403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-10.04.45.txt
 ## swap threshold exceeded
## server overview
2025-11-10.04.45 load[0] mem[65/68] mysql[2/26] httpd[10]
              total        used        free      shared  buff/cache   available
Mem:           2363        1399         100          25         863         753
Swap:          1999        1577         422
 04:45:01 up  3:51,  0 users,  load average: 0.56, 0.51, 0.46
## system overview
top - 04:45:02 up  3:51,  0 users,  load average: 0.56, 0.51, 0.46
Tasks: 210 total,   3 running, 206 sleeping,   0 stopped,   1 zombie
%Cpu(s): 79.4 us, 17.6 sy,  0.0 ni,  2.9 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    95060 free,  1439108 used,   886132 buff/cache
KiB Swap:  2047996 total,   432468 free,  1615528 used.   765492 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1851 mysql     20   0 1466700 259900   4428 S 106.2 10.7   4:17.43 /usr/sbin+
 31633 healtho+  20   0  461848  71868   4256 S  50.0  3.0   0:05.59 php-fpm: +
 32041 nigeria   20   0  400652  15936  10220 S   6.2  0.7   0:00.03 /opt/cpan+
 32100 cloudsms  20   0  400652  15144   9844 S   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44420   3452   1520 S   0.0  0.1   0:19.18 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.21 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.34 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:16.18 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.32 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.13 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:24.24 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   109 root      20   0       0      0      0 S   0.0  0.0   0:00.27 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   254 root       0 -20       0      0      0 S   0.0  0.0   0:02.68 [kworker/+
   273 root      20   0       0      0      0 S   0.0  0.0   0:00.78 [jbd2/vda+
   274 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   280 root       0 -20       0      0      0 S   0.0  0.0   0:02.51 [kworker/+
   357 root      20   0   39500   3564   3296 S   0.0  0.1   0:07.26 /usr/lib/+
   385 root      20   0   45352     56     52 S   0.0  0.0   0:00.35 /usr/lib/+
   411 root      16  -4   55532    208    108 S   0.0  0.0   0:01.16 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   481 polkitd   20   0  612240    824    552 S   0.0  0.0   0:01.96 /usr/lib/+
   482 dbus      20   0   58716   1352    612 S   0.0  0.1   0:07.61 /usr/bin/+
   494 rpc       20   0   69256     36     32 S   0.0  0.0   0:00.02 /sbin/rpc+
   521 root      20   0   52852    252    168 S   0.0  0.0   0:00.01 /usr/sbin+
   523 root      20   0   21540    348    264 S   0.0  0.0   0:00.31 /usr/sbin+
   528 root      20   0  224276   3252    940 S   0.0  0.1   0:00.26 queueproc+
   533 root      20   0  152780    104     60 S   0.0  0.0   0:00.01 /usr/sbin+
   539 root      20   0   24896   1160    792 S   0.0  0.0   0:03.30 /usr/lib/+
   544 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   548 root      20   0    4388     28     24 S   0.0  0.0   0:00.00 /usr/sbin+
   551 nscd      20   0  928956   1336    696 R   0.0  0.1   0:07.03 /usr/sbin+
   562 root      20   0   24208     16     12 S   0.0  0.0   0:00.00 /usr/sbin+
   564 root      20   0  124476    424    292 S   0.0  0.0   0:00.40 /usr/sbin+
   583 root      20   0  108296     40     36 S   0.0  0.0   0:00.00 /sbin/age+
   584 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   598 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   629 mailnull  20   0   90820   3728    812 S   0.0  0.2   0:00.22 /usr/sbin+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:04.50 [loop0]
   722 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   723 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   938 telegraf  20   0 5654048  34540   5864 S   0.0  1.4   0:07.85 /usr/loca+
   941 root      20   0   51656    492    324 S   0.0  0.0   0:00.20 /usr/sbin+
   942 root      20   0  153404    264    180 S   0.0  0.0   0:00.30 pure-ftpd+
   943 systuser  20   0   10132      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   944 root      20   0  111304    372    268 S   0.0  0.0   0:01.60 /usr/sbin+
   945 systuser  20   0   13012      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   946 systuser  20   0  113932     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   949 root      20   0 1901856 330168    344 S   0.0 13.6   0:35.23 /usr/loca+
   950 root      20   0  436392    360    272 S   0.0  0.0   0:00.58 php-fpm: +
   952 named     20   0  718804  27700   1620 S   0.0  1.1   0:10.08 /usr/sbin+
   960 root      20   0  392856    396    312 S   0.0  0.0   0:00.52 php-fpm: +
   961 root      20   0  257360   3316   2824 S   0.0  0.1   0:03.64 /usr/sbin+
   962 root      20   0  397344   2544    608 S   0.0  0.1   0:02.71 php-fpm: +
   965 root      20   0  261416   6360   1648 S   0.0  0.3   0:03.04 cpsrvd (S+
   967 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   969 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.31 /usr/bin/+
   970 cpanelc+  20   0   10484   3468   2308 S   0.0  0.1   0:11.20 /usr/loca+
   982 root      20   0  385496    460    368 S   0.0  0.0   0:00.52 php-fpm: +
   985 root      20   0  386112    388    300 S   0.0  0.0   0:00.47 php-fpm: +
   986 systuser  20   0  113272     56      0 S   0.0  0.0   0:00.01 /usr/loca+
   992 systuser  20   0  114016   9880   2696 S   0.0  0.4   0:03.34 /usr/loca+
   993 root      20   0  572372    744    272 S   0.0  0.0   0:01.28 /usr/bin/+
  1087 dovecot   20   0   10320    412    300 S   0.0  0.0   0:00.04 dovecot/a+
  1168 root      20   0  248160   2780    756 S   0.0  0.1   0:04.45 /usr/loca+
  1181 systuser  20   0  157704   2936    960 S   0.0  0.1   0:00.08 SonarPush+
  1219 wp-tool+  20   0  410452  10348   1408 S   0.0  0.4   0:11.64 /usr/bin/+
  1220 wp-tool+  20   0  387528   3284   1428 S   0.0  0.1   0:00.20 /usr/bin/+
  1249 root      20   0  209356   9720   2180 S   0.0  0.4   0:01.31 tailwatchd
  1252 root      20   0  183900   6076   2844 S   0.0  0.3   0:01.08 cpdavd - +
  1253 root      20   0  167452   1220    672 S   0.0  0.1   0:00.30 dnsadmin +
  1749 root      20   0  299272    508    344 S   0.0  0.0   0:00.38 php-fpm: +
  1799 root      38  18  130416   1364    704 S   0.0  0.1   0:00.03 cpanellog+
  1947 root      20   0  267112   5080    560 S   0.0  0.2   0:01.24 /usr/sbin+
  2095 root      20   0  182192   8816   1116 S   0.0  0.4   0:12.60 lfd - sle+
  5800 root      20   0  183048     28     28 S   0.0  0.0   0:00.00 /usr/sbin+
  5849 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
  5867 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 5h +
  5913 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  5923 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.30 [kworker]
  6471 root      20   0  265416  90124   1976 S   0.0  3.7   0:02.59 spamd chi+
  6472 root      20   0  248160   1352    444 S   0.0  0.1   0:00.00 spamd chi+
  8576 nobody    20   0  277728  20168   4932 S   0.0  0.8   0:02.83 /usr/sbin+
  8686 root      20   0 1275844  10340    596 S   0.0  0.4   0:00.08 /usr/bin/+
  8722 root      20   0 1277312  11696    596 S   0.0  0.5   0:00.07 /usr/bin/+
  9604 nobody    20   0  277704  20188   4716 S   0.0  0.8   0:02.42 /usr/sbin+
 12252 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 13182 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 16222 nobody    20   0  277660  20324   4928 S   0.0  0.8   0:02.21 /usr/sbin+
 19826 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 20280 nobody    20   0  277856  19616   4740 S   0.0  0.8   0:01.27 /usr/sbin+
 21119 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 22574 root      20   0   12828    328    220 S   0.0  0.0   0:01.13 /usr/loca+
 22575 root      20   0   12732    292    216 S   0.0  0.0   0:00.96 /usr/loca+
 22576 root      20   0   12864    340    224 S   0.0  0.0   0:01.04 /usr/loca+
 22578 dovenull  20   0   46912   1928   1428 S   0.0  0.1   0:00.17 dovecot/p+
 22579 dovenull  20   0   48028   2764   1712 S   0.0  0.1   0:00.16 dovecot/i+
 22580 root      20   0   10452    480    316 S   0.0  0.0   0:00.13 dovecot/l+
 22581 dovenull  20   0   46912   1872   1364 S   0.0  0.1   0:00.20 dovecot/p+
 22582 dovenull  20   0   48172   2888   1800 S   0.0  0.1   0:00.20 dovecot/i+
 22583 root      20   0   24528   2060    512 S   0.0  0.1   0:00.09 dovecot/c+
 22584 dovecot   20   0   13572    632    440 S   0.0  0.0   0:00.03 dovecot/s+
 22588 dovecot   20   0   41140   1464   1020 S   0.0  0.1   0:00.31 dovecot/a+
 22589 root      20   0   53252     68     68 S   0.0  0.0   0:00.04 /usr/loca+
 22647 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 22727 nobody    20   0  277984  19988   4648 S   0.0  0.8   0:01.18 /usr/sbin+
 23698 nobody    20   0  277660  19012   4432 S   0.0  0.8   0:00.93 /usr/sbin+
 24499 nobody    20   0  277988  19788   4636 S   0.0  0.8   0:00.93 /usr/sbin+
 24514 nobody    20   0  277856  19084   4396 S   0.0  0.8   0:01.14 /usr/sbin+
 24815 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 25277 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25748 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 27079 nobody    20   0  277992  19432   4444 S   0.0  0.8   0:00.69 /usr/sbin+
 27939 nobody    20   0  277992  18760   4212 S   0.0  0.8   0:00.44 /usr/sbin+
 27979 nobody    20   0  278004  19092   4372 S   0.0  0.8   0:00.60 /usr/sbin+
 27987 nobody    20   0  277984  18792   4156 S   0.0  0.8   0:00.56 /usr/sbin+
 28015 nobody    20   0  277856  18804   4228 S   0.0  0.8   0:00.57 /usr/sbin+
 28035 nobody    20   0  277856  19296   4432 S   0.0  0.8   0:00.55 /usr/sbin+
 28173 nobody    20   0  277588  18472   4164 S   0.0  0.8   0:00.60 /usr/sbin+
 29405 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 31189 root      20   0   41052   2784   2128 S   0.0  0.1   0:00.00 dovecot/a+
 31776 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 31850 nigeria   20   0  397064   5396   2368 S   0.0  0.2   0:00.00 php-fpm: +
 31880 healtho+  20   0  443040  52896   4216 S   0.0  2.2   0:00.70 php-fpm: +
 31892 mailnull  20   0   90828   3996    936 S   0.0  0.2   0:00.00 /usr/sbin+
 31914 root      20   0  157100   4968   3680 S   0.0  0.2   0:00.00 sshd: unk+
 31918 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: unk+
 31949 root      20   0  157100   4992   3716 S   0.0  0.2   0:00.00 sshd: unk+
 31951 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 31952 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 31961 pactpay   20   0  397064   2612    564 S   0.0  0.1   0:00.00 php-fpm: +
 31967 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 31969 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 31970 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 31972 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 31973 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 31974 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 31975 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 31976 root      20   0  183044   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 31977 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 31978 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 31979 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 31980 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 31981 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 31983 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 31994 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 31995 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 31996 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 31997 root      20   0  113284   1468   1256 S   0.0  0.1   0:00.00 bash /usr+
 31998 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 32010 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 32011 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 32012 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 32013 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 32014 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32015 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32016 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 32017 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32019 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 32020 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 32023 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 32024 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 32030 root      20   0  188212  11084   5148 S   0.0  0.5   0:00.02 /usr/loca+
 32036 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 32039 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 32046 pactpay   20   0  476724  17484  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 32080 root      20   0  160224   2340   1636 S   0.0  0.1   0:00.00 top -n 2 +
 32093 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 32097 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 32098 cloudsms  20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /usr/loca+
 32105 root      20   0    6516    412    336 S   0.0  0.0   0:00.00 /usr/sbin+
 32106 root      20   0  113284    212      0 R   0.0  0.0   0:00.00 bash /usr+
 77151 root      20   0       0      0      0 S   0.0  0.0   0:00.28 [kworker/+
 92409 root      30  10  132964     28     24 S   0.0  0.0   0:00.00 ConfigSer+
 92420 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 8028
 98696 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:54   0:16  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:54   0:24  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        109  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        251  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:02  \_ [kworker/1:1H]
root        273  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        274  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        280  0.0  0.0      0     0 ?        S<   00:54   0:02  \_ [kworker/0:1H]
root        416  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        598  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   00:54   0:04  \_ [loop0]
root        722  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        723  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root      77151  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/u200:0]
root      98696  0.0  0.0      0     0 ?        S    03:39   0:00  \_ [kworker/u200:1]
root      12252  0.0  0.0      0     0 ?        S    04:06   0:00  \_ [kworker/1:1]
root      13182  0.0  0.0      0     0 ?        S    04:08   0:00  \_ [kworker/0:5]
root      19826  0.0  0.0      0     0 ?        S    04:21   0:00  \_ [kworker/1:0]
root      21119  0.0  0.0      0     0 ?        S    04:24   0:00  \_ [kworker/1:2]
root      22647  0.0  0.0      0     0 ?        S    04:27   0:00  \_ [kworker/0:3]
root      24815  0.0  0.0      0     0 ?        S    04:31   0:00  \_ [kworker/1:4]
root      25277  0.0  0.0      0     0 ?        S    04:32   0:00  \_ [kworker/0:0]
root      25748  0.0  0.0      0     0 ?        S    04:33   0:00  \_ [kworker/0:1]
root      29405  0.0  0.0      0     0 ?        S    04:40   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44420  3452 ?        Ss   00:54   0:19 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  39500  3564 ?        Ss   00:54   0:07 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45352    56 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   208 ?        S<sl 00:54   0:01 /sbin/auditd
polkitd     481  0.0  0.0 612240   824 ?        Ssl  00:54   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        482  0.0  0.0  58716  1352 ?        Ss   00:54   0:07 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         494  0.0  0.0  69256    36 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        521  0.0  0.0  52852   252 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        523  0.0  0.0  21540   348 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        528  0.0  0.1 224276  3252 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        533  0.0  0.0 152780   104 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        539  0.0  0.0  24896  1160 ?        Ss   00:54   0:03 /usr/lib/systemd/systemd-logind
root        544  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        548  0.0  0.0   4388    28 ?        Ss   00:54   0:00 /usr/sbin/acpid
nscd        551  0.0  0.0 928956  1336 ?        Ssl  00:54   0:07 /usr/sbin/nscd
root        562  0.0  0.0  24208    16 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        564  0.0  0.0 124476   424 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       5800  0.0  0.0 183048    28 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       5849  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       5867  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 5h 14m
root      31967  0.0  0.0 183044  2148 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      31995  0.0  0.0 113284  1208 ?        Ss   04:45   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      31997  0.0  0.0 113284  1468 ?        S    04:45   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      31969  0.0  0.0 183044  2148 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      31994  0.0  0.0 113284  1208 ?        Ss   04:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      31996  0.0  0.0 108052   360 ?        S    04:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      31998  0.0  0.0 113288  1520 ?        S    04:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      32107  0.0  0.0 153840  2096 ?        R    04:45   0:00  |               \_ ps auxf
root      31970  0.0  0.0 183044  2148 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      32024  0.0  0.0  20164   804 ?        Ss   04:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      31972  0.0  0.0 183044  2148 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      32020  0.0  0.0  20164   808 ?        Ss   04:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      31973  0.0  0.0 183044  2148 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      32011  0.0  0.0  20164   808 ?        Ss   04:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      31974  0.0  0.0 183044  2148 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      32023  0.0  0.0  20164   808 ?        Ss   04:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      31975  0.0  0.0 183044  2144 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      32013  0.0  0.0  20164   988 ?        Ss   04:45   0:00  |   \_ jailshell (cloudsms) [32097] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  32097  0.0  0.0  20164   260 ?        S    04:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  32098  0.0  0.0 113284  1208 ?        S    04:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  32100  0.0  0.6 400652 15144 ?        S    04:45   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      31976  0.0  0.0 183044  2144 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      32016  0.0  0.0  20164   808 ?        Ss   04:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      31977  0.0  0.0 183044  2140 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      32015  0.0  0.0  20164   804 ?        Ss   04:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      31978  0.0  0.0 183044  2140 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      32014  0.0  0.0  20164   804 ?        Ss   04:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      31979  0.0  0.0 183044  2140 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      32017  0.0  0.0  20164   804 ?        Ss   04:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      31980  0.0  0.0 183044  2140 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      32012  0.0  0.0 113284  1208 ?        Ss   04:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      32030  2.0  0.4 188212 11084 ?        S    04:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      32080  0.0  0.0 160224  2340 ?        S    04:45   0:00  |           \_ top -n 2 -b -c
root      31981  0.0  0.0 183044  2144 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      32019  0.0  0.0  20164   972 ?        Ss   04:45   0:00  |   \_ jailshell (pactpay) [32036] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   32036  0.0  0.0  20164   260 ?        S    04:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   32046  1.0  0.7 476724 17484 ?        S    04:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      31983  0.0  0.0 183044  2140 ?        S    04:45   0:00  \_ /usr/sbin/CROND -n
root      32010  0.0  0.0  20164   968 ?        Ss   04:45   0:00      \_ jailshell (nigeria) [32039] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   32039  0.0  0.0  20164   260 ?        S    04:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   32041  4.0  0.6 400652 15936 ?        S    04:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        583  0.0  0.0 108296    40 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
root        584  0.0  0.0 114704     0 ttyS0    Ss+  00:54   0:00 /bin/bash
mailnull    629  0.0  0.1  90820  3728 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  31892  0.0  0.1  90828  3996 ?        S    04:44   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
telegraf    938  0.0  1.4 5654048 34540 ?       SLsl 00:54   0:07 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        941  0.0  0.0  51656   492 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1087  0.0  0.0  10320   412 ?        S    00:54   0:00  \_ dovecot/anvil
dovenull  22578  0.0  0.0  46912  1928 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  22579  0.0  0.1  48028  2764 ?        S    01:28   0:00  \_ dovecot/imap-login
root      22580  0.0  0.0  10452   480 ?        S    01:28   0:00  \_ dovecot/log
dovenull  22581  0.0  0.0  46912  1872 ?        S    01:28   0:00  \_ dovecot/pop3-login
dovenull  22582  0.0  0.1  48172  2888 ?        S    01:28   0:00  \_ dovecot/imap-login
root      22583  0.0  0.0  24528  2060 ?        S    01:28   0:00  \_ dovecot/config
dovecot   22584  0.0  0.0  13572   632 ?        S    01:28   0:00  \_ dovecot/stats
dovecot   22588  0.0  0.0  41140  1464 ?        S    01:28   0:00  \_ dovecot/auth
root      31189  0.0  0.1  41052  2784 ?        S    04:43   0:00  \_ dovecot/auth -w
root        942  0.0  0.0 153404   264 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    943  0.0  0.0  10132     0 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        944  0.0  0.0 111304   372 ?        Ss   00:54   0:01 /usr/sbin/sshd -D
root      31776  0.0  0.1 111304  4268 ?        Ss   04:44   0:00  \_ sshd: [accepted]
root      31914  0.0  0.2 157100  4968 ?        Ss   04:44   0:00  \_ sshd: unknown [priv]
sshd      31918  0.0  0.1 115644  2628 ?        S    04:44   0:00  |   \_ sshd: unknown [net]
root      31949  0.0  0.2 157100  4992 ?        Ss   04:44   0:00  \_ sshd: unknown [priv]
sshd      31951  0.0  0.1 115644  2628 ?        S    04:44   0:00      \_ sshd: unknown [net]
systuser    945  0.0  0.0  13012     0 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    946  0.0  0.0 113932    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        949  0.2 13.6 1901856 330168 ?      Ssl  00:54   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
root        950  0.0  0.0 436392   360 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       952  0.0  1.1 718804 27700 ?        Ssl  00:54   0:10 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        960  0.0  0.0 392856   396 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        961  0.0  0.1 257360  3316 ?        Ssl  00:54   0:03 /usr/sbin/rsyslogd -n
root        962  0.0  0.1 397344  2544 ?        Ss   00:54   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  31633 11.6  2.9 461848 71868 ?        R    04:44   0:05  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   31850  0.0  0.2 397064  5396 ?        S    04:44   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  31880  8.7  2.1 443040 52896 ?        S    04:44   0:00  \_ php-fpm: pool health_oyostate_gov_ng
pactpay   31961  0.0  0.1 397064  2612 ?        S    04:45   0:00  \_ php-fpm: pool secure_pactpay_com
root        965  0.0  0.2 261416  6360 ?        Ss   00:54   0:03 cpsrvd (SSL) - waiting for connections                   
root      31952  0.0  0.0      0     0 ?        Z    04:44   0:00  \_ [cpaneld - servi] <defunct>
root        967  0.0  0.0 445028     0 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
memcach+    969  0.0  0.0 342400     0 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    970  0.0  0.1  10484  3468 ?        Ss   00:54   0:11 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 385496   460 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.0 386112   388 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    986  0.0  0.0 113272    56 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    992  0.0  0.4 114016  9880 ?        Ssl  00:54   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        993  0.0  0.0 572372   744 ?        Ssl  00:54   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1168  0.0  0.1 248160  2780 ?        Ss   00:54   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6471  0.0  3.7 265416 90124 ?        S    01:00   0:02  \_ spamd child
root       6472  0.0  0.0 248160  1352 ?        S    01:00   0:00  \_ spamd child
systuser   1181  0.0  0.1 157704  2936 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1219  0.0  0.4 410452 10348 ?        Ss   00:54   0:11 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1220  0.0  0.1 387528  3284 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1249  0.0  0.4 209356  9720 ?        Ss   00:54   0:01 tailwatchd
root       1252  0.0  0.2 183900  6076 ?        Ss   00:54   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1253  0.0  0.0 167452  1220 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1749  0.0  0.0 299272   508 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1799  0.0  0.0 130416  1364 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1851  1.8 10.7 1466700 259900 ?      Sl   00:54   4:17 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1947  0.0  0.2 267112  5080 ?        Ss   00:54   0:01 /usr/sbin/httpd -k start
root      22574  0.0  0.0  12828   328 ?        S    01:28   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      22575  0.0  0.0  12732   292 ?        S    01:28   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      22576  0.0  0.0  12864   340 ?        S    01:28   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      22589  0.0  0.0  53252    68 ?        S    01:28   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     8576  0.1  0.8 277728 20168 ?        S    04:00   0:02  \_ /usr/sbin/httpd -k start
nobody     9604  0.0  0.8 277704 20188 ?        S    04:02   0:02  \_ /usr/sbin/httpd -k start
nobody    16222  0.1  0.8 277660 20324 ?        S    04:14   0:02  \_ /usr/sbin/httpd -k start
cloudw    32105  0.0  0.6 284780 16596 ?        Rl   04:45   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    20280  0.0  0.8 277856 19616 ?        S    04:22   0:01  \_ /usr/sbin/httpd -k start
nobody    22727  0.1  0.8 277984 19988 ?        S    04:27   0:01  \_ /usr/sbin/httpd -k start
nobody    23698  0.0  0.7 277660 19012 ?        S    04:29   0:00  \_ /usr/sbin/httpd -k start
nobody    24499  0.1  0.8 277988 19788 ?        S    04:30   0:00  \_ /usr/sbin/httpd -k start
nobody    24514  0.1  0.7 277856 19084 ?        S    04:30   0:01  \_ /usr/sbin/httpd -k start
nobody    27079  0.1  0.8 277992 19432 ?        S    04:35   0:00  \_ /usr/sbin/httpd -k start
nobody    27939  0.0  0.7 277992 18760 ?        S    04:37   0:00  \_ /usr/sbin/httpd -k start
nobody    27979  0.1  0.7 278004 19092 ?        S    04:37   0:00  \_ /usr/sbin/httpd -k start
nobody    27987  0.1  0.7 277984 18792 ?        S    04:37   0:00  \_ /usr/sbin/httpd -k start
nobody    28015  0.1  0.7 277856 18804 ?        S    04:37   0:00  \_ /usr/sbin/httpd -k start
nobody    28035  0.1  0.7 277856 19296 ?        S    04:37   0:00  \_ /usr/sbin/httpd -k start
nobody    28173  0.1  0.7 277588 18472 ?        S    04:37   0:00  \_ /usr/sbin/httpd -k start
root       2095  0.0  0.3 182192  8816 ?        Ss   00:54   0:12 lfd - sleeping
oysipao+   5913  0.0  0.0   3148     8 ?        Ss   01:00   0:00 [kworker]
oysipao+   5923  0.0  0.0   3152    36 ?        S    01:00   0:00  \_ [kworker]
root      92409  0.0  0.0 132964    28 ?        SN   03:29   0:00 ConfigServer Version Check
root      92420  0.0  0.0 108056     0 ?        SN   03:29   0:00  \_ sleep 8028
root       8686  0.0  0.4 1275844 10340 ?       Ssl  04:00   0:00 /usr/bin/cspdaemon
root       8722  0.0  0.4 1277312 11696 ?       Ssl  04:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 13848  Threads: 4  Questions: 1647078  Slow queries: 0  Opens: 7352  Flush tables: 1  Open tables: 2000  Queries per second avg: 118.939
*************************** 1. row ***************************
     Id: 25897
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 25899
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 25901
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 25907
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 103.78.97.230 TIME_WAIT
      1 114.119.155.44 TIME_WAIT
      1 135.196.202.190 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 27.46.69.11 TIME_WAIT
      1 43.159.143.187 TIME_WAIT
      1 54.39.6.107 TIME_WAIT
      1 66.249.70.38 TIME_WAIT
      1 74.7.36.108 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      9 104.248.90.230 TIME_WAIT
     36 157.20.32.131 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 10-Nov-2025 04:45:02 WAT
   Restart Time: Monday, 10-Nov-2025 00:54:18 WAT
   Parent Server Config. Generation: 3
   Parent Server MPM Generation: 2
   Server uptime: 3 hours 50 minutes 43 seconds
   Server load: 0.56 0.51 0.46
   Total accesses: 57879 - Total Traffic: 1.1 GB - Total Duration: 27881089
   CPU Usage: u13.07 s5.09 cu586.04 cs413.19 - 7.35% CPU load
   4.18 requests/sec - 85.9 kB/second - 20.5 kB/request - 481.713 ms/request
   9 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

...WK_KK...WK_.W_K._W__.........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS   Req   Dur   Conn  Child  Slot     Client     Protocol              VHost                                          Request
   0-2  -     0/0/3403    . 0.00  427   0   1430358 0.0   0.00  63.13 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   1-2  -     0/0/3228    . 0.00  421   0   1469110 0.0   0.00  59.13 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   2-2  -     0/0/3130    . 0.00  426   0   2250508 0.0   0.00  71.88 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   3-2  16222 1/603/3016  W 8.86  0     0   1401081 35.8  11.05 63.35 66.249.70.34   http/1.1 support.cloudware.ng:443        GET /?c=3942565730 HTTP/1.1
   4-2  20280 2/310/3239  K 4.73  3     298 1434485 65.8  5.33  57.03 66.249.70.37   http/1.1 support.cloudware.ng:443        GET /?c=3914401594 HTTP/1.1
   5-2  27939 0/183/3076  _ 1.52  0     1   1346423 0.0   1.63  53.00 95.217.109.26  http/1.1 secure.pactpay.com:443          GET /about_us.php/contact_us.php/signup.php/login.php/about_us.
   6-2  8576  3/737/2944  K 11.16 2     295 1374333 95.0  11.47 61.61 66.249.70.39   http/1.1 support.cloudware.ng:443        GET /?c=2788490440 HTTP/1.1
   7-2  22727 2/257/2638  K 4.76  1     267 1280529 65.8  4.86  50.15 66.249.70.38   http/1.1 support.cloudware.ng:443        GET /?c=3231530135 HTTP/1.1
   8-2  -     0/0/2884    . 0.00  336   0   1651240 0.0   0.00  73.11 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   9-2  -     0/0/2818    . 0.00  420   0   1344306 0.0   0.00  52.88 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   10-2 -     0/0/2009    . 0.00  424   0   931358  0.0   0.00  37.01 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   11-2 24499 0/278/2624  W 3.24  0     0   1156695 0.0   4.31  45.97 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   12-2 23698 3/240/2133  K 3.38  0     310 927785  96.9  3.59  37.53 66.249.70.35   http/1.1 support.cloudware.ng:443        GET /?c=3907553459 HTTP/1.1
   13-2 27079 0/213/1928  _ 2.63  1     322 868192  0.0   3.89  35.87 66.249.70.33   http/1.1 support.cloudware.ng:443        GET /?c=2045261722 HTTP/1.1
   14-2 -     0/0/1936    . 0.00  425   0   906732  0.0   0.00  37.58 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   15-2 27979 33/205/1685 W 2.58  0     0   732332  132.1 2.31  31.66 48.218.184.140 http/1.1 swayag.fk.staging.cloudware.ng: GET /cgi-sys/suspendedpage.cgi HTTP/1.1
   16-2 24514 0/218/1594  _ 4.87  0     0   792421  0.0   5.08  44.64 ::1            http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   17-2 9604  27/601/1053 K 10.04 3     5   932775  139.7 23.34 30.94 144.76.19.157  http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php?state=Sokoto&lga=Binji&ward=Gawa
   18-2 -     0/0/997     . 0.00  422   0   505942  0.0   0.00  19.33 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   19-2 27987 0/123/1355  _ 2.83  1     348 698893  0.0   2.26  26.35 157.20.32.131  http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   20-2 28015 0/117/1723  W 2.32  0     0   815970  0.0   2.35  35.06 157.20.32.131  http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   21-2 28035 0/119/1970  _ 2.26  0     0   846548  0.0   2.33  37.94 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80          GET /whm-server-status HTTP/1.0
   22-2 28173 0/120/1586  _ 2.79  0     7   740779  0.0   2.43  41.03 66.249.70.103  http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php?state=Bauchi&lga=Giade&ward=Giad
   23-2 -     0/0/773     . 0.00  361   0   325589  0.0   0.00  12.77 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   24-2 -     0/0/279     . 0.00  2312  0   122067  0.0   0.00  5.23  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-2 -     0/0/890     . 0.00  901   0   446080  0.0   0.00  22.44 ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-2 -     0/0/108     . 0.00  2308  0   34397   0.0   0.00  1.85  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-2 -     0/0/540     . 0.00  2315  0   233113  0.0   0.00  9.89  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-2 -     0/0/172     . 0.00  2295  0   71466   0.0   0.00  2.71  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-2 -     0/0/107     . 0.00  2318  0   30007   0.0   0.00  1.77  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-2 -     0/0/304     . 0.00  2316  0   139787  0.0   0.00  6.24  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-2 -     0/0/163     . 0.00  2317  0   84177   0.0   0.00  3.34  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-2 -     0/0/63      . 0.00  2303  0   20576   0.0   0.00  0.73  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-2 -     0/0/342     . 0.00  1111  0   151592  0.0   0.00  5.64  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-2 -     0/0/199     . 0.00  2310  0   47054   0.0   0.00  5.03  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-2 -     0/0/43      . 0.00  2307  0   16061   0.0   0.00  0.75  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-2 -     0/0/42      . 0.00  11689 0   10575   0.0   0.00  0.39  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-2 -     0/0/316     . 0.00  10867 0   106128  0.0   0.00  8.14  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-2 -     0/0/59      . 0.00  11561 0   27054   0.0   0.00  0.90  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-2 -     0/0/22      . 0.00  11720 0   1654    0.0   0.00  0.09  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-2 -     0/0/149     . 0.00  11393 0   69209   0.0   0.00  2.91  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-2 -     0/0/56      . 0.00  11697 0   11193   0.0   0.00  0.59  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-2 -     0/0/60      . 0.00  11719 0   33165   0.0   0.00  0.80  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-2 -     0/0/26      . 0.00  11700 0   1149    0.0   0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-2 -     0/0/36      . 0.00  11718 0   5070    0.0   0.00  0.26  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-2 -     0/0/30      . 0.00  11690 0   3132    0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-2 -     0/0/32      . 0.00  11560 0   20691   0.0   0.00  0.65  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-1 -     0/0/34      . 0.00  11903 0   9383    0.0   0.00  0.28  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-1 -     0/0/8       . 0.00  11977 0   989     0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-1 -     0/0/57      . 0.00  11807 261 20913   0.0   0.00  0.84  66.249.70.39   http/1.1 support.cloudware.ng:443        GET /?c=3683647426 HTTP/1.1
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 680
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 8 seconds, (range: 0...31)
   index usage: 12%, cache usage: 16%
   total entries stored since starting: 27729
   total entries replaced since starting: 0
   total entries expired since starting: 27040
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 100 miss
   total removes since starting: 9 hit, 7 miss
Youez - 2016 - github.com/yon3zu
LinuXploit