403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.01.45.txt
 ## swap threshold exceeded
## server overview
2025-11-13.01.45 load[1] mem[71/71] mysql[1/8] httpd[24]
              total        used        free      shared  buff/cache   available
Mem:           2363        1642         106          24         614         534
Swap:          1999        1693         306
 01:45:02 up  5:42,  0 users,  load average: 2.47, 1.90, 1.51
## system overview
top - 01:45:02 up  5:42,  0 users,  load average: 2.47, 1.90, 1.51
Tasks: 212 total,   5 running, 206 sleeping,   0 stopped,   1 zombie
%Cpu(s): 81.8 us, 18.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   105196 free,  1676560 used,   638544 buff/cache
KiB Swap:  2047996 total,   314304 free,  1733692 used.   553152 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 213096   3644 S  75.0  8.8   4:54.15 /usr/sbin+
 66964 healtho+  20   0  461848  71556   4212 R  68.8  3.0   0:03.26 php-fpm: +
  2063 root      20   0   12832    380    212 S  12.5  0.0   0:02.49 /usr/loca+
 67465 nigeria   20   0  400652  15936  10216 S  12.5  0.7   0:00.05 /opt/cpan+
   519 nscd      20   0 1062080   1316    588 S   6.2  0.1   0:17.10 /usr/sbin+
 63710 nobody    20   0  277540  17964   3944 R   6.2  0.7   0:00.49 /usr/sbin+
     1 root      20   0   44428   3356   1444 S   0.0  0.1   0:28.87 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.44 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.98 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:21.26 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.92 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.97 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:25.37 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.45 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.48 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.30 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:00.98 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   39500   1740   1500 S   0.0  0.1   0:11.89 /usr/lib/+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    108      0 S   0.0  0.0   0:01.88 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1432    800 S   0.0  0.1   0:04.66 /usr/lib/+
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.45 /usr/sbin+
   501 polkitd   20   0  612240    848    464 S   0.0  0.0   0:02.76 /usr/lib/+
   503 root      20   0  152780     72     28 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3060    800 S   0.0  0.1   0:00.28 queueproc+
   507 root      20   0   52852    244    156 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58728   1316    600 S   0.0  0.1   0:10.55 /usr/bin/+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    852    416 S   0.0  0.0   0:00.57 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3716    784 S   0.0  0.2   0:00.79 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.23 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0  114016  13436   2448 S   0.0  0.6   0:05.03 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.42 pure-ftpd+
   931 root      20   0   51508    460    296 S   0.0  0.0   0:00.30 /usr/sbin+
   932 root      20   0  572372    612    140 S   0.0  0.0   0:01.83 /usr/bin/+
   933 telegraf  20   0 5654048  33104   3880 S   0.0  1.4   0:11.49 /usr/loca+
   935 memcach+  20   0  342400     56     56 S   0.0  0.0   0:00.47 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:02.66 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112    200    116 S   0.0  0.0   0:00.62 php-fpm: +
   961 named     20   0  636988  30864   1720 S   0.0  1.3   0:11.69 /usr/sbin+
   964 root      20   0  281936   1960   1504 S   0.0  0.1   0:05.55 /usr/sbin+
   981 root      20   0  436392    332    244 S   0.0  0.0   0:00.73 php-fpm: +
   984 root      20   0  385496    468    372 S   0.0  0.0   0:00.59 php-fpm: +
   985 root      20   0  261288   6144   1628 S   0.0  0.3   0:03.34 cpsrvd (S+
   989 root      20   0  392856    312    228 S   0.0  0.0   0:00.59 php-fpm: +
   992 root      20   0 1901916 220260    456 S   0.0  9.1   0:32.27 /usr/loca+
  1000 root      20   0  397344   1880    604 S   0.0  0.1   0:02.88 php-fpm: +
  1006 cpanelc+  20   0   10656   3696   2304 R   0.0  0.2   0:16.93 /usr/loca+
  1075 dovenull  20   0   47264   2000   1212 S   0.0  0.1   0:00.42 dovecot/p+
  1076 dovenull  20   0   48324   2408   1228 S   0.0  0.1   0:00.36 dovecot/i+
  1077 dovecot   20   0   10320    284    176 S   0.0  0.0   0:00.11 dovecot/a+
  1078 root      20   0   10452    568    376 S   0.0  0.0   0:00.26 dovecot/l+
  1079 dovenull  20   0   47112   1880   1152 S   0.0  0.1   0:00.32 dovecot/p+
  1080 dovenull  20   0   48000   2200   1228 S   0.0  0.1   0:00.26 dovecot/i+
  1084 root      20   0   24528   2052    376 S   0.0  0.1   0:00.14 dovecot/c+
  1088 dovecot   20   0   13568    636    432 S   0.0  0.0   0:00.05 dovecot/s+
  1121 systuser  20   0  157704   2932    928 S   0.0  0.1   0:00.11 SonarPush+
  1166 dovecot   20   0   41260   1404    872 S   0.0  0.1   0:00.80 dovecot/a+
  1172 root      20   0  248152   5980   1220 S   0.0  0.2   0:05.29 /usr/loca+
  1173 wp-tool+  20   0  387556   3216   1348 S   0.0  0.1   0:00.24 /usr/bin/+
  1174 wp-tool+  20   0  410616  17824   1268 S   0.0  0.7   0:17.05 /usr/bin/+
  1232 root      20   0  209372   8036   1368 S   0.0  0.3   0:02.64 tailwatchd
  1234 root      20   0  167452   4160   2788 S   0.0  0.2   0:00.41 dnsadmin +
  1237 root      20   0  262224  20952   3024 S   0.0  0.9   0:01.13 cpdavd - +
  1642 root      20   0  299272    392    228 S   0.0  0.0   0:00.55 php-fpm: +
  1702 root      38  18  130416   1352    684 S   0.0  0.1   0:00.05 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:02.21 /usr/sbin+
  2064 root      20   0   12732    288    208 S   0.0  0.0   0:02.11 /usr/loca+
  2065 root      20   0   12872    392    216 S   0.0  0.0   0:02.33 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  7883 root      20   0  306476  93568   1936 S   0.0  3.9   0:03.25 spamd chi+
  7886 root      20   0  261428  93292   2564 S   0.0  3.9   0:00.32 spamd chi+
 23292 root      20   0  183048   1416    860 S   0.0  0.1   0:00.00 /usr/sbin+
 23359 root      20   0  113284    620    440 S   0.0  0.0   0:00.00 /bin/sh -+
 23372 root      20   0  108056    276    204 S   0.0  0.0   0:00.00 sleep 2h +
 23911 root      20   0 1276100  10708    560 S   0.0  0.4   0:00.08 /usr/bin/+
 23946 root      20   0 1277056  11532    560 S   0.0  0.5   0:00.06 /usr/bin/+
 25651 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25680 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 39115 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.32 [kworker]
 48337 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 51088 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 51986 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 56624 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 56661 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 58816 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 60622 nobody    20   0  277676  18460   3940 S   0.0  0.8   0:00.68 /usr/sbin+
 63373 nobody    20   0  277924  17668   3628 S   0.0  0.7   0:00.45 /usr/sbin+
 64497 nobody    20   0  277804  18052   4016 S   0.0  0.7   0:00.33 /usr/sbin+
 64508 nobody    20   0  277804  17648   3632 S   0.0  0.7   0:00.28 /usr/sbin+
 64580 nobody    20   0  277720  17588   3600 S   0.0  0.7   0:00.33 /usr/sbin+
 64637 nobody    20   0  277788  17968   3960 S   0.0  0.7   0:00.32 /usr/sbin+
 65158 nobody    20   0  277804  17740   3780 S   0.0  0.7   0:00.19 /usr/sbin+
 65515 nobody    20   0  277932  17608   3612 S   0.0  0.7   0:00.24 /usr/sbin+
 65618 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 65950 nobody    20   0  277920  17112   3332 S   0.0  0.7   0:00.25 /usr/sbin+
 66331 nobody    20   0  277720  17624   3576 S   0.0  0.7   0:00.12 /usr/sbin+
 66354 nobody    20   0  277784  17408   3496 S   0.0  0.7   0:00.08 /usr/sbin+
 66368 nobody    20   0  277720  17556   3596 S   0.0  0.7   0:00.06 /usr/sbin+
 66369 nobody    20   0  277804  17524   3672 S   0.0  0.7   0:00.07 /usr/sbin+
 66370 nobody    20   0  277656  17520   3588 S   0.0  0.7   0:00.10 /usr/sbin+
 66394 nobody    20   0  277784  17224   3424 S   0.0  0.7   0:00.11 /usr/sbin+
 66396 nobody    20   0  277784  17356   3556 S   0.0  0.7   0:00.12 /usr/sbin+
 66399 nobody    20   0  277536  17348   3676 S   0.0  0.7   0:00.11 /usr/sbin+
 66400 nobody    20   0  277784  17620   3548 S   0.0  0.7   0:00.08 /usr/sbin+
 66401 nobody    20   0  277804  17520   3580 S   0.0  0.7   0:00.17 /usr/sbin+
 66521 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 66687 healtho+  20   0  460452  71752   4344 S   0.0  3.0   0:06.09 php-fpm: +
 66703 healtho+  20   0  459288  69452   4212 S   0.0  2.9   0:05.69 php-fpm: +
 66720 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 66904 workflo+  20   0  520648  59964   6732 S   0.0  2.5   0:03.68 php-fpm: +
 66919 nobody    20   0  277924  17208   3432 S   0.0  0.7   0:00.06 /usr/sbin+
 66920 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 66962 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 66963 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 67055 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 67115 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 67181 healtho+  20   0  455192  65260   4212 S   0.0  2.7   0:01.37 php-fpm: +
 67272 nigeria   20   0  397064   4472   2348 S   0.0  0.2   0:00.00 php-fpm: +
 67352 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
 67355 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 67359 workflo+  20   0  397064   1972    572 S   0.0  0.1   0:00.00 php-fpm: +
 67364 root      20   0  183080   2432   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67365 root      20   0  183080   2432   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67367 root      20   0  183080   2432   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67369 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67370 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67371 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67372 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67373 root      20   0  183080   2428   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67374 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67375 root      20   0  183080   2424   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 67376 root      20   0  183080   2428   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 67378 root      20   0  183080   2428   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 67401 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 67402 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 67403 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 67414 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67415 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 67416 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67417 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 67418 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67419 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67420 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67422 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 67423 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 67424 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 67425 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 67430 root      20   0  188220  11100   5148 S   0.0  0.5   0:00.02 /usr/loca+
 67446 nobody    20   0  277640  15532   2128 S   0.0  0.6   0:00.00 /usr/sbin+
 67447 nobody    20   0  277640  15532   2128 S   0.0  0.6   0:00.00 /usr/sbin+
 67449 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 67457 pactpay   20   0  476724  17480  11728 S   0.0  0.7   0:00.02 /opt/cpan+
 67462 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 67527 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 67528 root      20   0  160220   2060   1584 S   0.0  0.1   0:00.00 top -n 2 +
 67531 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 67532 cloudsms  20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
 76167 root      20   0  181876   8048   1104 S   0.0  0.3   0:05.99 lfd - sle+
 78808 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov12   0:21  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:25  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      78808  0.0  0.0      0     0 ?        S    00:03   0:00  \_ [kworker/0:3]
root      25651  0.0  0.0      0     0 ?        S    01:02   0:00  \_ [kworker/0:5]
root      25680  0.0  0.0      0     0 ?        S    01:02   0:00  \_ [kworker/1:0]
root      39115  0.0  0.0      0     0 ?        S    01:16   0:00  \_ [kworker/1:2]
root      48337  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/u200:2]
root      51088  0.0  0.0      0     0 ?        S    01:28   0:00  \_ [kworker/0:1]
root      51986  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/1:3]
root      56624  0.0  0.0      0     0 ?        S    01:34   0:00  \_ [kworker/1:4]
root      56661  0.0  0.0      0     0 ?        S    01:34   0:00  \_ [kworker/0:2]
root      58816  0.0  0.0      0     0 ?        S    01:36   0:00  \_ [kworker/u200:0]
root      65618  0.0  0.0      0     0 ?        S    01:43   0:00  \_ [kworker/1:1]
root      66521  0.0  0.0      0     0 ?        S    01:44   0:00  \_ [kworker/u200:1]
root          1  0.1  0.1  44428  3356 ?        Ss   Nov12   0:28 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.0  39500  1740 ?        Ss   Nov12   0:11 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   108 ?        S<sl Nov12   0:01 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ss   Nov12   0:04 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   848 ?        Ssl  Nov12   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    72 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3060 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   244 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58728  1316 ?        Ss   Nov12   0:10 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1316 ?        Ssl  Nov12   0:17 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124512   852 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      23292  0.0  0.0 183048  1416 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      23359  0.0  0.0 113284   620 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      23372  0.0  0.0 108056   276 ?        S    01:00   0:00  |       \_ sleep 2h 2m
root      67364  0.0  0.1 183080  2432 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root      67401  0.0  0.0 113284  1212 ?        Ss   01:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      67402  0.0  0.0 108052   360 ?        S    01:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      67403  0.0  0.0 113288  1516 ?        S    01:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      67534  0.0  0.0 153840  2096 ?        R    01:45   0:00  |               \_ ps auxf
root      67365  0.0  0.1 183080  2432 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root      67418  0.0  0.0  20164   804 ?        Ss   01:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      67367  0.0  0.1 183080  2432 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root      67416  0.0  0.0  20164   804 ?        Ss   01:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      67369  0.0  0.1 183080  2428 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root      67419  0.0  0.0  20164   808 ?        Ss   01:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      67370  0.0  0.1 183080  2428 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root      67425  0.0  0.0  20164   804 ?        Ss   01:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      67371  0.0  0.1 183080  2428 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root      67423  0.0  0.0  20164   808 ?        Ss   01:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      67372  0.0  0.1 183080  2428 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root      67414  0.0  0.0  20164   804 ?        Ss   01:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      67373  0.0  0.1 183080  2428 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root      67420  0.0  0.0  20164   804 ?        Ss   01:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      67374  0.0  0.1 183080  2424 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root      67417  0.0  0.0  20164   984 ?        Ss   01:45   0:00  |   \_ jailshell (cloudsms) [67531] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  67531  0.0  0.0  20164   260 ?        S    01:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  67532  0.0  0.0 113284  1212 ?        S    01:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  67535  0.0  0.0  51892  1796 ?        R    01:45   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue1.php
root      67375  0.0  0.1 183080  2424 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root      67422  0.0  0.0 113284  1212 ?        Ss   01:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      67430  2.0  0.4 188220 11100 ?        S    01:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      67528  0.0  0.0 160224  2344 ?        R    01:45   0:00  |           \_ top -n 2 -b -c
root      67376  0.0  0.1 183080  2428 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root      67424  0.0  0.0  20164   972 ?        Ss   01:45   0:00  |   \_ jailshell (pactpay) [67449] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   67449  0.0  0.0  20164   260 ?        S    01:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   67457  0.0  0.7 476724 17480 ?        S    01:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      67378  0.0  0.1 183080  2428 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root      67415  0.0  0.0  20164   968 ?        Ss   01:45   0:00      \_ jailshell (nigeria) [67462] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   67462  0.0  0.0  20164   260 ?        S    01:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   67465  0.0  0.6 400652 15936 ?        S    01:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3716 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13436 ?        Ssl  Nov12   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   460 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  47264  2000 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.0  48324  2408 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   284 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   568 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  47112  1880 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.0  48000  2200 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24528  2052 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   636 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1404 ?        S    Nov12   0:00  \_ dovecot/auth
root        932  0.0  0.0 572372   612 ?        Ssl  Nov12   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.3 5654048 33104 ?       SLsl Nov12   0:11 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400    56 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:02 /usr/sbin/sshd -D
root      66720  0.0  0.1 111304  4272 ?        Ss   01:44   0:00  \_ sshd: [accepted]
root      66920  0.0  0.1 111304  4268 ?        Ss   01:44   0:00  \_ sshd: [accepted]
root      66962  0.0  0.1 111304  4268 ?        Ss   01:44   0:00  \_ sshd: [accepted]
sshd      66963  0.0  0.1 115644  2624 ?        S    01:44   0:00  |   \_ sshd: [net]
root      67055  0.0  0.1 111304  4272 ?        Ss   01:44   0:00  \_ sshd: [accepted]
root      67115  0.0  0.1 111304  4272 ?        Ss   01:44   0:00  \_ sshd: [accepted]
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268    68 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   200 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.2 636988 30864 ?        Ssl  Nov12   0:11 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.0 281936  1960 ?        Ssl  Nov12   0:05 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   332 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   468 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.2 261288  6144 ?        Ss   Nov12   0:03 cpsrvd (SSL) - waiting for connections                   
root      67355  0.0  0.0      0     0 ?        Z    01:45   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   312 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1  9.1 1901916 220260 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1880 ?        Ss   Nov12   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  66687 12.1  2.9 460452 71752 ?        S    01:44   0:06  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  66703 11.6  2.8 459288 69452 ?        S    01:44   0:05  \_ php-fpm: pool health_oyostate_gov_ng
workflo+  66904 11.1  2.4 520648 59964 ?        S    01:44   0:03  \_ php-fpm: pool blog_workflow-management-software_com
healtho+  66964 11.6  2.9 461848 71820 ?        R    01:44   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  67181 11.4  2.6 455192 65260 ?        S    01:44   0:01  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   67272  0.0  0.1 397064  4472 ?        S    01:44   0:00  \_ php-fpm: pool nigeriadecide_org
workflo+  67359  0.0  0.0 397064  1972 ?        S    01:45   0:00  \_ php-fpm: pool blog_workflow-management-software_com
cpanelc+   1006  0.0  0.1  10656  3696 ?        Ss   Nov12   0:16 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2932 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.2 248152  5980 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  3.8 306476 93568 ?        S    Nov12   0:03  \_ spamd child
root       7886  0.0  3.8 261428 93292 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3216 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.7 410616 17824 ?        Ss   Nov12   0:17 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.3 209372  8036 ?        Ss   Nov12   0:02 tailwatchd
root       1234  0.0  0.1 167452  4160 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  0.8 262224 20952 ?        Ss   Nov12   0:01 cpdavd - accepting connections on: 2091, 2077, 2078
root       1642  0.0  0.0 299272   392 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1352 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.4  8.8 1457796 213096 ?      Sl   Nov12   4:54 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:02 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12832   380 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   288 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12872   392 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    60622  0.1  0.7 277676 18460 ?        S    01:38   0:00  \_ /usr/sbin/httpd -k start
nobody    63373  0.1  0.7 277924 17668 ?        S    01:40   0:00  \_ /usr/sbin/httpd -k start
nobody    63710  0.2  0.7 277540 17964 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
cloudw    67533  0.0  0.5 283332 12292 ?        S    01:45   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    64497  0.1  0.7 277804 18052 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    64508  0.1  0.7 277804 17648 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    64580  0.1  0.7 277720 17588 ?        S    01:41   0:00  \_ /usr/sbin/httpd -k start
nobody    64637  0.1  0.7 277788 17968 ?        S    01:42   0:00  \_ /usr/sbin/httpd -k start
nobody    65158  0.1  0.7 277804 17740 ?        S    01:42   0:00  \_ /usr/sbin/httpd -k start
nobody    65515  0.1  0.7 277932 17608 ?        S    01:42   0:00  \_ /usr/sbin/httpd -k start
nobody    65950  0.2  0.7 277920 17112 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    66331  0.1  0.7 277720 17624 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    66354  0.1  0.7 277784 17408 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    66368  0.0  0.7 277720 17556 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    66369  0.1  0.7 277804 17524 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    66370  0.1  0.7 277656 17520 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    66394  0.1  0.7 277784 17224 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    66396  0.1  0.7 277784 17356 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    66399  0.1  0.7 277536 17348 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    66400  0.1  0.7 277784 17620 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    66401  0.2  0.7 277804 17520 ?        S    01:43   0:00  \_ /usr/sbin/httpd -k start
nobody    66919  0.1  0.7 277924 17208 ?        S    01:44   0:00  \_ /usr/sbin/httpd -k start
nobody    67352  0.0  0.6 277640 15524 ?        S    01:44   0:00  \_ /usr/sbin/httpd -k start
nobody    67446  0.0  0.6 277640 15532 ?        S    01:45   0:00  \_ /usr/sbin/httpd -k start
nobody    67447  0.0  0.6 277640 15532 ?        S    01:45   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.3 181876  8048 ?        Ss   00:00   0:05 lfd - sleeping
root      23911  0.0  0.4 1276100 10708 ?       Ssl  01:00   0:00 /usr/bin/cspdaemon
root      23946  0.0  0.4 1277056 11532 ?       Ssl  01:00   0:00 /usr/bin/checkstatus
## mysql stats
Uptime: 20523  Threads: 5  Questions: 1799634  Slow queries: 0  Opens: 6614  Flush tables: 1  Open tables: 2000  Queries per second avg: 87.688
*************************** 1. row ***************************
     Id: 25400
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 25403
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 25406
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 25412
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 10.30.9.138 TIME_WAIT
      1 114.119.128.35 TIME_WAIT
      1 114.119.140.113 TIME_WAIT
      1 114.119.143.119 TIME_WAIT
      1 148.113.130.164 TIME_WAIT
      1 148.113.130.66 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 181.214.50.120 TIME_WAIT
      1 185.191.171.16 TIME_WAIT
      1 185.191.171.4 TIME_WAIT
      1 190.111.120.14 TIME_WAIT
      1 ::1 TIME_WAIT
      1 202.79.161.74 TIME_WAIT
      1 207.46.13.36 TIME_WAIT
      1 66.249.70.197 TIME_WAIT
      1 66.249.70.200 TIME_WAIT
      1 74.7.230.2 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     74 167.172.65.25 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 01:45:02 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 5 hours 41 minutes 59 seconds
   Server load: 2.47 1.90 1.51
   Total accesses: 110933 - Total Traffic: 2.9 GB - Total Duration: 56339027
   CPU Usage: u3.55 s3.27 cu1415.08 cs1136.32 - 12.5% CPU load
   5.41 requests/sec - 149.9 kB/second - 27.7 kB/request - 507.865 ms/request
   24 requests currently being processed, 0 workers gracefully restarting, 0 idle workers

KKKKWKK.KKK.W..K..RWKKKKKW.K...KK.C.............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client     Protocol              VHost                           Request
   0-0  66919 1/12/5160  K 0.22 1    360 2584335 29.5  0.26  130.37 66.249.70.2   http/1.1 schoolplus.cloudware.ng:80      GET /?p=4063221715 HTTP/1.1
   1-0  67352 1/1/5254   K 0.00 1    323 2462762 31.5  0.03  130.14 66.249.64.163 http/1.1 schoolplus.cloudware.ng:80      GET /?p=30375869 HTTP/1.1
   2-0  65158 2/51/5057  K 0.59 2    366 2638041 59.6  1.03  146.53 66.249.70.195 http/1.1 schoolplus.cloudware.ng:80      GET /?p=3795314119 HTTP/1.1
   3-0  67446 1/1/5184   K 0.00 0    316 2741906 30.5  0.03  150.10 66.249.64.4   http/1.1 schoolplus.cloudware.ng:80      GET /?p=2023688896 HTTP/1.1
   4-0  63710 0/90/4955  W 2.11 0    0   2449777 0.0   2.22  128.85 192.178.4.104 http/1.1 schoolplus.cloudware.ng:80      GET /?p=2803102031 HTTP/1.1
   5-0  67447 1/1/5123   K 0.00 0    397 2642677 30.9  0.03  159.30 66.249.70.6   http/1.1 schoolplus.cloudware.ng:80      GET /?p=1028889375 HTTP/1.1
   6-0  65950 15/40/4809 K 1.09 2    409 2446646 464.6 1.16  128.85 66.249.70.193 http/1.1 schoolplus.cloudware.ng:80      GET /?p=2210548696 HTTP/1.1
   7-0  -     0/0/5626   . 0.00 58   0   2689917 0.0   0.00  149.96 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   8-0  66331 1/22/4314  K 0.43 1    337 2196804 29.3  0.66  111.06 66.249.64.170 http/1.1 schoolplus.cloudware.ng:80      GET /?p=3657536994 HTTP/1.1
   9-0  65515 4/47/4563  K 0.99 3    403 2319952 123.8 1.07  120.96 66.249.70.198 http/1.1 schoolplus.cloudware.ng:80      GET /?p=2687227228 HTTP/1.1
   10-0 64497 18/73/4661 K 1.24 1    245 2305460 170.4 1.47  128.92 95.91.110.210 http/1.1 blog.workflow-management-softwa GET /category/innovation/ HTTP/1.1
   11-0 -     0/0/4936   . 0.00 51   0   2531735 0.0   0.00  160.23 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   12-0 66354 0/16/4552  W 0.26 0    0   2228820 0.0   0.32  113.90 ::1           http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   13-0 -     0/0/3758   . 0.00 25   0   1778445 0.0   0.00  88.66  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   14-0 -     0/0/3919   . 0.00 38   0   2036458 0.0   0.00  119.17 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   15-0 63373 14/79/3320 K 1.93 4    266 1690940 439.0 2.03  85.74  66.249.70.200 http/1.1 schoolplus.cloudware.ng:80      GET /?p=3706952694 HTTP/1.1
   16-0 -     0/0/4621   . 0.00 46   0   2283219 0.0   0.00  123.66 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   17-0 -     0/0/5168   . 0.00 52   0   2671977 0.0   0.00  149.65 ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-0 66368 0/13/2598  R 0.18 8    351 1433167 0.0   0.40  70.28  213.231.4.64  http/1.1 cloudware.ng:443
   19-0 66369 23/27/3188 W 0.09 0    0   1711853 217.6 0.26  86.05  51.75.119.112 http/1.1 blog.workflow-management-softwa GET /tag/design/ HTTP/1.1
   20-0 64508 1/55/1963  K 1.09 0    367 1036508 29.5  1.22  49.77  192.178.4.98  http/1.1 schoolplus.cloudware.ng:80      GET /?p=3113560584 HTTP/1.1
   21-0 66370 9/20/2101  K 0.37 3    354 1112722 278.4 0.63  57.85  66.249.70.192 http/1.1 schoolplus.cloudware.ng:80      GET /?p=79665811 HTTP/1.1
   22-0 66394 1/19/2034  K 0.44 2    353 1100689 29.5  0.50  62.38  66.249.70.192 http/1.1 schoolplus.cloudware.ng:80      GET /?p=3719497512 HTTP/1.1
   23-0 64580 2/60/1482  K 1.40 4    267 776682  62.4  1.68  35.53  66.249.70.199 http/1.1 schoolplus.cloudware.ng:80      GET /?p=3194592058 HTTP/1.1
   24-0 64637 1/61/2264  K 1.43 1    350 938814  30.0  1.53  49.62  66.249.70.173 http/1.1 schoolplus.cloudware.ng:80      GET /?p=2432879706 HTTP/1.1
   25-0 60622 0/136/1405 W 2.66 0    0   751928  0.0   3.20  37.56  167.172.65.25 http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   26-0 -     0/0/740    . 0.00 57   0   395753  0.0   0.00  18.92  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 66396 5/22/873   K 0.54 2    352 469751  151.7 0.61  23.01  66.249.70.196 http/1.1 schoolplus.cloudware.ng:80      GET /?p=2457833252 HTTP/1.1
   28-0 -     0/0/1779   . 0.00 23   0   821556  0.0   0.00  44.79  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   29-0 -     0/0/495    . 0.00 40   0   273801  0.0   0.00  12.81  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 -     0/0/942    . 0.00 24   0   500592  0.0   0.00  21.92  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   31-0 66399 1/29/471   K 0.40 3    367 263466  29.2  0.87  11.91  66.249.70.198 http/1.1 schoolplus.cloudware.ng:80      GET /?p=2331990992 HTTP/1.1
   32-0 66400 2/16/344   K 0.29 2    423 194195  63.0  0.38  8.95   66.249.70.200 http/1.1 schoolplus.cloudware.ng:80      GET /?p=1088110782 HTTP/1.1
   33-0 -     0/0/482    . 0.00 48   0   283617  0.0   0.00  12.20  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 66401 1/30/423   C 0.73 0    457 256490  5.7   0.79  10.60  167.172.65.25 http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   35-0 -     0/0/153    . 0.00 50   0   82785   0.0   0.00  3.76   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/62     . 0.00 39   0   31081   0.0   0.00  1.39   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/220    . 0.00 284  0   129325  0.0   0.00  5.55   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/106    . 0.00 113  0   62326   0.0   0.00  2.38   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/71     . 0.00 281  0   33332   0.0   0.00  1.45   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/1120   . 0.00 1140 0   651566  0.0   0.00  32.12  ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/11     . 0.00 1153 0   1258    0.0   0.00  0.07   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/13     . 0.00 1146 0   4689    0.0   0.00  0.12   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/56     . 0.00 1114 0   30775   0.0   0.00  1.38   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/65     . 0.00 1079 0   29051   0.0   0.00  1.64   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/4      . 0.00 1142 0   2240    0.0   0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/6      . 0.00 1158 0   2519    0.0   0.00  0.09   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/272    . 0.00 351  0   144675  0.0   0.00  6.70   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/2      . 0.00 1172 0   3773    0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -     0/0/4      . 0.00 1166 0   2208    0.0   0.00  0.00   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -     0/0/55     . 0.00 1008 0   30413   0.0   0.00  3.67   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -     0/0/4      . 0.00 1167 0   3961    0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -     0/0/7      . 0.00 1161 0   2145    0.0   0.00  0.03   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -     0/0/31     . 0.00 1076 0   17077   0.0   0.00  0.64   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -     0/0/54     . 0.00 995  0   24170   0.0   0.00  1.01   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-0 -     0/0/7      . 0.00 1159 0   1791    0.0   0.00  0.05   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-0 -     0/0/9      . 0.00 1148 0   2519    0.0   0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-0 -     0/0/37     . 0.00 1080 0   23864   0.0   0.00  0.92   ::1           http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 363
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 17 seconds, (range: 2...63)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 30236
   total entries replaced since starting: 0
   total entries expired since starting: 29857
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 163 miss
   total removes since starting: 16 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit