403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-16.01.45.txt
 ## swap threshold exceeded
## server overview
2025-11-16.01.45 load[0] mem[54/80] mysql[4/10] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1204         219          98         939         894
Swap:          1999        1696         303
 01:45:02 up 11:20,  0 users,  load average: 0.78, 0.58, 0.56
## system overview
top - 01:45:02 up 11:20,  0 users,  load average: 1.04, 0.64, 0.58
Tasks: 209 total,   6 running, 201 sleeping,   0 stopped,   2 zombie
%Cpu(s): 81.2 us, 18.8 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   230076 free,  1227756 used,   962468 buff/cache
KiB Swap:  2047996 total,   310524 free,  1737472 used.   921056 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1785 mysql     20   0 1458332 266620   3612 S 126.7 11.0   9:42.71 /usr/sbin+
  4567 healtho+  20   0  460012  67188   4052 R  33.3  2.8   0:02.10 php-fpm: +
  4745 nigeria   20   0  404052  16140  10384 R  13.3  0.7   0:00.07 /opt/cpan+
   527 polkitd   20   0  612240   1192    796 S   6.7  0.0   0:05.55 /usr/lib/+
  2969 nobody    20   0  277648  19264   4108 S   6.7  0.8   0:00.22 /usr/sbin+
  4598 nigeria   20   0       0      0      0 Z   6.7  0.0   0:00.21 [php-fpm]+
     1 root      20   0   44412   3492   1628 S   0.0  0.1   0:56.33 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:02.47 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.94 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:41.30 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.11 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.09 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.81 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:07.18 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:22.99 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.05 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.71 [kauditd]
   234 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   249 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   256 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.08 [kworker/+
   276 root      20   0       0      0      0 S   0.0  0.0   0:02.64 [jbd2/vda+
   277 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   343 root       0 -20       0      0      0 S   0.0  0.0   0:02.52 [kworker/+
   358 root      20   0   40244   4612   4360 S   0.0  0.2   0:20.22 /usr/lib/+
   385 root      20   0   45444    396    392 S   0.0  0.0   0:00.36 /usr/lib/+
   408 root      16  -4   55532    536    408 S   0.0  0.0   0:02.99 /sbin/aud+
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   512 root      20   0   21540    516    428 S   0.0  0.0   0:00.92 /usr/sbin+
   516 root      20   0  152780    328    284 S   0.0  0.0   0:00.02 /usr/sbin+
   521 root      20   0   24708   1336    956 S   0.0  0.1   0:09.43 /usr/lib/+
   523 nscd      20   0 1264844   1952    912 S   0.0  0.1   0:32.90 /usr/sbin+
   524 root      20   0   52852    508    396 S   0.0  0.0   0:00.01 /usr/sbin+
   529 root      20   0  224148   3900    984 S   0.0  0.2   0:00.46 queueproc+
   531 dbus      20   0   58740   1532    788 S   0.0  0.1   0:21.43 /usr/bin/+
   539 rpc       20   0   69256    132     72 S   0.0  0.0   0:00.04 /sbin/rpc+
   541 root      20   0    4388     92     88 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  195208    120    120 S   0.0  0.0   0:00.00 /usr/sbin+
   575 root      20   0  124480    588    452 S   0.0  0.0   0:01.15 /usr/sbin+
   577 root      20   0   24208     92     64 S   0.0  0.0   0:00.00 /usr/sbin+
   581 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   590 root      20   0  108296    192    188 S   0.0  0.0   0:00.00 /sbin/age+
   591 root      20   0  114704    196    196 S   0.0  0.0   0:00.02 /bin/bash
   622 mailnull  20   0   89108   4016    976 S   0.0  0.2   0:00.75 /usr/sbin+
   673 root       0 -20       0      0      0 S   0.0  0.0   0:02.63 [loop0]
   721 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [jbd2/loo+
   722 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   769 nobody    20   0  277896  19692   4432 S   0.0  0.8   0:00.26 /usr/sbin+
   786 nobody    20   0  277496  19340   4304 S   0.0  0.8   0:00.42 /usr/sbin+
   816 nobody    20   0  277740  19496   4288 S   0.0  0.8   0:00.40 /usr/sbin+
   819 nobody    20   0  277768  19504   4228 S   0.0  0.8   0:00.29 /usr/sbin+
   851 nobody    20   0  277496  19204   4204 S   0.0  0.8   0:00.38 /usr/sbin+
   859 nobody    20   0  277688  19508   4228 S   0.0  0.8   0:00.42 /usr/sbin+
   918 root      20   0  111304    616    516 S   0.0  0.0   0:04.15 /usr/sbin+
   919 root      20   0 1350088   7416    200 S   0.0  0.3   0:20.09 /usr/bin/+
   920 systuser  20   0  111864     72      0 S   0.0  0.0   0:00.02 /usr/loca+
   921 telegraf  20   0 5654304  35784   5852 S   0.0  1.5   0:22.31 /usr/loca+
   922 memcach+  20   0  342400    264    264 S   0.0  0.0   0:00.90 /usr/bin/+
   924 root      20   0  153404    504    420 S   0.0  0.0   0:00.84 pure-ftpd+
   926 root      20   0  572372   1076    500 S   0.0  0.0   0:03.53 /usr/bin/+
   927 systuser  20   0  114016  15792   2736 S   0.0  0.7   0:09.66 /usr/loca+
   928 systuser  20   0   12756     56      0 S   0.0  0.0   0:00.02 /usr/loca+
   929 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   930 root      20   0   51508    688    524 S   0.0  0.0   0:00.48 /usr/sbin+
   932 systuser  20   0  113932     72      0 S   0.0  0.0   0:00.02 /usr/loca+
   933 root      20   0  445028    164    164 S   0.0  0.0   0:00.05 sw-engine+
   935 root      20   0 1277312   6304    220 S   0.0  0.3   0:24.31 /usr/bin/+
   946 root      20   0  396248    712    528 S   0.0  0.0   0:01.02 php-fpm: +
   954 named     20   0 1054792  43340   2320 S   0.0  1.8   0:20.76 /usr/sbin+
   957 root      20   0  331088   5792   4484 S   0.0  0.2   0:10.38 /usr/sbin+
   973 root      20   0  400740   2996    884 R   0.0  0.1   0:06.30 php-fpm: +
   975 root      20   0  439788   1784   1576 S   0.0  0.1   0:01.21 php-fpm: +
   978 cpanelc+  20   0   10456   3696   2432 R   0.0  0.2   0:32.55 /usr/loca+
   980 root      20   0  388892    824    608 S   0.0  0.0   0:01.24 php-fpm: +
   991 root      20   0  389508    688    596 S   0.0  0.0   0:01.11 php-fpm: +
   992 root      20   0 1763124  74404    612 S   0.0  3.1   0:14.15 /usr/loca+
   993 root      20   0  261288   6972   1864 S   0.0  0.3   0:08.35 cpsrvd (S+
  1065 dovenull  20   0   47524   2672   1396 S   0.0  0.1   0:00.75 dovecot/p+
  1066 dovenull  20   0   47948   3148   1660 S   0.0  0.1   0:00.43 dovecot/i+
  1067 dovecot   20   0   10320    548    432 S   0.0  0.0   0:00.13 dovecot/a+
  1068 root      20   0   10452    632    436 S   0.0  0.0   0:00.45 dovecot/l+
  1069 dovenull  20   0   47600   2804   1432 S   0.0  0.1   0:00.60 dovecot/p+
  1070 dovenull  20   0   47848   3392   1968 S   0.0  0.1   0:00.39 dovecot/i+
  1077 root      20   0   24528   2556    500 S   0.0  0.1   0:00.24 dovecot/c+
  1078 dovecot   20   0   13568    804    572 S   0.0  0.0   0:00.09 dovecot/s+
  1150 root      20   0  248140  23500   1104 S   0.0  1.0   0:07.67 /usr/loca+
  1151 systuser  20   0  157704   2996    952 S   0.0  0.1   0:00.19 SonarPush+
  1152 dovecot   20   0   41180   1600   1104 S   0.0  0.1   0:00.96 dovecot/a+
  1153 wp-tool+  20   0  387556   5060   1732 S   0.0  0.2   0:00.37 /usr/bin/+
  1154 wp-tool+  20   0  410480  30660   1640 S   0.0  1.3   0:34.46 /usr/bin/+
  1229 root      20   0  183900   5244   2016 S   0.0  0.2   0:02.39 cpdavd - +
  1231 root      20   0  210052  11856   1956 S   0.0  0.5   0:05.16 tailwatchd
  1232 root      20   0  167452   3396   2020 S   0.0  0.1   0:00.67 dnsadmin +
  1638 root      20   0  299272    820    440 S   0.0  0.0   0:01.09 php-fpm: +
  1681 root      38  18  130416   1488    808 S   0.0  0.1   0:00.09 cpanellog+
  1909 root      20   0  266984   8220    804 S   0.0  0.3   0:04.02 /usr/sbin+
  1911 root      20   0   12848    476    364 S   0.0  0.0   0:04.67 /usr/loca+
  1912 root      20   0   12732    432    356 S   0.0  0.0   0:04.08 /usr/loca+
  1913 root      20   0   12900    484    360 S   0.0  0.0   0:04.47 /usr/loca+
  1918 root      20   0   53344    268    268 S   0.0  0.0   0:00.04 /usr/loca+
  2932 nobody    20   0  277496  19044   4024 S   0.0  0.8   0:00.25 /usr/sbin+
  2933 nobody    20   0  277496  19076   4080 S   0.0  0.8   0:00.24 /usr/sbin+
  2967 nobody    20   0  277880  19312   4104 S   0.0  0.8   0:00.17 /usr/sbin+
  2977 nobody    20   0  277884  19344   4116 S   0.0  0.8   0:00.19 /usr/sbin+
  2978 nobody    20   0  277564  19116   4068 S   0.0  0.8   0:00.18 /usr/sbin+
  2980 nobody    20   0  277896  19288   4068 S   0.0  0.8   0:00.21 /usr/sbin+
  2981 nobody    20   0  277880  19428   4072 S   0.0  0.8   0:00.24 /usr/sbin+
  2985 nobody    20   0  277888  19340   4120 S   0.0  0.8   0:00.17 /usr/sbin+
  2989 nobody    20   0  277880  19200   3980 S   0.0  0.8   0:00.18 /usr/sbin+
  2991 nobody    20   0  277744  19004   3812 S   0.0  0.8   0:00.24 /usr/sbin+
  3966 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  4136 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  4197 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
  4206 root      20   0   41052   2804   2136 S   0.0  0.1   0:00.00 dovecot/a+
  4270 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  4498 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  4564 healtho+  20   0  459816  68244   4508 S   0.0  2.8   0:02.28 php-fpm: +
  4637 nigeria   20   0  419612  26100   3908 S   0.0  1.1   0:00.18 php-fpm: +
  4643 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  4658 root      20   0  157100   5072   3784 S   0.0  0.2   0:00.00 sshd: unk+
  4659 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
  4660 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  4667 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
  4680 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4681 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4682 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4683 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4684 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4685 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4686 root      20   0  183048   2156   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4687 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4688 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4690 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4691 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4692 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4694 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
  4698 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  4699 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  4700 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
  4701 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
  4703 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  4705 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  4706 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  4707 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  4708 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
  4709 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  4710 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  4712 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 /usr/loca+
  4714 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
  4720 root      20   0  188220  11100   5148 S   0.0  0.5   0:00.01 /usr/loca+
  4722 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
  4728 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
  4730 root      20   0  113288   1520   1300 S   0.0  0.1   0:00.00 /bin/bash+
  4734 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.02 /opt/cpan+
  4735 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
  4771 root      20   0  160224   2344   1632 S   0.0  0.1   0:00.00 top -n 2 +
  4826 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  4829 cloudsms  20   0  113284   1208   1036 S   0.0  0.0   0:00.00 /usr/loca+
  4832 cloudsms  20   0  404052  15612  10164 S   0.0  0.6   0:00.00 /opt/cpan+
  4835 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
  4836 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.00 /opt/cpan+
  4838 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [setupvir+
  8198 root      20   0  268280  96256   1836 S   0.0  4.0   0:04.68 spamd chi+
  8199 root      20   0  249268  44376    696 S   0.0  1.8   0:00.06 spamd chi+
 31033 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 31042 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.73 [kworker]
 48777 root      20   0  181664  29244   1828 S   0.0  1.2   0:06.87 lfd - sle+
 56928 root      20   0       0      0      0 S   0.0  0.0   0:00.23 [kworker/+
 81352 root      20   0  183052   1652   1084 S   0.0  0.1   0:00.00 /usr/sbin+
 81404 root      20   0  113284    700    524 S   0.0  0.0   0:00.00 /bin/sh -+
 81423 root      20   0  108056    292    216 S   0.0  0.0   0:00.00 sleep 3h +
 89675 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 89760 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 91544 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 95255 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 96121 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 96688 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 99359 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
100051 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
100078 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov15   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov15   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov15   0:41  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov15   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov15   0:07  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov15   0:22  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov15   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [kauditd]
root        234  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ata_sff]
root        246  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_0]
root        247  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_0]
root        248  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [scsi_eh_1]
root        249  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [scsi_tmf_1]
root        256  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ttm_swap]
root        263  0.0  0.0      0     0 ?        S<   Nov15   0:03  \_ [kworker/1:1H]
root        276  0.0  0.0      0     0 ?        S    Nov15   0:02  \_ [jbd2/vda3-8]
root        277  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root        343  0.0  0.0      0     0 ?        S<   Nov15   0:02  \_ [kworker/0:1H]
root        413  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [rpciod]
root        414  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [xprtiod]
root        581  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [kvm-irqfd-clean]
root        673  0.0  0.0      0     0 ?        S<   Nov15   0:02  \_ [loop0]
root        721  0.0  0.0      0     0 ?        S    Nov15   0:00  \_ [jbd2/loop0-8]
root        722  0.0  0.0      0     0 ?        S<   Nov15   0:00  \_ [ext4-rsv-conver]
root      56928  0.0  0.0      0     0 ?        S    00:15   0:00  \_ [kworker/u200:1]
root      89675  0.0  0.0      0     0 ?        S    01:15   0:00  \_ [kworker/0:2]
root      89760  0.0  0.0      0     0 ?        S    01:15   0:00  \_ [kworker/1:2]
root      91544  0.0  0.0      0     0 ?        S    01:19   0:00  \_ [kworker/0:4]
root      95255  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/u200:0]
root      96121  0.0  0.0      0     0 ?        S    01:29   0:00  \_ [kworker/0:0]
root      96688  0.0  0.0      0     0 ?        S    01:30   0:00  \_ [kworker/1:0]
root      99359  0.0  0.0      0     0 ?        S    01:35   0:00  \_ [kworker/0:3]
root     100051  0.0  0.0      0     0 ?        S    01:36   0:00  \_ [kworker/1:1]
root     100078  0.0  0.0      0     0 ?        S    01:36   0:00  \_ [kworker/1:4]
root       3966  0.0  0.0      0     0 ?        S    01:44   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44412  3492 ?        Ss   Nov15   0:56 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        358  0.0  0.1  40244  4612 ?        Ss   Nov15   0:20 /usr/lib/systemd/systemd-journald
root        385  0.0  0.0  45444   396 ?        Ss   Nov15   0:00 /usr/lib/systemd/systemd-udevd
root        408  0.0  0.0  55532   536 ?        S<sl Nov15   0:02 /sbin/auditd
root        512  0.0  0.0  21540   516 ?        Ss   Nov15   0:00 /usr/sbin/irqbalance --foreground
root        516  0.0  0.0 152780   328 ?        Ss   Nov15   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        521  0.0  0.0  24708  1336 ?        Ss   Nov15   0:09 /usr/lib/systemd/systemd-logind
nscd        523  0.0  0.0 1264844 1952 ?        Ssl  Nov15   0:32 /usr/sbin/nscd
root        524  0.0  0.0  52852   508 ?        Ss   Nov15   0:00 /usr/sbin/smartd -n -q never
polkitd     527  0.0  0.0 612240  1192 ?        Ssl  Nov15   0:05 /usr/lib/polkit-1/polkitd --no-debug
root        529  0.0  0.1 224148  3900 ?        Ss   Nov15   0:00 queueprocd - waiting up to 60s to process a task
dbus        531  0.0  0.0  58740  1532 ?        Ss   Nov15   0:21 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         539  0.0  0.0  69256   132 ?        Ss   Nov15   0:00 /sbin/rpcbind -w
root        541  0.0  0.0   4388    92 ?        Ss   Nov15   0:00 /usr/sbin/acpid
root        555  0.0  0.0 195208   120 ?        Ssl  Nov15   0:00 /usr/sbin/gssproxy -D
root        575  0.0  0.0 124480   588 ?        Ss   Nov15   0:01 /usr/sbin/crond -n
root      81352  0.0  0.0 183052  1652 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      81404  0.0  0.0 113284   700 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      81423  0.0  0.0 108056   292 ?        S    01:00   0:00  |       \_ sleep 3h 16m
root       4680  0.0  0.0 183048  2160 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root       4708  0.0  0.0 113284  1208 ?        Ss   01:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       4722  0.0  0.0 108052   360 ?        S    01:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       4730  0.0  0.0 113288  1520 ?        S    01:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       4840  0.0  0.0 153840  2088 ?        R    01:45   0:00  |               \_ ps auxf
root       4681  0.0  0.0 183048  2160 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root       4710  0.0  0.0  20164   808 ?        Ss   01:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       4682  0.0  0.0 183048  2160 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root       4698  0.0  0.0  20164   808 ?        Ss   01:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       4683  0.0  0.0 183048  2160 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root       4706  0.0  0.0  20164   808 ?        Ss   01:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       4684  0.0  0.0 183048  2160 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root       4700  0.0  0.0  20164   984 ?        Ss   01:45   0:00  |   \_ jailshell (cloudsms) [4826] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms   4826  0.0  0.0      0     0 ?        D    01:45   0:00  |       \_ [jailshell]
root       4685  0.0  0.0 183048  2160 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root       4705  0.0  0.0  20164   808 ?        Ss   01:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       4686  0.0  0.0 183048  2156 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root       4707  0.0  0.0  20164   804 ?        Ss   01:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root       4687  0.0  0.0 183048  2152 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root       4703  0.0  0.0  20164   808 ?        Ss   01:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       4688  0.0  0.0 183048  2152 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root       4699  0.0  0.0  20164   804 ?        Ss   01:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       4690  0.0  0.0 183048  2152 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root       4712  0.0  0.0  20164   984 ?        Ss   01:45   0:00  |   \_ jailshell (cloudsms) [4839] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms   4839  0.0  0.0  20164   260 ?        S    01:45   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms   4841  0.0  0.0  20164   260 ?        R    01:45   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       4691  0.0  0.0 183048  2152 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root       4709  0.0  0.0 113284  1212 ?        Ss   01:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root       4720  1.0  0.4 188220 11100 ?        S    01:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root       4771  0.0  0.0 160224  2344 ?        S    01:45   0:00  |           \_ top -n 2 -b -c
root       4692  0.0  0.0 183048  2152 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root       4714  0.0  0.0  20164   960 ?        Ss   01:45   0:00  |   \_ jailshell (pactpay) [4728] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    4728  0.0  0.0  20164   256 ?        S    01:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    4734  2.0  0.7 480124 17688 ?        S    01:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       4694  0.0  0.0 183048  2152 ?        S    01:45   0:00  \_ /usr/sbin/CROND -n
root       4701  0.0  0.0  20164   968 ?        Ss   01:45   0:00      \_ jailshell (nigeria) [4735] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    4735  0.0  0.0  20164   264 ?        S    01:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    4745  7.0  0.6 404052 16140 ?        S    01:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        577  0.0  0.0  24208    92 ?        Ss   Nov15   0:00 /usr/sbin/atd -f
root        590  0.0  0.0 108296   192 tty1     Ss+  Nov15   0:00 /sbin/agetty --noclear tty1 linux
root        591  0.0  0.0 114704   196 ttyS0    Ss+  Nov15   0:00 /bin/bash
mailnull    622  0.0  0.1  89108  4016 ?        Ss   Nov15   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        918  0.0  0.0 111304   616 ?        Ss   Nov15   0:04 /usr/sbin/sshd -D
root       4136  0.0  0.1 111304  4268 ?        Ss   01:44   0:00  \_ sshd: [accepted]
root       4270  0.0  0.1 111304  4264 ?        Ss   01:44   0:00  \_ sshd: [accepted]
root       4498  0.0  0.1 111304  4264 ?        Ss   01:44   0:00  \_ sshd: [accepted]
root       4658  0.0  0.2 157100  5072 ?        Ss   01:44   0:00  \_ sshd: unknown [priv]
sshd       4659  0.0  0.1 115644  2628 ?        S    01:44   0:00  |   \_ sshd: unknown [net]
root       4660  0.0  0.1 111304  4264 ?        Ss   01:44   0:00  \_ sshd: [accepted]
sshd       4667  0.0  0.1 115644  2632 ?        S    01:44   0:00      \_ sshd: [net]
root        919  0.0  0.3 1350088 7416 ?        Ssl  Nov15   0:20 /usr/bin/cspdaemon
systuser    920  0.0  0.0 111864    72 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
telegraf    921  0.0  1.4 5654304 35784 ?       SLsl Nov15   0:22 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
memcach+    922  0.0  0.0 342400   264 ?        Ssl  Nov15   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        924  0.0  0.0 153404   504 ?        Ss   Nov15   0:00 pure-ftpd (SERVER)
root        926  0.0  0.0 572372  1076 ?        Ssl  Nov15   0:03 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    927  0.0  0.6 114016 15792 ?        Ssl  Nov15   0:09 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
systuser    928  0.0  0.0  12756    56 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
systuser    929  0.0  0.0  10132    44 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        930  0.0  0.0  51508   688 ?        Ss   Nov15   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1065  0.0  0.1  47524  2672 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1066  0.0  0.1  47948  3148 ?        S    Nov15   0:00  \_ dovecot/imap-login
dovecot    1067  0.0  0.0  10320   548 ?        S    Nov15   0:00  \_ dovecot/anvil
root       1068  0.0  0.0  10452   632 ?        S    Nov15   0:00  \_ dovecot/log
dovenull   1069  0.0  0.1  47600  2804 ?        S    Nov15   0:00  \_ dovecot/pop3-login
dovenull   1070  0.0  0.1  47848  3392 ?        S    Nov15   0:00  \_ dovecot/imap-login
root       1077  0.0  0.1  24528  2556 ?        S    Nov15   0:00  \_ dovecot/config
dovecot    1078  0.0  0.0  13568   804 ?        S    Nov15   0:00  \_ dovecot/stats
dovecot    1152  0.0  0.0  41180  1600 ?        S    Nov15   0:00  \_ dovecot/auth
root       4197  0.0  0.1  60820  4512 ?        S    01:44   0:00  \_ dovecot/lmtp
root       4206  0.0  0.1  41052  2804 ?        S    01:44   0:00  \_ dovecot/auth -w
systuser    932  0.0  0.0 113932    72 ?        Ssl  Nov15   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        933  0.0  0.0 445028   164 ?        Ss   Nov15   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
root        935  0.0  0.2 1277312 6304 ?        Ssl  Nov15   0:24 /usr/bin/checkstatus
root        946  0.0  0.0 396248   712 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
named       954  0.0  1.7 1054792 43340 ?       Ssl  Nov15   0:20 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        957  0.0  0.2 331088  5792 ?        Ssl  Nov15   0:10 /usr/sbin/rsyslogd -n
root        973  0.0  0.1 400740  2996 ?        Ss   Nov15   0:06 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+   4564 22.8  2.8 459816 68244 ?        S    01:44   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+   4567 23.5  2.7 460012 67188 ?        R    01:44   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria    4637  4.5  1.0 419612 26100 ?        S    01:44   0:00  \_ php-fpm: pool nigeriadecide_org
root        975  0.0  0.0 439788  1784 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
cpanelc+    978  0.0  0.1  10456  3696 ?        Rs   Nov15   0:32 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        980  0.0  0.0 388892   824 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        991  0.0  0.0 389508   688 ?        Ss   Nov15   0:01 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        992  0.0  3.0 1763124 74404 ?       Ssl  Nov15   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        993  0.0  0.2 261288  6972 ?        Ss   Nov15   0:08 cpsrvd (SSL) - waiting for connections                   
root       4643  0.0  0.0      0     0 ?        Z    01:44   0:00  \_ [cpaneld - servi] <defunct>
root       1150  0.0  0.9 248140 23500 ?        Ss   Nov15   0:07 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8198  0.0  3.9 268280 96256 ?        S    Nov15   0:04  \_ spamd child
root       8199  0.0  1.8 249268 44376 ?        S    Nov15   0:00  \_ spamd child
systuser   1151  0.0  0.1 157704  2996 ?        S    Nov15   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1153  0.0  0.2 387556  5060 ?        Ss   Nov15   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1154  0.0  1.2 410480 30660 ?        Ss   Nov15   0:34 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1229  0.0  0.2 183900  5244 ?        Ss   Nov15   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1231  0.0  0.4 210052 11856 ?        Ss   Nov15   0:05 tailwatchd
root       1232  0.0  0.1 167452  3396 ?        Ss   Nov15   0:00 dnsadmin - dormant mode
root       1638  0.0  0.0 299272   820 ?        Ss   Nov15   0:01 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1681  0.0  0.0 130416  1488 ?        SN   Nov15   0:00 cpanellogd - sleeping for logs
mysql      1785  1.4 11.0 1458332 266620 ?      Sl   Nov15   9:42 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1909  0.0  0.3 266984  8220 ?        Ss   Nov15   0:04 /usr/sbin/httpd -k start
root       1911  0.0  0.0  12848   476 ?        S    Nov15   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1912  0.0  0.0  12732   432 ?        S    Nov15   0:04  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1913  0.0  0.0  12900   484 ?        S    Nov15   0:04  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1918  0.0  0.0  53344   268 ?        S    Nov15   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody      769  0.0  0.8 277896 19692 ?        S    01:39   0:00  \_ /usr/sbin/httpd -k start
nobody      786  0.1  0.7 277496 19340 ?        S    01:39   0:00  \_ /usr/sbin/httpd -k start
nobody      816  0.1  0.8 277740 19496 ?        S    01:39   0:00  \_ /usr/sbin/httpd -k start
nobody      819  0.0  0.8 277768 19504 ?        S    01:39   0:00  \_ /usr/sbin/httpd -k start
nobody      851  0.1  0.7 277496 19204 ?        S    01:39   0:00  \_ /usr/sbin/httpd -k start
nobody      859  0.1  0.8 277688 19508 ?        S    01:39   0:00  \_ /usr/sbin/httpd -k start
nobody     2932  0.1  0.7 277496 19044 ?        S    01:42   0:00  \_ /usr/sbin/httpd -k start
nobody     2933  0.1  0.7 277496 19076 ?        S    01:42   0:00  \_ /usr/sbin/httpd -k start
nobody     2967  0.1  0.7 277880 19312 ?        S    01:42   0:00  \_ /usr/sbin/httpd -k start
nobody     2969  0.1  0.7 277648 19264 ?        S    01:42   0:00  \_ /usr/sbin/httpd -k start
cloudw     4836  0.0  0.6 353712 15976 ?        S    01:45   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     2977  0.1  0.7 277884 19344 ?        S    01:42   0:00  \_ /usr/sbin/httpd -k start
nobody     2978  0.1  0.7 277564 19116 ?        S    01:42   0:00  \_ /usr/sbin/httpd -k start
nobody     2980  0.1  0.7 277896 19288 ?        S    01:42   0:00  \_ /usr/sbin/httpd -k start
nobody     2981  0.1  0.8 277880 19428 ?        S    01:42   0:00  \_ /usr/sbin/httpd -k start
nobody     2985  0.1  0.7 277888 19340 ?        S    01:42   0:00  \_ /usr/sbin/httpd -k start
nobody     2989  0.1  0.7 277880 19200 ?        S    01:42   0:00  \_ /usr/sbin/httpd -k start
nobody     2991  0.1  0.7 277744 19004 ?        S    01:42   0:00  \_ /usr/sbin/httpd -k start
oysipao+  31033  0.0  0.0   3148   416 ?        Ss   Nov15   0:00 [kworker]
oysipao+  31042  0.0  0.0   3152   492 ?        S    Nov15   0:00  \_ [kworker]
root      48777  0.1  1.2 181664 29244 ?        Ss   00:00   0:06 lfd - sleeping
## mysql stats
Uptime: 40836  Threads: 4  Questions: 3712307  Slow queries: 0  Opens: 11701  Flush tables: 1  Open tables: 2000  Queries per second avg: 90.907
*************************** 1. row ***************************
     Id: 52130
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 52132
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 52136
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 52142
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 104.194.200.193 TIME_WAIT
      1 114.119.131.163 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 ::1 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 16-Nov-2025 01:45:02 WAT
   Restart Time: Saturday, 15-Nov-2025 14:24:30 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 11 hours 20 minutes 31 seconds
   Server load: 1.04 0.64 0.58
   Total accesses: 215356 - Total Traffic: 4.5 GB - Total Duration: 111659555
   CPU Usage: u3.4 s5.07 cu2588.63 cs2210.76 - 11.8% CPU load
   5.27 requests/sec - 115.1 kB/second - 21.8 kB/request - 518.488 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

...WK.....K....K.WW..KK..__...K...K.__.K....................K...
...K............................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv  PID      Acc     M CPU   SS   Req   Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  -    0/0/10643   . 0.00 128   0   5272760 0.0   0.00  216.84 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   1-0  -    0/0/10758   . 0.00 111   4   5539785 0.0   0.00  221.49 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   2-0  -    0/0/10300   . 0.00 130   0   5236288 0.0   0.00  216.38 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   3-0  2932 0/51/10672  W 0.93 0     0   5128098 0.0   1.21  213.71 ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   4-0  2933 1/52/11469  K 0.96 4     423 5945924 23.9  1.15  222.10 86.38.36.171  http/1.1 health.oyostate.gov.ng:443 GET /download/oyo-state-ministry-of-health-grievance-redress-re
   5-0  -    0/0/9956    . 0.00 127   0   5158482 0.0   0.00  207.99 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   6-0  -    0/0/10619   . 0.00 138   0   5235421 0.0   0.00  218.30 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   7-0  -    0/0/9637    . 0.00 143   0   4831574 0.0   0.00  199.45 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   8-0  -    0/0/9489    . 0.00 113   0   4829304 0.0   0.00  199.49 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   9-0  -    0/0/9136    . 0.00 134   0   4577601 0.0   0.00  215.24 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   10-0 769  5/54/9632   K 1.07 2     304 4690295 157.2 1.02  209.17 192.178.4.98  http/1.1 team.cloudware.ng:443      GET /?l=4257041098 HTTP/1.1
   11-0 -    0/0/8783    . 0.00 142   0   4628861 0.0   0.00  199.00 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   12-0 -    0/0/8440    . 0.00 141   0   4756497 0.0   0.00  181.90 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 -    0/0/8851    . 0.00 136   0   4604782 0.0   0.00  190.06 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   14-0 -    0/0/7888    . 0.00 139   0   3959940 0.0   0.00  169.20 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 2967 1/35/7869   K 0.97 0     411 4221461 36.4  0.77  170.54 192.178.4.103 http/1.1 team.cloudware.ng:443      GET /?l=746856294 HTTP/1.1
   16-0 -    0/0/7056    . 0.00 135   0   3683186 0.0   0.00  156.07 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 786  92/147/6779 W 1.34 0     0   3327792 412.5 1.66  138.45 178.128.60.47 http/1.1 health.oyostate.gov.ng:443 POST //wp-login.php HTTP/1.1
   18-0 2969 0/50/6122   W 1.06 0     0   3351653 0.0   0.82  143.69 192.178.4.100 http/1.1 team.cloudware.ng:443      GET /?l=3349009112 HTTP/1.1
   19-0 -    0/0/6774    . 0.00 115   0   3309602 0.0   0.00  135.12 ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 -    0/0/4106    . 0.00 137   0   2311647 0.0   0.00  93.96  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   21-0 2977 1/41/4222   K 0.81 1     350 2299031 33.8  0.67  94.67  192.178.4.97  http/1.1 team.cloudware.ng:443      GET /?l=3198640124 HTTP/1.1
   22-0 2978 3/30/3912   K 0.71 1     351 2310604 94.7  0.97  97.88  192.178.4.102 http/1.1 team.cloudware.ng:443      GET /?l=1293894818 HTTP/1.1
   23-0 -    0/0/4161    . 0.00 119   0   2325771 0.0   0.00  97.58  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -    0/0/2505    . 0.00 140   0   1546703 0.0   0.00  60.58  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 2980 0/38/1286   _ 0.85 0     267 699944  0.0   1.00  29.30  192.178.4.100 http/1.1 team.cloudware.ng:443      GET /?l=2747720713 HTTP/1.1
   26-0 2981 0/51/1094   _ 1.11 0     345 622772  0.0   1.14  26.21  192.178.4.104 http/1.1 team.cloudware.ng:443      GET /?l=2742908559 HTTP/1.1
   27-0 -    0/0/706     . 0.00 124   0   399253  0.0   0.00  15.27  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -    0/0/540     . 0.00 89    0   314258  0.0   0.00  12.50  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -    0/0/511     . 0.00 112   0   299912  0.0   0.00  11.30  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 2985 3/38/1182   K 0.72 3     342 686656  96.8  0.69  27.79  192.178.4.101 http/1.1 team.cloudware.ng:443      GET /?l=3505760406 HTTP/1.1
   31-0 -    0/0/497     . 0.00 133   0   223584  0.0   0.00  8.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -    0/0/389     . 0.00 30    0   182148  0.0   0.00  5.84   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -    0/0/178     . 0.00 145   0   108111  0.0   0.00  3.35   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 2989 3/39/766    K 1.26 3     355 418628  97.4  0.83  13.17  192.178.4.96  http/1.1 team.cloudware.ng:443      GET /?l=2146405406 HTTP/1.1
   35-0 -    0/0/250     . 0.00 118   0   157067  0.0   0.00  3.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 816  0/78/200    _ 1.74 0     0   180304  0.0   1.85  4.32   ::1           http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   37-0 2991 0/51/141    _ 1.27 0     12  48416   0.0   0.90  1.66   3.232.82.72   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/2019elections/2019elections/blog
   38-0 -    0/0/83      . 0.00 238   0   41526   0.0   0.00  0.96   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 819  1/68/619    K 1.63 3     418 296497  32.1  1.43  11.82  66.249.70.194 http/1.1 schoolplus.cloudware.ng:80 GET /?p=2228537547 HTTP/1.1
   40-0 -    0/0/137     . 0.00 288   0   132734  0.0   0.00  2.25   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -    0/0/183     . 0.00 274   0   83165   0.0   0.00  2.17   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -    0/0/145     . 0.00 298   0   98141   0.0   0.00  10.37  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -    0/0/137     . 0.00 255   0   75918   0.0   0.00  3.51   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -    0/0/91      . 0.00 256   0   28622   0.0   0.00  1.31   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -    0/0/359     . 0.00 254   0   198382  0.0   0.00  8.57   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -    0/0/27      . 0.00 293   0   35819   0.0   0.00  0.27   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -    0/0/155     . 0.00 251   0   39300   0.0   0.00  1.58   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -    0/0/200     . 0.00 272   0   42286   0.0   0.00  1.32   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -    0/0/84      . 0.00 126   0   75619   0.0   0.00  3.20   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -    0/0/447     . 0.00 285   0   253172  0.0   0.00  9.86   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -    0/0/40      . 0.00 267   0   12768   0.0   0.00  0.60   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -    0/0/29      . 0.00 305   0   8951    0.0   0.00  0.37   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -    0/0/125     . 0.00 265   0   81098   0.0   0.00  2.15   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -    0/0/286     . 0.00 259   0   153536  0.0   0.00  5.93   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -    0/0/422     . 0.00 241   0   320901  0.0   0.00  13.81  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -    0/0/79      . 0.00 289   0   50774   0.0   0.00  0.83   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -    0/0/30      . 0.00 290   0   8201    0.0   0.00  0.34   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -    0/0/345     . 0.00 125   0   224672  0.0   0.00  7.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -    0/0/211     . 0.00 129   0   85306   0.0   0.00  3.87   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 851  3/66/225    K 1.71 2     342 144367  96.7  1.60  4.77   192.178.4.99  http/1.1 team.cloudware.ng:443      GET /?l=3794567987 HTTP/1.1
   61-0 -    0/0/210     . 0.00 144   0   75311   0.0   0.00  2.34   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   62-0 -    0/0/225     . 0.00 284   0   116672  0.0   0.00  4.21   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   63-0 -    0/0/53      . 0.00 131   0   41973   0.0   0.00  0.90   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   64-0 -    0/0/234     . 0.00 252   0   61300   0.0   0.00  1.81   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   65-0 -    0/0/104     . 0.00 132   0   43929   0.0   0.00  1.17   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   66-0 -    0/0/54      . 0.00 250   0   37444   0.0   0.00  0.18   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   67-0 859  13/83/98    K 2.06 3     22  56403   15.4  1.81  1.88   66.249.70.7   http/1.1 test.cloudware.ng:443      GET /1007979056?goodscode=1006658746 HTTP/1.1
   68-0 -    0/0/21      . 0.00 281   0   40095   0.0   0.00  0.10   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   69-0 -    0/0/201     . 0.00 260   0   93119   0.0   0.00  3.98   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   70-0 -    0/0/66      . 0.00 269   0   66683   0.0   0.00  1.28   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   71-0 -    0/0/931     . 0.00 243   0   498006  0.0   0.00  20.96  ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   72-0 -    0/0/182     . 0.00 120   0   69161   0.0   0.00  2.55   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   73-0 -    0/0/263     . 0.00 247   0   128005  0.0   0.00  4.46   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   74-0 -    0/0/95      . 0.00 117   0   55142   0.0   0.00  2.51   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   75-0 -    0/0/15      . 0.00 277   0   12842   0.0   0.00  0.15   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   76-0 -    0/0/151     . 0.00 280   0   87735   0.0   0.00  3.29   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   77-0 -    0/0/15      . 0.00 279   0   2685    0.0   0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   78-0 -    0/0/17      . 0.00 303   0   16053   0.0   0.00  0.22   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   79-0 -    0/0/43      . 0.00 291   0   30142   0.0   0.00  0.74   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   80-0 -    0/0/21      . 0.00 287   0   6790    0.0   0.00  0.30   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   81-0 -    0/0/361     . 0.00 286   0   198769  0.0   0.00  8.30   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   82-0 -    0/0/6       . 0.00 262   0   876     0.0   0.00  0.06   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   83-0 -    0/0/3       . 0.00 29819 0   644     0.0   0.00  0.04   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   84-0 -    0/0/2       . 0.00 29837 0   3       0.0   0.00  0.01   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   85-0 -    0/0/7       . 0.00 29804 0   3861    0.0   0.00  0.17   ::1           http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 989
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 1...50)
   index usage: 17%, cache usage: 23%
   total entries stored since starting: 115844
   total entries replaced since starting: 0
   total entries expired since starting: 114807
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 6 hit, 553 miss
   total removes since starting: 48 hit, 56 miss
Youez - 2016 - github.com/yon3zu
LinuXploit