403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-15.01.27.txt
 ## swap threshold exceeded
## server overview
2025-11-15.01.27 load[0] mem[54/78] mysql[1/12] httpd[9]
              total        used        free      shared  buff/cache   available
Mem:           2363        1126         298          66         938         985
Swap:          1999        1637         362
 01:27:01 up  6:31,  0 users,  load average: 0.13, 0.26, 0.30
## system overview
top - 01:27:01 up  6:31,  0 users,  load average: 0.13, 0.26, 0.30
Tasks: 206 total,   4 running, 201 sleeping,   0 stopped,   1 zombie
%Cpu(s): 51.5 us, 30.3 sy,  0.0 ni, 18.2 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   297984 free,  1160996 used,   961320 buff/cache
KiB Swap:  2047996 total,   370940 free,  1677056 used.  1001608 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1784 mysql     20   0 1458868 280296   4532 S  52.9 11.6   4:50.64 /usr/sbin+
 10656 nigeria   20   0  404052  16144  10384 R  17.6  0.7   0:00.03 /opt/cpan+
     1 root      20   0   44388   3292   1480 S   5.9  0.1   0:32.97 /usr/lib/+
     9 root      20   0       0      0      0 R   5.9  0.0   0:24.22 [rcu_sche+
   521 polkitd   20   0  612240    848    480 S   5.9  0.0   0:03.22 /usr/lib/+
   522 dbus      20   0   58596   1324    636 S   5.9  0.1   0:12.26 /usr/bin/+
 10047 nobody    20   0  277544  34836   3436 S   5.9  1.4   0:00.13 /usr/sbin+
 10660 pactpay   20   0  480124  16788  11088 S   5.9  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.55 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.16 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.07 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.72 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:22.48 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.52 [kauditd]
   241 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   242 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   255 root       0 -20       0      0      0 S   0.0  0.0   0:02.63 [kworker/+
   270 root       0 -20       0      0      0 S   0.0  0.0   0:02.89 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:01.20 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   358 root      20   0   40244   3584   3320 S   0.0  0.1   0:13.57 /usr/lib/+
   383 root      20   0   45352    112    108 S   0.0  0.0   0:00.37 /usr/lib/+
   412 root      16  -4   55532    352    240 S   0.0  0.0   0:02.14 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   418 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   495 root      20   0  224276   7100   2068 S   0.0  0.3   0:00.34 queueproc+
   502 rpc       20   0   69256    116     56 S   0.0  0.0   0:00.03 /sbin/rpc+
   503 root      20   0  152780    144    100 S   0.0  0.0   0:00.01 /usr/sbin+
   507 root      20   0   21540    368    280 S   0.0  0.0   0:00.53 /usr/sbin+
   519 root      20   0   52852    456    352 S   0.0  0.0   0:00.01 /usr/sbin+
   520 root      20   0   24704   1184    824 S   0.0  0.0   0:05.45 /usr/lib/+
   528 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   532 nscd      20   0 1264844   1872    836 S   0.0  0.1   0:19.16 /usr/sbin+
   545 root      20   0    4388     56     52 S   0.0  0.0   0:00.00 /usr/sbin+
   567 root      20   0  124480    448    316 S   0.0  0.0   0:00.68 /usr/sbin+
   569 root      20   0   24208     28      8 S   0.0  0.0   0:00.00 /usr/sbin+
   578 root      20   0  108296     64     60 S   0.0  0.0   0:00.00 /sbin/age+
   579 root      20   0  114704     48     48 S   0.0  0.0   0:00.02 /bin/bash
   615 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   627 mailnull  20   0   90824   3924    916 S   0.0  0.2   0:00.70 /usr/sbin+
   662 root       0 -20       0      0      0 S   0.0  0.0   0:02.62 [loop0]
   718 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   719 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   912 systuser  20   0   12660     52      0 S   0.0  0.0   0:00.01 /usr/loca+
   913 root      20   0  111304    408    308 S   0.0  0.0   0:03.06 /usr/sbin+
   914 root      20   0 1350088   8460     44 S   0.0  0.3   0:24.53 /usr/bin/+
   916 root      20   0   51656   1240    848 S   0.0  0.1   0:00.31 /usr/sbin+
   918 root      20   0  261424   6700   1752 S   0.0  0.3   0:07.05 cpsrvd (S+
   922 root      20   0 1763124  66768    588 S   0.0  2.8   0:13.80 /usr/loca+
   923 root      20   0  290128   3936   3016 S   0.0  0.2   0:06.53 /usr/sbin+
   924 root      20   0  396248    336    252 S   0.0  0.0   0:00.63 php-fpm: +
   933 root      20   0  389508    432    348 S   0.0  0.0   0:00.66 php-fpm: +
   935 named     20   0 1054792  40512   2324 S   0.0  1.7   0:13.35 /usr/sbin+
   937 root      20   0  388892    584    488 S   0.0  0.0   0:00.71 php-fpm: +
   938 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.01 /usr/loca+
   939 telegraf  20   0 5654304  37232   5896 S   0.0  1.5   0:12.96 /usr/loca+
   940 root      20   0 1277056   6116     76 S   0.0  0.3   0:22.23 /usr/bin/+
   942 systuser  20   0  113932     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   943 root      20   0  153404    308    224 S   0.0  0.0   0:00.49 pure-ftpd+
   953 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.53 /usr/bin/+
   954 cpanelc+  20   0   10576   3552   2268 S   0.0  0.1   0:19.41 /usr/loca+
   958 root      20   0  439788   1192   1092 S   0.0  0.0   0:00.71 php-fpm: +
   959 systuser  20   0  113016     68      0 S   0.0  0.0   0:00.01 /usr/loca+
   960 root      20   0  445028      0      0 S   0.0  0.0   0:00.05 sw-engine+
   966 root      20   0  400740   2660    652 S   0.0  0.1   0:03.23 php-fpm: +
   971 systuser  20   0  114016  13968   2464 S   0.0  0.6   0:05.59 /usr/loca+
   972 root      20   0  572372   1000    428 S   0.0  0.0   0:02.06 /usr/bin/+
  1066 dovecot   20   0   10320    252    140 S   0.0  0.0   0:00.07 dovecot/a+
  1133 root      20   0  248092  11644    744 S   0.0  0.5   0:05.56 /usr/loca+
  1135 systuser  20   0  157704   2884    848 S   0.0  0.1   0:00.12 SonarPush+
  1173 wp-tool+  20   0  387556   5720   1556 S   0.0  0.2   0:00.27 /usr/bin/+
  1174 wp-tool+  20   0  410480  28872   1996 S   0.0  1.2   0:19.82 /usr/bin/+
  1253 root      20   0  228228  18568   5668 S   0.0  0.8   0:00.45 dnsadmin +
  1254 root      20   0  209336   8944   1960 S   0.0  0.4   0:02.60 tailwatchd
  1256 root      20   0  262224  22928   5072 S   0.0  0.9   0:02.62 cpdavd - +
  1643 root      20   0  299272    520    356 S   0.0  0.0   0:00.65 php-fpm: +
  1715 root      38  18  130416   1388    708 S   0.0  0.1   0:00.05 cpanellog+
  1942 root      20   0  267052  32064   6572 S   0.0  1.3   0:02.56 /usr/sbin+
  2351 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  3093 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6941 oysipao+  20   0    3148      8      0 S   0.0  0.0   0:00.00 [kworker]
  6961 oysipao+  20   0    3152     36      0 S   0.0  0.0   0:00.44 [kworker]
  7196 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  7216 root      20   0  178152  26304   2812 S   0.0  1.1   0:00.13 /usr/loca+
  7240 root      20   0  158824  15304   2712 S   0.0  0.6   0:00.08 /usr/loca+
  7258 root      20   0  195352  34708   3176 S   0.0  1.4   0:00.20 /usr/loca+
  7268 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  7299 root      20   0   76784  17012   3044 S   0.0  0.7   0:00.15 /usr/loca+
  8135 root      20   0  266268  68972   1832 S   0.0  2.8   0:03.66 spamd chi+
  8136 root      20   0  249228  32668    736 S   0.0  1.3   0:00.05 spamd chi+
  8936 mailnull  20   0   91204   4908   1744 S   0.0  0.2   0:00.00 /usr/sbin+
  9166 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9837 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 10032 dovenull  20   0   46772   3580   2736 S   0.0  0.1   0:00.00 dovecot/p+
 10033 dovenull  20   0   46924   4640   3596 S   0.0  0.2   0:00.00 dovecot/i+
 10034 root      20   0   10452   1524   1156 S   0.0  0.1   0:00.00 dovecot/l+
 10035 dovenull  20   0   46772   3584   2736 S   0.0  0.1   0:00.00 dovecot/p+
 10036 dovenull  20   0   46780   3588   2740 S   0.0  0.1   0:00.00 dovecot/i+
 10037 root      20   0   24396  12316   1488 S   0.0  0.5   0:00.01 dovecot/c+
 10038 dovecot   20   0   13568   1568   1300 S   0.0  0.1   0:00.00 dovecot/s+
 10039 root      20   0   12768   1308   1124 S   0.0  0.1   0:00.00 /usr/loca+
 10040 root      20   0   12732   1308   1128 S   0.0  0.1   0:00.00 /usr/loca+
 10041 root      20   0   12776   1308   1128 S   0.0  0.1   0:00.00 /usr/loca+
 10042 dovecot   20   0   41056   2728   2064 S   0.0  0.1   0:00.00 dovecot/a+
 10043 root      20   0   53268  11916   2532 S   0.0  0.5   0:00.05 /usr/loca+
 10044 nobody    20   0  277544  34988   3588 S   0.0  1.4   0:00.05 /usr/sbin+
 10045 nobody    20   0  277552  34836   3428 S   0.0  1.4   0:00.11 /usr/sbin+
 10046 nobody    20   0  277544  34836   3436 S   0.0  1.4   0:00.04 /usr/sbin+
 10048 nobody    20   0  277796  35072   3456 S   0.0  1.4   0:00.10 /usr/sbin+
 10078 nobody    20   0  277880  35408   3864 S   0.0  1.5   0:00.08 /usr/sbin+
 10087 nobody    20   0  277544  33592   2188 S   0.0  1.4   0:00.07 /usr/sbin+
 10092 nobody    20   0  277572  34792   3356 S   0.0  1.4   0:00.08 /usr/sbin+
 10105 nobody    20   0  277568  34780   3352 S   0.0  1.4   0:00.05 /usr/sbin+
 10118 nobody    20   0  277568  33672   2244 S   0.0  1.4   0:00.06 /usr/sbin+
 10129 nobody    20   0  277572  34668   3236 S   0.0  1.4   0:00.07 /usr/sbin+
 10136 nobody    20   0  277916  35292   3788 S   0.0  1.5   0:00.02 /usr/sbin+
 10139 mailnull  20   0   91204   4908   1744 S   0.0  0.2   0:00.00 /usr/sbin+
 10203 nobody    20   0  277556  34744   3328 S   0.0  1.4   0:00.06 /usr/sbin+
 10221 nobody    20   0  277896  35040   3480 S   0.0  1.4   0:00.05 /usr/sbin+
 10238 nobody    20   0  277544  33592   2188 S   0.0  1.4   0:00.07 /usr/sbin+
 10374 root      20   0   41052   2788   2124 S   0.0  0.1   0:00.00 dovecot/a+
 10376 worencom  20   0   38384   3680   2892 S   0.0  0.2   0:00.00 dovecot/i+
 10419 nigeria   20   0  400460   5204   2396 S   0.0  0.2   0:00.00 php-fpm: +
 10473 mailnull  20   0   91008   4360   1228 S   0.0  0.2   0:00.00 /usr/sbin+
 10532 mailnull  20   0   91204   5680   2448 S   0.0  0.2   0:00.00 /usr/sbin+
 10533 root      20   0  157100   4968   3680 S   0.0  0.2   0:00.00 sshd: unk+
 10539 root      20   0  157100   5080   3788 S   0.0  0.2   0:00.00 sshd: unk+
 10540 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: unk+
 10541 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: unk+
 10546 root      20   0  162436   5840   4348 S   0.0  0.2   0:00.01 sshd: roo+
 10547 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: roo+
 10558 root      20   0  162436   5840   4348 S   0.0  0.2   0:00.01 sshd: roo+
 10559 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 10576 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 10587 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 10589 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 10590 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 10591 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 10592 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 10593 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 10594 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 10595 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 10596 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 10597 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 10599 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 10601 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 10603 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 10604 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
 10629 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 10631 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 10632 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 10633 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 10634 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 10635 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 10637 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 10638 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 10639 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 10640 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 10647 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 10649 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 10654 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 10657 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 10667 cloudw    20   0  206340   6872   4744 R   0.0  0.3   0:00.00 /opt/cpan+
 38128 root      20   0       0      0      0 S   0.0  0.0   0:00.30 [kworker/+
 46515 root      20   0  181672  29016   1544 S   0.0  1.2   0:05.56 lfd - sle+
 80073 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 81457 root      20   0       0      0      0 S   0.0  0.0   0:00.17 [kworker/+
 90951 root      20   0  183052   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 91032 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 91056 root      20   0  108056    336    264 S   0.0  0.0   0:00.00 sleep 4h +
 91172 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 98007 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 99622 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 99640 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov14   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov14   0:24  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov14   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov14   0:22  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov14   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov14   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [kauditd]
root        241  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ata_sff]
root        242  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ttm_swap]
root        255  0.0  0.0      0     0 ?        S<   Nov14   0:02  \_ [kworker/0:1H]
root        270  0.0  0.0      0     0 ?        S<   Nov14   0:02  \_ [kworker/1:1H]
root        278  0.0  0.0      0     0 ?        S    Nov14   0:01  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [rpciod]
root        418  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [xprtiod]
root        615  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [kvm-irqfd-clean]
root        662  0.0  0.0      0     0 ?        S<   Nov14   0:02  \_ [loop0]
root        718  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [jbd2/loop0-8]
root        719  0.0  0.0      0     0 ?        S<   Nov14   0:00  \_ [ext4-rsv-conver]
root      38128  0.0  0.0      0     0 ?        S    Nov14   0:00  \_ [kworker/1:1]
root      80073  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/u200:1]
root      81457  0.0  0.0      0     0 ?        S    00:48   0:00  \_ [kworker/1:0]
root      91172  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/u200:2]
root      98007  0.0  0.0      0     0 ?        S    01:09   0:00  \_ [kworker/1:4]
root      99622  0.0  0.0      0     0 ?        S    01:11   0:00  \_ [kworker/0:2]
root      99640  0.0  0.0      0     0 ?        S    01:11   0:00  \_ [kworker/0:4]
root       2351  0.0  0.0      0     0 ?        S    01:17   0:00  \_ [kworker/1:3]
root       3093  0.0  0.0      0     0 ?        S    01:18   0:00  \_ [kworker/0:0]
root       7268  0.0  0.0      0     0 ?        S    01:23   0:00  \_ [kworker/0:1]
root       9166  0.0  0.0      0     0 ?        S    01:25   0:00  \_ [kworker/u200:0]
root       9837  0.0  0.0      0     0 ?        S    01:26   0:00  \_ [kworker/1:2]
root          1  0.1  0.1  44388  3292 ?        Ss   Nov14   0:32 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.1  40244  3584 ?        Ss   Nov14   0:13 /usr/lib/systemd/systemd-journald
root        383  0.0  0.0  45352   112 ?        Ss   Nov14   0:00 /usr/lib/systemd/systemd-udevd
root        412  0.0  0.0  55532   352 ?        S<sl Nov14   0:02 /sbin/auditd
root        495  0.0  0.2 224276  7100 ?        Ss   Nov14   0:00 queueprocd - waiting up to 60s to process a task
rpc         502  0.0  0.0  69256   116 ?        Ss   Nov14   0:00 /sbin/rpcbind -w
root        503  0.0  0.0 152780   144 ?        Ss   Nov14   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        507  0.0  0.0  21540   368 ?        Ss   Nov14   0:00 /usr/sbin/irqbalance --foreground
root        519  0.0  0.0  52852   456 ?        Ss   Nov14   0:00 /usr/sbin/smartd -n -q never
root        520  0.0  0.0  24704  1184 ?        Ss   Nov14   0:05 /usr/lib/systemd/systemd-logind
polkitd     521  0.0  0.0 612240   848 ?        Ssl  Nov14   0:03 /usr/lib/polkit-1/polkitd --no-debug
dbus        522  0.0  0.0  58596  1324 ?        Ss   Nov14   0:12 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        528  0.0  0.0 195208     0 ?        Ssl  Nov14   0:00 /usr/sbin/gssproxy -D
nscd        532  0.0  0.0 1264844 1872 ?        Ssl  Nov14   0:19 /usr/sbin/nscd
root        545  0.0  0.0   4388    56 ?        Ss   Nov14   0:00 /usr/sbin/acpid
root        567  0.0  0.0 124480   448 ?        Ss   Nov14   0:00 /usr/sbin/crond -n
root      90951  0.0  0.0 183052  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      91032  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      91056  0.0  0.0 108056   336 ?        S    01:00   0:00  |       \_ sleep 4h 4m
root       7196  0.0  0.0 183048  2144 ?        S    01:23   0:00  \_ /usr/sbin/CROND -n
root       7216  0.0  1.0 178152 26304 ?        Ss   01:23   0:00  |   \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify
root       7240  0.0  0.6 158824 15304 ?        S    01:23   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpaddonsup --force --nohtml
root       7258  0.0  1.4 195352 34708 ?        S    01:23   0:00  |           \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons.pl action=update-nohtml&force=1
root       7299  0.0  0.7  76784 17012 ?        S    01:23   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpanelsync --signed=1 httpupdate.cpanel.net /cpanelsync/cpaddons/cPAddonsMD5 /usr/local/cpanel/cpaddons/cPAddonsMD5
root      10587  0.0  0.0 183048  2152 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      10601  0.0  0.0 113284  1212 ?        Ss   01:27   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      10603  0.0  0.0 108052   356 ?        S    01:27   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      10604  0.0  0.0 113288  1520 ?        S    01:27   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      10668  0.0  0.0 153840  2092 ?        R    01:27   0:00  |               \_ ps auxf
root      10589  0.0  0.0 183048  2152 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      10633  0.0  0.0  20164   804 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      10590  0.0  0.0 183048  2152 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      10634  0.0  0.0  20164   804 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      10591  0.0  0.0 183048  2148 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      10635  0.0  0.0  20164   804 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      10592  0.0  0.0 183048  2148 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      10632  0.0  0.0  20164   808 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      10593  0.0  0.0 183048  2144 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      10629  0.0  0.0  20164   808 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      10594  0.0  0.0 183048  2144 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      10638  0.0  0.0  20164   804 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      10595  0.0  0.0 183048  2144 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      10631  0.0  0.0  20164   804 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      10596  0.0  0.0 183048  2144 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      10637  0.0  0.0  20164   804 ?        Ss   01:27   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      10597  0.0  0.0 183048  2140 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      10639  0.0  0.0  20164   968 ?        Ss   01:27   0:00  |   \_ jailshell (pactpay) [10657] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   10657  0.0  0.0  20164   256 ?        S    01:27   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   10660  0.0  0.6 480124 16788 ?        R    01:27   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      10599  0.0  0.0 183048  2144 ?        S    01:27   0:00  \_ /usr/sbin/CROND -n
root      10640  0.0  0.0  20164   968 ?        Ss   01:27   0:00      \_ jailshell (nigeria) [10654] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   10654  0.0  0.0  20164   256 ?        S    01:27   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   10656  0.0  0.6 404052 16144 ?        S    01:27   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        569  0.0  0.0  24208    28 ?        Ss   Nov14   0:00 /usr/sbin/atd -f
root        578  0.0  0.0 108296    64 tty1     Ss+  Nov14   0:00 /sbin/agetty --noclear tty1 linux
root        579  0.0  0.0 114704    48 ttyS0    Ss+  Nov14   0:00 /bin/bash
mailnull    627  0.0  0.1  90824  3924 ?        Ss   Nov14   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull   8936  0.0  0.2  91204  4908 ?        S    01:25   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  10139  0.0  0.2  91204  4908 ?        S    01:26   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  10473  0.0  0.1  91008  4360 ?        S    01:26   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  10532  0.0  0.2  91204  5680 ?        S    01:26   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    912  0.0  0.0  12660    52 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        913  0.0  0.0 111304   408 ?        Ss   Nov14   0:03 /usr/sbin/sshd -D
root      10533  0.0  0.2 157100  4968 ?        Ss   01:26   0:00  \_ sshd: unknown [priv]
sshd      10541  0.0  0.1 115644  2628 ?        S    01:26   0:00  |   \_ sshd: unknown [net]
root      10539  0.0  0.2 157100  5080 ?        Ss   01:26   0:00  \_ sshd: unknown [priv]
sshd      10540  0.0  0.1 115644  2632 ?        S    01:26   0:00  |   \_ sshd: unknown [net]
root      10546  0.5  0.2 162436  5840 ?        Ss   01:26   0:00  \_ sshd: root [priv]
sshd      10547  0.0  0.1 115644  2632 ?        S    01:26   0:00  |   \_ sshd: root [net]
root      10558  0.5  0.2 162436  5840 ?        Ss   01:26   0:00  \_ sshd: root [priv]
sshd      10559  0.0  0.1 115644  2628 ?        S    01:26   0:00  |   \_ sshd: root [net]
root      10649  0.0  0.1 111304  4272 ?        Ss   01:27   0:00  \_ sshd: [accepted]
root        914  0.1  0.3 1350088 8460 ?        Ssl  Nov14   0:24 /usr/bin/cspdaemon
root        916  0.0  0.0  51656  1240 ?        Ss   Nov14   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1066  0.0  0.0  10320   252 ?        S    Nov14   0:00  \_ dovecot/anvil
dovenull  10032  0.0  0.1  46772  3580 ?        S    01:26   0:00  \_ dovecot/pop3-login
dovenull  10033  0.0  0.1  46924  4640 ?        S    01:26   0:00  \_ dovecot/imap-login
root      10034  0.0  0.0  10452  1524 ?        S    01:26   0:00  \_ dovecot/log
dovenull  10035  0.0  0.1  46772  3584 ?        S    01:26   0:00  \_ dovecot/pop3-login
dovenull  10036  0.0  0.1  46780  3588 ?        S    01:26   0:00  \_ dovecot/imap-login
root      10037  0.0  0.5  24396 12316 ?        S    01:26   0:00  \_ dovecot/config
dovecot   10038  0.0  0.0  13568  1568 ?        S    01:26   0:00  \_ dovecot/stats
dovecot   10042  0.0  0.1  41056  2728 ?        S    01:26   0:00  \_ dovecot/auth
root      10374  0.0  0.1  41052  2788 ?        S    01:26   0:00  \_ dovecot/auth -w
worencom  10376  0.0  0.1  38384  3680 ?        S    01:26   0:00  \_ dovecot/imap
root        918  0.0  0.2 261424  6700 ?        Ss   Nov14   0:07 cpsrvd (SSL) - waiting for connections                   
root      10576  0.0  0.0      0     0 ?        Z    01:26   0:00  \_ [cpaneld - servi] <defunct>
root        922  0.0  2.7 1763124 66768 ?       Ssl  Nov14   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        923  0.0  0.1 290128  3936 ?        Ssl  Nov14   0:06 /usr/sbin/rsyslogd -n
root        924  0.0  0.0 396248   336 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        933  0.0  0.0 389508   432 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
named       935  0.0  1.6 1054792 40512 ?       Ssl  Nov14   0:13 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        937  0.0  0.0 388892   584 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    938  0.0  0.0  10388    48 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
telegraf    939  0.0  1.5 5654304 37232 ?       SLsl Nov14   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        940  0.0  0.2 1277056 6116 ?        Ssl  Nov14   0:22 /usr/bin/checkstatus
systuser    942  0.0  0.0 113932    68 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        943  0.0  0.0 153404   308 ?        Ss   Nov14   0:00 pure-ftpd (SERVER)
memcach+    953  0.0  0.0 342400     0 ?        Ssl  Nov14   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    954  0.0  0.1  10576  3552 ?        Rs   Nov14   0:19 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        958  0.0  0.0 439788  1192 ?        Ss   Nov14   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    959  0.0  0.0 113016    68 ?        Ssl  Nov14   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        960  0.0  0.0 445028     0 ?        Ss   Nov14   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        966  0.0  0.1 400740  2660 ?        Ss   Nov14   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   10419  0.0  0.2 400460  5204 ?        S    01:26   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    971  0.0  0.5 114016 13968 ?        Ssl  Nov14   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        972  0.0  0.0 572372  1000 ?        Ssl  Nov14   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1133  0.0  0.4 248092 11644 ?        Ss   Nov14   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8135  0.0  2.8 266268 68972 ?        S    Nov14   0:03  \_ spamd child
root       8136  0.0  1.3 249228 32668 ?        S    Nov14   0:00  \_ spamd child
systuser   1135  0.0  0.1 157704  2884 ?        S    Nov14   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1173  0.0  0.2 387556  5720 ?        Ss   Nov14   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1174  0.0  1.1 410480 28872 ?        Ss   Nov14   0:19 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1253  0.0  0.7 228228 18568 ?        Ss   Nov14   0:00 dnsadmin - server mode
root       1254  0.0  0.3 209336  8944 ?        Ss   Nov14   0:02 tailwatchd
root       1256  0.0  0.9 262224 22928 ?        Ss   Nov14   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1643  0.0  0.0 299272   520 ?        Ss   Nov14   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1715  0.0  0.0 130416  1388 ?        SN   Nov14   0:00 cpanellogd - sleeping for logs
mysql      1784  1.2 11.5 1458868 280296 ?      Sl   Nov14   4:50 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1942  0.0  1.3 267052 32064 ?        Ss   Nov14   0:02 /usr/sbin/httpd -k start
root      10039  0.0  0.0  12768  1308 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root      10040  0.0  0.0  12732  1308 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root      10041  0.0  0.0  12776  1308 ?        S    01:26   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root      10043  0.1  0.4  53268 11916 ?        S    01:26   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    10044  0.1  1.4 277544 34988 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    10045  0.2  1.4 277552 34836 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    10046  0.0  1.4 277544 34836 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    10047  0.2  1.4 277544 34836 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
cloudw    10667  0.0  0.6 366088 16592 ?        S    01:27   0:00  |   \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi
nobody    10048  0.2  1.4 277796 35072 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    10078  0.1  1.4 277880 35408 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    10087  0.1  1.3 277544 33592 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    10092  0.1  1.4 277572 34792 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    10105  0.1  1.4 277568 34780 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    10118  0.1  1.3 277568 33672 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    10129  0.1  1.4 277572 34668 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    10136  0.0  1.4 277916 35292 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    10203  0.1  1.4 277556 34744 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    10221  0.1  1.4 277896 35040 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
nobody    10238  0.2  1.3 277544 33592 ?        S    01:26   0:00  \_ /usr/sbin/httpd -k start
oysipao+   6941  0.0  0.0   3148     8 ?        Ss   Nov14   0:00 [kworker]
oysipao+   6961  0.0  0.0   3152    36 ?        S    Nov14   0:00  \_ [kworker]
root      46515  0.1  1.1 181672 29016 ?        Ss   00:00   0:05 lfd - sleeping
## mysql stats
Uptime: 23499  Threads: 3  Questions: 1797002  Slow queries: 0  Opens: 6845  Flush tables: 1  Open tables: 2000  Queries per second avg: 76.471
*************************** 1. row ***************************
     Id: 24403
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 24404
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: preparing
   Info: SELECT * FROM `26` WHERE `phone`='2348068189650' LIMIT 1
*************************** 3. row ***************************
     Id: 24409
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.134.79 TIME_WAIT
      1 114.119.150.155 TIME_WAIT
      1 166.0.142.245 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      1 66.249.70.192 TIME_WAIT
      1 88.216.47.206 TIME_WAIT
      1 92.71.34.82 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 147.185.133.22 TIME_WAIT
      2 66.249.70.198 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Saturday, 15-Nov-2025 01:27:01 WAT
   Restart Time: Friday, 14-Nov-2025 18:55:26 WAT
   Parent Server Config. Generation: 3
   Parent Server MPM Generation: 2
   Server uptime: 6 hours 31 minutes 35 seconds
   Server load: 0.13 0.26 0.30
   Total accesses: 123048 - Total Traffic: 2.9 GB - Total Duration: 67127855
   CPU Usage: u1.16 s2.44 cu1577.01 cs1293.19 - 12.2% CPU load
   5.24 requests/sec - 130.1 kB/second - 24.8 kB/request - 545.542 ms/request
   8 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

_WKK____KKW_K...._..K...........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU   SS   Req   Dur   Conn  Child  Slot      Client     Protocol           VHost                                        Request
   0-2  10078 0/15/6181 _ 0.29 0     0   3239936 0.0   0.38  141.48 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   1-2  10046 0/9/5932  W 0.14 0     0   3134081 0.0   0.19  142.18 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   2-2  10087 1/13/5780 K 0.34 0     261 3235600 30.4  0.39  146.84 66.249.70.198  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2324489
   3-2  10092 2/13/6095 K 0.31 2     364 3144929 61.1  0.37  143.69 66.249.70.192  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1896371
   4-2  10105 0/10/5797 _ 0.20 1     1   3074290 0.0   0.22  150.82 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   5-2  10118 0/12/5017 _ 0.26 1     259 2931665 0.0   0.30  128.98 66.249.70.195  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=856308
   6-2  10129 0/14/5750 _ 0.32 0     257 3159147 0.0   0.36  140.22 66.249.70.194  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=282396
   7-2  10136 0/6/5370  _ 0.32 1     1   2914408 0.0   0.07  129.99 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   8-2  10203 6/11/5438 K 0.26 0     262 2963155 179.3 0.30  135.52 66.249.70.197  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3719850307 HTTP/1.1
   9-2  10221 6/12/5081 K 0.40 0     278 2678211 177.9 0.20  121.52 66.249.70.199  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=168845
   10-2 10047 3/21/5067 W 0.51 0     0   2609852 90.7  0.56  117.10 66.249.70.196  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1994256312 HTTP/1.1
   11-2 10045 0/18/5157 _ 0.46 0     5   2857224 0.0   0.50  135.10 23.23.99.55    http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/blog/2019elections/assets/css/bl
   12-2 10238 6/13/4539 K 0.34 4     308 2659888 183.0 0.39  118.08 66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=19594 H
   13-1 -     0/0/5241  . 0.00 44    403 2743684 0.0   0.00  120.81 66.249.70.194  http/1.1 schoolplus.cloudware.ng:80 GET /?p=2054346324 HTTP/1.1
   14-1 -     0/0/4836  . 0.00 75    0   2508510 0.0   0.00  108.94 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-1 -     0/0/4867  . 0.00 73    0   2678585 0.0   0.00  121.41 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-1 -     0/0/4585  . 0.00 70    4   2321403 0.0   0.00  99.60  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-2 10044 0/11/4502 _ 0.20 0     265 2446335 0.0   0.25  110.42 66.249.70.194  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1167046
   18-1 -     0/0/3175  . 0.00 80    0   1872292 0.0   0.00  74.09  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-1 -     0/0/3110  . 0.00 104   0   1841751 0.0   0.00  84.12  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-2 10048 7/18/2851 K 0.45 0     287 1674858 214.7 0.55  71.75  66.249.70.200  http/1.1 schoolplus.cloudware.ng:80 GET /?p=3199103553 HTTP/1.1
   21-1 -     0/0/2451  . 0.00 99    0   1433151 0.0   0.00  63.49  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-1 -     0/0/2090  . 0.00 81    0   1395326 0.0   0.00  56.70  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-1 -     0/0/1472  . 0.00 100   0   881812  0.0   0.00  33.48  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-1 -     0/0/1336  . 0.00 46    437 809272  0.0   0.00  32.18  66.249.70.198  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1109120
   25-1 -     0/0/853   . 0.00 48    161 497487  0.0   0.00  19.81  216.244.66.229 http/1.1 team.cloudware.ng:80       GET /vendor/symfony/security-core/Exception/LockedException.php
   26-1 -     0/0/1178  . 0.00 79    0   699257  0.0   0.00  25.07  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-1 -     0/0/524   . 0.00 48    294 370975  0.0   0.00  13.49  66.249.70.195  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=707305
   28-1 -     0/0/124   . 0.00 44    408 117703  0.0   0.00  1.92   66.249.70.39   http/1.1 support.cloudware.ng:443   GET /?c=100207661 HTTP/1.1
   29-1 -     0/0/494   . 0.00 102   0   273852  0.0   0.00  15.18  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-1 -     0/0/292   . 0.00 76    0   155517  0.0   0.00  8.30   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-1 -     0/0/428   . 0.00 101   0   262945  0.0   0.00  12.84  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-1 -     0/0/378   . 0.00 48    289 222924  0.0   0.00  10.60  66.249.70.197  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=833058
   33-1 -     0/0/88    . 0.00 87    0   55802   0.0   0.00  2.25   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-1 -     0/0/312   . 0.00 88    0   173940  0.0   0.00  8.57   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-1 -     0/0/106   . 0.00 48    274 68641   0.0   0.00  2.42   66.249.70.199  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=285191
   36-1 -     0/0/45    . 0.00 48    312 34406   0.0   0.00  0.88   66.249.70.195  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1858531
   37-1 -     0/0/140   . 0.00 107   0   94554   0.0   0.00  4.26   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-1 -     0/0/520   . 0.00 77    0   298993  0.0   0.00  13.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-1 -     0/0/189   . 0.00 90    0   82924   0.0   0.00  2.20   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-1 -     0/0/390   . 0.00 74    0   215765  0.0   0.00  10.21  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-1 -     0/0/504   . 0.00 85    0   232467  0.0   0.00  10.53  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-1 -     0/0/51    . 0.00 84    0   32716   0.0   0.00  0.81   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-1 -     0/0/146   . 0.00 106   0   86203   0.0   0.00  3.56   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-1 -     0/0/526   . 0.00 48    344 290992  0.0   0.00  16.18  66.249.70.200  http/1.1 schoolplus.cloudware.ng:80 GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2359430
   45-1 -     0/0/172   . 0.00 105   0   111014  0.0   0.00  4.74   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-1 -     0/0/732   . 0.00 89    0   247872  0.0   0.00  10.12  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/5     . 0.00 1948  0   13937   0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/8     . 0.00 1974  0   4411    0.0   0.00  0.15   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/18    . 0.00 1930  0   9848    0.0   0.00  0.38   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/299   . 0.00 1972  0   158547  0.0   0.00  8.15   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/347   . 0.00 1916  0   161044  0.0   0.00  6.97   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/29    . 0.00 1904  0   15555   0.0   0.00  0.67   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/12    . 0.00 1926  0   18089   0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/10    . 0.00 1950  0   4405    0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/4     . 0.00 1946  0   998     0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/2     . 0.00 1976  0   1       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/7     . 0.00 1954  0   1939    0.0   0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/6     . 0.00 1975  0   3734    0.0   0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/1053  . 0.00 1949  0   467065  0.0   0.00  23.46  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/4     . 0.00 1947  0   13426   0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/13    . 0.00 1971  0   7394    0.0   0.00  0.31   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/9     . 0.00 1973  0   7635    0.0   0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/5     . 0.00 1951  0   739     0.0   0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/42    . 0.00 1914  0   22252   0.0   0.00  0.99   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/123   . 0.00 1673  0   72436   0.0   0.00  3.21   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/4     . 0.00 1970  0   160     0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/2     . 0.00 1969  0   1       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/5     . 0.00 1925  0   810     0.0   0.00  0.06   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/84    . 0.00 1932  0   48852   0.0   0.00  2.20   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/15    . 0.00 1937  0   7942    0.0   0.00  0.34   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/3     . 0.00 1940  0   864     0.0   0.00  0.03   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/32    . 0.00 1943  0   18076   0.0   0.00  0.70   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/42    . 0.00 1933  0   23305   0.0   0.00  1.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/9     . 0.00 1968  0   4058    0.0   0.00  0.18   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/4     . 0.00 1929  0   49      0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/934   . 0.00 1967  0   199287  0.0   0.00  9.09   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/2     . 0.00 1966  0   1       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/3     . 0.00 1965  0   4640    0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/1     . 0.00 18334 0   0       0.0   0.00  0.00   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 33
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 266 seconds, (range: 254...299)
   index usage: 0%, cache usage: 0%
   total entries stored since starting: 33
   total entries replaced since starting: 0
   total entries expired since starting: 0
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 0 miss
   total removes since starting: 0 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit