403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.00.39.txt
 ## swap threshold exceeded
## server overview
2025-11-13.00.39 load[0] mem[66/63] mysql[1/8] httpd[17]
              total        used        free      shared  buff/cache   available
Mem:           2363        1436          83          64         844         677
Swap:          1999        1356         643
 00:39:01 up  4:36,  0 users,  load average: 0.34, 0.31, 0.30
## system overview
top - 00:39:01 up  4:36,  0 users,  load average: 0.34, 0.31, 0.30
Tasks: 219 total,   5 running, 212 sleeping,   0 stopped,   2 zombie
%Cpu(s): 53.1 us, 46.9 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    80284 free,  1507776 used,   832240 buff/cache
KiB Swap:  2047996 total,   658940 free,  1389056 used.   656344 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 252072   3568 S  31.2 10.4   3:53.36 /usr/sbin+
  5197 root      20   0  144648   7924   2540 R  18.8  0.3   0:00.03 /usr/loca+
  5206 nigeria   20   0  400652  15940  10220 S  12.5  0.7   0:00.02 /opt/cpan+
    36 root      20   0       0      0      0 S   6.2  0.0   0:13.64 [kswapd0]
  5202 pactpay   20   0  408848  15936  10392 S   6.2  0.7   0:00.01 /opt/cpan+
  5212 robocal+  20   0       0      0      0 R   6.2  0.0   0:00.01 [php]
     1 root      20   0   44428   3544   1608 S   0.0  0.1   0:23.60 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.06 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.76 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:16.55 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.71 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.00 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.35 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:01.53 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:01.47 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.76 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   332 nobody    20   0  277732  19328   3880 S   0.0  0.8   0:00.45 /usr/sbin+
   338 nobody    20   0  277932  20040   4092 S   0.0  0.8   0:00.46 /usr/sbin+
   357 root      20   0   39500   4316   4076 S   0.0  0.2   0:09.44 /usr/lib/+
   382 root      20   0   45360    512    368 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    556    428 S   0.0  0.0   0:01.47 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1528    896 S   0.0  0.1   0:03.76 /usr/lib/+
   500 root      20   0   21540    492    380 S   0.0  0.0   0:00.36 /usr/sbin+
   501 polkitd   20   0  612240   3220    744 S   0.0  0.1   0:02.23 /usr/lib/+
   503 root      20   0  152780    288    244 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   5792   1052 S   0.0  0.2   0:00.24 queueproc+
   507 root      20   0   52852    512    408 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58728   1436    712 S   0.0  0.1   0:08.48 /usr/bin/+
   519 nscd      20   0 1062080   1624    828 S   0.0  0.1   0:13.14 /usr/sbin+
   521 rpc       20   0   69256    160     56 S   0.0  0.0   0:00.01 /sbin/rpc+
   529 root      20   0    4388    156    152 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208    112    112 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    556    424 S   0.0  0.0   0:00.46 /usr/sbin+
   577 root      20   0   24208    196    172 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704    216    216 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296    216    212 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   4012    984 S   0.0  0.2   0:00.63 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   661 nobody    20   0  277924  19364   3900 S   0.0  0.8   0:00.43 /usr/sbin+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.17 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     76      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068     52      0 S   0.0  0.0   0:00.00 /usr/loca+
   929 systuser  20   0  114016  14416   2828 S   0.0  0.6   0:04.04 /usr/loca+
   930 root      20   0  153404    440    356 S   0.0  0.0   0:00.35 pure-ftpd+
   931 root      20   0   51508    632    472 S   0.0  0.0   0:00.24 /usr/sbin+
   932 root      20   0  572372   1024    436 S   0.0  0.0   0:01.48 /usr/bin/+
   933 telegraf  20   0 5654048  36692   5904 S   0.0  1.5   0:09.21 /usr/loca+
   935 memcach+  20   0  342400     76     76 S   0.0  0.0   0:00.36 /usr/bin/+
   939 root      20   0  111304    560    460 S   0.0  0.0   0:02.06 /usr/sbin+
   940 systuser  20   0   10132     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028   2744   2744 S   0.0  0.1   0:00.05 sw-engine+
   950 root      20   0  386112    804    596 S   0.0  0.0   0:00.49 php-fpm: +
   961 named     20   0  637992  34556   2052 S   0.0  1.4   0:09.12 /usr/sbin+
   964 root      20   0  265552   4632   3688 S   0.0  0.2   0:04.40 /usr/sbin+
   981 root      20   0  436392  11232  11144 S   0.0  0.5   0:00.55 php-fpm: +
   984 root      20   0  385496    780    568 S   0.0  0.0   0:00.46 php-fpm: +
   985 root      20   0  261288   6968   1828 S   0.0  0.3   0:02.57 cpsrvd (S+
   989 root      20   0  392856    852    664 S   0.0  0.0   0:00.47 php-fpm: +
   992 root      20   0 1763048 261452    636 S   0.0 10.8   0:15.42 /usr/loca+
  1000 root      20   0  397344   2928    760 S   0.0  0.1   0:02.21 php-fpm: +
  1006 cpanelc+  20   0   10604   3652   2376 S   0.0  0.2   0:13.40 /usr/loca+
  1075 dovenull  20   0   46984   2744   1964 S   0.0  0.1   0:00.35 dovecot/p+
  1076 dovenull  20   0   48324   3740   1928 S   0.0  0.2   0:00.28 dovecot/i+
  1077 dovecot   20   0   10320    508    388 S   0.0  0.0   0:00.09 dovecot/a+
  1078 root      20   0   10452    540    356 S   0.0  0.0   0:00.21 dovecot/l+
  1079 dovenull  20   0   46984   2744   1932 S   0.0  0.1   0:00.25 dovecot/p+
  1080 dovenull  20   0   47824   3372   2056 S   0.0  0.1   0:00.19 dovecot/i+
  1084 root      20   0   24396   2532    588 S   0.0  0.1   0:00.11 dovecot/c+
  1088 dovecot   20   0   13568    596    392 S   0.0  0.0   0:00.03 dovecot/s+
  1121 systuser  20   0  157704   2968    960 S   0.0  0.1   0:00.09 SonarPush+
  1166 dovecot   20   0   41260   1604   1032 S   0.0  0.1   0:00.63 dovecot/a+
  1172 root      20   0  248152 118252   1840 S   0.0  4.9   0:04.81 /usr/loca+
  1173 wp-tool+  20   0  387556   3828   1772 S   0.0  0.2   0:00.20 /usr/bin/+
  1174 wp-tool+  20   0  410616  28756   1776 S   0.0  1.2   0:13.74 /usr/bin/+
  1203 nobody    20   0  277924  19752   3972 S   0.0  0.8   0:00.38 /usr/sbin+
  1232 root      20   0  209372  11884   2140 S   0.0  0.5   0:02.14 tailwatchd
  1234 root      20   0  167452   1472    872 S   0.0  0.1   0:00.26 dnsadmin +
  1237 root      20   0  183900   6088   2856 S   0.0  0.3   0:00.83 cpdavd - +
  1642 root      20   0  299272    948    576 S   0.0  0.0   0:00.44 php-fpm: +
  1702 root      38  18  130416   1536    804 S   0.0  0.1   0:00.03 cpanellog+
  2059 root      20   0  267036   8568    816 S   0.0  0.4   0:01.30 /usr/sbin+
  2063 root      20   0   12816    576    376 S   0.0  0.0   0:01.90 /usr/loca+
  2064 root      20   0   12732    444    364 S   0.0  0.0   0:01.61 /usr/loca+
  2065 root      20   0   12836    548    368 S   0.0  0.0   0:01.78 /usr/loca+
  2089 root      20   0   53268    264    264 S   0.0  0.0   0:00.05 /usr/loca+
  2603 nobody    20   0  277560  19284   3908 S   0.0  0.8   0:00.35 /usr/sbin+
  2961 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  2963 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  3078 nobody    20   0  277932  19240   3776 S   0.0  0.8   0:00.18 /usr/sbin+
  3334 nobody    20   0  277784  19232   3816 S   0.0  0.8   0:00.31 /usr/sbin+
  4557 nobody    20   0  277720  19028   3656 S   0.0  0.8   0:00.06 /usr/sbin+
  4573 nobody    20   0  277784  18924   3552 S   0.0  0.8   0:00.05 /usr/sbin+
  4593 root      20   0   41052   2732   2088 S   0.0  0.1   0:00.00 dovecot/a+
  4730 nobody    20   0  277788  18868   3452 S   0.0  0.8   0:00.03 /usr/sbin+
  4742 nobody    20   0  277784  18832   3444 S   0.0  0.8   0:00.06 /usr/sbin+
  4758 nobody    20   0  277784  18476   3112 S   0.0  0.8   0:00.04 /usr/sbin+
  4761 nobody    20   0  277784  17440   2136 S   0.0  0.7   0:00.04 /usr/sbin+
  4833 mailnull  20   0   89500   4908   1748 S   0.0  0.2   0:00.00 /usr/sbin+
  4924 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
  4970 nigeria   20   0  398120  10192   5104 S   0.0  0.4   0:00.05 php-fpm: +
  4998 nigeria   20   0  400412  13952   5888 S   0.0  0.6   0:00.23 php-fpm: +
  5021 nobody    20   0  277348  18104   3240 S   0.0  0.7   0:00.00 /usr/sbin+
  5026 nobody    20   0  277092  16284   1652 S   0.0  0.7   0:00.00 /usr/sbin+
  5027 nobody    20   0  277784  17428   2124 S   0.0  0.7   0:00.02 /usr/sbin+
  5040 nobody    20   0  277784  17360   2120 S   0.0  0.7   0:00.01 /usr/sbin+
  5041 nobody    20   0  277784  17360   2120 S   0.0  0.7   0:00.01 /usr/sbin+
  5042 nobody    20   0  277784  17360   2120 S   0.0  0.7   0:00.01 /usr/sbin+
  5043 nobody    20   0  277924  18728   3388 S   0.0  0.8   0:00.02 /usr/sbin+
  5084 nobody    20   0  277784  17360   2120 S   0.0  0.7   0:00.01 /usr/sbin+
  5099 healtho+  20   0  460468  71700   4496 S   0.0  3.0   0:00.80 php-fpm: +
  5128 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  5139 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
  5140 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
  5141 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5142 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
  5143 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
  5144 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
  5145 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
  5146 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
  5147 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
  5148 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
  5149 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
  5150 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
  5151 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5152 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  5153 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  5154 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  5155 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  5156 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  5157 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
  5158 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
  5180 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
  5181 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  5182 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  5183 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  5184 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  5185 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  5186 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  5187 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  5188 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  5189 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  5190 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  5191 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  5192 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  5193 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  5195 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  5201 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  5203 saboakin  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  5204 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  5205 saboakin  20   0  400652  15412  10000 S   0.0  0.6   0:00.00 /opt/cpan+
  5207 robocal+  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
  5208 cloudsms  20   0   20164    260      0 R   0.0  0.0   0:00.00 jailshell+
  5209 cloudw    20   0  351952  15228  10128 S   0.0  0.6   0:00.00 /opt/cpan+
  5210 robocal+  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
  5211 cloudsms  20   0       0      0      0 Z   0.0  0.0   0:00.00 [bash] <d+
  7883 root      20   0  306476 169424   2496 S   0.0  7.0   0:02.26 spamd chi+
  7886 root      20   0  248152 116852    476 S   0.0  4.8   0:00.00 spamd chi+
 36095 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 47111 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152    428      0 S   0.0  0.0   0:00.23 [kworker]
 71989 worencom  20   0   38492   2792   1824 S   0.0  0.1   0:00.01 dovecot/i+
 76167 root      20   0  181264  29228   2344 S   0.0  1.2   0:02.33 lfd - sle+
 76469 root      20   0 1276100  10716    596 S   0.0  0.4   0:00.07 /usr/bin/+
 76506 root      20   0 1277312  11628    596 S   0.0  0.5   0:00.07 /usr/bin/+
 77696 nobody    20   0  277728  21052   4684 S   0.0  0.9   0:03.62 /usr/sbin+
 78808 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 82617 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 89673 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 94118 nobody    20   0  277720  20084   4440 S   0.0  0.8   0:01.76 /usr/sbin+
 94590 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 94656 nobody    20   0  277784  19912   4300 S   0.0  0.8   0:01.45 /usr/sbin+
 96275 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 96276 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 97236 nobody    20   0  277676  20416   4292 S   0.0  0.8   0:01.22 /usr/sbin+
 97247 nobody    20   0  277924  19984   4216 S   0.0  0.8   0:01.09 /usr/sbin+
100159 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
100219 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
102191 nobody    20   0  277720  19312   3884 S   0.0  0.8   0:00.55 /usr/sbin+
102397 nobody    20   0  277736  19516   4040 S   0.0  0.8   0:00.49 /usr/sbin+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov12   0:16  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov12   0:13  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:01  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:01  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      36095  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kworker/u200:2]
root      78808  0.0  0.0      0     0 ?        S    00:03   0:00  \_ [kworker/0:3]
root      82617  0.0  0.0      0     0 ?        S    00:08   0:00  \_ [kworker/1:3]
root      89673  0.0  0.0      0     0 ?        S    00:17   0:00  \_ [kworker/0:4]
root      94590  0.0  0.0      0     0 ?        S    00:23   0:00  \_ [kworker/0:2]
root      96275  0.0  0.0      0     0 ?        S    00:25   0:00  \_ [kworker/1:2]
root      96276  0.0  0.0      0     0 ?        S    00:25   0:00  \_ [kworker/u200:0]
root     100159  0.0  0.0      0     0 ?        S    00:30   0:00  \_ [kworker/1:0]
root     100219  0.0  0.0      0     0 ?        S    00:30   0:00  \_ [kworker/0:0]
root       2961  0.0  0.0      0     0 ?        S    00:36   0:00  \_ [kworker/1:1]
root       2963  0.0  0.0      0     0 ?        S    00:36   0:00  \_ [kworker/1:4]
root          1  0.1  0.1  44428  3544 ?        Ss   Nov12   0:23 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.1  39500  4316 ?        Ss   Nov12   0:09 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360   512 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   556 ?        S<sl Nov12   0:01 /sbin/auditd
root        497  0.0  0.0  24896  1528 ?        Ss   Nov12   0:03 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   492 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.1 612240  3220 ?        Ssl  Nov12   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780   288 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.2 224148  5792 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   512 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58728  1436 ?        Ss   Nov12   0:08 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1624 ?        Ssl  Nov12   0:13 /usr/sbin/nscd
rpc         521  0.0  0.0  69256   160 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388   156 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208   112 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   556 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root       5141  0.0  0.0 183048  2140 ?        S    00:39   0:00  \_ /usr/sbin/CROND -n
root       5156  0.0  0.0 113284  1212 ?        Ss   00:39   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       5157  0.0  0.0 108052   360 ?        S    00:39   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       5158  0.0  0.0 113288  1516 ?        S    00:39   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       5216  0.0  0.0 153840  2100 ?        R    00:39   0:00  |               \_ ps auxf
root       5142  0.0  0.0 183048  2148 ?        S    00:39   0:00  \_ /usr/sbin/CROND -n
root       5191  0.0  0.0  20164   808 ?        Ss   00:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       5143  0.0  0.0 183048  2148 ?        S    00:39   0:00  \_ /usr/sbin/CROND -n
root       5181  0.0  0.0  20164   808 ?        Ss   00:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       5144  0.0  0.0 183048  2148 ?        S    00:39   0:00  \_ /usr/sbin/CROND -n
root       5190  0.0  0.0  20164   808 ?        Ss   00:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       5145  0.0  0.0 183048  2148 ?        S    00:39   0:00  \_ /usr/sbin/CROND -n
root       5184  0.0  0.0  20164   804 ?        Ss   00:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root       5146  0.0  0.0 183048  2148 ?        S    00:39   0:00  \_ /usr/sbin/CROND -n
root       5183  0.0  0.0  20164   804 ?        Ss   00:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       5147  0.0  0.0 183048  2148 ?        S    00:39   0:00  \_ /usr/sbin/CROND -n
root       5188  0.0  0.0  20164   964 ?        Ss   00:39   0:00  |   \_ jailshell (cloudsms) [5208] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
cloudsms   5208  0.0  0.0      0     0 ?        R    00:39   0:00  |       \_ [jailshell]
root       5148  0.0  0.0 183048  2148 ?        S    00:39   0:00  \_ /usr/sbin/CROND -n
root       5185  0.0  0.0  20164   808 ?        Ss   00:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       5149  0.0  0.0 183048  2148 ?        S    00:39   0:00  \_ /usr/sbin/CROND -n
root       5186  0.0  0.0  20164   808 ?        Ss   00:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root       5150  0.0  0.0 183048  2148 ?        S    00:39   0:00  \_ /usr/sbin/CROND -n
root       5193  0.0  0.0  20164   804 ?        Ss   00:39   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       5151  0.0  0.0 183048  2140 ?        S    00:39   0:00  \_ /usr/sbin/CROND -n
root       5187  0.0  0.0 113284  1212 ?        Ss   00:39   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
root       5197  3.0  0.3 147888  9196 ?        R    00:39   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/clean_user_php_sessions
root       5152  0.0  0.0 183048  2144 ?        S    00:39   0:00  \_ /usr/sbin/CROND -n
root       5192  0.0  0.0  20164   964 ?        Ss   00:39   0:00  |   \_ jailshell (pactpay) [5201] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    5201  0.0  0.0  20164   260 ?        S    00:39   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    5202  1.0  0.6 476460 15968 ?        Sl   00:39   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       5153  0.0  0.0 183048  2144 ?        S    00:39   0:00  \_ /usr/sbin/CROND -n
root       5182  0.0  0.0  20164   964 ?        Ss   00:39   0:00  |   \_ jailshell (robocallscloudsm) [5207] d /home/robocallscloudsm/public_html && /usr/local/bin/php artisan schedule:run >> /dev/null 2>&1
robocal+   5207  0.0  0.0      0     0 ?        R    00:39   0:00  |       \_ [jailshell]
root       5154  0.0  0.0 183048  2140 ?        S    00:39   0:00  \_ /usr/sbin/CROND -n
root       5195  0.0  0.0  20164   968 ?        Ss   00:39   0:00  |   \_ jailshell (nigeria) [5204] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    5204  0.0  0.0  20164   260 ?        S    00:39   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    5206  2.0  0.6 400652 15940 ?        S    00:39   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root       5155  0.0  0.0 183048  2144 ?        S    00:39   0:00  \_ /usr/sbin/CROND -n
root       5189  0.0  0.0  20164   968 ?        Ss   00:39   0:00      \_ jailshell (saboakin) [5203] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin   5203  0.0  0.0      0     0 ?        D    00:39   0:00          \_ [jailshell]
root        577  0.0  0.0  24208   196 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704   216 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296   216 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  4012 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   4833  0.0  0.2  89500  4908 ?        S    00:38   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    76 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068    52 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 14416 ?        Ssl  Nov12   0:04 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   440 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   632 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.1  46984  2744 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48324  3740 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   508 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   540 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.1  46984  2744 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  47824  3372 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.1  24396  2532 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   596 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1604 ?        S    Nov12   0:00  \_ dovecot/auth
worencom  71989  0.0  0.1  38492  2792 ?        S    Nov12   0:00  \_ dovecot/imap
root       4593  0.0  0.1  41052  2732 ?        S    00:38   0:00  \_ dovecot/auth -w
root        932  0.0  0.0 572372  1024 ?        Ssl  Nov12   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.5 5654048 36692 ?       SLsl Nov12   0:09 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400    76 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   560 ?        Ss   Nov12   0:02 /usr/sbin/sshd -D
root       4924  0.0  0.1 111304  4272 ?        Ss   00:38   0:00  \_ sshd: [accepted]
root       5139  0.0  0.1 111304  4268 ?        Ss   00:39   0:00  \_ sshd: [accepted]
sshd       5140  0.0  0.1 115644  2628 ?        S    00:39   0:00      \_ sshd: [net]
systuser    940  0.0  0.0  10132    48 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268    72 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.1 445028  2744 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   804 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.4 637992 34556 ?        Ssl  Nov12   0:09 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.1 265552  4632 ?        Ssl  Nov12   0:04 /usr/sbin/rsyslogd -n
root        981  0.0  0.4 436392 11232 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   780 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.2 261288  6968 ?        Ss   Nov12   0:02 cpsrvd (SSL) - waiting for connections                   
root       5128  0.0  0.0      0     0 ?        Z    00:39   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   852 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.0 10.8 1763048 261452 ?      Ssl  Nov12   0:15 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.1 397344  2928 ?        Ss   Nov12   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria    4970  0.3  0.4 398120 10192 ?        S    00:38   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria    4998  2.0  0.5 400412 13952 ?        S    00:38   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+   5099 20.0  2.9 460468 71700 ?        S    00:38   0:00  \_ php-fpm: pool health_oyostate_gov_ng
cpanelc+   1006  0.0  0.1  10604  3652 ?        Ss   Nov12   0:13 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2968 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  4.8 248152 118252 ?       Ss   Nov12   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  7.0 306476 169424 ?       S    Nov12   0:02  \_ spamd child
root       7886  0.0  4.8 248152 116852 ?       S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3828 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  1.1 410616 28756 ?        Ss   Nov12   0:13 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.4 209372 11884 ?        Ss   Nov12   0:02 tailwatchd
root       1234  0.0  0.0 167452  1472 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  0.2 183900  6088 ?        Ss   Nov12   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1642  0.0  0.0 299272   948 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1536 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.4 10.4 1457796 252072 ?      Sl   Nov12   3:53 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.3 267036  8568 ?        Ss   Nov12   0:01 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12816   576 ?        S    Nov12   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   444 ?        S    Nov12   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12836   548 ?        S    Nov12   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268   264 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    77696  0.1  0.8 277728 21052 ?        S    00:01   0:03  \_ /usr/sbin/httpd -k start
nobody    94118  0.1  0.8 277720 20084 ?        S    00:22   0:01  \_ /usr/sbin/httpd -k start
nobody    94656  0.1  0.8 277784 19912 ?        S    00:23   0:01  \_ /usr/sbin/httpd -k start
nobody    97236  0.1  0.8 277676 20416 ?        S    00:26   0:01  \_ /usr/sbin/httpd -k start
nobody    97247  0.1  0.8 277924 19984 ?        S    00:26   0:01  \_ /usr/sbin/httpd -k start
nobody   102191  0.1  0.7 277720 19312 ?        S    00:32   0:00  \_ /usr/sbin/httpd -k start
nobody   102397  0.1  0.8 277736 19516 ?        S    00:32   0:00  \_ /usr/sbin/httpd -k start
nobody      332  0.1  0.7 277732 19328 ?        S    00:32   0:00  \_ /usr/sbin/httpd -k start
nobody      338  0.1  0.8 277932 20040 ?        S    00:32   0:00  \_ /usr/sbin/httpd -k start
nobody      661  0.1  0.8 277924 19364 ?        S    00:33   0:00  \_ /usr/sbin/httpd -k start
nobody     1203  0.1  0.8 277924 19752 ?        S    00:33   0:00  \_ /usr/sbin/httpd -k start
nobody     2603  0.1  0.7 277560 19284 ?        S    00:35   0:00  \_ /usr/sbin/httpd -k start
nobody     3078  0.1  0.7 277932 19240 ?        S    00:36   0:00  \_ /usr/sbin/httpd -k start
nobody     3334  0.2  0.7 277784 19232 ?        S    00:36   0:00  \_ /usr/sbin/httpd -k start
nobody     4557  0.1  0.7 277720 19028 ?        S    00:38   0:00  \_ /usr/sbin/httpd -k start
nobody     4573  0.1  0.7 277784 18924 ?        S    00:38   0:00  \_ /usr/sbin/httpd -k start
nobody     4730  0.0  0.7 277788 18868 ?        S    00:38   0:00  \_ /usr/sbin/httpd -k start
nobody     4742  0.1  0.7 277784 18832 ?        S    00:38   0:00  \_ /usr/sbin/httpd -k start
nobody     4758  0.1  0.7 277784 18476 ?        S    00:38   0:00  \_ /usr/sbin/httpd -k start
nobody     4761  0.1  0.7 277784 17440 ?        S    00:38   0:00  \_ /usr/sbin/httpd -k start
nobody     5021  0.0  0.7 277348 18104 ?        S    00:38   0:00  \_ /usr/sbin/httpd -k start
cloudw     5209  0.0  0.6 352096 15228 ?        S    00:39   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody     5026  0.0  0.6 277092 16284 ?        S    00:38   0:00  \_ /usr/sbin/httpd -k start
nobody     5027  0.2  0.7 277784 17428 ?        S    00:38   0:00  \_ /usr/sbin/httpd -k start
nobody     5040  0.1  0.7 277784 17360 ?        S    00:38   0:00  \_ /usr/sbin/httpd -k start
nobody     5041  0.1  0.7 277784 17360 ?        S    00:38   0:00  \_ /usr/sbin/httpd -k start
nobody     5042  0.1  0.7 277784 17360 ?        S    00:38   0:00  \_ /usr/sbin/httpd -k start
nobody     5043  0.2  0.7 277924 18728 ?        S    00:38   0:00  \_ /usr/sbin/httpd -k start
nobody     5084  0.2  0.7 277784 17360 ?        S    00:38   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47111  0.0  0.0   3148   416 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152   428 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  1.2 181264 29228 ?        Ss   00:00   0:02 lfd - sleeping
root      76469  0.0  0.4 1276100 10716 ?       Ssl  00:00   0:00 /usr/bin/cspdaemon
root      76506  0.0  0.4 1277312 11628 ?       Ssl  00:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 16562  Threads: 3  Questions: 1386614  Slow queries: 0  Opens: 5483  Flush tables: 1  Open tables: 2000  Queries per second avg: 83.722
*************************** 1. row ***************************
     Id: 19683
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 19684
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 1
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 19689
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.35 TIME_WAIT
      1 114.119.140.4 TIME_WAIT
      1 138.226.96.35 TIME_WAIT
      1 142.44.220.113 TIME_WAIT
      1 142.44.220.36 TIME_WAIT
      1 148.113.128.225 TIME_WAIT
      1 15.235.27.8 TIME_WAIT
      1 159.148.54.195 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.98 TIME_WAIT
      1 ::1 TIME_WAIT
      1 23.239.176.233 TIME_WAIT
      1 45.145.139.196 TIME_WAIT
      1 54.39.6.162 TIME_WAIT
      1 66.249.70.194 TIME_WAIT
      1 66.249.70.196 TIME_WAIT
      1 78.157.49.100 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      4 47.128.110.95 TIME_WAIT
      6 47.128.16.15 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 00:39:02 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 4 hours 35 minutes 58 seconds
   Server load: 0.34 0.31 0.30
   Total accesses: 84494 - Total Traffic: 2.3 GB - Total Duration: 41659714
   CPU Usage: u9.38 s5.01 cu1075.53 cs849.62 - 11.7% CPU load
   5.1 requests/sec - 143.3 kB/second - 28.1 kB/request - 493.049 ms/request
   18 requests currently being processed, 0 workers gracefully restarting, 10 idle workers

_R__KR_RKKKWRKKW__KK_R__K_KK....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID       Acc     M CPU    SS   Req   Dur   Conn  Child  Slot      Client     Protocol           VHost                                        Request
   0-0  4557   0/12/4254   _ 0.22  0     291 2075503 0.0   0.48  107.15 66.249.70.200  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4018027586 HTTP/1.1
   1-0  661    0/83/4229   R 1.90  53    272 1955930 0.0   1.86  104.68 66.249.70.198  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3534119322 HTTP/1.1
   2-0  102191 0/103/4151  _ 2.51  1     1   2139559 0.0   2.69  123.35 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   3-0  94656  0/263/4192  _ 6.68  0     0   2207863 0.0   6.55  125.02 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   4-0  2603   8/61/4037   K 1.88  1     271 1928710 243.9 1.60  103.91 66.249.70.195  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1566390279 HTTP/1.1
   5-0  102397 0/89/4221   R 2.11  53    239 2131869 0.0   2.86  136.52 66.249.70.6    http/1.1 test.cloudware.ng:443      GET /177241081?goodscode=0177009550 HTTP/1.1
   6-0  4573   0/11/3929   _ 0.23  1     1   1952162 0.0   0.25  105.41 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   7-0  3078   0/34/4696   R 0.77  39    390 2145004 0.0   1.22  125.30 66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /?p=520707515 HTTP/1.1
   8-0  3334   1/56/3479   K 1.44  3     279 1749970 34.1  1.42  90.58  66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=1319004305 HTTP/1.1
   9-0  1203   1/75/3724   K 1.88  0     410 1854393 24.1  1.98  100.12 167.160.58.187 http/1.1 health.oyostate.gov.ng:443 GET /portfolio/omituntun-free-health-mission-physically-challen
   10-0 4730   1/7/3970    K 0.09  2     890 1916412 27.2  0.14  111.56 185.210.206.52 http/1.1 nigeriadecide.org:443      GET /Social_Democratic_Party.php HTTP/1.1
   11-0 5021   0/1/4102    W 0.00  0     0   2053313 0.0   0.01  135.63 66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1109505280 HTTP/1.1
   12-0 5026   0/0/3672    R 0.00  7     0   1737185 0.0   0.00  91.65  47.128.110.95  http/1.1
   13-0 77696  11/679/2907 K 15.69 3     332 1295589 335.1 16.81 67.79  66.249.70.197  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1273663659 HTTP/1.1
   14-0 332    8/80/3076   K 1.98  2     261 1561810 247.6 2.45  96.99  66.249.70.199  http/1.1 schoolplus.cloudware.ng:80 GET /?p=125540920 HTTP/1.1
   15-0 4742   0/13/2644   W 0.24  0     0   1297159 0.0   0.29  67.94  ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   16-0 94118  0/307/3719  _ 7.81  1     7   1851572 0.0   8.71  102.52 3.93.98.99     http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/images/2019elections/blog/p
   17-0 97236  0/279/4235  _ 6.63  1     353 2139139 0.0   5.75  118.12 66.249.70.196  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3150835216 HTTP/1.1
   18-0 5027   4/4/1787    K 0.08  3     259 973714  123.2 0.12  49.35  66.249.70.192  http/1.1 schoolplus.cloudware.ng:80 GET /?p=921184992 HTTP/1.1
   19-0 338    1/91/2313   K 1.90  0     361 1199492 205.2 2.16  62.68  192.178.4.98   http/1.1 team.cloudware.ng:443      GET /var/cache/prod/twig/77/ HTTP/1.1
   20-0 5040   0/2/1328    _ 0.02  0     336 688424  0.0   0.06  34.25  66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2604503980 HTTP/1.1
   21-0 4758   0/5/1416    R 0.11  7     269 752238  0.0   0.15  41.36  47.128.110.95  http/1.1
   22-0 97247  0/205/1538  _ 4.91  2     355 825458  0.0   5.21  50.93  66.249.70.198  http/1.1 schoolplus.cloudware.ng:80 GET /?p=827015479 HTTP/1.1
   23-0 5041   0/2/771     _ 0.03  0     264 356430  0.0   0.06  15.22  66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3422881129 HTTP/1.1
   24-0 5042   2/2/1691    K 0.02  3     261 615715  60.4  0.06  34.94  66.249.70.196  http/1.1 schoolplus.cloudware.ng:80 GET /?p=430347209 HTTP/1.1
   25-0 4761   0/8/886     _ 0.17  0     335 463984  0.0   0.22  24.94  66.249.70.200  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2342826935 HTTP/1.1
   26-0 5043   2/4/326     K 0.03  1     300 180380  62.4  0.08  8.64   66.249.70.200  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4222552102 HTTP/1.1
   27-0 5084   2/2/134     K 0.03  0     267 71373   62.8  0.06  4.04   66.249.70.194  http/1.1 schoolplus.cloudware.ng:80 GET /?p=970035298 HTTP/1.1
   28-0 -      0/0/1155    . 0.00  3619  0   475534  0.0   0.00  25.42  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -      0/0/108     . 0.00  6207  0   56057   0.0   0.00  2.71   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -      0/0/389     . 0.00  6125  0   179917  0.0   0.00  7.99   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -      0/0/48      . 0.00  6380  0   31177   0.0   0.00  1.34   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -      0/0/4       . 0.00  16007 0   2148    0.0   0.00  0.09   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -      0/0/24      . 0.00  15937 0   12272   0.0   0.00  0.58   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -      0/0/71      . 0.00  15731 0   43033   0.0   0.00  1.97   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -      0/0/2       . 0.00  16013 305 1157    0.0   0.00  0.06   66.249.70.100  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3584359384 HTTP/1.1
   36-0 -      0/0/19      . 0.00  15943 0   12232   0.0   0.00  0.55   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -      0/0/69      . 0.00  15733 0   41923   0.0   0.00  1.99   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -      0/0/2       . 0.00  16016 0   993     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -      0/0/3       . 0.00  16008 0   910     0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -      0/0/1107    . 0.00  12040 0   644340  0.0   0.00  31.91  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -      0/0/3       . 0.00  16015 0   924     0.0   0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -      0/0/4       . 0.00  16001 0   1967    0.0   0.00  0.07   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -      0/0/41      . 0.00  15884 0   25843   0.0   0.00  1.19   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -      0/0/18      . 0.00  15942 0   8912    0.0   0.00  0.42   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 600
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 23 seconds, (range: 1...103)
   index usage: 10%, cache usage: 14%
   total entries stored since starting: 24311
   total entries replaced since starting: 0
   total entries expired since starting: 23702
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 5 hit, 137 miss
   total removes since starting: 9 hit, 8 miss
Youez - 2016 - github.com/yon3zu
LinuXploit