403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-11.01.27.txt
 ## swap threshold exceeded
## server overview
2025-11-11.01.27 load[0] mem[68/56] mysql[2/10] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1541         158          17         663         640
Swap:          1999        1260         739
 01:27:01 up  1:30,  0 users,  load average: 0.87, 1.33, 1.04
## system overview
top - 01:27:01 up  1:30,  0 users,  load average: 0.87, 1.33, 1.04
Tasks: 208 total,   6 running, 201 sleeping,   0 stopped,   1 zombie
%Cpu(s): 54.3 us, 17.1 sy,  0.0 ni, 25.7 id,  0.0 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,   155724 free,  1584968 used,   679608 buff/cache
KiB Swap:  2047996 total,   757500 free,  1290496 used.   649668 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1757 mysql     20   0 1458324 198832   4008 S  93.8  8.2   1:07.60 /usr/sbin+
 66557 nigeria   20   0  400652  15936  10220 R  25.0  0.7   0:00.05 /opt/cpan+
 39447 nobody    20   0  277932  13592   4672 S   6.2  0.6   0:04.19 /usr/sbin+
 66559 pactpay   20   0  476724  17480  11728 S   6.2  0.7   0:00.02 /opt/cpan+
 66591 cloudsms  20   0  400652  15672  10060 R   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44408   3452   1528 S   0.0  0.1   0:08.64 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.46 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.22 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:06.47 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.21 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.08 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:16.68 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kauditd]
   231 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   260 root       0 -20       0      0      0 S   0.0  0.0   0:01.54 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:01.28 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:00.33 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40240   1476   1228 S   0.0  0.1   0:02.69 /usr/lib/+
   378 root      20   0   45376      8      4 S   0.0  0.0   0:00.38 /usr/lib/+
   406 root      16  -4   55532    272    160 S   0.0  0.0   0:00.42 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   505 root      20   0   52852    184     92 S   0.0  0.0   0:00.01 /usr/sbin+
   509 root      20   0   24896   1432    800 S   0.0  0.1   0:01.30 /usr/lib/+
   512 root      20   0   21540    344    260 S   0.0  0.0   0:00.12 /usr/sbin+
   517 root      20   0  224148   3040    800 S   0.0  0.1   0:00.14 queueproc+
   518 root      20   0  152780     80     36 S   0.0  0.0   0:00.00 /usr/sbin+
   519 dbus      20   0   57028   1324    600 S   0.0  0.1   0:02.94 /usr/bin/+
   521 rpc       20   0   69256     60      0 S   0.0  0.0   0:00.01 /sbin/rpc+
   522 nscd      20   0  996544   1440    692 S   0.0  0.1   0:04.02 /usr/sbin+
   535 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   541 polkitd   20   0  610540    784    448 S   0.0  0.0   0:00.78 /usr/lib/+
   556 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   576 root      20   0  124480    428    296 S   0.0  0.0   0:00.15 /usr/sbin+
   577 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   626 mailnull  20   0   89116   3820    828 S   0.0  0.2   0:00.10 /usr/sbin+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:02.24 [loop0]
   711 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   915 systuser  20   0  114016  12516   2504 S   0.0  0.5   0:01.42 /usr/loca+
   916 systuser  20   0   14068     24      0 S   0.0  0.0   0:00.01 /usr/loca+
   921 systuser  20   0  112524     56      0 S   0.0  0.0   0:00.00 /usr/loca+
   922 root      20   0  153404    220    136 S   0.0  0.0   0:00.11 pure-ftpd+
   923 root      20   0  111304    356    256 S   0.0  0.0   0:00.57 /usr/sbin+
   924 root      20   0   51508    456    296 S   0.0  0.0   0:00.09 /usr/sbin+
   925 root      20   0  572372    724    160 S   0.0  0.0   0:00.58 /usr/bin/+
   926 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   927 telegraf  20   0 5654048  33920   6080 S   0.0  1.4   0:03.30 /usr/loca+
   928 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.12 /usr/bin/+
   930 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   939 systuser  20   0   10132     32      0 S   0.0  0.0   0:00.00 /usr/loca+
   945 root      20   0  232784   1324    888 S   0.0  0.1   0:01.35 /usr/sbin+
   946 root      20   0  261292   6284   1688 S   0.0  0.3   0:01.43 cpsrvd (S+
   954 named     20   0  636928  33216   1860 S   0.0  1.4   0:03.09 /usr/sbin+
   965 root      20   0  385496    368    276 S   0.0  0.0   0:00.25 php-fpm: +
   972 cpanelc+  20   0   10324   3264   2316 R   0.0  0.1   0:04.83 /usr/loca+
   973 root      20   0  397344   1924    592 S   0.0  0.1   0:00.92 php-fpm: +
   975 root      20   0  392856    392    212 S   0.0  0.0   0:00.24 php-fpm: +
   979 root      20   0  436392    320    232 S   0.0  0.0   0:00.32 php-fpm: +
   980 root      20   0 1828116 572132      0 S   0.0 23.6   0:29.78 /usr/loca+
   991 root      20   0  386112    524    320 S   0.0  0.0   0:00.24 php-fpm: +
  1070 dovenull  20   0   46912   1040    564 S   0.0  0.0   0:00.09 dovecot/p+
  1071 dovenull  20   0   47244   2448   1708 S   0.0  0.1   0:00.08 dovecot/i+
  1072 dovecot   20   0   10320    380    276 S   0.0  0.0   0:00.00 dovecot/a+
  1073 root      20   0   10452    588    420 S   0.0  0.0   0:00.06 dovecot/l+
  1074 dovenull  20   0   46912    976    516 S   0.0  0.0   0:00.08 dovecot/p+
  1075 dovenull  20   0   47360   2256   1608 S   0.0  0.1   0:00.06 dovecot/i+
  1078 root      20   0   24528   1860    492 S   0.0  0.1   0:00.05 dovecot/c+
  1084 dovecot   20   0   13568    636    452 S   0.0  0.0   0:00.00 dovecot/s+
  1112 systuser  20   0  157704   2932    988 S   0.0  0.1   0:00.04 SonarPush+
  1127 root      20   0  248312   2736    716 S   0.0  0.1   0:03.49 /usr/loca+
  1152 dovecot   20   0   41056   1416   1004 S   0.0  0.1   0:00.12 dovecot/a+
  1157 wp-tool+  20   0  387556   3284   1420 S   0.0  0.1   0:00.14 /usr/bin/+
  1159 wp-tool+  20   0  410452  27804   1396 R   0.0  1.1   0:04.68 /usr/bin/+
  1210 root      20   0  209268   8700   1868 S   0.0  0.4   0:00.61 tailwatchd
  1211 root      20   0  183900   6696   3460 S   0.0  0.3   0:00.68 cpdavd - +
  1213 root      20   0  228228  17328   4424 S   0.0  0.7   0:00.21 dnsadmin +
  1667 root      20   0  299272    456    296 S   0.0  0.0   0:00.15 php-fpm: +
  1700 root      38  18  130416   1360    684 S   0.0  0.1   0:00.01 cpanellog+
  1945 root      20   0  267016   4792    532 S   0.0  0.2   0:00.46 /usr/sbin+
  1949 root      20   0   12812    324    212 S   0.0  0.0   0:00.58 /usr/loca+
  1950 root      20   0   12732    280    208 S   0.0  0.0   0:00.49 /usr/loca+
  1951 root      20   0   12828    344    216 S   0.0  0.0   0:00.53 /usr/loca+
  1975 root      20   0   53252      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4853 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  4873 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.11 [kworker]
  5071 root      20   0  181264   7116   1100 S   0.0  0.3   0:04.44 lfd - sle+
  7555 root      20   0  249580  39308   1160 S   0.0  1.6   0:00.50 spamd chi+
  7556 root      20   0  248312   1324    412 S   0.0  0.1   0:00.00 spamd chi+
 34728 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 38359 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 38388 root      20   0       0      0      0 S   0.0  0.0   0:00.32 [kworker/+
 41241 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 47595 nobody    20   0  277932  19876   4884 S   0.0  0.8   0:02.46 /usr/sbin+
 48267 root      20   0  183052   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 48316 root      20   0  113284   1180   1004 S   0.0  0.0   0:00.00 /bin/sh -+
 48334 root      20   0  108056    344    268 S   0.0  0.0   0:00.00 sleep 4h +
 48815 root      20   0 1341636  10692    604 S   0.0  0.4   0:00.06 /usr/bin/+
 48851 root      20   0 1277312  11740    600 S   0.0  0.5   0:00.06 /usr/bin/+
 50236 nobody    20   0  277996  20136   4728 S   0.0  0.8   0:02.40 /usr/sbin+
 51035 nobody    20   0  277564  19376   4716 S   0.0  0.8   0:02.37 /usr/sbin+
 53303 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 54503 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 54865 nobody    20   0  277924  19384   4496 S   0.0  0.8   0:02.08 /usr/sbin+
 54875 nobody    20   0  277932  20008   4692 S   0.0  0.8   0:01.52 /usr/sbin+
 58960 nobody    20   0  277544  18212   4208 S   0.0  0.8   0:00.97 /usr/sbin+
 58962 nobody    20   0  277736  19364   4500 S   0.0  0.8   0:01.00 /usr/sbin+
 58964 nobody    20   0  277800  18628   4216 S   0.0  0.8   0:01.48 /usr/sbin+
 58965 nobody    20   0  277800  18964   4268 S   0.0  0.8   0:01.23 /usr/sbin+
 60447 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 61786 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 62489 nobody    20   0  277796  18680   4276 S   0.0  0.8   0:00.52 /usr/sbin+
 63307 nobody    20   0  277932  18512   4168 S   0.0  0.8   0:00.51 /usr/sbin+
 63646 nobody    20   0  277932  18288   3988 S   0.0  0.8   0:00.43 /usr/sbin+
 63722 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 63728 root      20   0  178148  26276   2788 S   0.0  1.1   0:00.13 /usr/loca+
 63772 root      20   0  158860  15284   2688 S   0.0  0.6   0:00.08 /usr/loca+
 63783 root      20   0  195364  34684   3140 S   0.0  1.4   0:00.19 /usr/loca+
 63810 root      20   0   76780  17000   3028 S   0.0  0.7   0:00.15 /usr/loca+
 64161 nobody    20   0  277800  17136   3304 S   0.0  0.7   0:00.39 /usr/sbin+
 64372 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64400 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64487 nobody    20   0  277932  18052   3872 S   0.0  0.7   0:00.23 /usr/sbin+
 64786 root      20   0   41052   2804   2136 S   0.0  0.1   0:00.00 dovecot/a+
 64788 worencom  20   0   38380   3668   2880 S   0.0  0.2   0:00.00 dovecot/i+
 65152 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65239 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65359 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 65585 mailnull  20   0   89512   5848   2580 S   0.0  0.2   0:00.00 /usr/sbin+
 65725 nobody    20   0  277800  17592   3652 S   0.0  0.7   0:00.08 /usr/sbin+
 65961 nobody    20   0  277812  17464   3476 S   0.0  0.7   0:00.10 /usr/sbin+
 66062 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 66442 root      20   0  111304   4260   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 66444 nigeria   20   0  397064   4528   2400 S   0.0  0.2   0:00.00 php-fpm: +
 66451 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 66474 agradio   20   0  416180  29212   4624 S   0.0  1.2   0:00.20 php-fpm: +
 66493 healtho+  20   0  443436  54332   4172 S   0.0  2.2   0:00.43 php-fpm: +
 66496 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 66503 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 66504 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 66507 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 66509 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66510 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66511 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66512 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66513 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66515 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66516 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66517 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 66519 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 66526 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 66527 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 66528 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 66531 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 66532 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 66533 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 66534 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 66535 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 66536 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
 66538 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 66539 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 66541 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 66549 cloudw    20   0  350316  16620  10324 S   0.0  0.7   0:00.01 /opt/cpan+
 66554 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 66556 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 66587 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 66589 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 66590 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 66593 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 66594 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 66595 cloudsms  20   0  113284    184      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov10   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov10   0:06  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        R    Nov10   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [watchdogd]
root         36  0.3  0.0      0     0 ?        S    Nov10   0:16  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kauditd]
root        231  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_0]
root        247  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_1]
root        248  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ttm_swap]
root        260  0.0  0.0      0     0 ?        S<   Nov10   0:01  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov10   0:01  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov10   0:02  \_ [loop0]
root        711  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root      34728  0.0  0.0      0     0 ?        S    00:40   0:00  \_ [kworker/0:1]
root      38359  0.0  0.0      0     0 ?        S    00:45   0:00  \_ [kworker/1:1]
root      38388  0.0  0.0      0     0 ?        S    00:45   0:00  \_ [kworker/u200:1]
root      41241  0.0  0.0      0     0 ?        S    00:49   0:00  \_ [kworker/0:4]
root      53303  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/1:3]
root      54503  0.0  0.0      0     0 ?        S    01:09   0:00  \_ [kworker/u200:0]
root      60447  0.0  0.0      0     0 ?        S    01:18   0:00  \_ [kworker/0:3]
root      61786  0.0  0.0      0     0 ?        S    01:20   0:00  \_ [kworker/1:5]
root      64372  0.0  0.0      0     0 ?        S    01:24   0:00  \_ [kworker/0:0]
root      64400  0.0  0.0      0     0 ?        S    01:24   0:00  \_ [kworker/u200:2]
root      65152  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/0:2]
root      65239  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44408  3452 ?        Ss   Nov10   0:08 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.0  40240  1476 ?        Ss   Nov10   0:02 /usr/lib/systemd/systemd-journald
root        378  0.0  0.0  45376     8 ?        Ss   Nov10   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   272 ?        S<sl Nov10   0:00 /sbin/auditd
root        505  0.0  0.0  52852   184 ?        Ss   Nov10   0:00 /usr/sbin/smartd -n -q never
root        509  0.0  0.0  24896  1432 ?        Ss   Nov10   0:01 /usr/lib/systemd/systemd-logind
root        512  0.0  0.0  21540   344 ?        Ss   Nov10   0:00 /usr/sbin/irqbalance --foreground
root        517  0.0  0.1 224148  3040 ?        Ss   Nov10   0:00 queueprocd - waiting up to 60s to process a task
root        518  0.0  0.0 152780    80 ?        Ss   Nov10   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        519  0.0  0.0  57028  1324 ?        Ss   Nov10   0:02 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         521  0.0  0.0  69256    60 ?        Ss   Nov10   0:00 /sbin/rpcbind -w
nscd        522  0.0  0.0 996544  1440 ?        Ssl  Nov10   0:04 /usr/sbin/nscd
root        535  0.0  0.0   4388     4 ?        Ss   Nov10   0:00 /usr/sbin/acpid
polkitd     541  0.0  0.0 610540   784 ?        Ssl  Nov10   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        556  0.0  0.0 195208     0 ?        Ssl  Nov10   0:00 /usr/sbin/gssproxy -D
root        576  0.0  0.0 124480   428 ?        Ss   Nov10   0:00 /usr/sbin/crond -n
root      48267  0.0  0.0 183052  2148 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48316  0.0  0.0 113284  1180 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      48334  0.0  0.0 108056   344 ?        S    01:00   0:00  |       \_ sleep 4h 14m
root      63722  0.0  0.0 183048  2144 ?        S    01:23   0:00  \_ /usr/sbin/CROND -n
root      63728  0.0  1.0 178148 26276 ?        Ss   01:23   0:00  |   \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify
root      63772  0.0  0.6 158860 15284 ?        S    01:23   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpaddonsup --force --nohtml
root      63783  0.0  1.4 195364 34684 ?        S    01:23   0:00  |           \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons.pl action=update-nohtml&force=1
root      63810  0.0  0.7  76780 17000 ?        S    01:23   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpanelsync --signed=1 httpupdate.cpanel.net /cpanelsync/cpaddons/cPAddonsMD5 /usr/local/cpanel/cpaddons/cPAddonsMD5
root      66507  0.0  0.0 183048  2152 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      66526  0.0  0.0 113284  1212 ?        Ss   01:27   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      66527  0.0  0.0 108052   356 ?        S    01:27   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      66541  0.0  0.0 113288  1516 ?        S    01:27   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      66596  0.0  0.0 153840  2092 ?        R    01:27   0:00  |               \_ ps auxf
root      66509  0.0  0.0 183048  2148 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      66534  0.0  0.0  20164   804 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      66510  0.0  0.0 183048  2148 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      66531  0.0  0.0  20164   804 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      66511  0.0  0.0 183048  2144 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      66535  0.0  0.0  20164   804 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      66512  0.0  0.0 183048  2144 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      66533  0.0  0.0  20164   988 ?        Ss   01:27   0:00  |   \_ jailshell (cloudsms) [66589] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
cloudsms  66589  0.0  0.0      0     0 ?        D    01:27   0:00  |       \_ [jailshell]
root      66513  0.0  0.0 183048  2140 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      66536  0.0  0.0  20164   992 ?        Ss   01:27   0:00  |   \_ jailshell (cloudsms) [66593] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  66593  0.0  0.0  20164   260 ?        S    01:27   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  66594  0.0  0.0 113284  1212 ?        S    01:27   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms  66595  1.0  0.6 400652 15668 ?        S    01:27   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue5.php
root      66515  0.0  0.0 183048  2140 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      66532  0.0  0.0  20164   804 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      66516  0.0  0.0 183048  2140 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      66539  0.0  0.0  20164   812 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      66517  0.0  0.0 183048  2144 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      66538  0.0  0.0  20164   964 ?        Ss   01:27   0:00  |   \_ jailshell (pactpay) [66556] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   66556  0.0  0.0  20164   260 ?        S    01:27   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   66559  2.0  0.7 476724 17480 ?        S    01:27   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      66519  0.0  0.0 183048  2140 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      66528  0.0  0.0  20164   964 ?        Ss   01:27   0:00      \_ jailshell (nigeria) [66554] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   66554  0.0  0.0  20164   260 ?        S    01:27   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   66557  5.0  0.6 400652 15936 ?        S    01:27   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     0 ?        Ss   Nov10   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296     4 tty1     Ss+  Nov10   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov10   0:00 /bin/bash
mailnull    626  0.0  0.1  89116  3820 ?        Ss   Nov10   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  65585  0.0  0.2  89512  5848 ?        S    01:25   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    915  0.0  0.5 114016 12516 ?        Ssl  Nov10   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    916  0.0  0.0  14068    24 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    921  0.0  0.0 112524    56 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        922  0.0  0.0 153404   220 ?        Ss   Nov10   0:00 pure-ftpd (SERVER)
root        923  0.0  0.0 111304   356 ?        Ss   Nov10   0:00 /usr/sbin/sshd -D
root      66062  0.0  0.1 111304  4268 ?        Ss   01:26   0:00  \_ sshd: [accepted]
root      66442  0.0  0.1 111304  4260 ?        Ss   01:26   0:00  \_ sshd: [accepted]
root      66451  0.0  0.1 111304  4264 ?        Ss   01:26   0:00  \_ sshd: [accepted]
root      66503  0.0  0.1 111304  4264 ?        Ss   01:27   0:00  \_ sshd: [accepted]
sshd      66504  0.0  0.1 115644  2628 ?        S    01:27   0:00      \_ sshd: [net]
root        924  0.0  0.0  51508   456 ?        Ss   Nov10   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1070  0.0  0.0  46912  1040 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1071  0.0  0.1  47244  2448 ?        S    Nov10   0:00  \_ dovecot/imap-login
dovecot    1072  0.0  0.0  10320   380 ?        S    Nov10   0:00  \_ dovecot/anvil
root       1073  0.0  0.0  10452   588 ?        S    Nov10   0:00  \_ dovecot/log
dovenull   1074  0.0  0.0  46912   976 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1075  0.0  0.0  47360  2256 ?        S    Nov10   0:00  \_ dovecot/imap-login
root       1078  0.0  0.0  24528  1860 ?        S    Nov10   0:00  \_ dovecot/config
dovecot    1084  0.0  0.0  13568   636 ?        S    Nov10   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41056  1416 ?        S    Nov10   0:00  \_ dovecot/auth
root      64786  0.0  0.1  41052  2804 ?        S    01:24   0:00  \_ dovecot/auth -w
worencom  64788  0.0  0.1  38380  3668 ?        S    01:24   0:00  \_ dovecot/imap
root      65359  0.0  0.1  60820  4512 ?        S    01:25   0:00  \_ dovecot/lmtp
root        925  0.0  0.0 572372   724 ?        Ssl  Nov10   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        926  0.0  0.0 445028     0 ?        Ss   Nov10   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
telegraf    927  0.0  1.4 5654048 33920 ?       SLsl Nov10   0:03 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    928  0.0  0.0 342400     0 ?        Ssl  Nov10   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    930  0.0  0.0 111608    60 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    939  0.0  0.0  10132    32 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        945  0.0  0.0 232784  1324 ?        Ssl  Nov10   0:01 /usr/sbin/rsyslogd -n
root        946  0.0  0.2 261292  6284 ?        Ss   Nov10   0:01 cpsrvd (SSL) - waiting for connections                   
root      66496  0.0  0.0      0     0 ?        Z    01:26   0:00  \_ [cpaneld - servi] <defunct>
named       954  0.0  1.3 636928 33216 ?        Ssl  Nov10   0:03 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        965  0.0  0.0 385496   368 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    972  0.0  0.1  10324  3264 ?        Ss   Nov10   0:04 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        973  0.0  0.0 397344  1924 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   66444  0.0  0.1 397064  4528 ?        S    01:26   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  66493 22.5  2.2 443436 54332 ?        R    01:26   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root        975  0.0  0.0 392856   392 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        979  0.0  0.0 436392   320 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        980  0.5 23.6 1828116 572132 ?      Ssl  Nov10   0:29 /usr/local/cpanel/3rdparty/bin/clamd -F
root        991  0.0  0.0 386112   524 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
agradio   66474  5.0  1.2 416180 29212 ?        S    01:26   0:00  \_ php-fpm: pool agradio_ng
systuser   1112  0.0  0.1 157704  2932 ?        S    Nov10   0:00 SonarPush 0.6.12 [sleeping]
root       1127  0.0  0.1 248312  2736 ?        Ss   Nov10   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7555  0.0  1.6 249580 39308 ?        S    00:03   0:00  \_ spamd child
root       7556  0.0  0.0 248312  1324 ?        S    00:03   0:00  \_ spamd child
wp-tool+   1157  0.0  0.1 387556  3284 ?        Ss   Nov10   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1159  0.0  1.1 410452 27804 ?        Ss   Nov10   0:04 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1210  0.0  0.3 209268  8700 ?        Ss   Nov10   0:00 tailwatchd
root       1211  0.0  0.2 183900  6696 ?        Ss   Nov10   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1213  0.0  0.7 228228 17328 ?        Ss   Nov10   0:00 dnsadmin - server mode
root       1667  0.0  0.0 299272   456 ?        Ss   Nov10   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1700  0.0  0.0 130416  1360 ?        SN   Nov10   0:00 cpanellogd - sleeping for logs
mysql      1757  1.2  8.2 1458324 198832 ?      Sl   Nov10   1:07 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1945  0.0  0.1 267016  4792 ?        Ss   Nov10   0:00 /usr/sbin/httpd -k start
root       1949  0.0  0.0  12812   324 ?        S    Nov10   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1950  0.0  0.0  12732   280 ?        S    Nov10   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1951  0.0  0.0  12828   344 ?        S    Nov10   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1975  0.0  0.0  53252     4 ?        S    Nov10   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    39447  0.1  0.5 277932 13592 ?        S    00:46   0:04  \_ /usr/sbin/httpd -k start
nobody    47595  0.1  0.8 277932 19876 ?        S    00:59   0:02  \_ /usr/sbin/httpd -k start
nobody    50236  0.1  0.8 277996 20136 ?        S    01:02   0:02  \_ /usr/sbin/httpd -k start
nobody    51035  0.1  0.8 277564 19376 ?        S    01:03   0:02  \_ /usr/sbin/httpd -k start
nobody    54865  0.1  0.8 277924 19384 ?        S    01:09   0:02  \_ /usr/sbin/httpd -k start
cloudw    66549  1.0  0.6 350316 16620 ?        S    01:27   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    54875  0.1  0.8 277932 20008 ?        S    01:09   0:01  \_ /usr/sbin/httpd -k start
nobody    58960  0.1  0.7 277544 18212 ?        S    01:15   0:00  \_ /usr/sbin/httpd -k start
nobody    58962  0.1  0.8 277736 19364 ?        S    01:15   0:01  \_ /usr/sbin/httpd -k start
nobody    58964  0.2  0.7 277800 18628 ?        S    01:15   0:01  \_ /usr/sbin/httpd -k start
nobody    58965  0.1  0.7 277800 18964 ?        S    01:15   0:01  \_ /usr/sbin/httpd -k start
nobody    62489  0.1  0.7 277796 18680 ?        S    01:20   0:00  \_ /usr/sbin/httpd -k start
nobody    63307  0.1  0.7 277932 18512 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    63646  0.1  0.7 277932 18288 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    64161  0.1  0.7 277800 17136 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    64487  0.1  0.7 277932 18052 ?        S    01:24   0:00  \_ /usr/sbin/httpd -k start
nobody    65725  0.1  0.7 277800 17592 ?        S    01:25   0:00  \_ /usr/sbin/httpd -k start
nobody    65961  0.1  0.7 277812 17464 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
oysipao+   4853  0.0  0.0   3148     8 ?        Ss   00:00   0:00 [kworker]
oysipao+   4873  0.0  0.0   3152    36 ?        S    00:00   0:00  \_ [kworker]
root       5071  0.0  0.2 181264  7116 ?        Ss   00:00   0:04 lfd - sleeping
root      48815  0.0  0.4 1341636 10692 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      48851  0.0  0.4 1277312 11740 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 5406  Threads: 4  Questions: 493570  Slow queries: 0  Opens: 2632  Flush tables: 1  Open tables: 1976  Queries per second avg: 91.300
*************************** 1. row ***************************
     Id: 5930
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 5935
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `oyo_official_polling_unit` WHERE `pu_code`='30/02/05/002accreditationhasendedvotingab
*************************** 3. row ***************************
     Id: 5939
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 5942
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 142.44.228.171 TIME_WAIT
      1 ::1 TIME_WAIT
      1 49.51.233.46 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 173.199.190.172 TIME_WAIT
      2 45.134.225.130 TIME_WAIT
     26 82.27.100.102 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 11-Nov-2025 01:27:02 WAT
   Restart Time: Monday, 10-Nov-2025 23:57:01 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 1 hour 30 minutes
   Server load: 1.28 1.40 1.07
   Total accesses: 23909 - Total Traffic: 602.1 MB - Total Duration: 12820910
   CPU Usage: u16.55 s5.88 cu324.35 cs257.97 - 11.2% CPU load
   4.43 requests/sec - 114.2 kB/second - 25.8 kB/request - 536.238 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

KWKW_KKKKKKKKWK_._..............................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS  Req  Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  51035 3/390/1389  K 12.10 4    350 739289 93.7  10.72 35.10 66.249.70.32   http/1.1 support.cloudware.ng:443   GET /?c=3376868318 HTTP/1.1
   1-0  62489 0/111/1113  W 2.24  0    0   584312 0.0   2.30  30.97 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   2-0  54865 29/381/1339 K 8.29  0    393 712056 884.9 9.86  32.10 66.249.70.37   http/1.1 support.cloudware.ng:443   GET /?c=382849564 HTTP/1.1
   3-0  54875 0/354/1344  W 6.20  0    0   672820 0.0   6.36  29.07 45.134.225.130 http/1.1 health.oyostate.gov.ng:80  GET / HTTP/1.1
   4-0  39447 0/807/1535  _ 16.55 0    6   909873 0.0   19.40 38.30 3.214.176.44   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/2019elections/blog/images/pollin
   5-0  65725 5/19/1220   K 0.28  1    257 655197 152.7 0.32  30.61 66.249.70.33   http/1.1 support.cloudware.ng:443   GET /?c=2458119467 HTTP/1.1
   6-0  63307 16/86/1167  K 2.59  0    264 653092 489.1 2.26  31.40 66.249.70.32   http/1.1 support.cloudware.ng:443   GET /?c=2134378215 HTTP/1.1
   7-0  64161 13/134/1325 K 1.21  1    362 713752 405.0 1.61  30.97 66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=2800837081 HTTP/1.1
   8-0  63646 1/78/1232   K 1.93  4    6   628202 10.4  1.87  29.58 66.249.70.104  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Yobe&lga=Yusufari&ward=Mai
   9-0  58960 1/165/1099  K 4.45  1    451 595789 30.2  4.28  28.83 45.134.225.130 http/1.1 health.oyostate.gov.ng:443 GET / HTTP/1.1
   10-0 58962 1/174/1062  K 4.48  1    411 542461 35.8  4.35  26.90 66.249.70.36   http/1.1 support.cloudware.ng:443   GET /?c=624352213 HTTP/1.1
   11-0 47595 1/427/1132  K 11.39 0    307 610539 35.9  11.25 29.56 66.249.70.38   http/1.1 support.cloudware.ng:443   GET /?c=4240423507 HTTP/1.1
   12-0 50236 3/397/787   K 11.19 2    395 427851 96.6  10.49 20.59 66.249.70.35   http/1.1 support.cloudware.ng:443   GET /?c=1252838239 HTTP/1.1
   13-0 64487 0/43/701    W 1.02  0    0   386532 0.0   1.04  19.16 66.249.70.37   http/1.1 support.cloudware.ng:443   GET /?c=2818785849 HTTP/1.1
   14-0 58964 2/284/1078  K 5.58  0    357 627868 67.6  7.06  27.74 66.249.70.34   http/1.1 support.cloudware.ng:443   GET /?c=2588112306 HTTP/1.1
   15-0 65961 0/18/827    _ 0.45  0    0   398688 0.0   0.45  19.07 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   16-0 -     0/0/996     . 0.00  376  0   534546 0.0   0.00  24.76 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 58965 0/283/1011  _ 5.13  1    405 522950 0.0   5.34  27.19 66.249.70.38   http/1.1 support.cloudware.ng:443   GET /?c=3070927213 HTTP/1.1
   18-0 -     0/0/357     . 0.00  245  0   201374 0.0   0.00  9.43  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/408     . 0.00  523  0   201927 0.0   0.00  11.67 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/585     . 0.00  7    0   302635 0.0   0.00  14.73 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/712     . 0.00  216  0   416345 0.0   0.00  16.89 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/292     . 0.00  344  0   146887 0.0   0.00  7.89  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/287     . 0.00  530  0   137354 0.0   0.00  7.19  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/371     . 0.00  547  0   210844 0.0   0.00  9.60  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/45      . 0.00  2440 0   37676  0.0   0.00  1.29  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/51      . 0.00  2461 0   27030  0.0   0.00  1.27  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/144     . 0.00  1828 0   78322  0.0   0.00  3.72  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/5       . 0.00  2439 0   4112   0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/63      . 0.00  2394 0   38994  0.0   0.00  1.81  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/2       . 0.00  2580 0   3973   0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/230     . 0.00  1744 2   97606  0.0   0.00  4.45  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 732
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 8 seconds, (range: 0...33)
   index usage: 12%, cache usage: 17%
   total entries stored since starting: 13623
   total entries replaced since starting: 0
   total entries expired since starting: 12884
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 44 miss
   total removes since starting: 7 hit, 2 miss
Youez - 2016 - github.com/yon3zu
LinuXploit