403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.01.24.txt
 ## swap threshold exceeded
## server overview
2025-11-13.01.24 load[0] mem[66/69] mysql[4/8] httpd[25]
              total        used        free      shared  buff/cache   available
Mem:           2363        1498          88          16         776         681
Swap:          1999        1557         442
 01:24:02 up  5:21,  0 users,  load average: 0.61, 0.71, 0.67
## system overview
top - 01:24:02 up  5:21,  0 users,  load average: 0.61, 0.71, 0.67
Tasks: 215 total,   3 running, 211 sleeping,   0 stopped,   1 zombie
%Cpu(s): 68.8 us, 25.0 sy,  0.0 ni,  6.2 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    85736 free,  1539308 used,   795256 buff/cache
KiB Swap:  2047996 total,   452724 free,  1595272 used.   692672 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 208752   4356 S 106.2  8.6   4:23.82 /usr/sbin+
 46519 nigeria   20   0  400652  15936  10220 R  12.5  0.7   0:00.04 /opt/cpan+
   514 dbus      20   0   58728   1316    600 S   6.2  0.1   0:09.91 /usr/bin/+
 46546 cloudw    20   0  352096  15236  10128 S   6.2  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44428   3428   1516 S   0.0  0.1   0:27.30 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.28 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.93 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:19.62 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.86 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.65 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:23.58 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.42 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.29 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.16 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.91 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40240   5076   4832 S   0.0  0.2   0:11.16 /usr/lib/+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    152     44 S   0.0  0.0   0:01.76 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1432    800 S   0.0  0.1   0:04.38 /usr/lib/+
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.42 /usr/sbin+
   501 polkitd   20   0  612240    840    560 S   0.0  0.0   0:02.60 /usr/lib/+
   503 root      20   0  152780     60     32 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3116    900 S   0.0  0.1   0:00.27 queueproc+
   507 root      20   0   52852    296    208 S   0.0  0.0   0:00.01 /usr/sbin+
   519 nscd      20   0 1062080   1320    592 S   0.0  0.1   0:15.82 /usr/sbin+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    860    424 S   0.0  0.0   0:00.54 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3744    832 S   0.0  0.2   0:00.72 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.21 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0  114016  13560   2760 S   0.0  0.6   0:04.73 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.40 pure-ftpd+
   931 root      20   0   51508    460    300 S   0.0  0.0   0:00.28 /usr/sbin+
   932 root      20   0  572372    656    184 S   0.0  0.0   0:01.72 /usr/bin/+
   933 telegraf  20   0 5654048  33832   6036 S   0.0  1.4   0:10.78 /usr/loca+
   935 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.43 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:02.47 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268      4      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112    336    252 S   0.0  0.0   0:00.59 php-fpm: +
   961 named     20   0  636988  29280   2188 S   0.0  1.2   0:10.79 /usr/sbin+
   964 root      20   0  273744   4856   4452 S   0.0  0.2   0:05.19 /usr/sbin+
   981 root      20   0  436392    400    312 S   0.0  0.0   0:00.69 php-fpm: +
   984 root      20   0  385496    368    280 S   0.0  0.0   0:00.56 php-fpm: +
   985 root      20   0  261288   3848    864 S   0.0  0.2   0:02.90 cpsrvd (S+
   989 root      20   0  392856    216    132 S   0.0  0.0   0:00.56 php-fpm: +
   992 root      20   0 1828184 392836      0 S   0.0 16.2   0:32.13 /usr/loca+
  1000 root      20   0  397344   1872    596 S   0.0  0.1   0:02.58 php-fpm: +
  1006 cpanelc+  20   0   10604   3548   2304 S   0.0  0.1   0:15.77 /usr/loca+
  1075 dovenull  20   0   46984    772    532 S   0.0  0.0   0:00.40 dovecot/p+
  1076 dovenull  20   0   48324   2740   1724 S   0.0  0.1   0:00.34 dovecot/i+
  1077 dovecot   20   0   10320    364    256 S   0.0  0.0   0:00.11 dovecot/a+
  1078 root      20   0   10452    448    284 S   0.0  0.0   0:00.24 dovecot/l+
  1079 dovenull  20   0   46984   2064   1528 S   0.0  0.1   0:00.30 dovecot/p+
  1080 dovenull  20   0   48000   2532   1640 S   0.0  0.1   0:00.25 dovecot/i+
  1084 root      20   0   24396   1864    496 S   0.0  0.1   0:00.14 dovecot/c+
  1088 dovecot   20   0   13568    628    452 S   0.0  0.0   0:00.05 dovecot/s+
  1121 systuser  20   0  157704   2888    960 S   0.0  0.1   0:00.10 SonarPush+
  1166 dovecot   20   0   41260   1544   1012 S   0.0  0.1   0:00.76 dovecot/a+
  1172 root      20   0  248152   3724    688 S   0.0  0.2   0:05.15 /usr/loca+
  1173 wp-tool+  20   0  387556   3292   1424 S   0.0  0.1   0:00.23 /usr/bin/+
  1174 wp-tool+  20   0  410616  17960   1404 S   0.0  0.7   0:16.01 /usr/bin/+
  1232 root      20   0  209372   8504   1988 S   0.0  0.4   0:02.44 tailwatchd
  1234 root      20   0  228228  18888   5984 S   0.0  0.8   0:00.38 dnsadmin +
  1237 root      20   0  262224  23436   5512 S   0.0  1.0   0:01.02 cpdavd - +
  1642 root      20   0  299272    504    340 S   0.0  0.0   0:00.52 php-fpm: +
  1702 root      38  18  130416   1348    684 S   0.0  0.1   0:00.05 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:01.82 /usr/sbin+
  2063 root      20   0   12804    380    212 S   0.0  0.0   0:02.26 /usr/loca+
  2064 root      20   0   12732    288    208 S   0.0  0.0   0:01.92 /usr/loca+
  2065 root      20   0   12816    388    216 S   0.0  0.0   0:02.11 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  7883 root      20   0  306476  45628   1192 S   0.0  1.9   0:02.75 spamd chi+
  7886 root      20   0  248152   2552    400 S   0.0  0.1   0:00.00 spamd chi+
 16898 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 17677 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 20440 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 23292 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 23359 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 23372 root      20   0  108056    340    268 S   0.0  0.0   0:00.00 sleep 2h +
 23911 root      20   0 1276100  10744    596 S   0.0  0.4   0:00.06 /usr/bin/+
 23946 root      20   0 1277056  11568    596 S   0.0  0.5   0:00.06 /usr/bin/+
 25651 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25680 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 31529 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 39115 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 39871 nobody    20   0  277612  17908   3932 S   0.0  0.7   0:00.54 /usr/sbin+
 41057 nobody    20   0  277752  18452   3932 S   0.0  0.8   0:00.43 /usr/sbin+
 43439 nobody    20   0  277540  17756   3856 S   0.0  0.7   0:00.40 /usr/sbin+
 43769 nobody    20   0  277720  17880   3740 S   0.0  0.7   0:00.27 /usr/sbin+
 43786 nobody    20   0  277784  17748   3700 S   0.0  0.7   0:00.24 /usr/sbin+
 44683 nobody    20   0  277720  17556   3608 S   0.0  0.7   0:00.22 /usr/sbin+
 44684 nobody    20   0  277784  17688   3448 S   0.0  0.7   0:00.16 /usr/sbin+
 44686 nobody    20   0  277784  17500   3592 S   0.0  0.7   0:00.17 /usr/sbin+
 44756 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 45470 nobody    20   0  277784  15764   2128 S   0.0  0.7   0:00.09 /usr/sbin+
 45478 nobody    20   0  277932  17376   3612 S   0.0  0.7   0:00.06 /usr/sbin+
 45479 nobody    20   0  277784  16908   3196 S   0.0  0.7   0:00.14 /usr/sbin+
 45492 nobody    20   0  277784  17096   3388 S   0.0  0.7   0:00.14 /usr/sbin+
 45494 nobody    20   0  277532  17424   3628 S   0.0  0.7   0:00.08 /usr/sbin+
 45515 nobody    20   0  277784  16012   2360 S   0.0  0.7   0:00.14 /usr/sbin+
 45517 nobody    20   0  277720  17520   3612 S   0.0  0.7   0:00.08 /usr/sbin+
 45520 nobody    20   0  277916  17156   3284 S   0.0  0.7   0:00.08 /usr/sbin+
 45521 nobody    20   0  277784  17160   3384 S   0.0  0.7   0:00.11 /usr/sbin+
 45553 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 45570 root      20   0  178148  26300   2812 S   0.0  1.1   0:00.13 /usr/loca+
 45598 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 45600 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 45608 root      20   0  158816  15304   2712 S   0.0  0.6   0:00.06 /usr/loca+
 45616 root      20   0  195356  34700   3168 S   0.0  1.4   0:00.19 /usr/loca+
 45649 root      20   0   76780  16972   3044 S   0.0  0.7   0:00.10 /usr/loca+
 45704 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 45889 root      20   0  111304   4448   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 45890 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 46021 nobody    20   0  277932  17404   3580 S   0.0  0.7   0:00.06 /usr/sbin+
 46315 nobody    20   0  277784  15760   2128 S   0.0  0.7   0:00.00 /usr/sbin+
 46318 nobody    20   0  277788  15872   2172 S   0.0  0.7   0:00.02 /usr/sbin+
 46319 nobody    20   0  277784  15760   2128 S   0.0  0.7   0:00.02 /usr/sbin+
 46329 nobody    20   0  277784  15696   2128 S   0.0  0.6   0:00.01 /usr/sbin+
 46330 nobody    20   0  277784  15760   2128 S   0.0  0.7   0:00.01 /usr/sbin+
 46331 nobody    20   0  277924  17064   3384 S   0.0  0.7   0:00.02 /usr/sbin+
 46332 nobody    20   0  277792  15768   2128 S   0.0  0.7   0:00.01 /usr/sbin+
 46382 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
 46395 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
 46396 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
 46414 nobody    20   0  277784  15692   2124 S   0.0  0.6   0:00.00 /usr/sbin+
 46415 nobody    20   0  277784  15692   2124 S   0.0  0.6   0:00.01 /usr/sbin+
 46416 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.01 /usr/sbin+
 46417 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.01 /usr/sbin+
 46445 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 46458 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 46459 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 46461 root      20   0  183080   2432   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 46462 root      20   0  183080   2432   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 46463 root      20   0  183080   2432   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 46464 root      20   0  183080   2432   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 46465 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 46466 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 46468 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 46470 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 46471 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 46473 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 46475 root      20   0  228424  28708   8228 S   0.0  1.2   0:00.06 /usr/loca+
 46476 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 46480 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 46481 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 46483 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 46485 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 46487 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 46488 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 46489 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 46491 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 46492 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 46493 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 46494 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 46501 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 46511 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 46512 cloudw    20   0  352096  15232  10128 S   0.0  0.6   0:00.00 /opt/cpan+
 46517 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 46520 pactpay   20   0  476724  17480  11728 S   0.0  0.7   0:00.01 /opt/cpan+
 46545 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 46554 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 46555 cloudsms  20   0   20164    264      0 R   0.0  0.0   0:00.00 /usr/loca+
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.29 [kworker]
 76167 root      20   0  181668   7472   1104 S   0.0  0.3   0:04.86 lfd - sle+
 78808 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 96276 root      20   0       0      0      0 S   0.0  0.0   0:00.21 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov12   0:19  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:23  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      78808  0.0  0.0      0     0 ?        S    00:03   0:00  \_ [kworker/0:3]
root      96276  0.0  0.0      0     0 ?        S    00:25   0:00  \_ [kworker/u200:0]
root      16898  0.0  0.0      0     0 ?        S    00:53   0:00  \_ [kworker/0:1]
root      17677  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/1:4]
root      20440  0.0  0.0      0     0 ?        S    00:57   0:00  \_ [kworker/u200:1]
root      25651  0.0  0.0      0     0 ?        S    01:02   0:00  \_ [kworker/0:5]
root      25680  0.0  0.0      0     0 ?        S    01:02   0:00  \_ [kworker/1:0]
root      31529  0.0  0.0      0     0 ?        S    01:08   0:00  \_ [kworker/1:1]
root      39115  0.0  0.0      0     0 ?        S    01:16   0:00  \_ [kworker/1:2]
root      44756  0.0  0.0      0     0 ?        S    01:22   0:00  \_ [kworker/1:3]
root      45598  0.0  0.0      0     0 ?        S    01:23   0:00  \_ [kworker/0:0]
root      45600  0.0  0.0      0     0 ?        S    01:23   0:00  \_ [kworker/0:2]
root          1  0.1  0.1  44428  3428 ?        Ss   Nov12   0:27 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  40240  5076 ?        Ss   Nov12   0:11 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   152 ?        S<sl Nov12   0:01 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ss   Nov12   0:04 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   840 ?        Ssl  Nov12   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    60 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3116 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   296 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58728  1316 ?        Ss   Nov12   0:09 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1320 ?        Ssl  Nov12   0:15 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124512   860 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      23292  0.0  0.0 183048  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      23359  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      23372  0.0  0.0 108056   340 ?        S    01:00   0:00  |       \_ sleep 2h 2m
root      45553  0.0  0.0 183048  2140 ?        S    01:23   0:00  \_ /usr/sbin/CROND -n
root      45570  0.2  1.0 178148 26300 ?        Ss   01:23   0:00  |   \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify
root      45608  0.0  0.6 158816 15304 ?        S    01:23   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpaddonsup --force --nohtml
root      45616  0.3  1.4 195356 34700 ?        S    01:23   0:00  |           \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons.pl action=update-nohtml&force=1
root      45649  0.1  0.7  76780 16972 ?        S    01:23   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpanelsync --signed=1 httpupdate.cpanel.net /cpanelsync/cpaddons/cPAddonsMD5 /usr/local/cpanel/cpaddons/cPAddonsMD5
root      46458  0.0  0.1 183080  2428 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      46475  0.0  1.1 228424 28708 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/autossl_check_cpstore_queue
root      46459  0.0  0.1 183080  2428 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      46476  0.0  0.0 113284  1208 ?        Ss   01:24   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      46481  0.0  0.0 108052   360 ?        S    01:24   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      46487  0.0  0.0 113288  1520 ?        S    01:24   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      46556  0.0  0.0 153840  2100 ?        R    01:24   0:00  |               \_ ps auxf
root      46461  0.0  0.1 183080  2432 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      46494  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      46462  0.0  0.1 183080  2432 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      46488  0.0  0.0  20164   988 ?        Ss   01:24   0:00  |   \_ jailshell (cloudsms) [46554] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
cloudsms  46554  0.0  0.0  20164   264 ?        S    01:24   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
cloudsms  46555  0.0  0.0 113284  1212 ?        S    01:24   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
cloudsms  46557  0.0  0.5 399668 13580 ?        R    01:24   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php
root      46463  0.0  0.1 183080  2432 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      46492  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      46464  0.0  0.1 183080  2432 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      46480  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      46465  0.0  0.1 183080  2428 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      46483  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      46466  0.0  0.1 183080  2428 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      46491  0.0  0.0  20164   804 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      46468  0.0  0.1 183080  2424 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      46489  0.0  0.0  20164   804 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      46470  0.0  0.1 183080  2424 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      46485  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      46471  0.0  0.0 183080  2420 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      46501  0.0  0.0  20164   968 ?        Ss   01:24   0:00  |   \_ jailshell (pactpay) [46517] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   46517  0.0  0.0  20164   260 ?        S    01:24   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   46520  0.0  0.7 476724 17480 ?        S    01:24   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      46473  0.0  0.0 183080  2420 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      46493  0.0  0.0  20164   968 ?        Ss   01:24   0:00      \_ jailshell (nigeria) [46511] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   46511  0.0  0.0  20164   256 ?        S    01:24   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   46519  0.0  0.6 400652 15936 ?        S    01:24   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3744 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13560 ?        Ssl  Nov12   0:04 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   460 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  46984   772 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48324  2740 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   364 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   448 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  46984  2064 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  48000  2532 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24396  1864 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   628 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1544 ?        S    Nov12   0:00  \_ dovecot/auth
root        932  0.0  0.0 572372   656 ?        Ssl  Nov12   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.3 5654048 33832 ?       SLsl Nov12   0:10 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400     0 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:02 /usr/sbin/sshd -D
root      45704  0.0  0.1 111304  4260 ?        Ss   01:23   0:00  \_ sshd: [accepted]
root      45889  0.0  0.1 111304  4448 ?        Ss   01:23   0:00  \_ sshd: [accepted]
sshd      45890  0.0  0.1 115644  2624 ?        S    01:23   0:00      \_ sshd: [net]
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268     4 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   336 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.2 636988 29280 ?        Ssl  Nov12   0:10 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.2 273744  4856 ?        Ssl  Nov12   0:05 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   400 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   368 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.1 261288  3848 ?        Ss   Nov12   0:02 cpsrvd (SSL) - waiting for connections                   
root      46445  0.0  0.0      0     0 ?        Z    01:24   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   216 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1 16.2 1828184 392836 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1872 ?        Ss   Nov12   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cpanelc+   1006  0.0  0.1  10604  3548 ?        Rs   Nov12   0:15 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2888 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.1 248152  3724 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  1.8 306476 45628 ?        S    Nov12   0:02  \_ spamd child
root       7886  0.0  0.1 248152  2552 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3292 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.7 410616 17960 ?        Ss   Nov12   0:16 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.3 209372  8504 ?        Ss   Nov12   0:02 tailwatchd
root       1234  0.0  0.7 228228 18888 ?        Ss   Nov12   0:00 dnsadmin - server mode
root       1237  0.0  0.9 262224 23436 ?        Ss   Nov12   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1642  0.0  0.0 299272   504 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1348 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.3  8.6 1457796 208752 ?      Sl   Nov12   4:23 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:01 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12804   380 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   288 ?        S    Nov12   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12816   388 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    39871  0.1  0.7 277612 17908 ?        S    01:16   0:00  \_ /usr/sbin/httpd -k start
nobody    41057  0.1  0.7 277752 18452 ?        S    01:18   0:00  \_ /usr/sbin/httpd -k start
nobody    43439  0.1  0.7 277540 17756 ?        S    01:20   0:00  \_ /usr/sbin/httpd -k start
nobody    43769  0.1  0.7 277720 17880 ?        S    01:20   0:00  \_ /usr/sbin/httpd -k start
nobody    43786  0.1  0.7 277784 17748 ?        S    01:21   0:00  \_ /usr/sbin/httpd -k start
nobody    44683  0.1  0.7 277720 17556 ?        S    01:21   0:00  \_ /usr/sbin/httpd -k start
nobody    44684  0.1  0.7 277784 17688 ?        S    01:21   0:00  \_ /usr/sbin/httpd -k start
nobody    44686  0.1  0.7 277784 17500 ?        S    01:21   0:00  \_ /usr/sbin/httpd -k start
nobody    45470  0.1  0.6 277784 15764 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    45478  0.0  0.7 277932 17376 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    45479  0.2  0.6 277784 16908 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    45492  0.2  0.7 277784 17096 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
cloudw    46546  0.0  0.6 352096 15236 ?        S    01:24   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    45494  0.1  0.7 277532 17424 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    45515  0.2  0.6 277784 16012 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    45517  0.1  0.7 277720 17520 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
cloudw    46512  0.0  0.6 352096 15232 ?        R    01:24   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    45520  0.1  0.7 277916 17156 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    45521  0.1  0.7 277784 17160 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    46021  0.1  0.7 277932 17404 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    46315  0.0  0.6 277784 15760 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    46318  0.2  0.6 277788 15872 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    46319  0.2  0.6 277784 15760 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    46329  0.1  0.6 277784 15696 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    46330  0.1  0.6 277784 15760 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    46331  0.2  0.7 277924 17064 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    46332  0.1  0.6 277792 15768 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    46382  0.0  0.6 277640 15524 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    46395  0.0  0.6 277640 15524 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    46396  0.0  0.6 277640 15524 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    46414  0.0  0.6 277784 15692 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    46415  0.2  0.6 277784 15692 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    46416  0.2  0.6 277640 15524 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    46417  0.2  0.6 277640 15524 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.3 181668  7472 ?        Ss   00:00   0:04 lfd - sleeping
root      23911  0.0  0.4 1276100 10744 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      23946  0.0  0.4 1277056 11568 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 19263  Threads: 3  Questions: 1585997  Slow queries: 0  Opens: 6148  Flush tables: 1  Open tables: 2000  Queries per second avg: 82.333
*************************** 1. row ***************************
     Id: 22442
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 22447
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 22451
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.210.140.134 TIME_WAIT
      1 104.210.140.140 TIME_WAIT
      1 114.119.134.212 TIME_WAIT
      1 114.119.154.41 TIME_WAIT
      1 148.113.128.194 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 192.178.4.105 TIME_WAIT
      1 ::1 TIME_WAIT
      1 45.153.100.86 TIME_WAIT
      1 45.227.253.15 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 54.39.203.195 TIME_WAIT
      1 66.249.64.224 TIME_WAIT
      1 66.249.70.173 TIME_WAIT
      1 66.249.70.32 TIME_WAIT
      1 84.32.212.220 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 01:24:02 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 5 hours 20 minutes 58 seconds
   Server load: 0.61 0.71 0.67
   Total accesses: 100504 - Total Traffic: 2.7 GB - Total Duration: 50438406
   CPU Usage: u2.72 s2.65 cu1301.9 cs1041.75 - 12.2% CPU load
   5.22 requests/sec - 146.9 kB/second - 28.1 kB/request - 501.855 ms/request
   24 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

KK_KKKWKK_KKK_KKKKK__KK__KWKK...KK._............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU   SS   Req   Dur   Conn Child  Slot     Client     Protocol           VHost                                        Request
   0-0  45470 1/16/4865 K 0.43 1     265 2409499 29.0 0.47  123.46 66.249.64.45  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4224569789 HTTP/1.1
   1-0  43439 2/69/4905 K 1.80 2     355 2264824 62.3 4.94  122.77 66.249.70.194 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3299265312 HTTP/1.1
   2-0  46021 0/10/4734 _ 0.24 0     305 2468107 0.0  0.28  140.03 66.249.70.200 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2552054938 HTTP/1.1
   3-0  45478 1/12/4833 K 0.21 2     394 2548850 30.5 0.27  142.21 66.249.64.233 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3742480075 HTTP/1.1
   4-0  45479 1/23/4629 K 0.64 0     364 2274637 29.8 0.66  121.87 66.249.70.103 http/1.1 schoolplus.cloudware.ng:80 GET /?p=102166996 HTTP/1.1
   5-0  39871 1/94/4780 K 2.25 1     340 2450582 29.5 2.62  151.94 66.249.70.96  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2151980178 HTTP/1.1
   6-0  46315 0/2/4528  W 0.01 0     0   2292042 0.0  0.06  122.24 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   7-0  43769 1/47/5301 K 1.21 3     283 2497745 29.9 1.65  142.11 66.249.70.195 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1963229787 HTTP/1.1
   8-0  45492 1/25/4032 K 0.67 0     358 2051062 30.3 0.73  105.52 66.249.70.65  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3607331700 HTTP/1.1
   9-0  46318 0/4/4230  _ 0.03 0     278 2126221 0.0  0.06  113.01 192.178.4.102 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1321868877 HTTP/1.1
   10-0 46319 1/2/4347  K 0.04 4     266 2108059 30.1 0.06  121.79 66.249.70.8   http/1.1 schoolplus.cloudware.ng:80 GET /?p=902676012 HTTP/1.1
   11-0 45494 1/16/4675 K 0.31 1     410 2373871 31.3 0.36  151.90 66.249.64.73  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2014639027 HTTP/1.1
   12-0 46329 1/2/4269  K 0.03 2     352 2058679 30.7 0.06  107.29 192.178.4.97  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3074050533 HTTP/1.1
   13-0 45515 0/24/3453 _ 0.67 0     0   1604207 0.0  0.71  82.20  ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   14-0 46330 1/2/3652  K 0.02 3     288 1873020 30.7 0.06  112.00 66.249.64.1   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3060043337 HTTP/1.1
   15-0 41057 1/76/3031 K 1.82 1     368 1520957 29.6 2.28  78.46  66.249.70.104 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1308884146 HTTP/1.1
   16-0 46331 3/4/4288  K 0.06 3     290 2108264 90.7 0.10  115.13 192.178.4.100 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3146804661 HTTP/1.1
   17-0 46332 2/3/4871  K 0.05 0     358 2498772 61.3 0.09  142.93 66.249.64.100 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3483700907 HTTP/1.1
   18-0 45517 2/15/2232 K 0.39 0     457 1222596 61.6 0.85  61.80  66.249.70.130 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2938326433 HTTP/1.1
   19-0 46382 0/1/2914  _ 0.00 0     309 1549682 0.0  0.03  80.67  66.249.64.70  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2836879119 HTTP/1.1
   20-0 46395 0/1/1669  _ 0.00 0     356 880953  0.0  0.03  43.57  66.249.64.5   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3366648583 HTTP/1.1
   21-0 46396 1/1/1815  K 0.00 4     272 952669  29.6 0.03  51.36  66.249.70.1   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1282336586 HTTP/1.1
   22-0 46414 2/2/1781  K 0.01 0     356 958833  61.6 0.06  57.23  192.178.4.99  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1600279197 HTTP/1.1
   23-0 45520 0/16/1200 _ 0.35 0     257 607811  0.0  0.40  28.44  66.249.64.224 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1650239819 HTTP/1.1
   24-0 43786 0/42/2104 _ 1.12 0     266 852129  0.0  1.13  46.30  66.249.70.134 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3577769243 HTTP/1.1
   25-0 46415 2/2/1099  K 0.02 2     354 576611  61.0 0.06  30.24  66.249.70.33  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1246723878 HTTP/1.1
   26-0 45521 0/20/617  W 0.51 0     0   335684  0.0  0.55  16.45  23.21.225.190 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/images/images/blog/blog/201
   27-0 46416 1/1/646   K 0.01 3     391 336269  30.4 0.03  17.85  66.249.64.132 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3417722771 HTTP/1.1
   28-0 46417 1/1/1536  K 0.01 3     338 694842  29.1 0.03  38.51  66.249.70.110 http/1.1 schoolplus.cloudware.ng:80 GET /?p=3358982971 HTTP/1.1
   29-0 -     0/0/379   . 0.00 119   0   218223  0.0  0.00  10.32  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/727   . 0.00 48    0   374010  0.0  0.00  17.10  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/299   . 0.00 47    0   167730  0.0  0.00  8.11   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 44683 1/36/147  K 0.98 1     265 83149   30.9 1.22  4.25   66.249.70.36  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2064803497 HTTP/1.1
   33-0 44684 1/29/277  K 0.71 0     357 154760  30.9 0.75  7.38   66.249.64.108 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2208701463 HTTP/1.1
   34-0 -     0/0/153   . 0.00 36    0   89257   0.0  0.00  4.49   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 44686 0/30/87   _ 0.76 1     301 44658   0.0  0.82  2.16   66.249.64.232 http/1.1 schoolplus.cloudware.ng:80 GET /?p=1141000373 HTTP/1.1
   36-0 -     0/0/23    . 0.00 116   0   12829   0.0  0.00  0.59   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/169   . 0.00 556   0   98497   0.0  0.00  4.66   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/3     . 0.00 958   0   994     0.0  0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/25    . 0.00 893   0   14173   0.0  0.00  0.64   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/1109  . 0.00 947   0   644863  0.0  0.00  31.94  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/7     . 0.00 944   0   1042    0.0  0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/4     . 0.00 18701 0   1967    0.0  0.00  0.07   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/41    . 0.00 18585 0   25843   0.0  0.00  1.19   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/18    . 0.00 18642 0   8912    0.0  0.00  0.42   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 541
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 4 seconds, (range: 0...21)
   index usage: 9%, cache usage: 12%
   total entries stored since starting: 28200
   total entries replaced since starting: 0
   total entries expired since starting: 27650
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 153 miss
   total removes since starting: 9 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit