403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-14.01.36.txt
 ## swap threshold exceeded
## server overview
2025-11-14.01.36 load[0] mem[67/57] mysql[1/7] httpd[30]
              total        used        free      shared  buff/cache   available
Mem:           2363        1569         138          21         656         616
Swap:          1999        1227         772
 01:36:01 up 36 min,  0 users,  load average: 0.39, 0.48, 0.48
## system overview
top - 01:36:01 up 36 min,  0 users,  load average: 0.39, 0.48, 0.48
Tasks: 221 total,   4 running, 215 sleeping,   0 stopped,   2 zombie
%Cpu(s): 51.6 us, 19.4 sy,  0.0 ni, 25.8 id,  3.2 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   161512 free,  1585160 used,   673628 buff/cache
KiB Swap:  2047996 total,   791036 free,  1256960 used.   653176 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1748 mysql     20   0 1457540 215016   3272 S  93.8  8.9   0:29.85 /usr/sbin+
 45569 nigeria   20   0  404052  16136  10380 R  12.5  0.7   0:00.03 /opt/cpan+
 45547 pactpay   20   0  480124  17692  11892 S   6.2  0.7   0:00.02 /opt/cpan+
     1 root      20   0   44264   3372   1524 S   0.0  0.1   0:03.54 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.19 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:02.74 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.17 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.69 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:09.86 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kauditd]
   238 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   245 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   262 root       0 -20       0      0      0 S   0.0  0.0   0:00.63 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:00.82 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   39496   7624   7320 S   0.0  0.3   0:01.24 /usr/lib/+
   383 root      20   0   45352    408    260 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    452    316 S   0.0  0.0   0:00.17 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   486 root      20   0   21540    480    368 S   0.0  0.0   0:00.04 /usr/sbin+
   487 root      20   0   52852    400    336 S   0.0  0.0   0:00.01 /usr/sbin+
   501 polkitd   20   0  610540    916    540 S   0.0  0.0   0:00.33 /usr/lib/+
   502 root      20   0   24604   1216    884 S   0.0  0.1   0:00.53 /usr/lib/+
   503 root      20   0  224288   6732    976 S   0.0  0.3   0:00.13 queueproc+
   504 dbus      20   0   58400   1324    724 S   0.0  0.1   0:01.20 /usr/bin/+
   510 nscd      20   0 1338588   2024    768 S   0.0  0.1   0:02.88 /usr/sbin+
   514 rpc       20   0   69256    288    184 S   0.0  0.0   0:00.01 /sbin/rpc+
   532 root      20   0    4388    124    120 S   0.0  0.0   0:00.00 /usr/sbin+
   533 root      20   0  195208     76     76 S   0.0  0.0   0:00.00 /usr/sbin+
   534 root      20   0  152780    244    200 S   0.0  0.0   0:00.00 /usr/sbin+
   559 root      20   0   24208     16     16 S   0.0  0.0   0:00.00 /usr/sbin+
   560 root      20   0  124480    568    400 S   0.0  0.0   0:00.07 /usr/sbin+
   572 root      20   0  114704    180    180 S   0.0  0.0   0:00.02 /bin/bash
   573 root      20   0  108296    176    172 S   0.0  0.0   0:00.00 /sbin/age+
   599 mailnull  20   0   88988   3428    472 S   0.0  0.1   0:00.06 /usr/sbin+
   653 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:01.97 [loop0]
   680 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   681 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   922 root      20   0  439788  11252  11036 S   0.0  0.5   0:00.18 php-fpm: +
   924 root      20   0 1763124 344868    360 S   0.0 14.2   0:13.55 /usr/loca+
   927 named     20   0  784452  29864   2144 S   0.0  1.2   0:01.80 /usr/sbin+
   930 root      20   0  111304    552    448 S   0.0  0.0   0:00.20 /usr/sbin+
   931 cpanelc+  20   0    9960   2804   2108 S   0.0  0.1   0:02.02 /usr/loca+
   932 root      20   0  396248    620    444 S   0.0  0.0   0:00.14 php-fpm: +
   934 systuser  20   0  113272   1832      0 S   0.0  0.1   0:00.00 /usr/loca+
   937 root      20   0  153404    440    356 S   0.0  0.0   0:00.04 pure-ftpd+
   938 root      20   0  400740   3024    736 S   0.0  0.1   0:00.60 php-fpm: +
   939 root      20   0   51656    832    492 S   0.0  0.0   0:00.06 /usr/sbin+
   940 root      20   0  261292   6596   1768 S   0.0  0.3   0:00.48 cpsrvd (S+
   941 root      20   0  445028   2712   2712 S   0.0  0.1   0:00.06 sw-engine+
   943 memcach+  20   0  342400    176    176 S   0.0  0.0   0:00.05 /usr/bin/+
   944 root      20   0  216400   7340   6020 S   0.0  0.3   0:00.59 /usr/sbin+
   946 root      20   0  388892    568    352 S   0.0  0.0   0:00.13 php-fpm: +
   947 root      20   0 1277312  10536    192 S   0.0  0.4   0:27.96 /usr/bin/+
   948 telegraf  20   0 5654304  36288   5220 S   0.0  1.5   0:01.50 /usr/loca+
   953 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.00 /usr/loca+
   954 root      20   0 1276100   9276    152 S   0.0  0.4   0:25.48 /usr/bin/+
   959 root      20   0  389508    736    532 S   0.0  0.0   0:00.13 php-fpm: +
   961 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   962 root      20   0  572372    932    468 S   0.0  0.0   0:00.29 /usr/bin/+
   967 systuser  20   0  114016  12472   2432 S   0.0  0.5   0:00.67 /usr/loca+
   969 systuser  20   0  112524   2084      0 S   0.0  0.1   0:00.00 /usr/loca+
  1076 dovecot   20   0   10320    488    376 S   0.0  0.0   0:00.00 dovecot/a+
  1152 systuser  20   0  157708   2960    980 S   0.0  0.1   0:00.03 SonarPush+
  1153 root      20   0  248256 117432   1040 S   0.0  4.9   0:03.14 /usr/loca+
  1197 wp-tool+  20   0  387528  13056   1432 S   0.0  0.5   0:00.10 /usr/bin/+
  1198 wp-tool+  20   0  410452  35632   1364 S   0.0  1.5   0:02.06 /usr/bin/+
  1263 root      20   0  167452   4160   2788 S   0.0  0.2   0:00.13 dnsadmin +
  1264 root      20   0  209260  10196   1420 S   0.0  0.4   0:00.39 tailwatchd
  1265 root      20   0  262224  24696   6768 S   0.0  1.0   0:00.16 cpdavd - +
  1670 root      20   0  299272    736    356 S   0.0  0.0   0:00.06 php-fpm: +
  1711 root      38  18  130416   1468    748 S   0.0  0.1   0:00.00 cpanellog+
  1942 root      20   0  266980  25924    824 S   0.0  1.1   0:01.20 /usr/sbin+
  2005 root      20   0  181052   9676   1212 S   0.0  0.4   0:02.07 lfd - sle+
  2162 root      20   0  183052    788    216 S   0.0  0.0   0:00.00 /usr/sbin+
  2382 root      20   0  113284    200     24 S   0.0  0.0   0:00.00 /bin/sh -+
  2406 root      20   0  108056     72      0 S   0.0  0.0   0:00.00 sleep 4h +
  2439 oysipao+  20   0    3148    380      0 S   0.0  0.0   0:00.00 [kworker]
  3023 oysipao+  20   0    3152    460      0 S   0.0  0.0   0:00.04 [kworker]
  5955 root      20   0  262888 127468   1240 S   0.0  5.3   0:00.60 spamd chi+
  5956 root      20   0  248256 116684    328 S   0.0  4.8   0:00.00 spamd chi+
 16555 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 20058 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 22350 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 24763 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 26051 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 33035 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 33363 dovenull  20   0   46912   2680   1660 S   0.0  0.1   0:00.01 dovecot/p+
 33364 dovenull  20   0   46780   1080    228 S   0.0  0.0   0:00.00 dovecot/i+
 33365 root      20   0   10452    844    464 S   0.0  0.0   0:00.00 dovecot/l+
 33366 dovenull  20   0   46772   1444    608 S   0.0  0.1   0:00.00 dovecot/p+
 33367 dovenull  20   0   47056   3236   2092 S   0.0  0.1   0:00.00 dovecot/i+
 33368 root      20   0   24396  11324    568 S   0.0  0.5   0:00.01 dovecot/c+
 33369 dovecot   20   0   13568    720    420 S   0.0  0.0   0:00.00 dovecot/s+
 33370 dovecot   20   0   41056   1428    712 S   0.0  0.1   0:00.01 dovecot/a+
 33371 root      20   0   12784    580    372 S   0.0  0.0   0:00.11 /usr/loca+
 33372 root      20   0   12732    536    348 S   0.0  0.0   0:00.10 /usr/loca+
 33373 root      20   0   12804    592    372 S   0.0  0.0   0:00.11 /usr/loca+
 33374 root      20   0   53268   9660    272 S   0.0  0.4   0:00.05 /usr/loca+
 35301 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 36343 nobody    20   0  277720  34816   3556 S   0.0  1.4   0:00.68 /usr/sbin+
 36641 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 40094 nobody    20   0  277744  34972   3728 S   0.0  1.4   0:00.40 /usr/sbin+
 40215 nobody    20   0  277720  34812   3592 S   0.0  1.4   0:00.41 /usr/sbin+
 41292 nobody    20   0  277720  35020   3792 S   0.0  1.4   0:00.29 /usr/sbin+
 42218 nobody    20   0  277740  34692   3456 S   0.0  1.4   0:00.22 /usr/sbin+
 42219 nobody    20   0  277676  34960   3752 S   0.0  1.4   0:00.17 /usr/sbin+
 42259 nobody    20   0  277740  34888   3644 S   0.0  1.4   0:00.20 /usr/sbin+
 42286 nobody    20   0  277740  35036   3756 S   0.0  1.4   0:00.22 /usr/sbin+
 42292 nobody    20   0  277720  34964   3740 S   0.0  1.4   0:00.21 /usr/sbin+
 42293 nobody    20   0  277720  34696   3476 S   0.0  1.4   0:00.21 /usr/sbin+
 42295 nobody    20   0  277732  35008   3772 S   0.0  1.4   0:00.18 /usr/sbin+
 42828 nobody    20   0  277720  34968   3740 S   0.0  1.4   0:00.19 /usr/sbin+
 42866 nobody    20   0  277720  35016   3796 S   0.0  1.4   0:00.14 /usr/sbin+
 43045 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 43791 nobody    20   0  277656  35200   4012 S   0.0  1.5   0:00.09 /usr/sbin+
 43806 nobody    20   0  277616  34532   3388 S   0.0  1.4   0:00.11 /usr/sbin+
 43845 nobody    20   0  277720  33436   2208 S   0.0  1.4   0:00.15 /usr/sbin+
 43846 nobody    20   0  277720  34632   3412 S   0.0  1.4   0:00.11 /usr/sbin+
 43849 nobody    20   0  277732  34276   3040 S   0.0  1.4   0:00.11 /usr/sbin+
 43868 nobody    20   0  277720  34640   3420 S   0.0  1.4   0:00.11 /usr/sbin+
 43870 nobody    20   0  277720  34252   3032 S   0.0  1.4   0:00.12 /usr/sbin+
 43873 nobody    20   0  277720  34740   3512 S   0.0  1.4   0:00.11 /usr/sbin+
 43874 nobody    20   0  277728  34600   3372 S   0.0  1.4   0:00.13 /usr/sbin+
 43876 nobody    20   0  277720  34312   3092 S   0.0  1.4   0:00.07 /usr/sbin+
 43880 nobody    20   0  277720  34808   3588 S   0.0  1.4   0:00.11 /usr/sbin+
 44464 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 44616 nobody    20   0  277592  34492   3368 S   0.0  1.4   0:00.08 /usr/sbin+
 44779 mailnull  20   0   89336   6404   3156 S   0.0  0.3   0:00.00 /usr/sbin+
 45080 nobody    20   0       0      0      0 Z   0.0  0.0   0:00.03 [httpd] <+
 45101 nobody    20   0  277344  34056   3296 S   0.0  1.4   0:00.00 /usr/sbin+
 45102 nobody    20   0  277872  34532   3328 S   0.0  1.4   0:00.03 /usr/sbin+
 45144 nobody    20   0  277720  34524   3304 S   0.0  1.4   0:00.01 /usr/sbin+
 45156 nobody    20   0  277860  34612   3416 S   0.0  1.4   0:00.03 /usr/sbin+
 45157 nobody    20   0  277720  33392   2172 S   0.0  1.4   0:00.02 /usr/sbin+
 45167 nobody    20   0  277720  33388   2172 S   0.0  1.4   0:00.03 /usr/sbin+
 45169 nobody    20   0  277720  33424   2208 S   0.0  1.4   0:00.02 /usr/sbin+
 45170 nobody    20   0  277720  33388   2172 S   0.0  1.4   0:00.02 /usr/sbin+
 45269 nobody    20   0  277720  33392   2176 S   0.0  1.4   0:00.01 /usr/sbin+
 45294 nobody    20   0  277720  33552   2332 S   0.0  1.4   0:00.01 /usr/sbin+
 45295 nobody    20   0  277720  33396   2176 S   0.0  1.4   0:00.02 /usr/sbin+
 45306 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 45314 nobody    20   0  277720  33388   2172 S   0.0  1.4   0:00.01 /usr/sbin+
 45315 nobody    20   0  277720  34636   3420 S   0.0  1.4   0:00.02 /usr/sbin+
 45316 nobody    20   0  277720  33388   2172 S   0.0  1.4   0:00.01 /usr/sbin+
 45317 nobody    20   0  277576  33996   3004 S   0.0  1.4   0:00.00 /usr/sbin+
 45367 nigeria   20   0  400460   5484   2368 S   0.0  0.2   0:00.00 php-fpm: +
 45398 nobody    20   0  277720  33388   2172 S   0.0  1.4   0:00.01 /usr/sbin+
 45423 nobody    20   0  277576  33156   2168 S   0.0  1.4   0:00.00 /usr/sbin+
 45424 nobody    20   0  277176  33540   2888 S   0.0  1.4   0:00.00 /usr/sbin+
 45473 root      20   0  157100   5084   3792 S   0.0  0.2   0:00.00 sshd: unk+
 45474 sshd      20   0  115644   2628   1556 S   0.0  0.1   0:00.00 sshd: unk+
 45483 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 45493 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 45494 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 45495 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 45496 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 45497 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 45499 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 45500 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 45501 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 45502 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 45503 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 45504 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 45505 root      20   0  183048   2148   1592 S   0.0  0.1   0:00.00 /usr/sbin+
 45507 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 45510 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 45511 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 45512 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 45528 root      20   0   20164    964    768 S   0.0  0.0   0:00.00 jailshell+
 45529 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 45531 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 /usr/loca+
 45533 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 45534 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 45535 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 45536 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 45539 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 45540 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 45541 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 45542 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 45544 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 45545 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 45566 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 45572 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 45578 root      20   0   38648   6504   3040 R   0.0  0.3   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:59   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:59   0:02  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [watchdogd]
root         36  0.4  0.0      0     0 ?        S    00:59   0:09  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:59   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:59   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [kauditd]
root        238  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [scsi_eh_0]
root        245  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [scsi_tmf_1]
root        249  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [ttm_swap]
root        262  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kworker/0:1H]
root        269  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [xprtiod]
root        653  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [kvm-irqfd-clean]
root        668  0.0  0.0      0     0 ?        S<   00:59   0:01  \_ [loop0]
root        680  0.0  0.0      0     0 ?        S    00:59   0:00  \_ [jbd2/loop0-8]
root        681  0.0  0.0      0     0 ?        S<   00:59   0:00  \_ [ext4-rsv-conver]
root      16555  0.0  0.0      0     0 ?        S    01:12   0:00  \_ [kworker/1:2]
root      20058  0.0  0.0      0     0 ?        S    01:15   0:00  \_ [kworker/0:1]
root      22350  0.0  0.0      0     0 ?        S    01:17   0:00  \_ [kworker/u200:2]
root      24763  0.0  0.0      0     0 ?        S    01:19   0:00  \_ [kworker/1:3]
root      26051  0.0  0.0      0     0 ?        S    01:20   0:00  \_ [kworker/0:0]
root      33035  0.0  0.0      0     0 ?        S    01:26   0:00  \_ [kworker/0:2]
root      35301  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/u200:1]
root      36641  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/1:1]
root      43045  0.0  0.0      0     0 ?        S    01:34   0:00  \_ [kworker/0:3]
root      44464  0.0  0.0      0     0 ?        S    01:35   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44264  3372 ?        Ss   00:59   0:03 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.3  39496  7624 ?        Ss   00:59   0:01 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352   408 ?        Ss   00:59   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   452 ?        S<sl 00:59   0:00 /sbin/auditd
root        486  0.0  0.0  21540   480 ?        Ss   00:59   0:00 /usr/sbin/irqbalance --foreground
root        487  0.0  0.0  52852   400 ?        Ss   00:59   0:00 /usr/sbin/smartd -n -q never
polkitd     501  0.0  0.0 610540   916 ?        Ssl  00:59   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        502  0.0  0.0  24604  1216 ?        Ss   00:59   0:00 /usr/lib/systemd/systemd-logind
root        503  0.0  0.2 224288  6732 ?        Ss   00:59   0:00 queueprocd - waiting up to 60s to process a task
dbus        504  0.0  0.0  58400  1324 ?        Ss   00:59   0:01 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
nscd        510  0.1  0.0 1338588 2024 ?        Ssl  00:59   0:02 /usr/sbin/nscd
rpc         514  0.0  0.0  69256   288 ?        Ss   00:59   0:00 /sbin/rpcbind -w
root        532  0.0  0.0   4388   124 ?        Ss   00:59   0:00 /usr/sbin/acpid
root        533  0.0  0.0 195208    76 ?        Ssl  00:59   0:00 /usr/sbin/gssproxy -D
root        534  0.0  0.0 152780   244 ?        Ss   00:59   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        559  0.0  0.0  24208    16 ?        Ss   00:59   0:00 /usr/sbin/atd -f
root        560  0.0  0.0 124480   568 ?        Ss   00:59   0:00 /usr/sbin/crond -n
root       2162  0.0  0.0 183052   788 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       2382  0.0  0.0 113284   200 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       2406  0.0  0.0 108056    72 ?        S    01:00   0:00  |       \_ sleep 4h 33m
root      45493  0.0  0.0 183048  2148 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      45510  0.0  0.0 113284  1212 ?        Ss   01:36   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      45511  0.0  0.0 108052   360 ?        S    01:36   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      45512  0.0  0.0 113288  1520 ?        S    01:36   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      45579  0.0  0.0 153840  2096 ?        R    01:36   0:00  |               \_ ps auxf
root      45494  0.0  0.0 183048  2148 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      45534  0.0  0.0  20164   808 ?        Ss   01:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      45495  0.0  0.0 183048  2148 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      45531  0.0  0.0  20164   988 ?        Ss   01:36   0:00  |   \_ jailshell (cloudsms) [45580] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
cloudsms  45580  0.0  0.0  20164   260 ?        S    01:36   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      45496  0.0  0.0 183048  2148 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      45541  0.0  0.0  20164   804 ?        Ss   01:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      45497  0.0  0.0 183048  2148 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      45533  0.0  0.0  20164   804 ?        Ss   01:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      45499  0.0  0.0 183048  2144 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      45542  0.0  0.0  20164   808 ?        Ss   01:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      45500  0.0  0.0 183048  2144 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      45535  0.0  0.0  20164   808 ?        Ss   01:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      45501  0.0  0.0 183048  2140 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      45540  0.0  0.0  20164   808 ?        Ss   01:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      45502  0.0  0.0 183048  2140 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      45545  0.0  0.0  20164   808 ?        Ss   01:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      45503  0.0  0.0 183048  2140 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      45539  0.0  0.0  20164   808 ?        Ss   01:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      45504  0.0  0.0 183048  2140 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      45529  0.0  0.0  20164   808 ?        Ss   01:36   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      45505  0.0  0.0 183048  2148 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      45528  0.0  0.0  20164   964 ?        Ss   01:36   0:00  |   \_ jailshell (pactpay) [45536] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   45536  0.0  0.0  20164   256 ?        S    01:36   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   45547  2.0  0.7 480124 17692 ?        S    01:36   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      45507  0.0  0.0 183048  2140 ?        S    01:36   0:00  \_ /usr/sbin/CROND -n
root      45544  0.0  0.0  20164   972 ?        Ss   01:36   0:00      \_ jailshell (nigeria) [45566] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   45566  0.0  0.0  20164   264 ?        S    01:36   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   45569  4.0  0.6 404052 16136 ?        R    01:36   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        572  0.0  0.0 114704   180 ttyS0    Ss+  00:59   0:00 /bin/bash
root        573  0.0  0.0 108296   176 tty1     Ss+  00:59   0:00 /sbin/agetty --noclear tty1 linux
mailnull    599  0.0  0.1  88988  3428 ?        Ss   00:59   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  44779  0.0  0.2  89336  6404 ?        S    01:35   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        922  0.0  0.4 439788 11252 ?        Ss   00:59   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        924  0.6 14.2 1763124 344868 ?      Ssl  00:59   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
named       927  0.0  1.2 784452 29864 ?        Ssl  00:59   0:01 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        930  0.0  0.0 111304   552 ?        Ss   00:59   0:00 /usr/sbin/sshd -D
root      45306  0.0  0.1 111304  4272 ?        Ss   01:35   0:00  \_ sshd: [accepted]
root      45473  0.0  0.2 157100  5084 ?        Ss   01:35   0:00  \_ sshd: unknown [priv]
sshd      45474  0.0  0.1 115644  2628 ?        S    01:35   0:00      \_ sshd: unknown [net]
cpanelc+    931  0.0  0.1   9960  2804 ?        Ss   00:59   0:02 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        932  0.0  0.0 396248   620 ?        Ss   00:59   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
systuser    934  0.0  0.0 113272  1832 ?        Ssl  00:59   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        937  0.0  0.0 153404   440 ?        Ss   00:59   0:00 pure-ftpd (SERVER)
root        938  0.0  0.1 400740  3024 ?        Ss   00:59   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   45367  0.0  0.2 400460  5484 ?        S    01:35   0:00  \_ php-fpm: pool nigeriadecide_org
root        939  0.0  0.0  51656   832 ?        Ss   00:59   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1076  0.0  0.0  10320   488 ?        S    00:59   0:00  \_ dovecot/anvil
dovenull  33363  0.0  0.1  46912  2680 ?        S    01:26   0:00  \_ dovecot/pop3-login
dovenull  33364  0.0  0.0  46780  1080 ?        S    01:26   0:00  \_ dovecot/imap-login
root      33365  0.0  0.0  10452   844 ?        S    01:26   0:00  \_ dovecot/log
dovenull  33366  0.0  0.0  46772  1444 ?        S    01:26   0:00  \_ dovecot/pop3-login
dovenull  33367  0.0  0.1  47056  3236 ?        S    01:26   0:00  \_ dovecot/imap-login
root      33368  0.0  0.4  24396 11324 ?        S    01:26   0:00  \_ dovecot/config
dovecot   33369  0.0  0.0  13568   720 ?        S    01:26   0:00  \_ dovecot/stats
dovecot   33370  0.0  0.0  41056  1428 ?        S    01:26   0:00  \_ dovecot/auth
root        940  0.0  0.2 261292  6596 ?        Ss   00:59   0:00 cpsrvd (SSL) - waiting for connections                   
root      45483  0.0  0.0      0     0 ?        Z    01:35   0:00  \_ [cpaneld - servi] <defunct>
root        941  0.0  0.1 445028  2712 ?        Ss   00:59   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
memcach+    943  0.0  0.0 342400   176 ?        Ssl  00:59   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        944  0.0  0.3 216400  7340 ?        Ssl  00:59   0:00 /usr/sbin/rsyslogd -n
root        946  0.0  0.0 388892   568 ?        Ss   00:59   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        947  1.2  0.4 1277312 10536 ?       Ssl  00:59   0:27 /usr/bin/checkstatus
telegraf    948  0.0  1.4 5654304 36288 ?       SLsl 00:59   0:01 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    953  0.0  0.0  10132    44 ?        Ssl  00:59   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        954  1.1  0.3 1276100 9276 ?        Ssl  00:59   0:25 /usr/bin/cspdaemon
root        959  0.0  0.0 389508   736 ?        Ss   00:59   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
systuser    961  0.0  0.0  12660    60 ?        Ssl  00:59   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        962  0.0  0.0 572372   932 ?        Ssl  00:59   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    967  0.0  0.5 114016 12472 ?        Ssl  00:59   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    969  0.0  0.0 112524  2084 ?        Ssl  00:59   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser   1152  0.0  0.1 157708  2960 ?        S    00:59   0:00 SonarPush 0.6.12 [sleeping]
root       1153  0.1  4.8 248256 117432 ?       Ss   00:59   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       5955  0.0  5.2 262888 127468 ?       S    01:03   0:00  \_ spamd child
root       5956  0.0  4.8 248256 116684 ?       S    01:03   0:00  \_ spamd child
wp-tool+   1197  0.0  0.5 387528 13056 ?        Ss   00:59   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1198  0.0  1.4 410452 35632 ?        Ss   00:59   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1263  0.0  0.1 167452  4160 ?        Ss   00:59   0:00 dnsadmin - dormant mode
root       1264  0.0  0.4 209260 10196 ?        Ss   00:59   0:00 tailwatchd
root       1265  0.0  1.0 262224 24696 ?        Ss   00:59   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1670  0.0  0.0 299272   736 ?        Ss   00:59   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1711  0.0  0.0 130416  1468 ?        SN   00:59   0:00 cpanellogd - sleeping for logs
mysql      1748  1.3  8.8 1457540 215016 ?      Sl   00:59   0:29 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1942  0.0  1.0 266980 25924 ?        Ss   00:59   0:01 /usr/sbin/httpd -k start
root      33371  0.0  0.0  12784   580 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      33372  0.0  0.0  12732   536 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      33373  0.0  0.0  12804   592 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      33374  0.0  0.3  53268  9660 ?        S    01:26   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    36343  0.1  1.4 277720 34816 ?        S    01:28   0:00  \_ /usr/sbin/httpd -k start
nobody    40094  0.1  1.4 277744 34972 ?        S    01:31   0:00  \_ /usr/sbin/httpd -k start
nobody    40215  0.1  1.4 277720 34812 ?        S    01:31   0:00  \_ /usr/sbin/httpd -k start
nobody    41292  0.1  1.4 277720 35020 ?        S    01:32   0:00  \_ /usr/sbin/httpd -k start
nobody    42218  0.1  1.4 277740 34692 ?        S    01:33   0:00  \_ /usr/sbin/httpd -k start
nobody    42219  0.1  1.4 277676 34960 ?        S    01:33   0:00  \_ /usr/sbin/httpd -k start
nobody    42259  0.1  1.4 277740 34888 ?        S    01:33   0:00  \_ /usr/sbin/httpd -k start
nobody    42286  0.1  1.4 277740 35036 ?        S    01:33   0:00  \_ /usr/sbin/httpd -k start
nobody    42292  0.1  1.4 277720 34964 ?        S    01:33   0:00  \_ /usr/sbin/httpd -k start
nobody    42293  0.1  1.4 277720 34696 ?        S    01:33   0:00  \_ /usr/sbin/httpd -k start
nobody    42295  0.1  1.4 277732 35008 ?        S    01:33   0:00  \_ /usr/sbin/httpd -k start
nobody    42828  0.1  1.4 277720 34968 ?        S    01:33   0:00  \_ /usr/sbin/httpd -k start
nobody    42866  0.1  1.4 277720 35016 ?        S    01:33   0:00  \_ /usr/sbin/httpd -k start
nobody    43791  0.1  1.4 277656 35200 ?        S    01:34   0:00  \_ /usr/sbin/httpd -k start
nobody    43806  0.1  1.4 277616 34532 ?        S    01:34   0:00  \_ /usr/sbin/httpd -k start
nobody    43845  0.1  1.3 277720 33436 ?        S    01:34   0:00  \_ /usr/sbin/httpd -k start
nobody    43846  0.1  1.4 277720 34632 ?        S    01:34   0:00  \_ /usr/sbin/httpd -k start
nobody    43849  0.1  1.4 277732 34276 ?        S    01:34   0:00  \_ /usr/sbin/httpd -k start
nobody    43868  0.1  1.4 277720 34640 ?        S    01:34   0:00  \_ /usr/sbin/httpd -k start
nobody    43870  0.1  1.4 277720 34252 ?        S    01:34   0:00  \_ /usr/sbin/httpd -k start
nobody    43873  0.1  1.4 277720 34740 ?        S    01:34   0:00  \_ /usr/sbin/httpd -k start
nobody    43874  0.1  1.4 277728 34600 ?        S    01:34   0:00  \_ /usr/sbin/httpd -k start
nobody    43876  0.0  1.4 277720 34312 ?        S    01:34   0:00  \_ /usr/sbin/httpd -k start
nobody    43880  0.1  1.4 277720 34808 ?        S    01:34   0:00  \_ /usr/sbin/httpd -k start
nobody    44616  0.1  1.4 277592 34492 ?        S    01:35   0:00  \_ /usr/sbin/httpd -k start
nobody    45080  0.1  0.0      0     0 ?        Z    01:35   0:00  \_ [httpd] <defunct>
nobody    45101  0.0  1.4 277344 34056 ?        S    01:35   0:00  \_ /usr/sbin/httpd -k start
nobody    45102  0.1  1.4 277872 34532 ?        S    01:35   0:00  \_ /usr/sbin/httpd -k start
nobody    45144  0.0  1.4 277720 34524 ?        S    01:35   0:00  \_ /usr/sbin/httpd -k start
nobody    45156  0.1  1.4 277860 34612 ?        S    01:35   0:00  \_ /usr/sbin/httpd -k start
nobody    45157  0.0  1.3 277720 33392 ?        S    01:35   0:00  \_ /usr/sbin/httpd -k start
nobody    45167  0.1  1.3 277720 33388 ?        S    01:35   0:00  \_ /usr/sbin/httpd -k start
nobody    45169  0.1  1.3 277720 33424 ?        S    01:35   0:00  \_ /usr/sbin/httpd -k start
nobody    45170  0.1  1.3 277720 33388 ?        S    01:35   0:00  \_ /usr/sbin/httpd -k start
nobody    45269  0.0  1.3 277720 33392 ?        S    01:35   0:00  \_ /usr/sbin/httpd -k start
nobody    45294  0.0  1.3 277720 33552 ?        S    01:35   0:00  \_ /usr/sbin/httpd -k start
nobody    45295  0.1  1.3 277720 33396 ?        S    01:35   0:00  \_ /usr/sbin/httpd -k start
nobody    45314  0.0  1.3 277720 33388 ?        S    01:35   0:00  \_ /usr/sbin/httpd -k start
nobody    45315  0.1  1.4 277720 34636 ?        S    01:35   0:00  \_ /usr/sbin/httpd -k start
nobody    45316  0.0  1.3 277720 33388 ?        S    01:35   0:00  \_ /usr/sbin/httpd -k start
nobody    45317  0.0  1.4 277576 33996 ?        S    01:35   0:00  \_ /usr/sbin/httpd -k start
nobody    45398  0.1  1.3 277720 33388 ?        S    01:35   0:00  \_ /usr/sbin/httpd -k start
nobody    45423  0.0  1.3 277576 33156 ?        S    01:35   0:00  \_ /usr/sbin/httpd -k start
nobody    45424  0.0  1.3 277176 33540 ?        S    01:35   0:00  \_ /usr/sbin/httpd -k start
root       2005  0.0  0.3 181052  9676 ?        Ss   00:59   0:02 lfd - sleeping
oysipao+   2439  0.0  0.0   3148   380 ?        Ss   01:00   0:00 [kworker]
oysipao+   3023  0.0  0.0   3152   460 ?        S    01:00   0:00  \_ [kworker]
## mysql stats
Uptime: 2206  Threads: 3  Questions: 154363  Slow queries: 0  Opens: 1926  Flush tables: 1  Open tables: 1784  Queries per second avg: 69.974
*************************** 1. row ***************************
     Id: 2271
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 2274
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: optimizing
   Info: SELECT * FROM `21` WHERE `phone`='2348030852137' LIMIT 1
*************************** 3. row ***************************
     Id: 2277
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.143 TIME_WAIT
      1 114.119.136.120 TIME_WAIT
      1 142.44.233.93 TIME_WAIT
      1 185.220.100.250 TIME_WAIT
      1 ::1 TIME_WAIT
      1 45.84.107.55 TIME_WAIT
      1 51.222.95.124 TIME_WAIT
      1 52.167.144.136 TIME_WAIT
      1 54.39.203.78 TIME_WAIT
      1 66.249.64.130 TIME_WAIT
      1 66.249.64.132 TIME_WAIT
      1 66.249.64.226 TIME_WAIT
      1 66.249.64.227 TIME_WAIT
      1 66.249.70.131 TIME_WAIT
      1 66.249.70.141 TIME_WAIT
      1 66.249.70.169 TIME_WAIT
      1 66.249.70.39 TIME_WAIT
      1 66.249.70.5 TIME_WAIT
      1 66.249.70.65 TIME_WAIT
      1 66.249.70.69 TIME_WAIT
      1 66.249.70.99 TIME_WAIT
      1 84.32.233.86 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 66.249.70.197 TIME_WAIT
      2 66.249.70.33 TIME_WAIT
      4 62.164.177.75 TIME_WAIT
      8 1.37.67.199 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 14-Nov-2025 01:36:02 WAT
   Restart Time: Friday, 14-Nov-2025 00:59:21 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 36 minutes 40 seconds
   Server load: 0.39 0.48 0.48
   Total accesses: 20343 - Total Traffic: 481.8 MB - Total Duration: 10854440
   CPU Usage: u3.72 s2.58 cu247.88 cs212.96 - 21.2% CPU load
   9.25 requests/sec - 224.3 kB/second - 24.3 kB/request - 533.571 ms/request
   30 requests currently being processed, 0 workers gracefully restarting, 14 idle workers

CKKKK_KKKKK.._KKK_W_KK__K_KK_K_KK._K.K..K_K_.....R.K..K.._K._...
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU  SS  Req  Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-1  45080 1/6/457   C 0.14 0   0   243441 0.2   0.12  11.12 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   1-1  43791 1/18/574  K 0.34 1   347 252557 29.4  0.68  11.60 66.249.70.167  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3727865046 HTTP/1.1
   2-1  45101 4/4/429   K 0.01 3   1   232354 55.7  0.05  10.14 175.176.77.209 http/1.1 cloudsms.com.ng:443        GET /images/skye-bank-logo.jpg HTTP/1.1
   3-1  43806 1/19/447  K 0.48 3   436 245475 31.1  0.52  11.32 66.249.64.106  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1910668130 HTTP/1.1
   4-1  45102 1/5/485   K 0.12 1   280 216613 29.8  0.13  9.83  66.249.70.70   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3589368845 HTTP/1.1
   5-1  45144 0/4/522   _ 0.07 1   318 299573 0.0   0.10  13.15 192.178.4.105  http/1.1 schoolplus.cloudware.ng:80 GET /?p=796168270 HTTP/1.1
   6-1  45156 1/5/594   K 0.09 1   412 278756 29.7  0.13  12.19 66.249.70.192  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4045101752 HTTP/1.1
   7-1  44616 2/13/437  K 0.32 2   1   262415 39.4  0.55  11.94 175.176.77.209 http/1.1 cloudsms.com.ng:443        GET /images/fidelity_cloudsms.com.ng_logo.png HTTP/1.1
   8-1  45157 1/4/461   K 0.08 3   381 273411 29.2  0.12  12.09 66.249.70.161  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3773353673 HTTP/1.1
   9-1  45167 1/4/445   K 0.08 2   332 256627 29.8  0.12  11.30 66.249.70.200  http/1.1 schoolplus.cloudware.ng:80 GET /?p=939333770 HTTP/1.1
   10-1 42218 1/39/506  K 0.97 4   361 224202 29.8  1.05  9.95  66.249.70.170  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3013055865 HTTP/1.1
   11-1 -     0/0/480   . 0.00 0   0   209028 0.0   0.00  9.49  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-1 -     0/0/435   . 0.00 1   0   247901 0.0   0.00  11.12 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-1 45169 0/4/491   _ 0.08 1   1   237607 0.0   0.09  10.91 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   14-1 45170 1/4/460   K 0.08 2   475 263828 31.1  0.12  11.23 66.249.64.10   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3174856789 HTTP/1.1
   15-1 42219 2/30/429  K 0.74 2   1   250946 23.2  1.01  11.24 175.176.77.209 http/1.1 cloudsms.com.ng:443        GET /images/cloudsms.com.ng%20firstbank.jpg HTTP/1.1
   16-1 45269 1/3/417   K 0.04 1   412 249171 31.2  0.09  10.78 66.249.64.32   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3726456112 HTTP/1.1
   17-1 45294 0/3/426   _ 0.04 0   0   242671 0.0   0.08  10.69 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   18-1 45295 0/2/456   W 0.04 0   0   267203 0.0   0.06  11.88 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   19-1 43845 0/24/385  _ 0.65 1   1   230565 0.0   0.69  9.54  127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   20-1 43846 1/19/444  K 0.48 1   374 238447 29.8  0.55  10.74 66.249.70.174  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2185747412 HTTP/1.1
   21-1 41292 1/55/565  K 1.21 1   354 243102 29.8  1.47  10.76 66.249.70.99   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3542841587 HTTP/1.1
   22-1 42828 0/32/384  _ 0.77 1   392 221245 0.0   1.17  9.69  66.249.64.76   http/1.1 schoolplus.cloudware.ng:80 GET /?p=31054926 HTTP/1.1
   23-1 45314 0/2/399   _ 0.02 0   355 211350 0.0   0.06  9.86  66.249.64.11   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2018497938 HTTP/1.1
   24-1 45315 1/3/382   K 0.04 2   339 224691 30.5  0.07  9.89  66.249.70.132  http/1.1 schoolplus.cloudware.ng:80 GET /?p=957042068 HTTP/1.1
   25-1 45316 0/2/339   _ 0.03 1   276 194501 0.0   0.06  8.48  66.249.64.46   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1012922665 HTTP/1.1
   26-1 45317 1/2/373   K 0.01 3   0   216641 7.9   0.04  9.39  175.176.77.209 http/1.1 cloudsms.com.ng:443        GET /images/CLoudhost.com.ng-enterprise-bankng.jpg HTTP/1.1
   27-1 45398 1/2/334   K 0.03 1   274 188767 30.2  0.06  8.28  66.249.64.164  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3145214940 HTTP/1.1
   28-1 36343 0/122/430 _ 3.06 1   6   233533 0.0   3.89  11.26 51.222.95.124  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Ogun&lga=Odogbolu&ward=Aiy
   29-1 40094 4/69/352  K 1.76 2   1   212546 46.8  1.93  9.12  175.176.77.209 http/1.1 cloudsms.com.ng:443        GET /images/cloudhost.com.ng-ecobank-benin.jpg HTTP/1.1
   30-1 45423 0/1/361   _ 0.00 0   354 166557 0.0   0.03  7.42  66.249.70.65   http/1.1 schoolplus.cloudware.ng:80 GET /?p=48812285 HTTP/1.1
   31-1 45424 2/2/442   K 0.00 2   0   188257 23.3  0.02  8.19  175.176.77.209 http/1.1 cloudsms.com.ng:443        GET /images/Stanbic%20Ibtc%20BankCloudSMS%20Account.jpg HTTP/1.
   32-1 43849 1/20/381  K 0.48 3   360 219109 29.3  0.68  10.07 66.249.70.32   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2307201873 HTTP/1.1
   33-1 -     0/0/326   . 0.00 55  0   178195 0.0   0.00  7.84  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-1 42866 0/25/381  _ 0.57 1   450 218587 0.0   0.67  9.76  66.249.64.70   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1306027443 HTTP/1.1
   35-1 43868 1/19/284  K 0.46 0   281 156960 30.7  0.51  7.46  66.249.70.173  http/1.1 schoolplus.cloudware.ng:80 GET /?p=162190660 HTTP/1.1
   36-1 -     0/0/312   . 0.00 57  0   182981 0.0   0.00  7.81  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-1 43870 1/23/463  K 0.52 1   409 220937 31.3  0.73  9.92  66.249.64.173  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2418901533 HTTP/1.1
   38-1 -     0/0/284   . 0.00 76  0   158080 0.0   0.00  6.89  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-1 -     0/0/318   . 0.00 58  0   191818 0.0   0.00  8.14  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-1 43873 1/20/325  K 0.47 3   572 186321 229.6 0.68  8.37  192.178.4.98   http/1.1 team.cloudware.ng:443      GET /var/cache/dev/pools/AcsHjSlfaz/I/2/ HTTP/1.1
   41-1 42259 0/36/432  _ 0.88 0   10  199504 0.0   1.12  8.87  44.215.61.66   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/assets/js/blog/polling_unit
   42-1 43874 1/21/275  K 0.53 2   478 97076  29.7  0.55  4.41  66.249.70.139  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3390953866 HTTP/1.1
   43-1 40215 0/67/275  _ 1.82 0   356 147955 0.0   1.95  6.58  66.249.64.42   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2903407789 HTTP/1.1
   44-1 -     0/0/236   . 0.00 30  0   139519 0.0   0.00  5.97  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-1 -     0/0/358   . 0.00 32  0   209622 0.0   0.00  8.75  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-1 -     0/0/159   . 0.00 52  0   78054  0.0   0.00  3.42  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-1 -     0/0/299   . 0.00 66  0   108680 0.0   0.00  4.88  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-1 -     0/0/140   . 0.00 61  0   78946  0.0   0.00  3.50  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-1 43876 0/12/122  R 0.31 23  306 72893  0.0   0.36  3.23  175.176.77.209 http/1.1
   50-1 -     0/0/46    . 0.00 75  0   24313  0.0   0.00  0.96  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-1 42286 1/38/192  K 0.96 4   412 117321 29.8  1.05  5.23  66.249.64.68   http/1.1 schoolplus.cloudware.ng:80 GET /?p=2471211381 HTTP/1.1
   52-1 -     0/0/65    . 0.00 56  0   33145  0.0   0.00  1.37  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-1 -     0/0/45    . 0.00 40  0   31659  0.0   0.00  1.10  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-1 43880 1/20/157  K 0.48 1   351 95535  31.1  0.53  4.50  66.249.64.12   http/1.1 schoolplus.cloudware.ng:80 GET /?p=3707666843 HTTP/1.1
   55-1 -     0/0/81    . 0.00 74  0   48313  0.0   0.00  2.15  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-1 -     0/0/34    . 0.00 42  0   14210  0.0   0.00  0.68  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-1 42292 0/41/52   _ 0.89 1   277 29328  0.0   1.03  1.22  66.249.64.225  http/1.1 schoolplus.cloudware.ng:80 GET /?p=4248883510 HTTP/1.1
   58-1 42293 1/37/73   K 0.91 3   395 42997  31.6  1.08  1.97  66.249.70.38   http/1.1 schoolplus.cloudware.ng:80 GET /?p=1293103779 HTTP/1.1
   59-1 -     0/0/42    . 0.00 146 0   25202  0.0   0.00  1.12  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-1 42295 0/34/41   _ 0.78 0   364 20931  0.0   0.87  0.98  66.249.64.72   http/1.1 schoolplus.cloudware.ng:80 GET /?p=203272273 HTTP/1.1
   61-1 -     0/0/4     . 0.00 113 0   2238   0.0   0.00  0.09  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 450
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 30 seconds, (range: 1...143)
   index usage: 7%, cache usage: 10%
   total entries stored since starting: 905
   total entries replaced since starting: 0
   total entries expired since starting: 455
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 6 miss
   total removes since starting: 1 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit