403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-16.01.30.txt
 ## swap threshold exceeded
## server overview
2025-11-16.01.30 load[0] mem[51/79] mysql[3/10] httpd[6]
              total        used        free      shared  buff/cache   available
Mem:           2363        1096         140          98        1126         982
Swap:          1999        1692         307
 01:30:02 up 11:05,  0 users,  load average: 0.60, 0.36, 0.44
## system overview
top - 01:30:02 up 11:05,  0 users,  load average: 0.60, 0.36, 0.44
Tasks: 203 total,   4 running, 198 sleeping,   0 stopped,   1 zombie
%Cpu(s): 90.6 us,  9.4 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   150660 free,  1116252 used,  1153388 buff/cache
KiB Swap:  2047996 total,   314620 free,  1733376 used.  1013100 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1785 mysql     20   0 1458332 268280   4044 S 162.5 11.1   9:26.52 /usr/sbin+
 96655 nigeria   20   0  404052  16136  10384 S   6.2  0.7   0:00.06 /opt/cpan+
     1 root      20   0   44412   3524   1660 S   0.0  0.1   0:55.22 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.41 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.90 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:40.44 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.11 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.77 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:07.06 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:22.16 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.69 [kauditd]
   234 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:02.99 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:02.59 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   343 root       0 -20       0      0      0 S   0.0  0.0   0:02.45 [kworker/+
   358 root      20   0   40244   2684   2376 S   0.0  0.1   0:19.79 /usr/lib/+
   385 root      20   0   45444    412    392 S   0.0  0.0   0:00.36 /usr/lib/+
   408 root      16  -4   55532    608    480 S   0.0  0.0   0:02.93 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   512 root      20   0   21540    516    428 S   0.0  0.0   0:00.90 /usr/sbin+
   516 root      20   0  152780    336    292 S   0.0  0.0   0:00.02 /usr/sbin+
   521 root      20   0   24708   1336    956 S   0.0  0.1   0:09.23 /usr/lib/+
   523 nscd      20   0 1264844   1960    920 S   0.0  0.1   0:32.22 /usr/sbin+
   524 root      20   0   52852    548    436 S   0.0  0.0   0:00.01 /usr/sbin+
   527 polkitd   20   0  612240   1304    908 S   0.0  0.1   0:05.42 /usr/lib/+
   529 root      20   0  224148   5476   1168 S   0.0  0.2   0:00.46 queueproc+
   531 dbus      20   0   58740   1532    788 S   0.0  0.1   0:20.96 /usr/bin/+
   539 rpc       20   0   69256    148     88 S   0.0  0.0   0:00.04 /sbin/rpc+
   541 root      20   0    4388     92     88 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208    120    120 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    588    452 S   0.0  0.0   0:01.12 /usr/sbin+
   577 root      20   0   24208    108     80 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296    192    188 S   0.0  0.0   0:00.00 /sbin/age+
   591 root      20   0  114704    196    196 S   0.0  0.0   0:00.02 /bin/bash
   622 mailnull  20   0   89108   4116   1076 S   0.0  0.2   0:00.74 /usr/sbin+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.61 [loop0]
   721 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [jbd2/loo+
   722 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   918 root      20   0  111304    616    516 S   0.0  0.0   0:04.05 /usr/sbin+
   919 root      20   0 1350088   8156    200 S   0.0  0.3   0:20.08 /usr/bin/+
   920 systuser  20   0  111864     72      0 S   0.0  0.0   0:00.02 /usr/loca+
   921 telegraf  20   0 5654304  35692   6028 S   0.0  1.5   0:21.80 /usr/loca+
   922 memcach+  20   0  342400    264    264 S   0.0  0.0   0:00.87 /usr/bin/+
   924 root      20   0  153404    504    420 S   0.0  0.0   0:00.82 pure-ftpd+
   926 root      20   0  572372   1080    504 S   0.0  0.0   0:03.45 /usr/bin/+
   927 systuser  20   0  114016  15816   2760 S   0.0  0.7   0:09.43 /usr/loca+
   928 systuser  20   0   12756     56      0 S   0.0  0.0   0:00.02 /usr/loca+
   929 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   930 root      20   0   51508    688    524 S   0.0  0.0   0:00.47 /usr/sbin+
   932 systuser  20   0  113932     72      0 S   0.0  0.0   0:00.02 /usr/loca+
   933 root      20   0  445028    164    164 S   0.0  0.0   0:00.05 sw-engine+
   935 root      20   0 1277312   7444    220 S   0.0  0.3   0:24.31 /usr/bin/+
   946 root      20   0  396248    712    528 S   0.0  0.0   0:01.00 php-fpm: +
   954 named     20   0 1054792  43300   2432 S   0.0  1.8   0:20.27 /usr/sbin+
   957 root      20   0  331088   4088   2780 S   0.0  0.2   0:10.15 /usr/sbin+
   973 root      20   0  400740   3000    888 S   0.0  0.1   0:06.12 php-fpm: +
   975 root      20   0  439788   1784   1576 S   0.0  0.1   0:01.18 php-fpm: +
   978 cpanelc+  20   0   10456   3700   2436 S   0.0  0.2   0:31.84 /usr/loca+
   980 root      20   0  388892    920    704 S   0.0  0.0   0:01.22 php-fpm: +
   991 root      20   0  389508    692    600 S   0.0  0.0   0:01.09 php-fpm: +
   992 root      20   0 1763124  74160   1108 S   0.0  3.1   0:14.13 /usr/loca+
   993 root      20   0  261288   7060   1940 S   0.0  0.3   0:08.20 cpsrvd (S+
  1065 dovenull  20   0   47524   3156   1784 S   0.0  0.1   0:00.74 dovecot/p+
  1066 dovenull  20   0   47948   3604   1940 S   0.0  0.1   0:00.42 dovecot/i+
  1067 dovecot   20   0   10320    556    440 S   0.0  0.0   0:00.13 dovecot/a+
  1068 root      20   0   10452    636    440 S   0.0  0.0   0:00.45 dovecot/l+
  1069 dovenull  20   0   47600   3216   1816 S   0.0  0.1   0:00.59 dovecot/p+
  1070 dovenull  20   0   47816   3324   1836 S   0.0  0.1   0:00.37 dovecot/i+
  1077 root      20   0   24528   2688    632 S   0.0  0.1   0:00.23 dovecot/c+
  1078 dovecot   20   0   13568    620    372 S   0.0  0.0   0:00.09 dovecot/s+
  1150 root      20   0  248140  26100   1128 S   0.0  1.1   0:07.56 /usr/loca+
  1151 systuser  20   0  157704   3132   1088 S   0.0  0.1   0:00.18 SonarPush+
  1152 dovecot   20   0   41180   1628   1132 S   0.0  0.1   0:00.94 dovecot/a+
  1153 wp-tool+  20   0  387556   5404   2048 S   0.0  0.2   0:00.36 /usr/bin/+
  1154 wp-tool+  20   0  410480  31176   2124 S   0.0  1.3   0:33.70 /usr/bin/+
  1229 root      20   0  183900   6444   3216 S   0.0  0.3   0:02.39 cpdavd - +
  1231 root      20   0  209920  12680   2532 S   0.0  0.5   0:05.03 tailwatchd
  1232 root      20   0  167452   4276   2900 S   0.0  0.2   0:00.65 dnsadmin +
  1638 root      20   0  299272    880    500 S   0.0  0.0   0:01.07 php-fpm: +
  1681 root      38  18  130416   1516    808 S   0.0  0.1   0:00.09 cpanellog+
  1909 root      20   0  266984   8868    804 S   0.0  0.4   0:03.75 /usr/sbin+
  1911 root      20   0   12844    508    364 S   0.0  0.0   0:04.56 /usr/loca+
  1912 root      20   0   12732    464    356 S   0.0  0.0   0:03.99 /usr/loca+
  1913 root      20   0   12900    516    360 S   0.0  0.0   0:04.37 /usr/loca+
  1918 root      20   0   53344    268    268 S   0.0  0.0   0:00.04 /usr/loca+
  8198 root      20   0  268280  98448   3348 S   0.0  4.1   0:04.60 spamd chi+
  8199 root      20   0  249268  47476    700 S   0.0  2.0   0:00.06 spamd chi+
 31033 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 31042 oysipao+  20   0    3152    496      4 S   0.0  0.0   0:00.72 [kworker]
 48777 root      20   0  181664  29700   2352 S   0.0  1.2   0:05.89 lfd - sle+
 56928 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [kworker/+
 76487 nobody    20   0  277752  21620   5012 S   0.0  0.9   0:02.47 /usr/sbin+
 81352 root      20   0  183052   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 81404 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 81423 root      20   0  108056    360    284 S   0.0  0.0   0:00.00 sleep 3h +
 81558 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 84196 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 85332 nobody    20   0  277584  20912   4744 S   0.0  0.9   0:01.24 /usr/sbin+
 86465 nobody    20   0  277864  21140   4636 S   0.0  0.9   0:01.43 /usr/sbin+
 87177 nobody    20   0  277760  20836   4592 S   0.0  0.9   0:00.85 /usr/sbin+
 87355 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 87818 nobody    20   0  277872  20956   4680 S   0.0  0.9   0:01.30 /usr/sbin+
 88316 nobody    20   0  277660  20900   4716 S   0.0  0.9   0:00.87 /usr/sbin+
 88363 nobody    20   0  277872  20908   4604 S   0.0  0.9   0:00.70 /usr/sbin+
 89675 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 89760 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [kworker/+
 89809 nobody    20   0  277720  20836   4568 S   0.0  0.9   0:00.81 /usr/sbin+
 89898 nobody    20   0  277860  20760   4492 S   0.0  0.9   0:00.69 /usr/sbin+
 91544 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 92477 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 92925 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 93053 nobody    20   0  277492  20108   4340 S   0.0  0.8   0:00.33 /usr/sbin+
 93295 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 93309 root      20   0  178152  26308   2812 S   0.0  1.1   0:00.13 /usr/loca+
 93346 root      20   0  158832  15308   2712 S   0.0  0.6   0:00.07 /usr/loca+
 93359 root      20   0  195356  34708   3172 S   0.0  1.4   0:00.20 /usr/loca+
 93378 root      20   0   76784  17000   3040 S   0.0  0.7   0:00.18 /usr/loca+
 95255 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 95493 root      20   0   41052   2808   2144 S   0.0  0.1   0:00.01 dovecot/a+
 95752 nobody    20   0  277512  19340   3704 S   0.0  0.8   0:00.04 /usr/sbin+
 96121 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 96123 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 96253 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 96339 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 96362 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 96395 nigeria   20   0  403548  11536   4076 S   0.0  0.5   0:00.39 php-fpm: +
 96467 mailnull  20   0   89496   5688   2452 S   0.0  0.2   0:00.00 /usr/sbin+
 96494 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 96495 sshd      20   0  115644   2620   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 96540 root      20   0  162436   5828   4340 S   0.0  0.2   0:00.01 sshd: roo+
 96541 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: roo+
 96555 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 96577 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 96579 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 96580 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 96582 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 96583 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 96585 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 96586 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 96588 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 96589 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 96590 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 96591 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 96592 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 96594 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 96603 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 96604 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 /usr/loca+
 96610 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 96611 root      20   0  188200  11080   5148 S   0.0  0.5   0:00.02 /usr/loca+
 96612 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 96613 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 96615 root      20   0   20164    808    632 R   0.0  0.0   0:00.00 /usr/loca+
 96616 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 96618 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 96619 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 96620 root      20   0   20164    808    632 R   0.0  0.0   0:00.00 /usr/loca+
 96621 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 96624 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 96626 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 96630 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 96638 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 96643 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 96650 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 96659 pactpay   20   0  480124  17692  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 96664 root      20   0  160224   2368   1632 S   0.0  0.1   0:00.01 top -n 2 +
 96688 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 96755 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 96757 root      20   0   38016   3304   1680 R   0.0  0.1   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov15   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov15   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov15   0:40  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov15   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov15   0:07  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov15   0:22  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kauditd]
root        234  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov15   0:02  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root        343  0.0  0.0      0     0 ?        S<   Nov15   0:02  \_ [kworker/0:1H]
root        413  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov15   0:02  \_ [loop0]
root        721  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [jbd2/loop0-8]
root        722  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root      56928  0.0  0.0      0     0 ?        S    00:15   0:00  \_ [kworker/u200:1]
root      81558  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/u200:2]
root      84196  0.0  0.0      0     0 ?        S    01:04   0:00  \_ [kworker/0:1]
root      87355  0.0  0.0      0     0 ?        R    01:10   0:00  \_ [kworker/1:3]
root      89675  0.0  0.0      0     0 ?        S    01:15   0:00  \_ [kworker/0:2]
root      89760  0.0  0.0      0     0 ?        S    01:15   0:00  \_ [kworker/1:2]
root      91544  0.0  0.0      0     0 ?        S    01:19   0:00  \_ [kworker/0:4]
root      92477  0.0  0.0      0     0 ?        S    01:21   0:00  \_ [kworker/1:1]
root      92925  0.0  0.0      0     0 ?        S    01:22   0:00  \_ [kworker/1:4]
root      95255  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/u200:0]
root      96121  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/0:0]
root      96123  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/0:3]
root      96688  0.0  0.0      0     0 ?        S    01:30   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44412  3524 ?        Ss   Nov15   0:55 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.1  40244  2684 ?        Ss   Nov15   0:19 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45444   412 ?        Ss   Nov15   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   608 ?        S<sl Nov15   0:02 /sbin/auditd
root        512  0.0  0.0  21540   516 ?        Ss   Nov15   0:00 /usr/sbin/irqbalance --foreground
root        516  0.0  0.0 152780   336 ?        Ss   Nov15   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        521  0.0  0.0  24708  1336 ?        Ss   Nov15   0:09 /usr/lib/systemd/systemd-logind
nscd        523  0.0  0.0 1264844 1960 ?        Ssl  Nov15   0:32 /usr/sbin/nscd
root        524  0.0  0.0  52852   548 ?        Ss   Nov15   0:00 /usr/sbin/smartd -n -q never
polkitd     527  0.0  0.0 612240  1304 ?        Ssl  Nov15   0:05 /usr/lib/polkit-1/polkitd --no-debug
root        529  0.0  0.2 224148  5476 ?        Ss   Nov15   0:00 queueprocd - waiting up to 60s to process a task
dbus        531  0.0  0.0  58740  1532 ?        Ss   Nov15   0:20 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         539  0.0  0.0  69256   148 ?        Ss   Nov15   0:00 /sbin/rpcbind -w
root        541  0.0  0.0   4388    92 ?        Ss   Nov15   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208   120 ?        Ssl  Nov15   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   588 ?        Ss   Nov15   0:01 /usr/sbin/crond -n
root      81352  0.0  0.0 183052  2156 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      81404  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      81423  0.0  0.0 108056   360 ?        S    01:00   0:00  |       \_ sleep 3h 16m
root      93295  0.0  0.0 183048  2148 ?        S    01:23   0:00  \_ /usr/sbin/CROND -n
root      93309  0.0  1.0 178152 26308 ?        Ss   01:23   0:00  |   \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify
root      93346  0.0  0.6 158832 15308 ?        S    01:23   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpaddonsup --force --nohtml
root      93359  0.0  1.4 195356 34708 ?        S    01:23   0:00  |           \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons.pl action=update-nohtml&force=1
root      93378  0.0  0.7  76784 17000 ?        S    01:23   0:00  |               \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/cpanelsync --signed=1 httpupdate.cpanel.net /cpanelsync/cpaddons/cPAddonsMD5 /usr/local/cpanel/cpaddons/cPAddonsMD5
root      96577  0.0  0.0 183048  2156 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      96619  0.0  0.0 113284  1212 ?        Ss   01:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      96630  0.0  0.0 108052   356 ?        S    01:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      96638  0.0  0.0 113288  1516 ?        S    01:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      96758  0.0  0.0 153840  2092 ?        R    01:30   0:00  |               \_ ps auxf
root      96579  0.0  0.0 183048  2156 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      96615  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      96580  0.0  0.0 183048  2156 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      96604  0.0  0.0  20164   988 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      96757  0.0  0.2  38516  6056 ?        R    01:30   0:00  |       \_ /usr/local/cpanel/bin/setupvirtfs 1014
root      96582  0.0  0.0 183048  2156 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      96612  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      96583  0.0  0.0 183048  2156 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      96624  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      96585  0.0  0.0 183048  2152 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      96616  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      96586  0.0  0.0 183048  2152 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      96620  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      96588  0.0  0.0 183048  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      96610  0.0  0.0  20164   808 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      96589  0.0  0.0 183048  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      96613  0.0  0.0  20164   804 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      96590  0.0  0.0 183048  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      96621  0.0  0.0  20164   812 ?        Ss   01:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      96591  0.0  0.0 183048  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      96603  0.0  0.0 113284  1212 ?        Ss   01:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      96611  2.0  0.4 188200 11080 ?        S    01:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      96664  1.0  0.0 160224  2368 ?        S    01:30   0:00  |           \_ top -n 2 -b -c
root      96592  0.0  0.0 183048  2152 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      96626  0.0  0.0  20164   964 ?        Ss   01:30   0:00  |   \_ jailshell (pactpay) [96650] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   96650  0.0  0.0  20164   260 ?        S    01:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   96659  1.0  0.7 480124 17692 ?        S    01:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      96594  0.0  0.0 183048  2148 ?        S    01:30   0:00  \_ /usr/sbin/CROND -n
root      96618  0.0  0.0  20164   968 ?        Ss   01:30   0:00      \_ jailshell (nigeria) [96643] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   96643  0.0  0.0  20164   264 ?        S    01:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   96655  6.0  0.6 404052 16136 ?        S    01:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208   108 ?        Ss   Nov15   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296   192 tty1     Ss+  Nov15   0:00 /sbin/agetty --noclear tty1 linux
root        591  0.0  0.0 114704   196 ttyS0    Ss+  Nov15   0:00 /bin/bash
mailnull    622  0.0  0.1  89108  4116 ?        Ss   Nov15   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  96467  0.0  0.2  89496  5688 ?        S    01:29   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 111304   616 ?        Ss   Nov15   0:04 /usr/sbin/sshd -D
root      96339  0.0  0.1 111304  4276 ?        Ss   01:29   0:00  \_ sshd: [accepted]
root      96362  0.0  0.1 111304  4264 ?        Ss   01:29   0:00  \_ sshd: [accepted]
root      96494  0.0  0.1 111304  4264 ?        Ss   01:29   0:00  \_ sshd: [accepted]
sshd      96495  0.0  0.1 115644  2620 ?        S    01:29   0:00  |   \_ sshd: [net]
root      96540  0.2  0.2 162436  5828 ?        Ss   01:29   0:00  \_ sshd: root [priv]
sshd      96541  0.0  0.1 115644  2628 ?        S    01:29   0:00      \_ sshd: root [net]
root        919  0.0  0.3 1350088 8156 ?        Ssl  Nov15   0:20 /usr/bin/cspdaemon
systuser    920  0.0  0.0 111864    72 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    921  0.0  1.4 5654304 35692 ?       SLsl Nov15   0:21 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    922  0.0  0.0 342400   264 ?        Ssl  Nov15   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        924  0.0  0.0 153404   504 ?        Ss   Nov15   0:00 pure-ftpd (SERVER)
root        926  0.0  0.0 572372  1080 ?        Ssl  Nov15   0:03 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    927  0.0  0.6 114016 15816 ?        Ssl  Nov15   0:09 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    928  0.0  0.0  12756    56 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.0  10132    44 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        930  0.0  0.0  51508   688 ?        Ss   Nov15   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1065  0.0  0.1  47524  3156 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1066  0.0  0.1  47948  3604 ?        S    Nov15   0:00  \_ dovecot/imap-login
dovecot    1067  0.0  0.0  10320   556 ?        S    Nov15   0:00  \_ dovecot/anvil
root       1068  0.0  0.0  10452   636 ?        S    Nov15   0:00  \_ dovecot/log
dovenull   1069  0.0  0.1  47600  3216 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1070  0.0  0.1  47816  3324 ?        S    Nov15   0:00  \_ dovecot/imap-login
root       1077  0.0  0.1  24528  2688 ?        S    Nov15   0:00  \_ dovecot/config
dovecot    1078  0.0  0.0  13568   620 ?        S    Nov15   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180  1628 ?        S    Nov15   0:00  \_ dovecot/auth
root      95493  0.0  0.1  41052  2808 ?        S    01:27   0:00  \_ dovecot/auth -w
root      96253  0.0  0.1  60820  4512 ?        S    01:29   0:00  \_ dovecot/lmtp
systuser    932  0.0  0.0 113932    72 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        933  0.0  0.0 445028   164 ?        Ss   Nov15   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        935  0.0  0.3 1277312 7444 ?        Ssl  Nov15   0:24 /usr/bin/checkstatus
root        946  0.0  0.0 396248   712 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
named       954  0.0  1.7 1054792 43300 ?       Ssl  Nov15   0:20 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        957  0.0  0.1 331088  4088 ?        Ssl  Nov15   0:10 /usr/sbin/rsyslogd -n
root        973  0.0  0.1 400740  3000 ?        Ss   Nov15   0:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   96395  1.1  0.4 403548 11536 ?        S    01:29   0:00  \_ php-fpm: pool nigeriadecide_org
root        975  0.0  0.0 439788  1784 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
cpanelc+    978  0.0  0.1  10456  3700 ?        Ss   Nov15   0:31 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        980  0.0  0.0 388892   920 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        991  0.0  0.0 389508   692 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  3.0 1763124 74160 ?       Ssl  Nov15   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        993  0.0  0.2 261288  7060 ?        Ss   Nov15   0:08 cpsrvd (SSL) - waiting for connections                   
root      96555  0.0  0.0      0     0 ?        Z    01:29   0:00  \_ [cpaneld - servi] <defunct>
root       1150  0.0  1.0 248140 26100 ?        Ss   Nov15   0:07 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8198  0.0  4.0 268280 98448 ?        S    Nov15   0:04  \_ spamd child
root       8199  0.0  1.9 249268 47476 ?        S    Nov15   0:00  \_ spamd child
systuser   1151  0.0  0.1 157704  3132 ?        S    Nov15   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1153  0.0  0.2 387556  5404 ?        Ss   Nov15   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1154  0.0  1.2 410480 31176 ?        Ss   Nov15   0:33 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1229  0.0  0.2 183900  6444 ?        Ss   Nov15   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1231  0.0  0.5 209920 12680 ?        Ss   Nov15   0:05 tailwatchd
root       1232  0.0  0.1 167452  4276 ?        Ss   Nov15   0:00 dnsadmin - dormant mode
root       1638  0.0  0.0 299272   880 ?        Ss   Nov15   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1681  0.0  0.0 130416  1516 ?        SN   Nov15   0:00 cpanellogd - sleeping for logs
mysql      1785  1.4 11.0 1458332 268280 ?      Sl   Nov15   9:26 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1909  0.0  0.3 266984  8868 ?        Ss   Nov15   0:03 /usr/sbin/httpd -k start
root       1911  0.0  0.0  12844   508 ?        S    Nov15   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1912  0.0  0.0  12732   464 ?        S    Nov15   0:03  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1913  0.0  0.0  12900   516 ?        S    Nov15   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1918  0.0  0.0  53344   268 ?        S    Nov15   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    76487  0.1  0.8 277752 21620 ?        S    00:53   0:02  \_ /usr/sbin/httpd -k start
nobody    85332  0.0  0.8 277584 20912 ?        S    01:06   0:01  \_ /usr/sbin/httpd -k start
nobody    86465  0.1  0.8 277864 21140 ?        S    01:08   0:01  \_ /usr/sbin/httpd -k start
nobody    87177  0.0  0.8 277760 20836 ?        S    01:09   0:00  \_ /usr/sbin/httpd -k start
nobody    87818  0.1  0.8 277872 20956 ?        S    01:11   0:01  \_ /usr/sbin/httpd -k start
nobody    88316  0.0  0.8 277660 20900 ?        S    01:12   0:00  \_ /usr/sbin/httpd -k start
nobody    88363  0.0  0.8 277872 20908 ?        S    01:12   0:00  \_ /usr/sbin/httpd -k start
nobody    89809  0.0  0.8 277720 20836 ?        S    01:15   0:00  \_ /usr/sbin/httpd -k start
nobody    89898  0.0  0.8 277860 20760 ?        S    01:15   0:00  \_ /usr/sbin/httpd -k start
nobody    93053  0.0  0.8 277492 20108 ?        S    01:22   0:00  \_ /usr/sbin/httpd -k start
nobody    95752  0.0  0.7 277512 19340 ?        S    01:28   0:00  \_ /usr/sbin/httpd -k start
oysipao+  31033  0.0  0.0   3148   416 ?        Ss   Nov15   0:00 [kworker]
oysipao+  31042  0.0  0.0   3152   496 ?        S    Nov15   0:00  \_ [kworker]
root      48777  0.1  1.2 181664 29700 ?        Ss   00:00   0:05 lfd - sleeping
## mysql stats
Uptime: 39936  Threads: 3  Questions: 3615290  Slow queries: 0  Opens: 11496  Flush tables: 1  Open tables: 2000  Queries per second avg: 90.527
*************************** 1. row ***************************
     Id: 50957
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 50958
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 50969
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.144.127 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.100 TIME_WAIT
      1 ::1 TIME_WAIT
      1 213.201.140.182 TIME_WAIT
      1 45.131.217.207 TIME_WAIT
      1 54.39.0.51 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 20.15.200.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 16-Nov-2025 01:30:02 WAT
   Restart Time: Saturday, 15-Nov-2025 14:24:30 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 11 hours 5 minutes 31 seconds
   Server load: 0.60 0.36 0.44
   Total accesses: 210381 - Total Traffic: 4.4 GB - Total Duration: 108661338
   CPU Usage: u6.62 s7.86 cu2534.53 cs2164.78 - 11.8% CPU load
   5.27 requests/sec - 115.4 kB/second - 21.9 kB/request - 516.498 ms/request
   5 requests currently being processed, 0 workers gracefully restarting, 6 idle workers

_._W_KK._C_.K_..................................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc      M CPU    SS   Req   Dur   Conn Child  Slot      Client     Protocol           VHost                                        Request
   0-0  87818 0/447/10507  _ 8.43  2     5   5204874 0.0  2.68  214.16 18.213.102.186 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/images/assets/css/blog/blog/poll
   1-0  -     0/0/10647    . 0.00  47    0   5460312 0.0  0.00  218.87 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   2-0  88316 0/290/10159  _ 5.26  0     278 5171555 0.0  1.78  214.52 66.249.70.193  http/1.1 schoolplus.cloudware.ng:80 GET /?p=1359110978 HTTP/1.1
   3-0  86465 0/509/10511  W 9.34  0     0   5046181 0.0  2.43  210.50 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   4-0  93053 0/103/11321  _ 2.04  0     0   5657808 0.0  0.75  220.04 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   5-0  89809 2/270/9856   K 5.12  2     22  5128328 6.4  1.11  207.16 66.249.70.8    http/1.1 test.cloudware.ng:443      GET /208342816?goodscode=0208070522 HTTP/1.1
   6-0  85332 18/456/10471 K 6.86  0     25  5188327 20.0 3.28  216.49 66.249.70.7    http/1.1 test.cloudware.ng:443      GET /3028759319?goodscode=3024790542 HTTP/1.1
   7-0  -     0/0/9477     . 0.00  82    0   4748783 0.0  0.00  196.85 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   8-0  89898 0/219/9423   _ 4.45  0     22  4788756 0.0  1.55  198.37 66.249.70.7    http/1.1 test.cloudware.ng:443      GET /1278157894?goodscode=1276483482 HTTP/1.1
   9-0  95752 1/13/9070    C 0.11  0     9   4539061 10.3 0.12  214.23 114.119.133.34 http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?state=Delta&lga=Warri%20south&wa
   10-0 88363 0/229/9469   _ 3.48  0     23  4585206 0.0  1.63  206.88 66.249.70.5    http/1.1 test.cloudware.ng:80       GET /1835439751?goodscode=1833034958 HTTP/1.1
   11-0 -     0/0/8642     . 0.00  890   0   4560256 0.0  0.00  196.19 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-0 87177 1/274/8395   K 4.63  1     276 4733582 35.2 1.84  181.15 192.178.4.98   http/1.1 team.cloudware.ng:443      GET /?l=3247235476 HTTP/1.1
   13-0 76487 0/789/8788   _ 14.87 0     0   4575739 0.0  5.11  188.60 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   14-0 -     0/0/7853     . 0.00  1664  0   3942647 0.0  0.00  168.48 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 -     0/0/7802     . 0.00  1830  0   4184404 0.0  0.00  169.32 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   16-0 -     0/0/7000     . 0.00  1784  0   3650664 0.0  0.00  155.04 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 -     0/0/6603     . 0.00  1761  4   3238571 0.0  0.00  136.50 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   18-0 -     0/0/5968     . 0.00  1597  0   3307649 0.0  0.00  141.69 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   19-0 -     0/0/6668     . 0.00  1977  0   3269420 0.0  0.00  134.15 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -     0/0/4047     . 0.00  1695  0   2279847 0.0  0.00  92.87  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 -     0/0/4142     . 0.00  1655  0   2257742 0.0  0.00  93.65  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   22-0 -     0/0/3862     . 0.00  1758  0   2259774 0.0  0.00  96.66  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   23-0 -     0/0/4103     . 0.00  3817  0   2264690 0.0  0.00  96.23  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -     0/0/2483     . 0.00  3835  0   1524414 0.0  0.00  60.33  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -     0/0/1233     . 0.00  3837  0   661151  0.0  0.00  28.08  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/1018     . 0.00  3763  0   570230  0.0  0.00  24.14  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/652      . 0.00  4169  0   362478  0.0  0.00  14.29  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/509      . 0.00  4401  0   281598  0.0  0.00  11.72  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/458      . 0.00  4441  0   254403  0.0  0.00  10.31  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -     0/0/1106     . 0.00  4425  0   650529  0.0  0.00  26.63  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -     0/0/476      . 0.00  4159  0   195797  0.0  0.00  7.80   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/326      . 0.00  4399  0   135048  0.0  0.00  4.34   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/147      . 0.00  4420  0   83222   0.0  0.00  2.72   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/586      . 0.00  4415  0   352682  0.0  0.00  11.17  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/222      . 0.00  4434  0   116759  0.0  0.00  2.54   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/112      . 0.00  4402  0   126228  0.0  0.00  2.34   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/63       . 0.00  4304  0   10786   0.0  0.00  0.35   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/29       . 0.00  4449  0   15137   0.0  0.00  0.47   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/527      . 0.00  3824  0   236253  0.0  0.00  9.69   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/125      . 0.00  4316  0   109425  0.0  0.00  2.10   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/139      . 0.00  4152  0   76178   0.0  0.00  1.99   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/123      . 0.00  4404  0   72768   0.0  0.00  3.11   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/106      . 0.00  4447  0   64987   0.0  0.00  2.45   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/41       . 0.00  4462  0   9302    0.0  0.00  0.53   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/348      . 0.00  4429  0   196796  0.0  0.00  8.46   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/22       . 0.00  4411  0   14914   0.0  0.00  0.21   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/21       . 0.00  4430  0   5053    0.0  0.00  0.23   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/194      . 0.00  3826  0   41020   0.0  0.00  1.24   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/48       . 0.00  4448  0   55353   0.0  0.00  2.36   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/444      . 0.00  4457  0   253169  0.0  0.00  9.85   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/35       . 0.00  4432  0   12386   0.0  0.00  0.57   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/26       . 0.00  4463  0   8755    0.0  0.00  0.36   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/118      . 0.00  4433  0   57707   0.0  0.00  2.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/266      . 0.00  4408  0   133476  0.0  0.00  5.87   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/410      . 0.00  4435  0   301035  0.0  0.00  13.69  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/73       . 0.00  4436  0   33087   0.0  0.00  0.78   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/27       . 0.00  4413  0   8189    0.0  0.00  0.33   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/200      . 0.00  4455  0   155909  0.0  0.00  4.53   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/16       . 0.00  4458  0   14884   0.0  0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/155      . 0.00  4454  0   87440   0.0  0.00  3.13   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/177      . 0.00  3832  0   37690   0.0  0.00  1.47   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -     0/0/116      . 0.00  4459  0   68685   0.0  0.00  2.82   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -     0/0/17       . 0.00  4456  0   10304   0.0  0.00  0.09   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -     0/0/226      . 0.00  4132  0   39016   0.0  0.00  1.65   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -     0/0/65       . 0.00  4410  0   4299    0.0  0.00  0.34   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -     0/0/48       . 0.00  4318  0   13648   0.0  0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 -     0/0/10       . 0.00  4460  0   56      0.0  0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   68-0 -     0/0/17       . 0.00  4453  0   16258   0.0  0.00  0.07   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -     0/0/104      . 0.00  4417  0   33893   0.0  0.00  1.82   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -     0/0/59       . 0.00  4461  0   64544   0.0  0.00  1.17   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -     0/0/922      . 0.00  4451  0   492825  0.0  0.00  20.57  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -     0/0/133      . 0.00  4416  0   54728   0.0  0.00  1.76   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -     0/0/140      . 0.00  4419  0   93013   0.0  0.00  3.19   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -     0/0/54       . 0.00  10320 0   42053   0.0  0.00  1.34   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -     0/0/13       . 0.00  10402 0   12308   0.0  0.00  0.12   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -     0/0/149      . 0.00  10403 0   87089   0.0  0.00  3.26   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -     0/0/13       . 0.00  10423 0   1935    0.0  0.00  0.10   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -     0/0/16       . 0.00  10400 0   16052   0.0  0.00  0.22   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -     0/0/41       . 0.00  10287 0   30094   0.0  0.00  0.73   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -     0/0/19       . 0.00  15027 0   6786    0.0  0.00  0.30   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -     0/0/359      . 0.00  13752 0   198767  0.0  0.00  8.30   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   82-0 -     0/0/3        . 0.00  28945 0   23      0.0  0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   83-0 -     0/0/3        . 0.00  28919 0   644     0.0  0.00  0.04   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   84-0 -     0/0/2        . 0.00  28937 0   3       0.0  0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   85-0 -     0/0/7        . 0.00  28904 0   3861    0.0  0.00  0.17   ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 368
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 18 seconds, (range: 0...79)
   index usage: 6%, cache usage: 8%
   total entries stored since starting: 112240
   total entries replaced since starting: 0
   total entries expired since starting: 111826
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 547 miss
   total removes since starting: 46 hit, 56 miss
Youez - 2016 - github.com/yon3zu
LinuXploit