_ sleep 8028
root       8686  0.0  0.4 1275844 10340 ?       Ssl  04:00   0:00 /usr/bin/cspdaemon
root       8722  0.0  0.4 1277312 11696 ?       Ssl  04:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 12948  Threads: 3  Questions: 1540177  Slow queries: 0  Opens: 6974  Flush tables: 1  Open tables: 2000  Queries per second avg: 118.950
*************************** 1. row ***************************
     Id: 24144
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 24150
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 24156
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
*************************** 4. row ***************************
     Id: 24157
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
## network stats
      1 104.210.140.134 TIME_WAIT
      1 104.210.140.143 TIME_WAIT
      1 114.119.132.104 TIME_WAIT
      1 114.119.134.212 TIME_WAIT
      1 144.76.19.157 TIME_WAIT
      1 15.235.27.122 TIME_WAIT
      1 ::1 TIME_WAIT
      1 47.128.117.8 TIME_WAIT
      1 51.254.204.161 TIME_WAIT
      1 52.167.144.195 TIME_WAIT
      1 66.249.70.35 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 52.169.206.229 TIME_WAIT
     40 157.20.32.131 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 10-Nov-2025 04:30:02 WAT
   Restart Time: Monday, 10-Nov-2025 00:54:18 WAT
   Parent Server Config. Generation: 3
   Parent Server MPM Generation: 2
   Server uptime: 3 hours 35 minutes 44 seconds
   Server load: 0.23 0.28 0.36
   Total accesses: 53542 - Total Traffic: 1.1 GB - Total Duration: 26152713
   CPU Usage: u12.82 s4.98 cu547.53 cs385.74 - 7.35% CPU load
   4.14 requests/sec - 86.4 kB/second - 20.9 kB/request - 488.452 ms/request
   9 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

_K_RK_K_KWK.K_...W..............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur   Conn  Child  Slot    Client     Protocol           VHost                                        Request
   0-2  19307 0/164/3350 _ 4.04  0     0   1416541 0.0   3.32  62.21 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   1-2  14146 5/300/3116 K 5.23  3     397 1454374 160.2 5.48  58.44 66.249.70.38  http/1.1 support.cloudware.ng:443   GET /?c=2460930210 HTTP/1.1
   2-2  96504 0/754/2935 _ 13.51 1     6   2192845 0.0   27.82 69.28 44.194.134.53 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/blog/2019elections/assets/c
   3-2  16222 0/248/2661 R 4.37  2     1   1287244 0.0   6.77  59.07 157.20.32.131 http/1.1 health.oyostate.gov.ng:443
   4-2  20280 1/131/3060 K 2.13  0     356 1345866 35.1  2.24  53.95 66.249.70.36  http/1.1 support.cloudware.ng:443   GET /?c=3377744692 HTTP/1.1
   5-2  17494 0/197/2795 _ 3.30  2     348 1270947 0.0   3.39  49.70 157.20.32.131 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   6-2  8576  4/509/2716 K 7.97  3     293 1295989 125.3 7.87  58.02 66.249.70.34  http/1.1 support.cloudware.ng:443   GET /?c=3032219210 HTTP/1.1
   7-2  22727 0/45/2426  _ 0.98  0     400 1143916 0.0   0.78  46.07 157.20.32.131 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   8-2  9142  5/459/2731 K 9.46  1     348 1567247 157.2 9.13  69.78 66.249.70.35  http/1.1 support.cloudware.ng:443   GET /?c=1003024413 HTTP/1.1
   9-2  16314 0/241/2622 W 4.41  0     0   1294117 0.0   4.44  50.62 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   10-2 17499 2/214/1823 K 4.23  0     544 875353  66.5  4.03  34.66 66.249.70.33  http/1.1 support.cloudware.ng:443   GET /?c=1805983786 HTTP/1.1
   11-2 -     0/0/2346   . 0.00  45    0   1052865 0.0   0.00  41.66 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-2 23698 13/15/1908 K 0.07  0     13  839698  66.3  0.10  34.04 144.76.19.157 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Nasarawa&lga=Wamba&ward=Kw
   13-2 17500 0/212/1708 _ 3.67  0     0   798735  0.0   3.40  31.89 127.0.0.1     http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   14-2 -     0/0/1760   . 0.00  1377  0   852858  0.0   0.00  35.40 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-2 -     0/0/1450   . 0.00  1233  0   672083  0.0   0.00  28.94 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-2 -     0/0/1376   . 0.00  1378  0   670090  0.0   0.00  39.55 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-2 9604  0/382/834  W 5.79  0     0   817635  0.0   19.33 26.93 66.249.70.39  http/1.1 support.cloudware.ng:443   GET /?c=1679826149 HTTP/1.1
   18-2 -     0/0/977    . 0.00  1290  0   495507  0.0   0.00  18.98 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-2 -     0/0/1136   . 0.00  1411  4   572317  0.0   0.00  22.03 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-2 -     0/0/1603   . 0.00  721   0   757289  0.0   0.00  32.69 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-2 -     0/0/1851   . 0.00  929   0   773840  0.0   0.00  35.61 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-2 -     0/0/1466   . 0.00  753   0   671561  0.0   0.00  38.59 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-2 -     0/0/755    . 0.00  871   0   317090  0.0   0.00  12.56 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-2 -     0/0/279    . 0.00  1412  0   122067  0.0   0.00  5.23  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-2 -     0/0/890    . 0.00  2     0   446080  0.0   0.00  22.44 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-2 -     0/0/108    . 0.00  1408  0   34397   0.0   0.00  1.85  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-2 -     0/0/540    . 0.00  1415  0   233113  0.0   0.00  9.89  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-2 -     0/0/172    . 0.00  1395  0   71466   0.0   0.00  2.71  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-2 -     0/0/107    . 0.00  1418  0   30007   0.0   0.00  1.77  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-2 -     0/0/304    . 0.00  1416  0   139787  0.0   0.00  6.24  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-2 -     0/0/163    . 0.00  1417  0   84177   0.0   0.00  3.34  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-2 -     0/0/63     . 0.00  1403  0   20576   0.0   0.00  0.73  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-2 -     0/0/342    . 0.00  211   0   151592  0.0   0.00  5.64  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-2 -     0/0/199    . 0.00  1410  0   47054   0.0   0.00  5.03  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-2 -     0/0/43     . 0.00  1407  0   16061   0.0   0.00  0.75  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-2 -     0/0/42     . 0.00  10790 0   10575   0.0   0.00  0.39  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-2 -     0/0/316    . 0.00  9968  0   106128  0.0   0.00  8.14  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-2 -     0/0/59     . 0.00  10661 0   27054   0.0   0.00  0.90  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-2 -     0/0/22     . 0.00  10821 0   1654    0.0   0.00  0.09  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-2 -     0/0/149    . 0.00  10493 0   69209   0.0   0.00  2.91  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-2 -     0/0/56     . 0.00  10798 0   11193   0.0   0.00  0.59  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-2 -     0/0/60     . 0.00  10820 0   33165   0.0   0.00  0.80  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-2 -     0/0/26     . 0.00  10801 0   1149    0.0   0.00  0.07  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-2 -     0/0/36     . 0.00  10819 0   5070    0.0   0.00  0.26  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-2 -     0/0/30     . 0.00  10791 0   3132    0.0   0.00  0.13  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-2 -     0/0/32     . 0.00  10660 0   20691   0.0   0.00  0.65  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-1 -     0/0/34     . 0.00  11004 0   9383    0.0   0.00  0.28  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-1 -     0/0/8      . 0.00  11078 0   989     0.0   0.00  0.02  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-1 -     0/0/57     . 0.00  10908 261 20913   0.0   0.00  0.84  66.249.70.39  http/1.1 support.cloudware.ng:443   GET /?c=3683647426 HTTP/1.1
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 648
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 0...63)
   index usage: 11%, cache usage: 15%
   total entries stored since starting: 25662
   total entries replaced since starting: 0
   total entries expired since starting: 25006
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 95 miss
   total removes since starting: 8 hit, 7 miss
Youez - 2016 - github.com/yon3zu
LinuXploit