403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-11.03.45.txt
 ## swap threshold exceeded
## server overview
2025-11-11.03.45 load[0] mem[62/65] mysql[5/25] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1404          90           6         868         791
Swap:          1999        1535         464
 03:45:01 up  3:48,  0 users,  load average: 0.25, 0.29, 0.36
## system overview
top - 03:45:01 up  3:48,  0 users,  load average: 0.25, 0.29, 0.36
Tasks: 214 total,   5 running, 208 sleeping,   0 stopped,   1 zombie
%Cpu(s): 64.5 us, 19.4 sy,  0.0 ni, 12.9 id,  0.0 wa,  0.0 hi,  3.2 si,  0.0 st
KiB Mem :  2420300 total,    94980 free,  1435628 used,   889692 buff/cache
KiB Swap:  2047996 total,   475604 free,  1572392 used.   813036 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1757 mysql     20   0 1462284 224164   4412 S 106.7  9.3   3:37.25 /usr/sbin+
 63205 nigeria   20   0  400652  15940  10220 R  20.0  0.7   0:00.05 /opt/cpan+
 50391 nobody    20   0  277928  19856   4832 S   6.7  0.8   0:01.70 /usr/sbin+
 62262 nobody    20   0  277800  17120   3256 S   6.7  0.7   0:00.16 /usr/sbin+
 63212 pactpay   20   0  476724  17484  11728 S   6.7  0.7   0:00.02 /opt/cpan+
 63301 cloudsms  20   0  397280  12244   8328 R   6.7  0.5   0:00.01 /opt/cpan+
     1 root      20   0   44408   3324   1496 S   0.0  0.1   0:19.36 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.21 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.55 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:16.84 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.54 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.73 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:31.47 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.22 [kauditd]
   231 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   245 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   260 root       0 -20       0      0      0 S   0.0  0.0   0:03.20 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:02.92 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:00.83 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   39496   5268   5104 S   0.0  0.2   0:06.10 /usr/lib/+
   378 root      20   0   45376      8      4 S   0.0  0.0   0:00.38 /usr/lib/+
   406 root      16  -4   55532    112      0 S   0.0  0.0   0:00.94 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   505 root      20   0   52852    348    252 S   0.0  0.0   0:00.01 /usr/sbin+
   509 root      20   0   24992   1156    792 S   0.0  0.0   0:03.28 /usr/lib/+
   512 root      20   0   21540    344    260 S   0.0  0.0   0:00.31 /usr/sbin+
   517 root      20   0  224148   4524   1240 S   0.0  0.2   0:00.23 queueproc+
   518 root      20   0  152780     80     36 S   0.0  0.0   0:00.01 /usr/sbin+
   519 dbus      20   0   57028   1388    656 S   0.0  0.1   0:07.47 /usr/bin/+
   521 rpc       20   0   69256      8      0 S   0.0  0.0   0:00.02 /sbin/rpc+
   522 nscd      20   0 1062080   1488    768 S   0.0  0.1   0:10.30 /usr/sbin+
   535 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   541 polkitd   20   0  610540    928    568 S   0.0  0.0   0:01.98 /usr/lib/+
   556 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   576 root      20   0  124480    420    288 S   0.0  0.0   0:00.39 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   592 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   626 mailnull  20   0   89116    544    296 S   0.0  0.0   0:00.21 /usr/sbin+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:03.56 [loop0]
   711 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   712 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   915 systuser  20   0  114016   9084   2868 S   0.0  0.4   0:03.36 /usr/loca+
   916 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   921 systuser  20   0  112524     40      0 S   0.0  0.0   0:00.01 /usr/loca+
   922 root      20   0  153404    220    136 S   0.0  0.0   0:00.29 pure-ftpd+
   923 root      20   0  111304    356    256 S   0.0  0.0   0:01.29 /usr/sbin+
   924 root      20   0   51508    460    296 S   0.0  0.0   0:00.18 /usr/sbin+
   925 root      20   0  572372    700    252 S   0.0  0.0   0:01.28 /usr/bin/+
   926 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   927 telegraf  20   0 5654048  33624   5960 S   0.0  1.4   0:07.91 /usr/loca+
   928 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.30 /usr/bin/+
   930 systuser  20   0  111608     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   939 systuser  20   0   10132      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   945 root      20   0  249168   3300   2948 S   0.0  0.1   0:03.19 /usr/sbin+
   946 root      20   0  261824   6268   1728 S   0.0  0.3   0:03.27 cpsrvd (S+
   954 named     20   0  784392  24860   1564 S   0.0  1.0   0:08.89 /usr/sbin+
   965 root      20   0  385496    380    292 S   0.0  0.0   0:00.54 php-fpm: +
   972 cpanelc+  20   0   10564   3496   2308 R   0.0  0.1   0:12.08 /usr/loca+
   973 root      20   0  397344   1872    592 S   0.0  0.1   0:02.25 php-fpm: +
   975 root      20   0  392856    332    252 S   0.0  0.0   0:00.48 php-fpm: +
   979 root      20   0  436392    296    216 S   0.0  0.0   0:00.60 php-fpm: +
   980 root      20   0 1901588 463596   1012 S   0.0 19.2   0:50.82 /usr/loca+
   991 root      20   0  386112    364    280 S   0.0  0.0   0:00.47 php-fpm: +
  1070 dovenull  20   0   46912   2204   1644 S   0.0  0.1   0:00.24 dovecot/p+
  1071 dovenull  20   0   47648   2276   1632 S   0.0  0.1   0:00.22 dovecot/i+
  1072 dovecot   20   0   10320    380    276 S   0.0  0.0   0:00.04 dovecot/a+
  1073 root      20   0   10452    508    356 S   0.0  0.0   0:00.16 dovecot/l+
  1074 dovenull  20   0   46912   1964   1460 S   0.0  0.1   0:00.21 dovecot/p+
  1075 dovenull  20   0   47812   2376   1632 S   0.0  0.1   0:00.20 dovecot/i+
  1078 root      20   0   24528   1848    492 S   0.0  0.1   0:00.11 dovecot/c+
  1084 dovecot   20   0   13568    656    452 S   0.0  0.0   0:00.03 dovecot/s+
  1112 systuser  20   0  157704   2932    948 S   0.0  0.1   0:00.09 SonarPush+
  1127 root      20   0  248312   2704    712 S   0.0  0.1   0:04.48 /usr/loca+
  1152 dovecot   20   0   41180   1456   1008 S   0.0  0.1   0:00.33 dovecot/a+
  1157 wp-tool+  20   0  387556   2500   1228 S   0.0  0.1   0:00.19 /usr/bin/+
  1159 wp-tool+  20   0  410452   9380   1084 S   0.0  0.4   0:11.51 /usr/bin/+
  1210 root      20   0  209268   8008   1884 S   0.0  0.3   0:01.27 tailwatchd
  1211 root      20   0  183900     16     16 S   0.0  0.0   0:01.39 cpdavd - +
  1213 root      20   0  167452   1216    668 S   0.0  0.1   0:00.33 dnsadmin +
  1667 root      20   0  299272    488    328 S   0.0  0.0   0:00.37 php-fpm: +
  1700 root      38  18  130416   1356    692 S   0.0  0.1   0:00.03 cpanellog+
  1945 root      20   0  267016   4768    516 S   0.0  0.2   0:01.10 /usr/sbin+
  1949 root      20   0   12844    324    212 S   0.0  0.0   0:01.58 /usr/loca+
  1950 root      20   0   12732    244    176 S   0.0  0.0   0:01.34 /usr/loca+
  1951 root      20   0   12880    344    216 S   0.0  0.0   0:01.45 /usr/loca+
  1975 root      20   0   53252      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4853 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  4873 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.28 [kworker]
  5071 root      20   0  181900   7264   1100 S   0.0  0.3   0:11.27 lfd - sle+
  7555 root      20   0  269756  94288   2976 S   0.0  3.9   0:03.92 spamd chi+
  7556 root      20   0  248312   1216    340 S   0.0  0.1   0:00.00 spamd chi+
 28672 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 31614 root      20   0 1275844    572     24 S   0.0  0.0   0:00.08 /usr/bin/+
 31652 root      20   0 1277312   2356     24 S   0.0  0.1   0:00.07 /usr/bin/+
 33932 nobody    20   0  277736  12928   4508 S   0.0  0.5   0:03.89 /usr/sbin+
 39472 root      30  10  132964      4      0 S   0.0  0.0   0:00.00 ConfigSer+
 39483 root      30  10  108056      0      0 S   0.0  0.0   0:00.00 sleep 129+
 40431 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 43062 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 44563 nobody    20   0  277672  13340   4672 S   0.0  0.6   0:02.40 /usr/sbin+
 45402 nobody    20   0  277612  12360   4520 S   0.0  0.5   0:02.02 /usr/sbin+
 46358 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 47029 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 48267 root      20   0  183052      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
 48316 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
 48334 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
 49197 nobody    20   0  277800  17848   4384 S   0.0  0.7   0:01.58 /usr/sbin+
 49202 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 49250 nobody    20   0  277932  19584   4592 S   0.0  0.8   0:01.74 /usr/sbin+
 50412 nobody    20   0  277808  19704   4740 S   0.0  0.8   0:01.55 /usr/sbin+
 50869 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 52128 nobody    20   0  277996  19740   4716 S   0.0  0.8   0:01.50 /usr/sbin+
 52941 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 53101 nobody    20   0  277556  19284   4688 S   0.0  0.8   0:01.41 /usr/sbin+
 54076 nobody    20   0  277800  19208   4476 S   0.0  0.8   0:01.26 /usr/sbin+
 55990 nobody    20   0  277800  19188   4448 S   0.0  0.8   0:01.07 /usr/sbin+
 56876 nobody    20   0  277932  19164   4312 S   0.0  0.8   0:00.73 /usr/sbin+
 57126 nobody    20   0  277800  19280   4276 S   0.0  0.8   0:00.84 /usr/sbin+
 57460 nobody    20   0  277800  18740   4216 S   0.0  0.8   0:00.89 /usr/sbin+
 57716 nobody    20   0  277600  19052   4284 S   0.0  0.8   0:00.54 /usr/sbin+
 59071 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 59820 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 59858 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 62003 cloudsms  20   0   61804   6140   4440 S   0.0  0.3   0:00.00 dovecot/l+
 62230 nobody    20   0  277808  17472   3452 S   0.0  0.7   0:00.16 /usr/sbin+
 62245 nobody    20   0  277876  17820   3920 S   0.0  0.7   0:00.12 /usr/sbin+
 62263 nobody    20   0  277800  17740   3792 S   0.0  0.7   0:00.11 /usr/sbin+
 62518 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 62607 nobody    20   0  277812  17208   3340 S   0.0  0.7   0:00.06 /usr/sbin+
 62625 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 62626 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 62641 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 62940 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 62945 mailnull  20   0   89304   4156   2960 S   0.0  0.2   0:00.00 /usr/sbin+
 62950 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 62953 sshd      20   0  115644   2628   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 63072 root      20   0  111304   4436   3404 S   0.0  0.2   0:00.00 sshd: [ac+
 63073 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 63104 nigeria   20   0  397064   4476   2352 S   0.0  0.2   0:00.00 php-fpm: +
 63105 root      20   0  162436   5836   4340 S   0.0  0.2   0:00.01 sshd: roo+
 63106 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: roo+
 63133 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 63142 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 63144 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 63145 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 63146 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 63147 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 63148 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 63149 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 63150 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 63151 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 63152 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 63153 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 63154 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 63156 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 63170 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 63171 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 63172 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 63173 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 63174 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 63176 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 63177 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 63181 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 63182 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 63183 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 63184 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 63185 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 63187 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 63189 root      20   0  188212  11084   5148 S   0.0  0.5   0:00.01 /usr/loca+
 63196 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 63200 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 63201 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 63202 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 63260 root      20   0  160224   2368   1636 S   0.0  0.1   0:00.00 top -n 2 +
 63292 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 63298 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 63299 cloudw    20   0  280784  10984   7600 R   0.0  0.5   0:00.00 /opt/cpan+
 63300 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov10   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov10   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov10   0:16  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov10   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    Nov10   0:31  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov10   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [kauditd]
root        231  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ata_sff]
root        245  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_0]
root        246  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_0]
root        247  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [scsi_eh_1]
root        248  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ttm_swap]
root        260  0.0  0.0      0     0 ?        S<   Nov10   0:03  \_ [kworker/1:1H]
root        265  0.0  0.0      0     0 ?        S<   Nov10   0:02  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov10   0:03  \_ [loop0]
root        711  0.0  0.0      0     0 ?        S    Nov10   0:00  \_ [jbd2/loop0-8]
root        712  0.0  0.0      0     0 ?        S<   Nov10   0:00  \_ [ext4-rsv-conver]
root      28672  0.0  0.0      0     0 ?        S    02:57   0:00  \_ [kworker/1:3]
root      40431  0.0  0.0      0     0 ?        S    03:12   0:00  \_ [kworker/0:4]
root      43062  0.0  0.0      0     0 ?        S    03:15   0:00  \_ [kworker/u200:2]
root      46358  0.0  0.0      0     0 ?        S    03:20   0:00  \_ [kworker/1:4]
root      47029  0.0  0.0      0     0 ?        S    03:21   0:00  \_ [kworker/0:0]
root      49202  0.0  0.0      0     0 ?        S    03:24   0:00  \_ [kworker/u200:1]
root      50869  0.0  0.0      0     0 ?        S    03:27   0:00  \_ [kworker/0:1]
root      52941  0.0  0.0      0     0 ?        S    03:30   0:00  \_ [kworker/1:0]
root      59071  0.0  0.0      0     0 ?        S    03:39   0:00  \_ [kworker/0:2]
root      59820  0.0  0.0      0     0 ?        S    03:40   0:00  \_ [kworker/1:1]
root      59858  0.0  0.0      0     0 ?        S    03:40   0:00  \_ [kworker/1:2]
root      62518  0.0  0.0      0     0 ?        S    03:44   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44408  3324 ?        Ss   Nov10   0:19 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.2  39496  5268 ?        Ss   Nov10   0:06 /usr/lib/systemd/systemd-journald
root        378  0.0  0.0  45376     8 ?        Ss   Nov10   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   112 ?        S<sl Nov10   0:00 /sbin/auditd
root        505  0.0  0.0  52852   348 ?        Ss   Nov10   0:00 /usr/sbin/smartd -n -q never
root        509  0.0  0.0  24992  1156 ?        Ss   Nov10   0:03 /usr/lib/systemd/systemd-logind
root        512  0.0  0.0  21540   344 ?        Ss   Nov10   0:00 /usr/sbin/irqbalance --foreground
root        517  0.0  0.1 224148  4524 ?        Ss   Nov10   0:00 queueprocd - waiting up to 60s to process a task
root        518  0.0  0.0 152780    80 ?        Ss   Nov10   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
dbus        519  0.0  0.0  57028  1388 ?        Ss   Nov10   0:07 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         521  0.0  0.0  69256     8 ?        Ss   Nov10   0:00 /sbin/rpcbind -w
nscd        522  0.0  0.0 1062080 1488 ?        Ssl  Nov10   0:10 /usr/sbin/nscd
root        535  0.0  0.0   4388     4 ?        Ss   Nov10   0:00 /usr/sbin/acpid
polkitd     541  0.0  0.0 610540   928 ?        Ssl  Nov10   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        556  0.0  0.0 195208     0 ?        Ssl  Nov10   0:00 /usr/sbin/gssproxy -D
root        576  0.0  0.0 124480   420 ?        Ss   Nov10   0:00 /usr/sbin/crond -n
root      48267  0.0  0.0 183052     0 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      48316  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      48334  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 4h 14m
root      63142  0.0  0.0 183048  2148 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      63177  0.0  0.0 113284  1212 ?        Ss   03:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      63196  0.0  0.0 108052   356 ?        S    03:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      63202  0.0  0.0 113288  1516 ?        S    03:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      63302  0.0  0.0 153840  2092 ?        R    03:45   0:00  |               \_ ps auxf
root      63144  0.0  0.0 183048  2148 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      63182  0.0  0.0  20164   804 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      63145  0.0  0.0 183048  2148 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      63173  0.0  0.0  20164   988 ?        Ss   03:45   0:00  |   \_ jailshell (cloudsms) [63298] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  63298  0.0  0.0  20164   256 ?        S    03:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  63300  0.0  0.0 113284  1212 ?        S    03:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
cloudsms  63301  0.0  0.6 400652 15676 ?        S    03:45   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue2.php
root      63146  0.0  0.0 183048  2148 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      63181  0.0  0.0  20164   804 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      63147  0.0  0.0 183048  2144 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      63176  0.0  0.0  20164   808 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      63148  0.0  0.0 183048  2144 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      63185  0.0  0.0  20164   804 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      63149  0.0  0.0 183048  2144 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      63174  0.0  0.0  20164   808 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      63150  0.0  0.0 183048  2140 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      63187  0.0  0.0  20164   804 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      63151  0.0  0.0 183048  2140 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      63172  0.0  0.0  20164   808 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      63152  0.0  0.0 183048  2140 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      63184  0.0  0.0  20164   804 ?        Ss   03:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      63153  0.0  0.0 183048  2140 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      63170  0.0  0.0 113284  1212 ?        Ss   03:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      63189  0.0  0.4 188212 11084 ?        S    03:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      63260  0.0  0.0 160224  2368 ?        S    03:45   0:00  |           \_ top -n 2 -b -c
root      63154  0.0  0.0 183048  2144 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      63183  0.0  0.0  20164   968 ?        Ss   03:45   0:00  |   \_ jailshell (pactpay) [63200] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   63200  0.0  0.0  20164   264 ?        S    03:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   63212  0.0  0.7 476724 17484 ?        S    03:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      63156  0.0  0.0 183048  2140 ?        S    03:45   0:00  \_ /usr/sbin/CROND -n
root      63171  0.0  0.0  20164   964 ?        Ss   03:45   0:00      \_ jailshell (nigeria) [63201] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   63201  0.0  0.0  20164   256 ?        S    03:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   63205  0.0  0.6 400652 15940 ?        S    03:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov10   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296     4 tty1     Ss+  Nov10   0:00 /sbin/agetty --noclear tty1 linux
root        592  0.0  0.0 114704     0 ttyS0    Ss+  Nov10   0:00 /bin/bash
mailnull    626  0.0  0.0  89116   544 ?        Ss   Nov10   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  62945  0.0  0.1  89304  4156 ?        S    03:44   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    915  0.0  0.3 114016  9084 ?        Ssl  Nov10   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    916  0.0  0.0  14068     0 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    921  0.0  0.0 112524    40 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        922  0.0  0.0 153404   220 ?        Ss   Nov10   0:00 pure-ftpd (SERVER)
root        923  0.0  0.0 111304   356 ?        Ss   Nov10   0:01 /usr/sbin/sshd -D
root      62625  0.0  0.1 111304  4268 ?        Ss   03:44   0:00  \_ sshd: [accepted]
root      62626  0.0  0.1 111304  4268 ?        Ss   03:44   0:00  \_ sshd: [accepted]
sshd      62641  0.0  0.1 115644  2628 ?        S    03:44   0:00  |   \_ sshd: [net]
root      62950  0.0  0.1 111304  4272 ?        Ss   03:44   0:00  \_ sshd: [accepted]
sshd      62953  0.0  0.1 115644  2628 ?        S    03:44   0:00  |   \_ sshd: [net]
root      63072  0.0  0.1 111304  4436 ?        Ss   03:44   0:00  \_ sshd: [accepted]
sshd      63073  0.0  0.1 115644  2628 ?        S    03:44   0:00  |   \_ sshd: [net]
root      63105  0.2  0.2 162436  5836 ?        Ss   03:44   0:00  \_ sshd: root [priv]
sshd      63106  0.0  0.1 115644  2632 ?        S    03:44   0:00      \_ sshd: root [net]
root        924  0.0  0.0  51508   460 ?        Ss   Nov10   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1070  0.0  0.0  46912  2204 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1071  0.0  0.0  47648  2276 ?        S    Nov10   0:00  \_ dovecot/imap-login
dovecot    1072  0.0  0.0  10320   380 ?        S    Nov10   0:00  \_ dovecot/anvil
root       1073  0.0  0.0  10452   508 ?        S    Nov10   0:00  \_ dovecot/log
dovenull   1074  0.0  0.0  46912  1964 ?        S    Nov10   0:00  \_ dovecot/pop3-login
dovenull   1075  0.0  0.0  47812  2376 ?        S    Nov10   0:00  \_ dovecot/imap-login
root       1078  0.0  0.0  24528  1848 ?        S    Nov10   0:00  \_ dovecot/config
dovecot    1084  0.0  0.0  13568   656 ?        S    Nov10   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180  1456 ?        S    Nov10   0:00  \_ dovecot/auth
cloudsms  62003  0.0  0.2  61804  6140 ?        S    03:43   0:00  \_ dovecot/lmtp
root      62940  0.0  0.1  41052  2728 ?        S    03:44   0:00  \_ dovecot/auth -w
root        925  0.0  0.0 572372   700 ?        Ssl  Nov10   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        926  0.0  0.0 445028     0 ?        Ss   Nov10   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
telegraf    927  0.0  1.3 5654048 33624 ?       SLsl Nov10   0:07 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    928  0.0  0.0 342400     0 ?        Ssl  Nov10   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
systuser    930  0.0  0.0 111608    60 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    939  0.0  0.0  10132     0 ?        Ssl  Nov10   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        945  0.0  0.1 249168  3300 ?        Ssl  Nov10   0:03 /usr/sbin/rsyslogd -n
root        946  0.0  0.2 261824  6268 ?        Ss   Nov10   0:03 cpsrvd (SSL) - waiting for connections                   
root      63133  0.0  0.0      0     0 ?        Z    03:44   0:00  \_ [cpaneld - servi] <defunct>
named       954  0.0  1.0 784392 24860 ?        Ssl  Nov10   0:08 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        965  0.0  0.0 385496   380 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
cpanelc+    972  0.0  0.1  10564  3496 ?        Ss   Nov10   0:12 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        973  0.0  0.0 397344  1872 ?        Ss   Nov10   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   63104  0.0  0.1 397064  4476 ?        S    03:44   0:00  \_ php-fpm: pool nigeriadecide_org
root        975  0.0  0.0 392856   332 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        979  0.0  0.0 436392   296 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        980  0.3 19.1 1901588 463596 ?      Ssl  Nov10   0:50 /usr/local/cpanel/3rdparty/bin/clamd -F
root        991  0.0  0.0 386112   364 ?        Ss   Nov10   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser   1112  0.0  0.1 157704  2932 ?        S    Nov10   0:00 SonarPush 0.6.12 [sleeping]
root       1127  0.0  0.1 248312  2704 ?        Ss   Nov10   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7555  0.0  3.8 269756 94288 ?        S    00:03   0:03  \_ spamd child
root       7556  0.0  0.0 248312  1216 ?        S    00:03   0:00  \_ spamd child
wp-tool+   1157  0.0  0.1 387556  2500 ?        Ss   Nov10   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1159  0.0  0.3 410452  9380 ?        Ss   Nov10   0:11 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1210  0.0  0.3 209268  8008 ?        Ss   Nov10   0:01 tailwatchd
root       1211  0.0  0.0 183900    16 ?        Ss   Nov10   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1213  0.0  0.0 167452  1216 ?        Ss   Nov10   0:00 dnsadmin - dormant mode
root       1667  0.0  0.0 299272   488 ?        Ss   Nov10   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1700  0.0  0.0 130416  1356 ?        SN   Nov10   0:00 cpanellogd - sleeping for logs
mysql      1757  1.5  9.2 1462284 224164 ?      Sl   Nov10   3:37 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1945  0.0  0.1 267016  4768 ?        Ss   Nov10   0:01 /usr/sbin/httpd -k start
root       1949  0.0  0.0  12844   324 ?        S    Nov10   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1950  0.0  0.0  12732   244 ?        S    Nov10   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1951  0.0  0.0  12880   344 ?        S    Nov10   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1975  0.0  0.0  53252     4 ?        S    Nov10   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    33932  0.1  0.5 277736 12928 ?        S    03:03   0:03  \_ /usr/sbin/httpd -k start
nobody    44563  0.1  0.5 277672 13340 ?        S    03:17   0:02  \_ /usr/sbin/httpd -k start
nobody    45402  0.1  0.5 277612 12360 ?        S    03:18   0:02  \_ /usr/sbin/httpd -k start
nobody    49197  0.1  0.7 277800 17848 ?        S    03:24   0:01  \_ /usr/sbin/httpd -k start
nobody    49250  0.1  0.8 277932 19584 ?        S    03:24   0:01  \_ /usr/sbin/httpd -k start
nobody    50391  0.1  0.8 277928 19856 ?        S    03:26   0:01  \_ /usr/sbin/httpd -k start
nobody    50412  0.1  0.8 277808 19704 ?        S    03:26   0:01  \_ /usr/sbin/httpd -k start
nobody    52128  0.1  0.8 277996 19740 ?        S    03:28   0:01  \_ /usr/sbin/httpd -k start
nobody    53101  0.1  0.7 277556 19284 ?        S    03:30   0:01  \_ /usr/sbin/httpd -k start
nobody    54076  0.1  0.7 277800 19208 ?        S    03:31   0:01  \_ /usr/sbin/httpd -k start
nobody    55990  0.1  0.7 277800 19188 ?        S    03:34   0:01  \_ /usr/sbin/httpd -k start
nobody    56876  0.1  0.7 277932 19164 ?        S    03:36   0:00  \_ /usr/sbin/httpd -k start
nobody    57126  0.1  0.7 277800 19280 ?        S    03:36   0:00  \_ /usr/sbin/httpd -k start
nobody    57460  0.1  0.7 277800 18740 ?        S    03:37   0:00  \_ /usr/sbin/httpd -k start
nobody    57716  0.1  0.7 277600 19052 ?        S    03:37   0:00  \_ /usr/sbin/httpd -k start
nobody    62230  0.1  0.7 277808 17472 ?        S    03:43   0:00  \_ /usr/sbin/httpd -k start
nobody    62245  0.1  0.7 277876 17820 ?        S    03:43   0:00  \_ /usr/sbin/httpd -k start
nobody    62262  0.1  0.7 277800 17120 ?        S    03:43   0:00  \_ /usr/sbin/httpd -k start
cloudw    63299  0.0  0.6 284780 16596 ?        Sl   03:45   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    62263  0.1  0.7 277800 17740 ?        S    03:43   0:00  \_ /usr/sbin/httpd -k start
nobody    62607  0.1  0.7 277812 17208 ?        S    03:44   0:00  \_ /usr/sbin/httpd -k start
oysipao+   4853  0.0  0.0   3148     8 ?        Ss   00:00   0:00 [kworker]
oysipao+   4873  0.0  0.0   3152    36 ?        S    00:00   0:00  \_ [kworker]
root       5071  0.0  0.3 181900  7264 ?        Ss   00:00   0:11 lfd - sleeping
root      31614  0.0  0.0 1275844  572 ?        Ssl  03:00   0:00 /usr/bin/cspdaemon
root      31652  0.0  0.0 1277312 2356 ?        Ssl  03:00   0:00 /usr/bin/checkstatus
root      39472  0.0  0.0 132964     4 ?        SN   03:11   0:00 ConfigServer Version Check
root      39483  0.0  0.0 108056     0 ?        SN   03:11   0:00  \_ sleep 12937
## mysql stats
Uptime: 13685  Threads: 3  Questions: 1409783  Slow queries: 0  Opens: 6565  Flush tables: 1  Open tables: 2000  Queries per second avg: 103.016
*************************** 1. row ***************************
     Id: 18275
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 18276
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 18285
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 110.249.201.211 TIME_WAIT
      1 110.249.201.221 TIME_WAIT
      1 110.249.201.245 TIME_WAIT
      1 110.249.201.91 TIME_WAIT
      1 110.249.201.9 TIME_WAIT
      1 185.197.194.84 TIME_WAIT
      1 185.244.9.199 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 66.249.70.32 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 104.248.90.230 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Tuesday, 11-Nov-2025 03:45:01 WAT
   Restart Time: Monday, 10-Nov-2025 23:57:01 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 3 hours 47 minutes 59 seconds
   Server load: 0.25 0.29 0.36
   Total accesses: 66737 - Total Traffic: 1.7 GB - Total Duration: 34978932
   CPU Usage: u17.15 s7.67 cu898.88 cs689.15 - 11.8% CPU load
   4.88 requests/sec - 133.8 kB/second - 27.4 kB/request - 524.131 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

_RKWW_K___W_KRKK_K.R._..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS  Req   Dur   Conn  Child  Slot      Client      Protocol          VHost                                       Request
   0-0  49197 0/287/3482  _ 7.49  1    266 1727681 0.0   6.73  86.82  66.249.70.38    http/1.1 support.cloudware.ng:443 GET /?c=150792613 HTTP/1.1
   1-0  44563 0/541/3575  R 11.31 19   402 1745968 0.0   10.37 91.03  158.140.165.3   http/1.1
   2-0  49250 1/344/3604  K 7.99  1    299 1720087 35.5  7.28  80.98  66.249.70.32    http/1.1 support.cloudware.ng:443 GET /?c=1735231991 HTTP/1.1
   3-0  62230 0/30/3302   W 0.79  0    0   1676964 0.0   0.77  76.84  ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   4-0  50391 2/282/3468  W 8.07  0    0   2592196 67.6  9.06  117.38 66.249.70.36    http/1.1 support.cloudware.ng:443 GET /?c=2416447429 HTTP/1.1
   5-0  52128 0/278/3470  _ 7.61  0    0   1811469 0.0   6.76  84.38  ::1             http/1.1 chs1.nescrow.com.ng:80   GET //whm-server-status HTTP/1.0
   6-0  54076 15/237/3298 K 5.97  0    7   1789091 79.9  5.45  97.09  144.76.19.157   http/1.1 nigeriadecide.org:443    GET /polling_unit_category.php?state=Akwa%20ibom&lga=Ibesikpo%2
   7-0  57460 0/163/3571  _ 4.43  0    295 1670513 0.0   3.85  92.16  66.249.70.34    http/1.1 support.cloudware.ng:443 GET /?c=2698634683 HTTP/1.1
   8-0  62245 0/23/3193   _ 0.47  0    0   1652291 0.0   0.54  94.40  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80   GET /whm-server-status HTTP/1.0
   9-0  53101 0/361/3251  _ 6.25  1    1   1649729 0.0   5.89  77.08  127.0.0.1       http/1.1 chs1.nescrow.com.ng:80   GET / HTTP/1.1
   10-0 62262 0/26/3236   W 0.68  0    0   1596979 0.0   0.73  90.95  66.249.70.38    http/1.1 support.cloudware.ng:443 GET /?c=2448293777 HTTP/1.1
   11-0 55990 0/198/3234  _ 5.44  1    279 1676140 0.0   4.61  95.74  66.249.70.39    http/1.1 support.cloudware.ng:443 GET /?c=2609560480 HTTP/1.1
   12-0 62263 6/22/2629   K 0.46  0    270 1436380 187.0 0.49  67.98  66.249.70.35    http/1.1 support.cloudware.ng:443 GET /?c=739502915 HTTP/1.1
   13-0 57716 0/123/2246  R 2.49  54   25  1095564 0.0   2.05  60.18  110.249.201.135 http/1.1
   14-0 56876 1/196/2514  K 3.69  2    263 1356049 35.1  2.98  59.90  66.249.70.33    http/1.1 support.cloudware.ng:443 GET /?c=1172353383 HTTP/1.1
   15-0 57126 2/154/1891  K 3.99  1    265 953125  64.8  3.54  44.53  66.249.70.34    http/1.1 support.cloudware.ng:443 GET /?c=4229518796 HTTP/1.1
   16-0 50412 0/308/2901  _ 7.54  0    25  1522663 0.0   6.69  70.37  52.71.216.196   http/1.1 nigeriadecide.org:443    GET /polling_unit_category.php/2019elections/images/assets/css/
   17-0 62607 1/11/2577   K 0.28  2    321 1335851 35.6  0.30  68.48  66.249.70.37    http/1.1 support.cloudware.ng:443 GET /?c=437514641 HTTP/1.1
   18-0 -     0/0/1874    . 0.00  379  0   930003  0.0   0.00  48.32  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   19-0 45402 0/360/1756  R 10.18 109  1   858655  0.0   16.33 48.99  197.211.59.56   http/1.1
   20-0 -     0/0/1047    . 0.00  1064 0   525007  0.0   0.00  24.62  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   21-0 33932 0/701/1504  _ 18.03 0    269 821923  0.0   16.90 36.01  66.249.70.39    http/1.1 support.cloudware.ng:443 GET /?c=3970591021 HTTP/1.1
   22-0 -     0/0/394     . 0.00  2930 0   194426  0.0   0.00  10.27  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   23-0 -     0/0/427     . 0.00  3809 0   218307  0.0   0.00  10.92  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   24-0 -     0/0/493     . 0.00  7368 0   234804  0.0   0.00  11.14  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   25-0 -     0/0/201     . 0.00  7447 0   83585   0.0   0.00  3.46   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   26-0 -     0/0/132     . 0.00  7441 0   63977   0.0   0.00  3.10   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   27-0 -     0/0/725     . 0.00  5667 0   427451  0.0   0.00  20.36  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   28-0 -     0/0/117     . 0.00  7230 0   78945   0.0   0.00  4.86   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   29-0 -     0/0/496     . 0.00  6072 0   299300  0.0   0.00  13.92  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   30-0 -     0/0/67      . 0.00  7231 0   36690   0.0   0.00  1.77   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   31-0 -     0/0/239     . 0.00  7408 0   99496   0.0   0.00  4.64   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   32-0 -     0/0/4       . 0.00  7444 0   178     0.0   0.00  0.07   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   33-0 -     0/0/2       . 0.00  7445 0   3       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   34-0 -     0/0/3       . 0.00  7446 0   4       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   35-0 -     0/0/3       . 0.00  7440 0   6       0.0   0.00  0.01   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   36-0 -     0/0/13      . 0.00  7401 0   5697    0.0   0.00  0.29   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   37-0 -     0/0/3       . 0.00  7439 0   236     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   38-0 -     0/0/281     . 0.00  6660 0   158846  0.0   0.00  19.22  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   39-0 -     0/0/4       . 0.00  7442 0   264     0.0   0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   40-0 -     0/0/725     . 0.00  5027 0   450086  0.0   0.00  35.37  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   41-0 -     0/0/4       . 0.00  7432 0   1003    0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   42-0 -     0/0/63      . 0.00  7210 0   33019   0.0   0.00  1.62   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   43-0 -     0/0/159     . 0.00  6838 0   93527   0.0   0.00  19.16  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   44-0 -     0/0/9       . 0.00  7427 0   4423    0.0   0.00  0.20   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   45-0 -     0/0/18      . 0.00  7371 0   7447    0.0   0.00  0.41   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   46-0 -     0/0/13      . 0.00  7397 0   5454    0.0   0.00  0.65   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   47-0 -     0/0/513     . 0.00  5993 0   335229  0.0   0.00  11.08  ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
   48-0 -     0/0/6       . 0.00  7434 0   2176    0.0   0.00  0.12   ::1             http/1.1 chs1.nescrow.com.ng:80   OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 790
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 13 seconds, (range: 1...63)
   index usage: 13%, cache usage: 19%
   total entries stored since starting: 36531
   total entries replaced since starting: 0
   total entries expired since starting: 35714
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 151 miss
   total removes since starting: 27 hit, 6 miss
Youez - 2016 - github.com/yon3zu
LinuXploit