403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-14.01.24.txt
 ## mem threshold exceeded
 ## swap threshold exceeded
## server overview
2025-11-14.01.24 load[0] mem[83/46] mysql[5/7] httpd[33]
              total        used        free      shared  buff/cache   available
Mem:           2363        1873          71          19         418         311
Swap:          1999        1009         990
 01:24:02 up 24 min,  0 users,  load average: 0.30, 0.43, 0.43
## system overview
top - 01:24:02 up 24 min,  0 users,  load average: 0.30, 0.43, 0.43
Tasks: 221 total,   4 running, 216 sleeping,   0 stopped,   1 zombie
%Cpu(s): 69.7 us, 24.2 sy,  0.0 ni,  0.0 id,  3.0 wa,  0.0 hi,  3.0 si,  0.0 st
KiB Mem :  2420300 total,    77200 free,  1916100 used,   427000 buff/cache
KiB Swap:  2047996 total,  1014172 free,  1033824 used.   321920 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1748 mysql     20   0 1457540 207476   3572 S 113.3  8.6   0:19.72 /usr/sbin+
 30516 nigeria   20   0  404052  16140  10384 R  13.3  0.7   0:00.04 /opt/cpan+
 30558 cloudw    20   0  355492  15428  10292 S   6.7  0.6   0:00.01 /opt/cpan+
     1 root      20   0   44264   3420   1580 S   0.0  0.1   0:02.67 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     5 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.13 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:01.81 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.11 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.47 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    31 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    36 root      20   0       0      0      0 S   0.0  0.0   0:07.81 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   245 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:00.48 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:00.63 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   39496   5628   5324 S   0.0  0.2   0:00.76 /usr/lib/+
   383 root      20   0   45352    596    448 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    556    424 S   0.0  0.0   0:00.09 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   486 root      20   0   21540    568    456 S   0.0  0.0   0:00.03 /usr/sbin+
   487 root      20   0   52852    472    468 S   0.0  0.0   0:00.01 /usr/sbin+
   501 polkitd   20   0  610540   1112    760 S   0.0  0.0   0:00.23 /usr/lib/+
   502 root      20   0   24604   1296    964 S   0.0  0.1   0:00.36 /usr/lib/+
   503 root      20   0  224148   5696   1072 S   0.0  0.2   0:00.09 queueproc+
   504 dbus      20   0   58400   1416    876 S   0.0  0.1   0:00.83 /usr/bin/+
   510 nscd      20   0 1338588   1940    864 S   0.0  0.1   0:01.90 /usr/sbin+
   514 rpc       20   0   69256    252    144 S   0.0  0.0   0:00.01 /sbin/rpc+
   532 root      20   0    4388    252    248 S   0.0  0.0   0:00.00 /usr/sbin+
   533 root      20   0  195208    216    216 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0  152780    396    352 S   0.0  0.0   0:00.00 /usr/sbin+
   559 root      20   0   24208    144    144 S   0.0  0.0   0:00.00 /usr/sbin+
   560 root      20   0  124480    704    536 S   0.0  0.0   0:00.04 /usr/sbin+
   572 root      20   0  114704    364    364 S   0.0  0.0   0:00.02 /bin/bash
   573 root      20   0  108296    320    316 S   0.0  0.0   0:00.00 /sbin/age+
   599 mailnull  20   0   88988   3752    796 S   0.0  0.2   0:00.03 /usr/sbin+
   653 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:01.94 [loop0]
   680 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   681 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   922 root      20   0  439788  11508  11300 S   0.0  0.5   0:00.16 php-fpm: +
   924 root      20   0 1763124 619080    772 S   0.0 25.6   0:13.55 /usr/loca+
   927 named     20   0  785456  24920   1636 S   0.0  1.0   0:01.20 /usr/sbin+
   930 root      20   0  111304    736    632 S   0.0  0.0   0:00.10 /usr/sbin+
   931 cpanelc+  20   0    9832   2660   2360 R   0.0  0.1   0:01.33 /usr/loca+
   932 root      20   0  396248    808    632 S   0.0  0.0   0:00.11 php-fpm: +
   934 systuser  20   0  113272   1832      0 S   0.0  0.1   0:00.00 /usr/loca+
   937 root      20   0  153404    640    556 S   0.0  0.0   0:00.03 pure-ftpd+
   938 root      20   0  400740   3156    872 S   0.0  0.1   0:00.35 php-fpm: +
   939 root      20   0   51508    788    628 S   0.0  0.0   0:00.05 /usr/sbin+
   940 root      20   0  261160   6240   1640 S   0.0  0.3   0:00.34 cpsrvd (S+
   941 root      20   0  445028   2948   2948 S   0.0  0.1   0:00.06 sw-engine+
   943 memcach+  20   0  342400    260    260 S   0.0  0.0   0:00.03 /usr/bin/+
   944 root      20   0  216400   5824   4524 S   0.0  0.2   0:00.36 /usr/sbin+
   946 root      20   0  388892    880    664 S   0.0  0.0   0:00.11 php-fpm: +
   947 root      20   0 1277312  10640    296 S   0.0  0.4   0:27.95 /usr/bin/+
   948 telegraf  20   0 5654304  33200   2460 S   0.0  1.4   0:01.05 /usr/loca+
   953 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.00 /usr/loca+
   954 root      20   0 1276100   9380    256 S   0.0  0.4   0:25.47 /usr/bin/+
   959 root      20   0  389508    728    644 S   0.0  0.0   0:00.10 php-fpm: +
   961 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   962 root      20   0  572372   1164    700 S   0.0  0.0   0:00.23 /usr/bin/+
   967 systuser  20   0  114016  12164   2176 S   0.0  0.5   0:00.46 /usr/loca+
   969 systuser  20   0  112524   2084      0 S   0.0  0.1   0:00.00 /usr/loca+
  1074 dovenull  20   0   47048   2388   1704 S   0.0  0.1   0:00.04 dovecot/p+
  1075 dovenull  20   0   47056   2396   1784 S   0.0  0.1   0:00.01 dovecot/i+
  1076 dovecot   20   0   10320    528    420 S   0.0  0.0   0:00.00 dovecot/a+
  1077 root      20   0   10452    620    448 S   0.0  0.0   0:00.01 dovecot/l+
  1078 dovenull  20   0   46912   2120   1552 S   0.0  0.1   0:00.03 dovecot/p+
  1079 dovenull  20   0   47056   2352   1620 S   0.0  0.1   0:00.00 dovecot/i+
  1086 root      20   0   24396   2108    584 S   0.0  0.1   0:00.02 dovecot/c+
  1087 dovecot   20   0   13568    656    444 S   0.0  0.0   0:00.00 dovecot/s+
  1138 dovecot   20   0   41056   1184    780 R   0.0  0.0   0:00.03 dovecot/a+
  1152 systuser  20   0  157708   3140   1160 S   0.0  0.1   0:00.01 SonarPush+
  1153 root      20   0  248256 119260   2868 S   0.0  4.9   0:03.05 /usr/loca+
  1197 wp-tool+  20   0  387528  13336   1712 S   0.0  0.6   0:00.10 /usr/bin/+
  1198 wp-tool+  20   0  410452  35836   1568 S   0.0  1.5   0:01.46 /usr/bin/+
  1263 root      20   0  228228  17152   4248 S   0.0  0.7   0:00.10 dnsadmin +
  1264 root      20   0  209260  10020   1292 S   0.0  0.4   0:00.32 tailwatchd
  1265 root      20   0  183900    456    456 S   0.0  0.0   0:00.07 cpdavd - +
  1670 root      20   0  299272    952    572 S   0.0  0.0   0:00.04 php-fpm: +
  1711 root      38  18  130416   1504    784 S   0.0  0.1   0:00.00 cpanellog+
  1942 root      20   0  266980   8116    908 S   0.0  0.3   0:00.65 /usr/sbin+
  1943 root      20   0   12852    552    460 S   0.0  0.0   0:00.24 /usr/loca+
  1944 root      20   0   12732    508    432 S   0.0  0.0   0:00.21 /usr/loca+
  1945 root      20   0   12896    548    444 S   0.0  0.0   0:00.23 /usr/loca+
  1946 root      20   0   53268    376    376 S   0.0  0.0   0:00.04 /usr/loca+
  2005 root      20   0  180932   9532   1292 S   0.0  0.4   0:01.38 lfd - sle+
  2162 root      20   0  183052    968    396 S   0.0  0.0   0:00.00 /usr/sbin+
  2382 root      20   0  113284    356    180 S   0.0  0.0   0:00.00 /bin/sh -+
  2406 root      20   0  108056     72      0 S   0.0  0.0   0:00.00 sleep 4h +
  2431 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
  2439 oysipao+  20   0    3148    380      0 S   0.0  0.0   0:00.00 [kworker]
  3023 oysipao+  20   0    3152    460      0 S   0.0  0.0   0:00.03 [kworker]
  5955 root      20   0  262888 127760   1680 S   0.0  5.3   0:00.54 spamd chi+
  5956 root      20   0  248256 116860    504 S   0.0  4.8   0:00.00 spamd chi+
 13160 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 16555 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 20058 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 22350 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 24544 nobody    20   0  277484  18664   3720 S   0.0  0.8   0:00.38 /usr/sbin+
 24763 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25707 nobody    20   0  277476  18472   3648 S   0.0  0.8   0:00.33 /usr/sbin+
 25726 nobody    20   0  277476  18380   3616 S   0.0  0.8   0:00.39 /usr/sbin+
 25809 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 25832 oysipao+  20   0  394632  48064   6188 S   0.0  2.0   0:00.84 /usr/loca+
 26051 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 26694 nobody    20   0  277476  18116   3360 S   0.0  0.7   0:00.32 /usr/sbin+
 26696 nobody    20   0  277476  16996   2328 S   0.0  0.7   0:00.33 /usr/sbin+
 26718 nobody    20   0  277476  17048   2348 S   0.0  0.7   0:00.28 /usr/sbin+
 26720 nobody    20   0  277476  18432   3632 S   0.0  0.8   0:00.27 /usr/sbin+
 26724 nobody    20   0  277512  18232   3404 S   0.0  0.8   0:00.26 /usr/sbin+
 26801 nobody    20   0  277476  18428   3648 S   0.0  0.8   0:00.26 /usr/sbin+
 27840 nobody    20   0  277476  18404   3656 S   0.0  0.8   0:00.21 /usr/sbin+
 27859 nobody    20   0  277808  18564   3644 S   0.0  0.8   0:00.23 /usr/sbin+
 27860 nobody    20   0  277476  18592   3712 S   0.0  0.8   0:00.17 /usr/sbin+
 27952 nobody    20   0  277480  18280   3468 S   0.0  0.8   0:00.18 /usr/sbin+
 28028 nobody    20   0  277476  18464   3672 S   0.0  0.8   0:00.12 /usr/sbin+
 28030 nobody    20   0  277476  18744   3856 S   0.0  0.8   0:00.19 /usr/sbin+
 28336 root      20   0  228228  14300   1340 S   0.0  0.6   0:00.00 dnsadmin +
 28932 nobody    20   0  277480  18164   3436 S   0.0  0.8   0:00.14 /usr/sbin+
 28945 nobody    20   0  277476  18420   3632 S   0.0  0.8   0:00.09 /usr/sbin+
 28968 nobody    20   0  277476  17836   3112 S   0.0  0.7   0:00.08 /usr/sbin+
 29109 nobody    20   0  277476  16920   2236 S   0.0  0.7   0:00.09 /usr/sbin+
 29120 nobody    20   0  277476  18140   3420 S   0.0  0.7   0:00.15 /usr/sbin+
 29121 nobody    20   0  277476  18144   3424 S   0.0  0.7   0:00.12 /usr/sbin+
 29130 nobody    20   0  277476  18116   3360 S   0.0  0.7   0:00.09 /usr/sbin+
 29131 nobody    20   0  277476  17948   3224 S   0.0  0.7   0:00.10 /usr/sbin+
 29132 nobody    20   0  277480  18000   3240 S   0.0  0.7   0:00.12 /usr/sbin+
 29156 nobody    20   0  277484  16844   2172 S   0.0  0.7   0:00.10 /usr/sbin+
 29158 nobody    20   0  277476  17916   3180 S   0.0  0.7   0:00.07 /usr/sbin+
 29159 nobody    20   0  277476  18156   3420 S   0.0  0.8   0:00.06 /usr/sbin+
 29162 nobody    20   0  277476  18072   3348 S   0.0  0.7   0:00.06 /usr/sbin+
 29163 nobody    20   0  277476  16916   2232 S   0.0  0.7   0:00.15 /usr/sbin+
 29291 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 29315 root      20   0  178152  26300   2812 S   0.0  1.1   0:00.14 /usr/loca+
 29359 root      20   0  158816  15308   2712 S   0.0  0.6   0:00.07 /usr/loca+
 29381 root      20   0  195356  34712   3172 S   0.0  1.4   0:00.19 /usr/loca+
 29394 root      20   0   76780  16968   3040 S   0.0  0.7   0:00.11 /usr/loca+
 29508 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 29575 nobody    20   0  277812  18348   3460 S   0.0  0.8   0:00.03 /usr/sbin+
 30051 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 30066 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 30097 nobody    20   0  277476  16836   2172 S   0.0  0.7   0:00.03 /usr/sbin+
 30111 nobody    20   0  277476  18136   3416 S   0.0  0.7   0:00.03 /usr/sbin+
 30112 nobody    20   0  277476  16836   2172 S   0.0  0.7   0:00.02 /usr/sbin+
 30219 nobody    20   0  277476  16836   2172 S   0.0  0.7   0:00.02 /usr/sbin+
 30280 nobody    20   0  277476  16868   2204 S   0.0  0.7   0:00.03 /usr/sbin+
 30319 nobody    20   0  277476  16836   2172 S   0.0  0.7   0:00.01 /usr/sbin+
 30336 nobody    20   0  277484  16844   2172 S   0.0  0.7   0:00.02 /usr/sbin+
 30337 nobody    20   0  277476  16840   2176 S   0.0  0.7   0:00.00 /usr/sbin+
 30358 nobody    20   0  277476  16836   2172 S   0.0  0.7   0:00.01 /usr/sbin+
 30359 nobody    20   0  277328  16724   2228 S   0.0  0.7   0:00.00 /usr/sbin+
 30360 nobody    20   0  277324  16632   2164 S   0.0  0.7   0:00.00 /usr/sbin+
 30361 nobody    20   0  277476  16832   2168 S   0.0  0.7   0:00.01 /usr/sbin+
 30379 mailnull  20   0   89532   5580   2428 S   0.0  0.2   0:00.00 /usr/sbin+
 30457 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 30464 nigeria   20   0  400460   5484   2372 S   0.0  0.2   0:00.00 php-fpm: +
 30467 cloudw    20   0  400460   2964    564 S   0.0  0.1   0:00.00 php-fpm: +
 30473 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30474 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 30475 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 30477 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 30478 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 30479 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 30481 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 30483 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 30485 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 30487 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 30491 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 30492 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 30493 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 30494 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 30496 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 30499 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 30500 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 30501 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 30503 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 30505 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 30508 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 30513 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 30517 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
 30521 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 30529 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 30556 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:59   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kworker/0:0H]
root          5  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [kworker/u200:0]
root          6  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:59   0:01  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [watchdogd]
root         31  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [kworker/1:1]
root         36  0.5  0.0      0     0 ?        S    00:59   0:07  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:59   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:59   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [scsi_eh_0]
root        245  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [scsi_tmf_1]
root        249  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kworker/0:1H]
root        269  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [xprtiod]
root        653  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kvm-irqfd-clean]
root        668  0.1  0.0      0     0 ?        S<   00:59   0:01  \_ [loop0]
root        680  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [jbd2/loop0-8]
root        681  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [ext4-rsv-conver]
root       2431  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/0:3]
root      13160  0.0  0.0      0     0 ?        S    01:09   0:00  \_ [kworker/0:4]
root      16555  0.0  0.0      0     0 ?        S    01:12   0:00  \_ [kworker/1:2]
root      20058  0.0  0.0      0     0 ?        S    01:15   0:00  \_ [kworker/0:1]
root      22350  0.0  0.0      0     0 ?        S    01:17   0:00  \_ [kworker/u200:2]
root      24763  0.0  0.0      0     0 ?        S    01:19   0:00  \_ [kworker/1:3]
root      26051  0.0  0.0      0     0 ?        S    01:20   0:00  \_ [kworker/0:0]
root          1  0.1  0.1  44264  3420 ?        Ss   00:59   0:02 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.2  39496  5628 ?        Ss   00:59   0:00 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352   596 ?        Ss   00:59   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   556 ?        S<sl 00:59   0:00 /sbin/auditd
root        486  0.0  0.0  21540   568 ?        Ss   00:59   0:00 /usr/sbin/irqbalance --foreground
root        487  0.0  0.0  52852   472 ?        Ss   00:59   0:00 /usr/sbin/smartd -n -q never
polkitd     501  0.0  0.0 610540  1112 ?        Ssl  00:59   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        502  0.0  0.0  24604  1296 ?        Ss   00:59   0:00 /usr/lib/systemd/systemd-logind
root        503  0.0  0.2 224148  5696 ?        Ss   00:59   0:00 queueprocd - waiting up to 60s to process a task
dbus        504  0.0  0.0  58400  1416 ?        Ss   00:59   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        510  0.1  0.0 1338588 1940 ?        Ssl  00:59   0:01 /usr/sbin/nscd
rpc         514  0.0  0.0  69256   252 ?        Ss   00:59   0:00 /sbin/rpcbind -w
root        532  0.0  0.0   4388   252 ?        Ss   00:59   0:00 /usr/sbin/acpid
root        533  0.0  0.0 195208   216 ?        Ssl  00:59   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0 152780   396 ?        Ss   00:59   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        559  0.0  0.0  24208   144 ?        Ss   00:59   0:00 /usr/sbin/atd -f
root        560  0.0  0.0 124480   704 ?        Ss   00:59   0:00 /usr/sbin/crond -n
root       2162  0.0  0.0 183052   968 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       2382  0.0  0.0 113284   356 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       2406  0.0  0.0 108056    72 ?        S    01:00   0:00  |       \_ sleep 4h 33m
root      25809  0.0  0.0 183048  2152 ?        S    01:20   0:00  \_ /usr/sbin/CROND -n
oysipao+  25832  0.3  1.9 394632 48064 ?        Ssl  01:20   0:00  |   \_ /usr/local/cpanel/bin/autossl_check --all
root      29291  0.0  0.0 183048  2144 ?        S    01:23   0:00  \_ /usr/sbin/CROND -n
root      29315  0.2  1.0 178152 26300 ?        Ss   01:23   0:00  |   \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify
root      29359  0.1  0.6 158816 15308 ?        S    01:23   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpaddonsup --force --nohtml
root      29381  0.3  1.4 195356 34712 ?        S    01:23   0:00  |           \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons.pl action=update-nohtml&force=1
root      29394  0.1  0.7  76780 16968 ?        S    01:23   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpanelsync --signed=1 httpupdate.cpanel.net /cpanelsync/cpaddons/cPAddonsMD5 /usr/local/cpanel/cpaddons/cPAddonsMD5
root      30473  0.0  0.0 183048  2152 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      30492  0.0  0.0 113284  1208 ?        Ss   01:24   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      30508  0.0  0.0 108052   360 ?        S    01:24   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      30517  0.0  0.0 113288  1512 ?        S    01:24   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      30569  0.0  0.0 153840  2096 ?        R    01:24   0:00  |               \_ ps auxf
root      30474  0.0  0.0 183048  2148 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      30493  0.0  0.0  20164   804 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      30475  0.0  0.0 183048  2148 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      30494  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      30477  0.0  0.0 183048  2148 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      30496  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      30478  0.0  0.0 183048  2144 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      30501  0.0  0.0  20164   812 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      30479  0.0  0.0 183048  2144 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      30491  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      30481  0.0  0.0 183048  2140 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      30499  0.0  0.0  20164   804 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      30483  0.0  0.0 183048  2140 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      30503  0.0  0.0  20164   808 ?        Ss   01:24   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      30485  0.0  0.0 183048  2144 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      30505  0.0  0.0  20164   968 ?        Ss   01:24   0:00  |   \_ jailshell (pactpay) [30521] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   30521  0.0  0.0  20164   260 ?        S    01:24   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   30529  0.0  0.7 480124 17688 ?        S    01:24   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      30487  0.0  0.0 183048  2140 ?        S    01:24   0:00  \_ /usr/sbin/CROND -n
root      30500  0.0  0.0  20164   972 ?        Ss   01:24   0:00      \_ jailshell (nigeria) [30513] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   30513  0.0  0.0  20164   264 ?        S    01:24   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   30516  5.0  0.6 404052 16140 ?        S    01:24   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        572  0.0  0.0 114704   364 ttyS0    Ss+  00:59   0:00 /bin/bash
root        573  0.0  0.0 108296   320 tty1     Ss+  00:59   0:00 /sbin/agetty --noclear tty1 linux
mailnull    599  0.0  0.1  88988  3752 ?        Ss   00:59   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  30379  0.0  0.2  89532  5580 ?        R    01:23   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        922  0.0  0.4 439788 11508 ?        Ss   00:59   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        924  0.9 25.5 1763124 619080 ?      Ssl  00:59   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       927  0.0  1.0 785456 24920 ?        Ssl  00:59   0:01 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        930  0.0  0.0 111304   736 ?        Ss   00:59   0:00 /usr/sbin/sshd -D
root      29508  0.0  0.1 111304  4272 ?        Ss   01:23   0:00  \_ sshd: [accepted]
root      30051  0.0  0.1 111304  4264 ?        Ss   01:23   0:00  \_ sshd: [accepted]
sshd      30066  0.0  0.1 115644  2628 ?        S    01:23   0:00      \_ sshd: [net]
cpanelc+    931  0.0  0.1   9832  2660 ?        Rs   00:59   0:01 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        932  0.0  0.0 396248   808 ?        Ss   00:59   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser    934  0.0  0.0 113272  1832 ?        Ssl  00:59   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        937  0.0  0.0 153404   640 ?        Ss   00:59   0:00 pure-ftpd (SERVER)
root        938  0.0  0.1 400740  3156 ?        Ss   00:59   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   30464  0.0  0.2 400460  5484 ?        S    01:24   0:00  \_ php-fpm: pool nigeriadecide_org
cloudw    30467  0.0  0.1 400460  2964 ?        S    01:24   0:00  \_ php-fpm: pool wmoulms_cloudware_ng
root        939  0.0  0.0  51508   788 ?        Ss   00:59   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1074  0.0  0.0  47048  2388 ?        S    00:59   0:00  \_ dovecot/pop3-login
dovenull   1075  0.0  0.0  47056  2396 ?        S    00:59   0:00  \_ dovecot/imap-login
dovecot    1076  0.0  0.0  10320   528 ?        S    00:59   0:00  \_ dovecot/anvil
root       1077  0.0  0.0  10452   620 ?        S    00:59   0:00  \_ dovecot/log
dovenull   1078  0.0  0.0  46912  2120 ?        S    00:59   0:00  \_ dovecot/pop3-login
dovenull   1079  0.0  0.0  47056  2352 ?        S    00:59   0:00  \_ dovecot/imap-login
root       1086  0.0  0.0  24396  2108 ?        S    00:59   0:00  \_ dovecot/config
dovecot    1087  0.0  0.0  13568   656 ?        S    00:59   0:00  \_ dovecot/stats
dovecot    1138  0.0  0.0  41056  1184 ?        S    00:59   0:00  \_ dovecot/auth
root        940  0.0  0.2 261160  6240 ?        Ss   00:59   0:00 cpsrvd (SSL) - waiting for connections                   
root      30457  0.0  0.0      0     0 ?        Z    01:23   0:00  \_ [cpaneld - servi] <defunct>
root        941  0.0  0.1 445028  2948 ?        Ss   00:59   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
memcach+    943  0.0  0.0 342400   260 ?        Ssl  00:59   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        944  0.0  0.2 216400  5824 ?        Ssl  00:59   0:00 /usr/sbin/rsyslogd -n
root        946  0.0  0.0 388892   880 ?        Ss   00:59   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        947  1.8  0.4 1277312 10640 ?       Ssl  00:59   0:27 /usr/bin/checkstatus
telegraf    948  0.0  1.3 5654304 33200 ?       SLsl 00:59   0:01 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    953  0.0  0.0  10132    44 ?        Ssl  00:59   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        954  1.7  0.3 1276100 9380 ?        Ssl  00:59   0:25 /usr/bin/cspdaemon
root        959  0.0  0.0 389508   728 ?        Ss   00:59   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    961  0.0  0.0  12660    60 ?        Ssl  00:59   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        962  0.0  0.0 572372  1164 ?        Ssl  00:59   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    967  0.0  0.5 114016 12164 ?        Ssl  00:59   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    969  0.0  0.0 112524  2084 ?        Ssl  00:59   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser   1152  0.0  0.1 157708  3140 ?        S    00:59   0:00 SonarPush 0.6.12 [sleeping]
root       1153  0.2  4.9 248256 119260 ?       Ss   00:59   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5955  0.0  5.2 262888 127760 ?       S    01:03   0:00  \_ spamd child
root       5956  0.0  4.8 248256 116860 ?       S    01:03   0:00  \_ spamd child
wp-tool+   1197  0.0  0.5 387528 13336 ?        Ss   00:59   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1198  0.0  1.4 410452 35836 ?        Ss   00:59   0:01 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1263  0.0  0.7 228228 17152 ?        Ss   00:59   0:00 dnsadmin - server mode
root      28336  0.0  0.5 228228 14300 ?        S    01:22   0:00  \_ dnsadmin - waiting for request 3 on connected socket
root       1264  0.0  0.4 209260 10020 ?        Ss   00:59   0:00 tailwatchd
root       1265  0.0  0.0 183900   456 ?        Ss   00:59   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1670  0.0  0.0 299272   952 ?        Ss   00:59   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1711  0.0  0.0 130416  1504 ?        SN   00:59   0:00 cpanellogd - sleeping for logs
mysql      1748  1.3  8.5 1457540 207476 ?      Sl   00:59   0:19 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1942  0.0  0.3 266980  8116 ?        Ss   00:59   0:00 /usr/sbin/httpd -k start
root       1943  0.0  0.0  12852   552 ?        S    00:59   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1944  0.0  0.0  12732   508 ?        S    00:59   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1945  0.0  0.0  12896   548 ?        S    00:59   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1946  0.0  0.0  53268   376 ?        S    00:59   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    24544  0.1  0.7 277484 18664 ?        S    01:18   0:00  \_ /usr/sbin/httpd -k start
nobody    25707  0.1  0.7 277476 18472 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody    25726  0.1  0.7 277476 18380 ?        S    01:19   0:00  \_ /usr/sbin/httpd -k start
nobody    26694  0.1  0.7 277476 18116 ?        S    01:20   0:00  \_ /usr/sbin/httpd -k start
nobody    26696  0.1  0.7 277476 16996 ?        S    01:20   0:00  \_ /usr/sbin/httpd -k start
nobody    26718  0.1  0.7 277476 17048 ?        S    01:20   0:00  \_ /usr/sbin/httpd -k start
nobody    26720  0.1  0.7 277476 18432 ?        S    01:20   0:00  \_ /usr/sbin/httpd -k start
nobody    26724  0.1  0.7 277512 18232 ?        S    01:20   0:00  \_ /usr/sbin/httpd -k start
nobody    26801  0.1  0.7 277476 18428 ?        S    01:20   0:00  \_ /usr/sbin/httpd -k start
nobody    27840  0.1  0.7 277476 18404 ?        S    01:21   0:00  \_ /usr/sbin/httpd -k start
nobody    27859  0.1  0.7 277808 18564 ?        S    01:21   0:00  \_ /usr/sbin/httpd -k start
nobody    27860  0.1  0.7 277476 18592 ?        S    01:21   0:00  \_ /usr/sbin/httpd -k start
nobody    27952  0.1  0.7 277480 18280 ?        S    01:21   0:00  \_ /usr/sbin/httpd -k start
nobody    28028  0.0  0.7 277476 18464 ?        S    01:21   0:00  \_ /usr/sbin/httpd -k start
nobody    28030  0.1  0.7 277476 18744 ?        S    01:21   0:00  \_ /usr/sbin/httpd -k start
nobody    28932  0.1  0.7 277480 18164 ?        R    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    28945  0.1  0.7 277476 18420 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    28968  0.1  0.7 277476 17836 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    29109  0.1  0.6 277476 16920 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    29120  0.2  0.7 277476 18140 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    29121  0.1  0.7 277476 18144 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    29130  0.1  0.7 277476 18116 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    29131  0.1  0.7 277476 17948 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    29132  0.1  0.7 277480 18000 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    29156  0.1  0.6 277484 16844 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    29158  0.1  0.7 277476 17916 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    29159  0.0  0.7 277476 18156 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    29162  0.0  0.7 277476 18072 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    29163  0.2  0.6 277476 16916 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    29575  0.0  0.7 277812 18348 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    30097  0.1  0.6 277476 16836 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    30111  0.1  0.7 277476 18136 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    30112  0.0  0.6 277476 16836 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    30219  0.1  0.6 277476 16836 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    30280  0.2  0.6 277476 16868 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    30319  0.1  0.6 277476 16836 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    30336  0.2  0.6 277484 16844 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    30337  0.0  0.6 277476 16840 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    30358  0.1  0.6 277476 16836 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    30359  0.0  0.6 277328 16724 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
nobody    30360  0.0  0.6 277324 16632 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
cloudw    30558  0.0  0.6 355492 15428 ?        S    01:24   0:00  |   \_ /opt/cpanel/ea-php70/root/usr/bin/php-cgi
nobody    30361  0.1  0.6 277476 16832 ?        S    01:23   0:00  \_ /usr/sbin/httpd -k start
root       2005  0.0  0.3 180932  9532 ?        Ss   00:59   0:01 lfd - sleeping
oysipao+   2439  0.0  0.0   3148   380 ?        Ss   01:00   0:00 [kworker]
oysipao+   3023  0.0  0.0   3152   460 ?        S    01:00   0:00  \_ [kworker]
## mysql stats
Uptime: 1487  Threads: 3  Questions: 97623  Slow queries: 0  Opens: 1608  Flush tables: 1  Open tables: 1525  Queries per second avg: 65.650
*************************** 1. row ***************************
     Id: 1374
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 1375
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 1386
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.132.104 TIME_WAIT
      1 142.44.233.40 TIME_WAIT
      1 15.235.98.162 TIME_WAIT
      1 166.0.142.235 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 188.212.135.192 TIME_WAIT
      1 192.178.4.97 TIME_WAIT
      1 195.40.31.234 TIME_WAIT
      1 ::1 TIME_WAIT
      1 200.170.249.160 TIME_WAIT
      1 23.26.217.104 TIME_WAIT
      1 45.119.213.175 TIME_WAIT
      1 45.41.175.59 TIME_WAIT
      1 64.57.129.29 TIME_WAIT
      1 66.249.64.108 TIME_WAIT
      1 66.249.64.130 TIME_WAIT
      1 66.249.64.160 TIME_WAIT
      1 66.249.64.166 TIME_WAIT
      1 66.249.64.169 TIME_WAIT
      1 66.249.64.174 TIME_WAIT
      1 66.249.64.224 TIME_WAIT
      1 66.249.64.229 TIME_WAIT
      1 66.249.70.110 TIME_WAIT
      1 66.249.70.160 TIME_WAIT
      1 66.249.70.193 TIME_WAIT
      1 66.249.70.2 TIME_WAIT
      1 66.249.70.34 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      3 182.253.228.105 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 14-Nov-2025 01:24:02 WAT
   Restart Time: Friday, 14-Nov-2025 00:59:21 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 24 minutes 41 seconds
   Server load: 0.30 0.43 0.43
   Total accesses: 12235 - Total Traffic: 316.5 MB - Total Duration: 7104905
   CPU Usage: u4.06 s2.14 cu160.14 cs140.39 - 20.7% CPU load
   8.26 requests/sec - 218.8 kB/second - 26.5 kB/request - 580.703 ms/request
   32 requests currently being processed, 0 workers gracefully restarting, 10 idle workers

WK___WK_.KKKKKK_KKKK.K_.KKKKKKKKKKKW_KK_.K.K.__K................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req  Dur   Conn  Child Slot     Client      Protocol           VHost                                        Request
   0-0  28932 0/26/293   W 0.66 0    0   172581 0.0   0.71  7.72 66.249.70.197   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3443497258 HTTP/1.1
   1-0  30097 1/5/295    K 0.11 2    257 160389 30.4  0.15  7.35 66.249.64.40    http/1.1 schoolplus.cloudware.ng:80 GET /?p=1985596396 HTTP/1.1
   2-0  27840 0/41/273   _ 0.89 0    264 151399 0.0   0.97  6.63 66.249.64.70    http/1.1 schoolplus.cloudware.ng:80 GET /?p=3221238467 HTTP/1.1
   3-0  30111 0/5/312    _ 0.09 0    334 177544 0.0   0.13  8.33 66.249.64.166   http/1.1 schoolplus.cloudware.ng:80 GET /?p=533924519 HTTP/1.1
   4-0  30112 0/4/277    _ 0.07 0    275 154616 0.0   0.12  7.05 66.249.70.69    http/1.1 schoolplus.cloudware.ng:80 GET /?p=1039002282 HTTP/1.1
   5-0  29109 0/18/346   W 0.42 0    0   208378 0.0   0.48  9.08 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   6-0  27859 1/41/326   K 0.99 1    352 192159 29.6  1.07  8.53 66.249.64.46    http/1.1 schoolplus.cloudware.ng:80 GET /?p=508986547 HTTP/1.1
   7-0  26694 0/55/268   _ 1.46 0    271 157827 0.0   1.54  7.31 66.249.70.96    http/1.1 schoolplus.cloudware.ng:80 GET /?p=2011049058 HTTP/1.1
   8-0  -     0/0/319    . 0.00 3    0   194258 0.0   0.00  8.65 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   9-0  26696 1/55/275   K 1.50 4    283 171694 29.3  1.57  7.64 66.249.70.160   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3927024796 HTTP/1.1
   10-0 28945 1/19/256   K 0.36 1    347 144140 29.9  0.42  6.42 66.249.64.225   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2399488335 HTTP/1.1
   11-0 26718 79/115/347 K 0.97 1    0   161130 36.0  0.98  7.05 188.212.135.201 http/1.1 wmoulms.cloudware.ng:80    GET /wp-content/xleet.php HTTP/1.1
   12-0 27860 1/32/275   K 0.70 2    399 162182 31.1  0.78  7.15 66.249.70.2     http/1.1 schoolplus.cloudware.ng:80 GET /?p=3490057712 HTTP/1.1
   13-0 27952 1/35/287   K 0.78 3    311 168323 31.1  0.84  7.80 66.249.64.102   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2194692655 HTTP/1.1
   14-0 30219 1/4/278    K 0.08 3    276 172087 30.0  0.12  7.26 66.249.70.104   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2717070425 HTTP/1.1
   15-0 29575 0/8/269    _ 0.11 0    307 160451 0.0   0.16  7.08 66.249.64.234   http/1.1 schoolplus.cloudware.ng:80 GET /?p=828597399 HTTP/1.1
   16-0 26720 6/48/285   K 1.20 0    353 174261 179.6 1.25  7.59 66.249.64.130   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3411526028 HTTP/1.1
   17-0 30280 1/5/245    K 0.09 0    372 147543 29.3  0.12  6.44 66.249.64.109   http/1.1 schoolplus.cloudware.ng:80 GET /?p=700142575 HTTP/1.1
   18-0 24544 1/72/279   K 1.74 2    269 166133 29.4  1.84  7.44 192.178.4.101   http/1.1 schoolplus.cloudware.ng:80 GET /?p=991943686 HTTP/1.1
   19-0 28968 1/15/251   K 0.32 0    410 158389 31.4  0.39  6.41 66.249.64.67    http/1.1 schoolplus.cloudware.ng:80 GET /?p=662377225 HTTP/1.1
   20-0 -     0/0/301    . 0.00 1    0   165347 0.0   0.00  7.41 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 29120 1/25/261   K 0.66 1    410 165138 30.1  0.73  7.14 66.249.70.165   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2347828259 HTTP/1.1
   22-0 29121 0/20/255   _ 0.52 0    276 147669 0.0   0.57  6.47 66.249.64.172   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1245529245 HTTP/1.1
   23-0 -     0/0/256    . 0.00 2    0   148935 0.0   0.00  7.15 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 29130 1/16/248   K 0.40 4    306 148511 31.4  0.43  6.83 66.249.70.105   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2663916304 HTTP/1.1
   25-0 30319 1/2/213    K 0.02 2    267 131758 29.5  0.06  5.63 66.249.64.33    http/1.1 schoolplus.cloudware.ng:80 GET /?p=200520603 HTTP/1.1
   26-0 29131 1/17/235   K 0.45 3    415 146727 33.5  0.49  6.53 66.249.64.7     http/1.1 schoolplus.cloudware.ng:80 GET /?p=262365652 HTTP/1.1
   27-0 30336 1/2/228    K 0.03 1    406 136436 31.3  0.06  5.97 66.249.70.99    http/1.1 schoolplus.cloudware.ng:80 GET /?ctg/search/similarImageSearchResultView/?ctgItemCd=701136
   28-0 26724 1/50/262   K 1.17 1    408 143656 32.1  1.25  6.60 66.249.70.35    http/1.1 wptraining.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=108098
   29-0 29132 1/20/207   K 0.52 2    277 123806 30.6  0.57  5.34 66.249.70.35    http/1.1 schoolplus.cloudware.ng:80 GET /?p=660090575 HTTP/1.1
   30-0 30337 1/2/204    K 0.01 2    258 116124 30.5  0.06  5.24 66.249.70.97    http/1.1 schoolplus.cloudware.ng:80 GET /?p=130866936 HTTP/1.1
   31-0 30358 1/2/308    K 0.02 0    356 118067 29.3  0.06  5.16 66.249.64.224   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2226750099 HTTP/1.1
   32-0 29156 1/17/214   K 0.44 4    268 124846 31.4  0.51  5.71 66.249.64.11    http/1.1 schoolplus.cloudware.ng:80 GET /?p=2278210468 HTTP/1.1
   33-0 30359 1/2/205    K 0.00 3    323 117878 32.4  0.03  5.26 66.249.70.103   http/1.1 schoolplus.cloudware.ng:80 GET /?p=894667820 HTTP/1.1
   34-0 29158 1/12/237   K 0.31 2    314 138926 29.9  0.36  6.32 66.249.64.101   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3994901409 HTTP/1.1
   35-0 30360 0/1/194    W 0.00 0    0   114733 0.0   0.03  5.57 66.249.70.196   http/1.1 schoolplus.cloudware.ng:80 GET /?p=980833041 HTTP/1.1
   36-0 25707 0/60/206   _ 1.51 0    30  121407 0.0   1.56  5.27 52.4.76.156     http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/blog/images/2019elections/b
   37-0 29159 2/13/214   K 0.25 1    0   142704 1.4   0.28  6.27 182.253.228.105 http/1.1 oysipa.oyostate.gov.ng:80  GET /assets/js/kcfinder/upload HTTP/1.1
   38-0 25726 1/66/179   K 1.76 0    0   109634 0.7   1.81  4.78 182.253.228.105 http/1.1 oysipa.oyostate.gov.ng:80  GET /assets/js/mylibs/kcfinder-3.12/upload.php HTTP/1.1
   39-0 30361 0/2/199    _ 0.02 1    265 118651 0.0   0.06  5.24 66.249.70.131   http/1.1 schoolplus.cloudware.ng:80 GET /?p=35967618 HTTP/1.1
   40-0 -     0/0/198    . 0.00 38   0   117979 0.0   0.00  5.29 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 26801 1/46/201   K 1.14 1    403 121956 32.3  1.25  5.43 66.249.70.108   http/1.1 schoolplus.cloudware.ng:80 GET /?p=791784920 HTTP/1.1
   42-0 -     0/0/120    . 0.00 35   0   65901  0.0   0.00  2.97 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 28028 1/26/134   K 0.54 4    319 70633  31.3  0.59  3.20 66.249.70.36    http/1.1 schoolplus.cloudware.ng:80 GET /?p=3081037904 HTTP/1.1
   44-0 -     0/0/145    . 0.00 59   0   85877  0.0   0.00  3.67 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 28030 0/37/204   _ 0.84 0    1   123253 0.0   0.88  5.11 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   46-0 29162 0/12/99    _ 0.25 0    296 51737  0.0   0.31  2.25 66.249.70.68    http/1.1 schoolplus.cloudware.ng:80 GET /?p=1249526034 HTTP/1.1
   47-0 29163 2/26/117   K 0.68 3    341 69060  61.6  0.74  3.08 66.249.70.39    http/1.1 schoolplus.cloudware.ng:80 GET /?p=3110845926 HTTP/1.1
   48-0 -     0/0/78     . 0.00 261  0   45902  0.0   0.00  2.01 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/89     . 0.00 889  0   53640  0.0   0.00  2.41 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/20     . 0.00 1121 4   10474  0.0   0.00  0.51 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/83     . 0.00 998  0   48079  0.0   0.00  2.25 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/55     . 0.00 1063 0   26188  0.0   0.00  1.21 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/19     . 0.00 1074 0   10919  0.0   0.00  0.47 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/121    . 0.00 819  0   73806  0.0   0.00  3.58 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/64     . 0.00 877  0   39419  0.0   0.00  1.76 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/11     . 0.00 1113 0   3230   0.0   0.00  0.16 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/11     . 0.00 1112 0   3768   0.0   0.00  0.19 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/36     . 0.00 988  0   19653  0.0   0.00  0.89 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/41     . 0.00 1012 0   25201  0.0   0.00  1.12 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/7      . 0.00 1136 0   1763   0.0   0.00  0.10 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 344
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 22 seconds, (range: 1...109)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 1908
   total entries replaced since starting: 0
   total entries expired since starting: 1558
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 0 miss
   total removes since starting: 6 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit