403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-13.02.18.txt
 ## swap threshold exceeded
## server overview
2025-11-13.02.18 load[0] mem[62/71] mysql[1/8] httpd[32]
              total        used        free      shared  buff/cache   available
Mem:           2363        1406         165          23         791         771
Swap:          1999        1657         342
 02:18:01 up  6:15,  0 users,  load average: 0.43, 0.56, 0.69
## system overview
top - 02:18:01 up  6:15,  0 users,  load average: 0.43, 0.56, 0.69
Tasks: 225 total,   9 running, 215 sleeping,   0 stopped,   1 zombie
%Cpu(s): 50.0 us, 47.1 sy,  0.0 ni,  2.9 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   158252 free,  1451768 used,   810280 buff/cache
KiB Swap:  2047996 total,   350728 free,  1697268 used.   777912 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1781 mysql     20   0 1457796 214980   3780 S  25.0  8.9   5:24.98 /usr/sbin+
100485 nigeria   20   0  400652  15936  10220 R  12.5  0.7   0:00.02 /opt/cpan+
    13 root      rt   0       0      0      0 S   6.2  0.0   0:01.04 [migratio+
   357 root      20   0   40240   6932   6688 S   6.2  0.3   0:13.01 /usr/lib/+
   501 polkitd   20   0  612240    848    464 S   6.2  0.0   0:03.04 /usr/lib/+
   519 nscd      20   0 1062080   1348    608 S   6.2  0.1   0:19.29 /usr/sbin+
100490 pactpay   20   0  476460  15964  10408 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44428   3440   1516 R   0.0  0.1   0:31.58 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.60 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.11 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:23.48 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.46 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:25.97 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   148 root      20   0       0      0      0 S   0.0  0.0   0:00.49 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:02.59 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:02.41 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:01.10 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   382 root      20   0   45360      8      4 S   0.0  0.0   0:00.35 /usr/lib/+
   410 root      16  -4   55532    108      0 S   0.0  0.0   0:02.07 /sbin/aud+
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   497 root      20   0   24896   1432    800 D   0.0  0.1   0:05.13 /usr/lib/+
   500 root      20   0   21540    348    260 S   0.0  0.0   0:00.50 /usr/sbin+
   503 root      20   0  152780     72     28 S   0.0  0.0   0:00.01 /usr/sbin+
   504 root      20   0  224148   3060    800 S   0.0  0.1   0:00.31 queueproc+
   507 root      20   0   52852    204    116 S   0.0  0.0   0:00.01 /usr/sbin+
   514 dbus      20   0   58596   1308    612 S   0.0  0.1   0:11.63 /usr/bin/+
   521 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   529 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124512    852    416 S   0.0  0.0   0:00.63 /usr/sbin+
   577 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   590 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   591 root      20   0  108296      8      4 S   0.0  0.0   0:00.00 /sbin/age+
   614 mailnull  20   0   89120   3816    880 S   0.0  0.2   0:00.86 /usr/sbin+
   620 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   665 root       0 -20       0      0      0 S   0.0  0.0   0:02.24 [loop0]
   695 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   696 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   924 systuser  20   0  113016     64      0 S   0.0  0.0   0:00.01 /usr/loca+
   928 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   929 systuser  20   0  114016  13880   2788 S   0.0  0.6   0:05.48 /usr/loca+
   930 root      20   0  153404    220    140 S   0.0  0.0   0:00.47 pure-ftpd+
   931 root      20   0   51508    464    300 S   0.0  0.0   0:00.31 /usr/sbin+
   932 root      20   0  572372    612    140 S   0.0  0.0   0:01.99 /usr/bin/+
   933 telegraf  20   0 5654048  33792   6008 S   0.0  1.4   0:12.57 /usr/loca+
   935 memcach+  20   0  342400     56     56 S   0.0  0.0   0:00.50 /usr/bin/+
   939 root      20   0  111304    360    260 S   0.0  0.0   0:02.94 /usr/sbin+
   940 systuser  20   0   10132     36      0 S   0.0  0.0   0:00.01 /usr/loca+
   941 systuser  20   0  112268     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   950 root      20   0  386112    332    240 S   0.0  0.0   0:00.67 php-fpm: +
   961 named     20   0  636988  33116   1936 S   0.0  1.4   0:12.99 /usr/sbin+
   964 root      20   0  281936   6608   6076 S   0.0  0.3   0:06.12 /usr/sbin+
   981 root      20   0  436392    372    284 S   0.0  0.0   0:00.77 php-fpm: +
   984 root      20   0  385496    468    372 S   0.0  0.0   0:00.65 php-fpm: +
   985 root      20   0  261288   6252   1648 S   0.0  0.3   0:03.65 cpsrvd (S+
   989 root      20   0  392856    260    176 S   0.0  0.0   0:00.64 php-fpm: +
   992 root      20   0 1901916 232684    764 S   0.0  9.6   0:32.37 /usr/loca+
  1000 root      20   0  397344   1880    604 S   0.0  0.1   0:03.18 php-fpm: +
  1006 cpanelc+  20   0   10656   3696   2304 S   0.0  0.2   0:18.66 /usr/loca+
  1075 dovenull  20   0   47264   1992   1204 S   0.0  0.1   0:00.45 dovecot/p+
  1076 dovenull  20   0   48460   2844   1652 S   0.0  0.1   0:00.37 dovecot/i+
  1077 dovecot   20   0   10320    280    172 S   0.0  0.0   0:00.12 dovecot/a+
  1078 root      20   0   10452    568    376 S   0.0  0.0   0:00.27 dovecot/l+
  1079 dovenull  20   0   47112   2304   1556 S   0.0  0.1   0:00.35 dovecot/p+
  1080 dovenull  20   0   48000   2580   1540 S   0.0  0.1   0:00.27 dovecot/i+
  1084 root      20   0   24572   2276    504 S   0.0  0.1   0:00.15 dovecot/c+
  1088 dovecot   20   0   13568    596    392 S   0.0  0.0   0:00.05 dovecot/s+
  1121 systuser  20   0  157704   2932    928 S   0.0  0.1   0:00.11 SonarPush+
  1166 dovecot   20   0   41260   1560   1020 S   0.0  0.1   0:00.87 dovecot/a+
  1172 root      20   0  248152   5980   1220 S   0.0  0.2   0:05.54 /usr/loca+
  1173 wp-tool+  20   0  387556   3524   1656 S   0.0  0.1   0:00.25 /usr/bin/+
  1174 wp-tool+  20   0  410616  18236   1680 S   0.0  0.8   0:18.67 /usr/bin/+
  1232 root      20   0  209372  10192   2400 S   0.0  0.4   0:02.97 tailwatchd
  1234 root      20   0  167452   4168   2796 S   0.0  0.2   0:00.44 dnsadmin +
  1237 root      20   0  183900   6108   2872 S   0.0  0.3   0:01.15 cpdavd - +
  1642 root      20   0  299272    504    340 S   0.0  0.0   0:00.61 php-fpm: +
  1702 root      38  18  130416   1364    692 S   0.0  0.1   0:00.05 cpanellog+
  2059 root      20   0  267036   4968    484 S   0.0  0.2   0:02.73 /usr/sbin+
  2063 root      20   0   12816    380    212 S   0.0  0.0   0:02.79 /usr/loca+
  2064 root      20   0   12732    288    208 S   0.0  0.0   0:02.37 /usr/loca+
  2065 root      20   0   12852    392    216 S   0.0  0.0   0:02.62 /usr/loca+
  2089 root      20   0   53268      4      4 S   0.0  0.0   0:00.05 /usr/loca+
  7883 root      20   0  294720 106640   2416 S   0.0  4.4   0:04.86 spamd chi+
  7886 root      20   0  261428  93272   2544 S   0.0  3.9   0:00.32 spamd chi+
 23292 root      20   0  183048   1388    860 S   0.0  0.1   0:00.00 /usr/sbin+
 23359 root      20   0  113284    620    440 S   0.0  0.0   0:00.00 /bin/sh -+
 23372 root      20   0  108056    276    204 S   0.0  0.0   0:00.00 sleep 2h +
 47111 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
 47116 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.35 [kworker]
 51986 root      20   0       0      0      0 R   0.0  0.0   0:00.17 [kworker/+
 66521 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 70517 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
 72516 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 76167 root      20   0  182316   9196   1104 S   0.0  0.4   0:07.99 lfd - sle+
 82525 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 82830 root      20   0 1276100  10500    600 S   0.0  0.4   0:00.06 /usr/bin/+
 82872 root      20   0 1277312  11740    600 S   0.0  0.5   0:00.06 /usr/bin/+
 83762 root      20   0  123364    684    460 S   0.0  0.0   0:00.00 /usr/sbin+
 88739 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 93620 root      20   0       0      0      0 D   0.0  0.0   0:00.01 [kworker/+
 94478 nobody    20   0  277788  17812   3736 S   0.0  0.7   0:00.54 /usr/sbin+
 94588 nobody    20   0  277576  17788   3772 S   0.0  0.7   0:00.44 /usr/sbin+
 94658 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 94757 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 95584 nobody    20   0  277784  17540   3600 S   0.0  0.7   0:00.59 /usr/sbin+
 96561 nobody    20   0  277720  17772   3720 S   0.0  0.7   0:00.31 /usr/sbin+
 97455 nobody    20   0  277784  18028   3760 S   0.0  0.7   0:00.27 /usr/sbin+
 97557 nobody    20   0  277812  18428   4080 S   0.0  0.8   0:00.37 /usr/sbin+
 98235 nobody    20   0  277920  17444   3664 S   0.0  0.7   0:00.24 /usr/sbin+
 98451 nobody    20   0  277560  17360   3632 S   0.0  0.7   0:00.20 /usr/sbin+
 98467 nobody    20   0  277784  18224   3872 S   0.0  0.8   0:00.17 /usr/sbin+
 98468 nobody    20   0  277784  17748   3668 S   0.0  0.7   0:00.17 /usr/sbin+
 98469 nobody    20   0  277784  17668   3692 S   0.0  0.7   0:00.15 /usr/sbin+
 98486 nobody    20   0  277784  17656   3616 S   0.0  0.7   0:00.23 /usr/sbin+
 98489 nobody    20   0  277784  17236   3348 S   0.0  0.7   0:00.24 /usr/sbin+
 98803 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 99061 mailnull  20   0   89500   5672   2444 S   0.0  0.2   0:00.00 /usr/sbin+
 99141 nobody    20   0  277536  17296   3608 S   0.0  0.7   0:00.12 /usr/sbin+
 99435 nobody    20   0  277784  17428   3656 S   0.0  0.7   0:00.09 /usr/sbin+
 99511 nobody    20   0  277784  17096   3260 S   0.0  0.7   0:00.16 /usr/sbin+
 99522 nobody    20   0  277924  17456   3700 S   0.0  0.7   0:00.08 /usr/sbin+
 99536 nobody    20   0  277784  15796   2144 S   0.0  0.7   0:00.11 /usr/sbin+
 99537 nobody    20   0  277784  17492   3572 S   0.0  0.7   0:00.09 /usr/sbin+
 99538 nobody    20   0  277784  17268   3564 S   0.0  0.7   0:00.09 /usr/sbin+
 99539 nobody    20   0  277784  17344   3552 S   0.0  0.7   0:00.10 /usr/sbin+
 99872 root      20   0  111304   4260   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 99931 mailnull  20   0   89500   4908   1744 S   0.0  0.2   0:00.00 /usr/sbin+
 99942 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
100215 nigeria   20   0  471924  12628   6608 S   0.0  0.5   0:00.27 php-fpm: +
100286 nobody    20   0  277784  15844   2160 S   0.0  0.7   0:00.01 /usr/sbin+
100298 nobody    20   0  277784  15696   2128 S   0.0  0.6   0:00.01 /usr/sbin+
100299 nobody    20   0  277780  17084   3464 S   0.0  0.7   0:00.00 /usr/sbin+
100312 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
100313 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
100314 nobody    20   0  277788  17052   3304 S   0.0  0.7   0:00.02 /usr/sbin+
100315 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
100323 nigeria   20   0  399832   9728   3900 S   0.0  0.4   0:00.18 php-fpm: +
100340 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
100341 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
100342 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
100343 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.01 /usr/sbin+
100344 nobody    20   0  277640  15528   2124 S   0.0  0.6   0:00.00 /usr/sbin+
100345 nobody    20   0  277788  16960   3380 S   0.0  0.7   0:00.01 /usr/sbin+
100346 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
100347 nobody    20   0  277640  15524   2120 S   0.0  0.6   0:00.00 /usr/sbin+
100379 root      20   0  111304   4444   3404 S   0.0  0.2   0:00.00 sshd: [ac+
100380 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
100402 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
100404 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
100405 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
100411 cloudw    20   0  352096  15232  10128 S   0.0  0.6   0:00.00 /opt/cpan+
100414 root      20   0  183080   2424   1580 S   0.0  0.1   0:00.00 /usr/sbin+
100415 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100416 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100417 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100419 root      20   0  183080   2428   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100420 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100421 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100422 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100423 root      20   0  183080   2424   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100424 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100425 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100426 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100427 root      20   0  183076   2484   1636 S   0.0  0.1   0:00.00 /usr/sbin+
100428 root      20   0  183080   2420   1584 S   0.0  0.1   0:00.00 /usr/sbin+
100431 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
100432 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
100433 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
100455 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
100457 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
100458 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
100459 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
100460 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
100461 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
100462 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
100463 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
100465 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
100466 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
100468 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
100470 root      20   0   20164    964    768 S   0.0  0.0   0:00.00 jailshell+
100471 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
100482 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
100486 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
100487 cloudsms  20   0       0      0      0 R   0.0  0.0   0:00.00 [jailshel+
100493 cloudw    20   0  112976   5268   3780 R   0.0  0.2   0:00.00 /opt/cpan+
100496 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
100497 nobody    20   0  277788  14076      0 R   0.0  0.6   0:00.00 /usr/sbin+
100498 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kthreadd]
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov12   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov12   0:23  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov12   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov12   0:25  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov12   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [deferwq]
root        148  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/1:1H]
root        267  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [kworker/0:1H]
root        276  0.0  0.0      0     0 ?        S    Nov12   0:01  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root        415  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [rpciod]
root        416  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [xprtiod]
root        620  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [kvm-irqfd-clean]
root        665  0.0  0.0      0     0 ?        S<   Nov12   0:02  \_ [loop0]
root        695  0.0  0.0      0     0 ?        S    Nov12   0:00  \_ [jbd2/loop0-8]
root        696  0.0  0.0      0     0 ?        S<   Nov12   0:00  \_ [ext4-rsv-conver]
root      51986  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/1:3]
root      66521  0.0  0.0      0     0 ?        S    01:44   0:00  \_ [kworker/u200:1]
root      70517  0.0  0.0      0     0 ?        D    01:48   0:00  \_ [kworker/1:0]
root      72516  0.0  0.0      0     0 ?        S    01:50   0:00  \_ [kworker/0:0]
root      82525  0.0  0.0      0     0 ?        S    02:00   0:00  \_ [kworker/1:4]
root      88739  0.0  0.0      0     0 ?        S    02:06   0:00  \_ [kworker/0:3]
root      93620  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/u200:2]
root      94658  0.0  0.0      0     0 ?        S    02:12   0:00  \_ [kworker/0:1]
root      94757  0.0  0.0      0     0 ?        S    02:12   0:00  \_ [kworker/0:2]
root     100498  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/0:4]
root     100499  0.0  0.0      0     0 ?        S    02:18   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44428  3440 ?        Rs   Nov12   0:31 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.2  40240  6932 ?        Ss   Nov12   0:13 /usr/lib/systemd/systemd-journald
root        382  0.0  0.0  45360     8 ?        Ss   Nov12   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   108 ?        S<sl Nov12   0:02 /sbin/auditd
root        497  0.0  0.0  24896  1432 ?        Ds   Nov12   0:05 /usr/lib/systemd/systemd-logind
root        500  0.0  0.0  21540   348 ?        Ss   Nov12   0:00 /usr/sbin/irqbalance --foreground
polkitd     501  0.0  0.0 612240   848 ?        Ssl  Nov12   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        503  0.0  0.0 152780    72 ?        Ss   Nov12   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        504  0.0  0.1 224148  3060 ?        Ss   Nov12   0:00 queueprocd - waiting up to 60s to process a task
root        507  0.0  0.0  52852   204 ?        Ss   Nov12   0:00 /usr/sbin/smartd -n -q never
dbus        514  0.0  0.0  58596  1308 ?        Ss   Nov12   0:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        519  0.0  0.0 1062080 1348 ?        Ssl  Nov12   0:19 /usr/sbin/nscd
rpc         521  0.0  0.0  69256     4 ?        Ss   Nov12   0:00 /sbin/rpcbind -w
root        529  0.0  0.0   4388     4 ?        Ss   Nov12   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208     0 ?        Ssl  Nov12   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124512   852 ?        Ss   Nov12   0:00 /usr/sbin/crond -n
root      23292  0.0  0.0 183048  1388 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      23359  0.0  0.0 113284   620 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      23372  0.0  0.0 108056   276 ?        S    01:00   0:00  |       \_ sleep 2h 2m
root     100414  0.0  0.1 183080  2424 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root     100431  0.0  0.0 113284  1212 ?        Ss   02:18   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root     100432  0.0  0.0 108052   356 ?        S    02:18   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root     100433  0.0  0.0 113288  1520 ?        S    02:18   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root     100500  0.0  0.0 153840  2096 ?        R    02:18   0:00  |               \_ ps auxf
root     100415  0.0  0.1 183080  2428 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root     100457  0.0  0.0  20164   808 ?        Ss   02:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root     100416  0.0  0.1 183080  2428 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root     100468  0.0  0.0  20164   808 ?        Ss   02:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root     100417  0.0  0.1 183080  2428 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root     100458  0.0  0.0  20164   808 ?        Ss   02:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root     100419  0.0  0.1 183080  2428 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root     100459  0.0  0.0  20164   808 ?        Ss   02:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root     100420  0.0  0.1 183080  2424 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root     100460  0.0  0.0  20164   804 ?        Ss   02:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root     100421  0.0  0.1 183080  2424 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root     100461  0.0  0.0  20164   804 ?        Ss   02:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root     100422  0.0  0.1 183080  2424 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root     100462  0.0  0.0  20164   804 ?        Ss   02:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root     100424  0.0  0.0 183080  2420 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root     100466  0.0  0.0  20164   808 ?        Ss   02:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root     100425  0.0  0.0 183080  2420 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root     100463  0.0  0.0  20164   804 ?        Ss   02:18   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root     100426  0.0  0.0 183080  2420 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root     100471  0.0  0.0  20164   968 ?        Ss   02:18   0:00  |   \_ jailshell (pactpay) [100486] ll -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay  100486  0.0  0.0  20164   260 ?        S    02:18   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay  100490  0.0  0.6 476460 15964 ?        Sl   02:18   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root     100428  0.0  0.0 183080  2420 ?        S    02:18   0:00  \_ /usr/sbin/CROND -n
root     100470  0.0  0.0  20164   964 ?        Ss   02:18   0:00      \_ jailshell (nigeria) [100482] ll -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria  100482  0.0  0.0  20164   256 ?        S    02:18   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria  100485  0.0  0.6 400652 15936 ?        S    02:18   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208     4 ?        Ss   Nov12   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 114704     0 ttyS0    Ss+  Nov12   0:00 /bin/bash
root        591  0.0  0.0 108296     8 tty1     Ss+  Nov12   0:00 /sbin/agetty --noclear tty1 linux
mailnull    614  0.0  0.1  89120  3816 ?        Ss   Nov12   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  99061  0.0  0.2  89500  5672 ?        S    02:16   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  99931  0.0  0.2  89500  4908 ?        S    02:17   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    924  0.0  0.0 113016    64 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    928  0.0  0.0  14068     0 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.5 114016 13880 ?        Ssl  Nov12   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        930  0.0  0.0 153404   220 ?        Ss   Nov12   0:00 pure-ftpd (SERVER)
root        931  0.0  0.0  51508   464 ?        Ss   Nov12   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1075  0.0  0.0  47264  1992 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1076  0.0  0.1  48460  2844 ?        S    Nov12   0:00  \_ dovecot/imap-login
dovecot    1077  0.0  0.0  10320   280 ?        S    Nov12   0:00  \_ dovecot/anvil
root       1078  0.0  0.0  10452   568 ?        S    Nov12   0:00  \_ dovecot/log
dovenull   1079  0.0  0.0  47112  2304 ?        S    Nov12   0:00  \_ dovecot/pop3-login
dovenull   1080  0.0  0.1  48000  2580 ?        S    Nov12   0:00  \_ dovecot/imap-login
root       1084  0.0  0.0  24572  2276 ?        S    Nov12   0:00  \_ dovecot/config
dovecot    1088  0.0  0.0  13568   596 ?        S    Nov12   0:00  \_ dovecot/stats
dovecot    1166  0.0  0.0  41260  1560 ?        S    Nov12   0:00  \_ dovecot/auth
root      98803  0.0  0.1  60820  4512 ?        S    02:16   0:00  \_ dovecot/lmtp
root        932  0.0  0.0 572372   612 ?        Ssl  Nov12   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
telegraf    933  0.0  1.3 5654048 33792 ?       SLsl Nov12   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    935  0.0  0.0 342400    56 ?        Ssl  Nov12   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        939  0.0  0.0 111304   360 ?        Ss   Nov12   0:02 /usr/sbin/sshd -D
root      99872  0.0  0.1 111304  4260 ?        Ss   02:17   0:00  \_ sshd: [accepted]
root      99942  0.0  0.1 111304  4264 ?        Ss   02:17   0:00  \_ sshd: [accepted]
root     100379  0.0  0.1 111304  4444 ?        Ss   02:17   0:00  \_ sshd: [accepted]
sshd     100380  0.0  0.1 115644  2632 ?        S    02:17   0:00  |   \_ sshd: [net]
root     100404  0.0  0.1 111304  4264 ?        Ss   02:18   0:00  \_ sshd: [accepted]
sshd     100405  0.0  0.1 115644  2628 ?        S    02:18   0:00      \_ sshd: [net]
systuser    940  0.0  0.0  10132    36 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    941  0.0  0.0 112268    68 ?        Ssl  Nov12   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 445028     0 ?        Ss   Nov12   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        950  0.0  0.0 386112   332 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       961  0.0  1.3 636988 33116 ?        Ssl  Nov12   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        964  0.0  0.2 281936  6616 ?        Ssl  Nov12   0:06 /usr/sbin/rsyslogd -n
root        981  0.0  0.0 436392   372 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        984  0.0  0.0 385496   468 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.2 261288  6252 ?        Ss   Nov12   0:03 cpsrvd (SSL) - waiting for connections                   
root     100402  0.0  0.0      0     0 ?        Z    02:18   0:00  \_ [cpaneld - servi] <defunct>
root        989  0.0  0.0 392856   260 ?        Ss   Nov12   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        992  0.1  9.6 1901916 232684 ?      Ssl  Nov12   0:32 /usr/local/cpanel/3rdparty/bin/clamd -F
root       1000  0.0  0.0 397344  1880 ?        Ss   Nov12   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria  100215  2.2  0.5 471924 12628 ?        S    02:17   0:00  \_ php-fpm: pool nigeriadecide_org
nigeria  100323  3.6  0.4 399832  9728 ?        S    02:17   0:00  \_ php-fpm: pool nigeriadecide_org
cpanelc+   1006  0.0  0.1  10656  3696 ?        Ss   Nov12   0:18 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1121  0.0  0.1 157704  2932 ?        S    Nov12   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  0.2 248152  5980 ?        Ss   Nov12   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7883  0.0  4.4 294720 106640 ?       S    Nov12   0:04  \_ spamd child
root       7886  0.0  3.8 261428 93272 ?        S    Nov12   0:00  \_ spamd child
wp-tool+   1173  0.0  0.1 387556  3524 ?        Ss   Nov12   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  0.7 410616 18236 ?        Ss   Nov12   0:18 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1232  0.0  0.4 209372 10192 ?        Ss   Nov12   0:02 tailwatchd
root       1234  0.0  0.1 167452  4168 ?        Ss   Nov12   0:00 dnsadmin - dormant mode
root       1237  0.0  0.2 183900  6108 ?        Ss   Nov12   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1642  0.0  0.0 299272   504 ?        Ss   Nov12   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1702  0.0  0.0 130416  1364 ?        SN   Nov12   0:00 cpanellogd - sleeping for logs
mysql      1781  1.4  8.8 1457796 214980 ?      Sl   Nov12   5:25 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       2059  0.0  0.2 267036  4968 ?        Ss   Nov12   0:02 /usr/sbin/httpd -k start
root       2063  0.0  0.0  12816   380 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2064  0.0  0.0  12732   288 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2065  0.0  0.0  12852   392 ?        S    Nov12   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2089  0.0  0.0  53268     4 ?        S    Nov12   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    94478  0.1  0.7 277788 17812 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
cloudw   100497  0.0  0.6 351952 15232 ?        S    02:18   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    94588  0.1  0.7 277576 17788 ?        S    02:11   0:00  \_ /usr/sbin/httpd -k start
nobody    95584  0.1  0.7 277784 17540 ?        S    02:12   0:00  \_ /usr/sbin/httpd -k start
nobody    96561  0.1  0.7 277720 17772 ?        S    02:13   0:00  \_ /usr/sbin/httpd -k start
nobody    97455  0.1  0.7 277784 18028 ?        S    02:14   0:00  \_ /usr/sbin/httpd -k start
nobody    97557  0.2  0.7 277812 18428 ?        S    02:15   0:00  \_ /usr/sbin/httpd -k start
nobody    98235  0.1  0.7 277920 17444 ?        S    02:15   0:00  \_ /usr/sbin/httpd -k start
nobody    98451  0.1  0.7 277560 17360 ?        S    02:15   0:00  \_ /usr/sbin/httpd -k start
nobody    98467  0.1  0.7 277784 18224 ?        S    02:15   0:00  \_ /usr/sbin/httpd -k start
nobody    98468  0.1  0.7 277784 17748 ?        S    02:15   0:00  \_ /usr/sbin/httpd -k start
nobody    98469  0.1  0.7 277784 17668 ?        S    02:15   0:00  \_ /usr/sbin/httpd -k start
nobody    98486  0.1  0.7 277784 17656 ?        S    02:15   0:00  \_ /usr/sbin/httpd -k start
nobody    98489  0.1  0.7 277784 17236 ?        S    02:15   0:00  \_ /usr/sbin/httpd -k start
nobody    99141  0.1  0.7 277536 17296 ?        S    02:16   0:00  \_ /usr/sbin/httpd -k start
nobody    99435  0.1  0.7 277784 17428 ?        S    02:16   0:00  \_ /usr/sbin/httpd -k start
nobody    99511  0.2  0.7 277784 17152 ?        S    02:16   0:00  \_ /usr/sbin/httpd -k start
nobody    99522  0.1  0.7 277924 17456 ?        S    02:16   0:00  \_ /usr/sbin/httpd -k start
nobody    99536  0.1  0.6 277784 15796 ?        S    02:16   0:00  \_ /usr/sbin/httpd -k start
nobody    99537  0.1  0.7 277784 17492 ?        S    02:16   0:00  \_ /usr/sbin/httpd -k start
nobody    99538  0.1  0.7 277784 17268 ?        S    02:16   0:00  \_ /usr/sbin/httpd -k start
nobody    99539  0.1  0.7 277784 17344 ?        S    02:16   0:00  \_ /usr/sbin/httpd -k start
nobody   100286  0.1  0.6 277784 15844 ?        S    02:17   0:00  \_ /usr/sbin/httpd -k start
nobody   100298  0.1  0.6 277784 15696 ?        S    02:17   0:00  \_ /usr/sbin/httpd -k start
nobody   100299  0.0  0.7 277780 17084 ?        S    02:17   0:00  \_ /usr/sbin/httpd -k start
nobody   100312  0.0  0.6 277640 15524 ?        S    02:17   0:00  \_ /usr/sbin/httpd -k start
nobody   100313  0.0  0.6 277640 15524 ?        S    02:17   0:00  \_ /usr/sbin/httpd -k start
nobody   100314  0.4  0.7 277788 17052 ?        S    02:17   0:00  \_ /usr/sbin/httpd -k start
nobody   100315  0.0  0.6 277640 15524 ?        S    02:17   0:00  \_ /usr/sbin/httpd -k start
cloudw   100493  0.0  0.6 351952 15232 ?        S    02:18   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody   100340  0.0  0.6 277640 15524 ?        S    02:17   0:00  \_ /usr/sbin/httpd -k start
nobody   100341  0.0  0.6 277640 15524 ?        S    02:17   0:00  \_ /usr/sbin/httpd -k start
nobody   100342  0.0  0.6 277640 15524 ?        S    02:17   0:00  \_ /usr/sbin/httpd -k start
nobody   100343  0.2  0.6 277640 15524 ?        S    02:17   0:00  \_ /usr/sbin/httpd -k start
nobody   100344  0.0  0.6 277640 15528 ?        S    02:17   0:00  \_ /usr/sbin/httpd -k start
nobody   100345  0.2  0.7 277788 16960 ?        S    02:17   0:00  \_ /usr/sbin/httpd -k start
nobody   100346  0.0  0.6 277640 15524 ?        S    02:17   0:00  \_ /usr/sbin/httpd -k start
nobody   100347  0.0  0.6 277640 15524 ?        S    02:17   0:00  \_ /usr/sbin/httpd -k start
oysipao+  47111  0.0  0.0   3148     8 ?        Ss   Nov12   0:00 [kworker]
oysipao+  47116  0.0  0.0   3152    36 ?        S    Nov12   0:00  \_ [kworker]
root      76167  0.0  0.3 182316  9196 ?        Ss   00:00   0:07 lfd - sleeping
root      82830  0.0  0.4 1276100 10500 ?       Ssl  02:00   0:00 /usr/bin/cspdaemon
root      82872  0.0  0.4 1277312 11740 ?       Ssl  02:00   0:00 /usr/bin/checkstatus
root      83762  0.0  0.0 123364   684 ?        Ss   02:01   0:00 /usr/sbin/anacron -s
## mysql stats
Uptime: 22502  Threads: 3  Questions: 1966519  Slow queries: 0  Opens: 7236  Flush tables: 1  Open tables: 2000  Queries per second avg: 87.393
*************************** 1. row ***************************
     Id: 28041
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: starting
   Info: NULL
*************************** 2. row ***************************
     Id: 28043
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 28046
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.137.160 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.98 TIME_WAIT
      1 ::1 TIME_WAIT
      1 207.46.13.168 TIME_WAIT
      1 43.135.185.59 TIME_WAIT
      1 51.161.37.204 TIME_WAIT
      1 54.39.136.149 TIME_WAIT
      1 66.249.64.129 TIME_WAIT
      1 66.249.70.3 TIME_WAIT
      1 74.7.228.139 TIME_WAIT
      1 74.7.230.28 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 114.119.128.50 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 66.249.70.200 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Oct 28 2025 23:52:55
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 13-Nov-2025 02:18:01 WAT
   Restart Time: Wednesday, 12-Nov-2025 20:03:03 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 14 minutes 58 seconds
   Server load: 0.43 0.56 0.69
   Total accesses: 124710 - Total Traffic: 3.3 GB - Total Duration: 63900965
   CPU Usage: u3.55 s3.99 cu1598.61 cs1291.21 - 12.9% CPU load
   5.54 requests/sec - 152.5 kB/second - 27.5 kB/request - 512.396 ms/request
   32 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

KKKKKK_KWK_K_KKKKWKKWKKK_KKKKKKKKKKK............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS  Req   Dur   Conn Child  Slot      Client      Protocol           VHost                                        Request
   0-0  100286 1/3/5621   K 0.02 0    305 2862645 31.8 0.06  142.43 66.249.64.65    http/1.1 schoolplus.cloudware.ng:80 GET /?p=4000651822 HTTP/1.1
   1-0  98235  2/44/5711  K 0.97 4    374 2718192 60.1 1.04  142.34 66.249.64.161   http/1.1 schoolplus.cloudware.ng:80 GET /?p=193912574 HTTP/1.1
   2-0  99435  1/16/5597  K 0.36 1    308 2969766 32.4 0.41  161.35 66.249.64.15    http/1.1 schoolplus.cloudware.ng:80 GET /odr/order/apiGetCartItems/ HTTP/1.1
   3-0  100298 1/2/5643   K 0.03 0    269 2975656 28.7 0.06  161.04 66.249.70.161   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2419416569 HTTP/1.1
   4-0  97455  2/81/5419  K 1.05 0    317 2686090 64.2 1.06  139.98 66.249.70.38    http/1.1 schoolplus.cloudware.ng:80 GET /odr/order/apiGetCartItems/ HTTP/1.1
   5-0  99141  1/20/5520  K 0.48 3    349 2864512 30.4 0.53  169.89 66.249.70.163   http/1.1 schoolplus.cloudware.ng:80 GET /?p=325020569 HTTP/1.1
   6-0  100299 0/3/5347   _ 0.02 0    0   2701698 0.0  0.04  141.78 114.119.128.50  http/1.1 nescrow.com.ng:443         GET /robots.txt HTTP/1.1
   7-0  99511  1/28/6095  K 0.73 0    355 2961475 29.5 0.79  163.40 66.249.64.76    http/1.1 schoolplus.cloudware.ng:80 GET /?p=288212339 HTTP/1.1
   8-0  94478  0/97/4812  W 2.39 0    0   2476329 0.0  2.48  124.40 66.249.64.69    http/1.1 schoolplus.cloudware.ng:80 GET /?p=3773852559 HTTP/1.1
   9-0  98451  1/33/5020  K 1.11 1    262 2591828 29.5 0.90  133.11 66.249.64.172   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2223225705 HTTP/1.1
   10-0 100312 0/1/5049   _ 0.00 0    386 2524818 0.0  0.03  138.56 66.249.70.65    http/1.1 schoolplus.cloudware.ng:80 GET /?p=914086578 HTTP/1.1
   11-0 99522  14/24/5293 K 0.23 0    6   2727638 90.8 0.30  169.04 74.7.227.82     http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?lga=Ideato%20south&state=Imo&war
   12-0 100313 0/1/4962   _ 0.00 0    378 2456700 0.0  0.03  122.26 66.249.70.8     http/1.1 schoolplus.cloudware.ng:80 GET /?p=3391341633 HTTP/1.1
   13-0 100314 2/3/4226   K 0.04 2    407 1995763 63.3 0.07  99.31  66.249.70.69    http/1.1 schoolplus.cloudware.ng:80 GET /?p=1878195426 HTTP/1.1
   14-0 99536  1/18/4401  K 0.49 1    364 2344257 30.3 0.55  130.64 66.249.70.34    http/1.1 schoolplus.cloudware.ng:80 GET /?p=1528105584 HTTP/1.1
   15-0 96561  1/49/3679  K 1.34 0    296 1902994 32.4 1.59  96.83  66.249.64.72    http/1.1 schoolplus.cloudware.ng:80 GET /odr/order/apiGetCartItems/ HTTP/1.1
   16-0 97557  5/68/5392  K 1.70 1    27  2613082 31.5 1.76  139.46 147.135.213.175 http/1.1 cloudsms.com.ng:443        GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   17-0 98467  0/31/5497  W 0.72 0    0   2860882 0.0  0.83  158.44 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   18-0 98468  1/31/2978  K 0.95 0    284 1645623 28.7 0.75  79.97  66.249.64.35    http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1828590
   19-0 98469  1/28/3551  K 0.61 1    349 1928221 29.5 0.70  94.65  66.249.70.34    http/1.1 schoolplus.cloudware.ng:80 GET /?p=2283313261 HTTP/1.1
   20-0 100315 0/1/2346   W 0.00 0    0   1192007 0.0  0.03  57.20  66.249.64.6     http/1.1 schoolplus.cloudware.ng:80 GET /?p=3307084276 HTTP/1.1
   21-0 99537  1/16/2415  K 0.39 1    315 1291279 31.1 0.43  66.00  66.249.64.162   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1195890741 HTTP/1.1
   22-0 98486  1/38/2406  K 0.99 1    363 1309326 30.3 1.03  72.02  66.249.70.142   http/1.1 schoolplus.cloudware.ng:80 GET /?p=746081953 HTTP/1.1
   23-0 99538  2/16/1841  K 0.38 1    344 985955  60.1 0.43  42.34  66.249.70.64    http/1.1 schoolplus.cloudware.ng:80 GET /?p=3307265323 HTTP/1.1
   24-0 99539  0/18/2678  _ 0.46 0    0   1193833 0.0  0.48  61.66  ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   25-0 100340 1/1/1718   K 0.00 3    415 924089  31.2 0.03  48.59  66.249.70.194   http/1.1 schoolplus.cloudware.ng:80 GET /?p=4053540410 HTTP/1.1
   26-0 98489  1/39/1001  K 1.04 2    406 548478  31.0 1.12  26.08  66.249.70.101   http/1.1 schoolplus.cloudware.ng:80 GET /?p=130146386 HTTP/1.1
   27-0 100341 1/1/1060   K 0.00 3    407 583228  31.3 0.03  28.00  66.249.64.166   http/1.1 schoolplus.cloudware.ng:80 GET /?p=234880229 HTTP/1.1
   28-0 100342 1/1/2082   K 0.00 3    353 959529  29.9 0.03  51.11  66.249.70.132   http/1.1 schoolplus.cloudware.ng:80 GET /?p=699223032 HTTP/1.1
   29-0 100343 1/1/695    K 0.01 2    403 387074  31.2 0.03  18.07  66.249.64.13    http/1.1 schoolplus.cloudware.ng:80 GET /?p=2475809496 HTTP/1.1
   30-0 100344 1/1/1176   K 0.00 3    366 629973  30.0 0.03  28.15  66.249.64.169   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1378030006 HTTP/1.1
   31-0 95584  1/98/843   K 2.71 0    308 486181  32.9 2.83  22.65  192.178.4.103   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3163917046 HTTP/1.1
   32-0 94588  1/74/685   K 1.95 4    406 424999  32.4 2.05  17.00  66.249.70.33    http/1.1 schoolplus.cloudware.ng:80 GET /odr/order/apiGetCartItems/ HTTP/1.1
   33-0 100345 1/2/665    K 0.00 1    382 385725  30.2 0.04  16.79  66.249.70.66    http/1.1 schoolplus.cloudware.ng:80 GET /?p=1334441418 HTTP/1.1
   34-0 100346 1/1/495    K 0.00 2    409 295383  30.1 0.03  12.54  66.249.64.5     http/1.1 schoolplus.cloudware.ng:80 GET /?p=2192795792 HTTP/1.1
   35-0 100347 1/1/338    K 0.00 3    350 127463  29.2 0.03  6.80   66.249.64.40    http/1.1 schoolplus.cloudware.ng:80 GET /?p=969656074 HTTP/1.1
   36-0 -      0/0/131    . 0.00 221  0   69915   0.0  0.00  3.33   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -      0/0/230    . 0.00 278  0   132831  0.0  0.00  5.73   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -      0/0/192    . 0.00 32   0   114448  0.0  0.00  4.70   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -      0/0/76     . 0.00 286  0   35313   0.0  0.00  1.53   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -      0/0/1126   . 0.00 285  4   653619  0.0  0.00  32.23  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -      0/0/69     . 0.00 112  0   34662   0.0  0.00  1.59   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -      0/0/16     . 0.00 279  0   6280    0.0  0.00  0.18   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -      0/0/56     . 0.00 3093 0   30775   0.0  0.00  1.38   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -      0/0/65     . 0.00 3058 0   29051   0.0  0.00  1.64   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -      0/0/4      . 0.00 3121 0   2240    0.0  0.00  0.04   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -      0/0/6      . 0.00 3137 0   2519    0.0  0.00  0.09   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -      0/0/272    . 0.00 2330 0   144675  0.0  0.00  6.70   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -      0/0/2      . 0.00 3150 0   3773    0.0  0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -      0/0/4      . 0.00 3144 0   2208    0.0  0.00  0.00   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -      0/0/55     . 0.00 2987 0   30413   0.0  0.00  3.67   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -      0/0/4      . 0.00 3145 0   3961    0.0  0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -      0/0/7      . 0.00 3140 0   2145    0.0  0.00  0.03   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -      0/0/31     . 0.00 3055 0   17077   0.0  0.00  0.64   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -      0/0/54     . 0.00 2974 0   24170   0.0  0.00  1.01   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -      0/0/7      . 0.00 3138 0   1791    0.0  0.00  0.05   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -      0/0/9      . 0.00 3127 0   2519    0.0  0.00  0.10   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -      0/0/37     . 0.00 3059 0   23864   0.0  0.00  0.92   ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 385
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 15 seconds, (range: 0...69)
   index usage: 6%, cache usage: 9%
   total entries stored since starting: 32562
   total entries replaced since starting: 0
   total entries expired since starting: 32155
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 10 hit, 173 miss
   total removes since starting: 22 hit, 9 miss
Youez - 2016 - github.com/yon3zu
LinuXploit