403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-16.19.15.txt
 ## swap threshold exceeded
## server overview
2025-11-16.19.15 load[0] mem[69/61] mysql[4/11] httpd[17]
              total        used        free      shared  buff/cache   available
Mem:           2363        1591          68          84         704         527
Swap:          1999        1320         679
 19:15:01 up  2:12,  0 users,  load average: 0.53, 0.74, 0.76
## system overview
top - 19:15:01 up  2:12,  0 users,  load average: 0.53, 0.74, 0.76
Tasks: 215 total,   3 running, 211 sleeping,   0 stopped,   1 zombie
%Cpu(s): 72.7 us, 18.2 sy,  0.0 ni,  9.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   106076 free,  1591968 used,   722256 buff/cache
KiB Swap:  2047996 total,   696060 free,  1351936 used.   577372 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1750 mysql     20   0 1458592 253748   3112 S 112.5 10.5   1:59.59 /usr/sbin+
 23045 nigeria   20   0  404052  16140  10384 R  18.8  0.7   0:00.04 /opt/cpan+
 22856 cloudw    20   0  546304  82692   6972 S  12.5  3.4   0:00.89 php-fpm: +
 16529 nobody    20   0  277748  20068   4428 S   6.2  0.8   0:01.01 /usr/sbin+
     1 root      20   0   44280   3408   1568 S   0.0  0.1   0:11.54 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.56 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.47 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:08.48 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.47 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.65 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:11.18 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.18 [kauditd]
   230 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   247 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   261 root       0 -20       0      0      0 S   0.0  0.0   0:01.07 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:00.94 [kworker/+
   278 root      20   0       0      0      0 S   0.0  0.0   0:00.45 [jbd2/vda+
   279 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   360 root      20   0   40244   4908   4592 S   0.0  0.2   0:04.91 /usr/lib/+
   389 root      20   0   45352    516    368 S   0.0  0.0   0:00.36 /usr/lib/+
   411 root      16  -4   55532    580    448 S   0.0  0.0   0:00.77 /sbin/aud+
   416 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   417 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   489 dbus      20   0   58728   1496    776 S   0.0  0.1   0:04.29 /usr/bin/+
   493 rpc       20   0   69256    252    152 S   0.0  0.0   0:00.01 /sbin/rpc+
   524 root      20   0   24704   1276    904 S   0.0  0.1   0:01.90 /usr/lib/+
   525 root      20   0  152780    340    296 S   0.0  0.0   0:00.00 /usr/sbin+
   529 root      20   0   21540    520    408 S   0.0  0.0   0:00.18 /usr/sbin+
   530 polkitd   20   0  612240    996    544 S   0.0  0.0   0:01.12 /usr/lib/+
   531 root      20   0  224144   5724    976 S   0.0  0.2   0:00.16 queueproc+
   538 root      20   0   52852    496    400 S   0.0  0.0   0:00.01 /usr/sbin+
   542 root      20   0  195208    128    128 S   0.0  0.0   0:00.00 /usr/sbin+
   545 root      20   0    4388    148    144 S   0.0  0.0   0:00.00 /usr/sbin+
   550 nscd      20   0 1131720   1664    736 S   0.0  0.1   0:08.27 /usr/sbin+
   578 root      20   0   24208    256    232 S   0.0  0.0   0:00.00 /usr/sbin+
   579 root      20   0  124480    592    460 S   0.0  0.0   0:00.23 /usr/sbin+
   585 root      20   0  114704    236    236 S   0.0  0.0   0:00.02 /bin/bash
   586 root      20   0  108296    236    232 S   0.0  0.0   0:00.00 /sbin/age+
   588 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   626 mailnull  20   0   89120   3960    940 S   0.0  0.2   0:00.12 /usr/sbin+
   685 root       0 -20       0      0      0 S   0.0  0.0   0:02.12 [loop0]
   743 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   744 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   933 root      20   0  306512   4656   3932 S   0.0  0.2   0:02.38 /usr/sbin+
   935 root      20   0  388892   1996    664 S   0.0  0.1   0:00.30 php-fpm: +
   937 named     20   0  924724  32676   1920 S   0.0  1.4   0:04.05 /usr/sbin+
   939 root      20   0 1763124 304328    676 S   0.0 12.6   0:13.37 /usr/loca+
   941 systuser  20   0  112268     72      0 S   0.0  0.0   0:00.00 /usr/loca+
   942 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.00 /usr/loca+
   943 systuser  20   0  111864     80      0 S   0.0  0.0   0:00.00 /usr/loca+
   944 cpanelc+  20   0   10332   3184   2364 S   0.0  0.1   0:06.62 /usr/loca+
   945 root      20   0  572372   1108    532 S   0.0  0.0   0:00.76 /usr/bin/+
   946 root      20   0  261296   6744   1868 S   0.0  0.3   0:01.90 cpsrvd (S+
   947 root      20   0  400740   3500    828 S   0.0  0.1   0:01.42 php-fpm: +
   952 root      20   0  396248    760    584 S   0.0  0.0   0:00.26 php-fpm: +
   953 root      20   0  445028   4772   3284 S   0.0  0.2   0:00.57 sw-engine+
   954 root      20   0 1277312  12128    244 S   0.0  0.5   0:26.51 /usr/bin/+
   955 root      20   0   51508    708    544 S   0.0  0.0   0:00.12 /usr/sbin+
   957 root      20   0 1415624   7780    244 S   0.0  0.3   0:25.35 /usr/bin/+
   959 systuser  20   0   12756     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   960 root      20   0  111304    616    516 S   0.0  0.0   0:01.11 /usr/sbin+
   962 root      20   0  153404    512    432 S   0.0  0.0   0:00.17 pure-ftpd+
   980 systuser  20   0  114016  13192   2604 S   0.0  0.5   0:01.95 /usr/loca+
   981 memcach+  20   0  342400    308    308 S   0.0  0.0   0:00.16 /usr/bin/+
   987 root      20   0  389508    852    640 S   0.0  0.0   0:00.26 php-fpm: +
   989 telegraf  20   0 5654048  36424   5720 S   0.0  1.5   0:04.61 /usr/loca+
   992 root      20   0  439788  11360  11268 S   0.0  0.5   0:00.38 php-fpm: +
  1097 dovenull  20   0   47544   3008   1920 S   0.0  0.1   0:00.12 dovecot/p+
  1098 dovenull  20   0   47324   2908   1904 S   0.0  0.1   0:00.06 dovecot/i+
  1099 dovecot   20   0   10320    472    360 S   0.0  0.0   0:00.01 dovecot/a+
  1100 root      20   0   10452    740    552 S   0.0  0.0   0:00.08 dovecot/l+
  1101 dovenull  20   0   47596   3088   1916 S   0.0  0.1   0:00.18 dovecot/p+
  1102 dovenull  20   0   47056   2604   1776 S   0.0  0.1   0:00.02 dovecot/i+
  1110 root      20   0   24528   2688    592 S   0.0  0.1   0:00.08 dovecot/c+
  1117 dovecot   20   0   13568    824    540 S   0.0  0.0   0:00.01 dovecot/s+
  1136 systuser  20   0  157708   3012   1024 S   0.0  0.1   0:00.04 SonarPush+
  1142 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  1147 root      20   0  248052 118096   1452 S   0.0  4.9   0:03.75 /usr/loca+
  1176 wp-tool+  20   0  412368  24764   1604 S   0.0  1.0   0:02.70 /usr/bin/+
  1177 wp-tool+  20   0  387528  12512   1644 S   0.0  0.5   0:00.14 /usr/bin/+
  1181 dovecot   20   0   41188   1580   1104 S   0.0  0.1   0:00.18 dovecot/a+
  1229 root      20   0  167452   1476    876 S   0.0  0.1   0:00.16 dnsadmin +
  1231 root      20   0  183900   6100   2872 S   0.0  0.3   0:00.49 cpdavd - +
  1233 root      20   0  209860  12968   2320 S   0.0  0.5   0:01.21 tailwatchd
  1607 root      20   0  299272    924    544 S   0.0  0.0   0:00.21 php-fpm: +
  1637 root      38  18  130416   1540    804 S   0.0  0.1   0:00.02 cpanellog+
  1985 root      20   0  266984   8396    820 S   0.0  0.3   0:01.41 /usr/sbin+
  1988 root      20   0   12848    488    380 S   0.0  0.0   0:01.11 /usr/loca+
  1989 root      20   0   12732    436    364 S   0.0  0.0   0:00.99 /usr/loca+
  1992 root      20   0   12888    488    368 S   0.0  0.0   0:01.07 /usr/loca+
  1995 root      20   0   53340    276    276 S   0.0  0.0   0:00.04 /usr/loca+
  2081 root      20   0  182076  11424   1244 S   0.0  0.5   0:08.53 lfd - sle+
  2692 nobody    20   0  277744  20300   4720 S   0.0  0.8   0:01.76 /usr/sbin+
  8203 root      20   0  261372 127700   2628 S   0.0  5.3   0:00.83 spamd chi+
  8204 root      20   0  248052 117144    540 S   0.0  4.8   0:00.00 spamd chi+
  8577 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
  8809 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9554 nobody    20   0  277744  20132   4620 S   0.0  0.8   0:01.29 /usr/sbin+
 10733 nobody    20   0  277880  20376   4640 S   0.0  0.8   0:01.06 /usr/sbin+
 11201 nobody    20   0  277740  20416   4648 S   0.0  0.8   0:01.33 /usr/sbin+
 12503 nobody    20   0  277884  20316   4632 S   0.0  0.8   0:01.09 /usr/sbin+
 13899 nobody    20   0  277872  20128   4624 S   0.0  0.8   0:00.86 /usr/sbin+
 14257 nobody    20   0  277748  20052   4492 S   0.0  0.8   0:00.82 /usr/sbin+
 14296 nobody    20   0  277744  20184   4524 S   0.0  0.8   0:00.80 /usr/sbin+
 14298 nobody    20   0  277744  20268   4568 S   0.0  0.8   0:00.51 /usr/sbin+
 14590 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 16513 nobody    20   0  277756  20156   4456 S   0.0  0.8   0:00.69 /usr/sbin+
 16528 nobody    20   0  277680  19968   4548 S   0.0  0.8   0:00.65 /usr/sbin+
 18902 nobody    20   0  277872  19636   4176 S   0.0  0.8   0:00.44 /usr/sbin+
 18923 nobody    20   0  277524  19568   4248 S   0.0  0.8   0:00.41 /usr/sbin+
 19071 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 19233 nobody    20   0  277896  19512   4136 S   0.0  0.8   0:00.30 /usr/sbin+
 19248 nobody    20   0  277880  19772   4276 S   0.0  0.8   0:00.41 /usr/sbin+
 19400 nobody    20   0  277744  19900   4348 S   0.0  0.8   0:00.42 /usr/sbin+
 19771 nobody    20   0  277748  19792   4340 S   0.0  0.8   0:00.32 /usr/sbin+
 20320 nobody    20   0  277748  19612   4176 S   0.0  0.8   0:00.28 /usr/sbin+
 20519 nobody    20   0  277744  19600   4080 S   0.0  0.8   0:00.27 /usr/sbin+
 22059 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 22075 nobody    20   0  277744  19380   3916 S   0.0  0.8   0:00.06 /usr/sbin+
 22091 nobody    20   0  277744  18604   3312 S   0.0  0.8   0:00.13 /usr/sbin+
 22092 nobody    20   0  277880  19056   3752 S   0.0  0.8   0:00.09 /usr/sbin+
 22173 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 22174 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: unk+
 22360 nobody    20   0  277900  19388   3960 S   0.0  0.8   0:00.04 /usr/sbin+
 22410 nobody    20   0  277896  19136   3728 S   0.0  0.8   0:00.03 /usr/sbin+
 22433 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 22492 healtho+  20   0  463156  71516   4380 S   0.0  3.0   0:02.89 php-fpm: +
 22579 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 22611 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 22635 nigeria   20   0  401184   9336   3912 S   0.0  0.4   0:00.19 php-fpm: +
 22659 nobody    20   0  277744  18464   3184 S   0.0  0.8   0:00.03 /usr/sbin+
 22754 wp-tool+  20   0  445028   1924    376 S   0.0  0.1   0:00.00 sw-engine+
 22761 root      20   0  111304   4256   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 22774 wp-tool+  20   0  445028   1700    196 S   0.0  0.1   0:00.00 sw-engine+
 22778 root      20   0  111304   4264   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 22805 healtho+  20   0  446304  53344   4192 S   0.0  2.2   0:00.59 php-fpm: +
 22920 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 22927 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22928 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22929 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22930 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22931 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22932 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22933 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22934 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22935 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22937 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22938 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22939 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22941 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 22990 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 22991 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 22992 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 22993 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 22994 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 22996 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 22999 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 23000 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 23002 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 23003 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 23005 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 23006 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 23007 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 23010 root      20   0  188228  11112   5148 S   0.0  0.5   0:00.01 /usr/loca+
 23016 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 23018 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 23019 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 23036 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 23037 pactpay   20   0  480124  17684  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 23059 root      20   0  160224   2344   1632 S   0.0  0.1   0:00.00 top -n 2 +
 23068 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 23071 root      20   0  111304   4260   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 23072 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 23073 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 23074 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 23075 cloudsms  20   0  388608  10484   7348 R   0.0  0.4   0:00.00 /opt/cpan+
 58384 oysipao+  20   0    3148    412      0 S   0.0  0.0   0:00.00 [kworker]
 58386 oysipao+  20   0    3152    420      0 S   0.0  0.0   0:00.08 [kworker]
 65385 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 79618 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 84128 root      20   0       0      0      0 S   0.0  0.0   0:00.25 [kworker/+
 92497 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 94184 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    17:02   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    17:02   0:08  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    17:02   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    17:02   0:11  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   17:02   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   17:02   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [kauditd]
root        230  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ata_sff]
root        247  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [scsi_eh_0]
root        248  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [scsi_tmf_0]
root        249  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [scsi_eh_1]
root        250  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ttm_swap]
root        261  0.0  0.0      0     0 ?        S<   17:02   0:01  \_ [kworker/1:1H]
root        269  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kworker/0:1H]
root        278  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [jbd2/vda3-8]
root        279  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ext4-rsv-conver]
root        416  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [rpciod]
root        417  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [xprtiod]
root        588  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [kvm-irqfd-clean]
root        685  0.0  0.0      0     0 ?        S<   17:02   0:02  \_ [loop0]
root        743  0.0  0.0      0     0 ?        S    17:02   0:00  \_ [jbd2/loop0-8]
root        744  0.0  0.0      0     0 ?        S<   17:02   0:00  \_ [ext4-rsv-conver]
root      65385  0.0  0.0      0     0 ?        S    18:09   0:00  \_ [kworker/u200:1]
root      79618  0.0  0.0      0     0 ?        S    18:25   0:00  \_ [kworker/u200:2]
root      84128  0.0  0.0      0     0 ?        S    18:30   0:00  \_ [kworker/0:4]
root      92497  0.0  0.0      0     0 ?        S    18:39   0:00  \_ [kworker/1:3]
root      94184  0.0  0.0      0     0 ?        S    18:41   0:00  \_ [kworker/0:2]
root       1142  0.0  0.0      0     0 ?        S    18:52   0:00  \_ [kworker/1:2]
root       8577  0.0  0.0      0     0 ?        S    19:00   0:00  \_ [kworker/0:1]
root       8809  0.0  0.0      0     0 ?        S    19:00   0:00  \_ [kworker/1:1]
root      14590  0.0  0.0      0     0 ?        S    19:06   0:00  \_ [kworker/1:4]
root      19071  0.0  0.0      0     0 ?        S    19:11   0:00  \_ [kworker/0:0]
root          1  0.1  0.1  44280  3408 ?        Ss   17:02   0:11 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        360  0.0  0.2  40244  4908 ?        Ss   17:02   0:04 /usr/lib/systemd/systemd-journald
root        389  0.0  0.0  45352   516 ?        Ss   17:02   0:00 /usr/lib/systemd/systemd-udevd
root        411  0.0  0.0  55532   580 ?        S<sl 17:02   0:00 /sbin/auditd
dbus        489  0.0  0.0  58728  1496 ?        Ss   17:02   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         493  0.0  0.0  69256   252 ?        Ss   17:02   0:00 /sbin/rpcbind -w
root        524  0.0  0.0  24704  1276 ?        Ss   17:02   0:01 /usr/lib/systemd/systemd-logind
root        525  0.0  0.0 152780   340 ?        Ss   17:02   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        529  0.0  0.0  21540   520 ?        Ss   17:02   0:00 /usr/sbin/irqbalance --foreground
polkitd     530  0.0  0.0 612240   996 ?        Ssl  17:02   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        531  0.0  0.2 224144  5724 ?        Ss   17:02   0:00 queueprocd - waiting up to 60s to process a task
root        538  0.0  0.0  52852   496 ?        Ss   17:02   0:00 /usr/sbin/smartd -n -q never
root        542  0.0  0.0 195208   128 ?        Ssl  17:02   0:00 /usr/sbin/gssproxy -D
root        545  0.0  0.0   4388   148 ?        Ss   17:02   0:00 /usr/sbin/acpid
nscd        550  0.1  0.0 1131720 1664 ?        Ssl  17:02   0:08 /usr/sbin/nscd
root        578  0.0  0.0  24208   256 ?        Ss   17:02   0:00 /usr/sbin/atd -f
root        579  0.0  0.0 124480   592 ?        Ss   17:02   0:00 /usr/sbin/crond -n
root      22927  0.0  0.0 183048  2148 ?        S    19:15   0:00  \_ /usr/sbin/CROND -n
root      23007  0.0  0.0 113284  1212 ?        Ss   19:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      23016  0.0  0.0 108052   356 ?        S    19:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      23018  0.0  0.0 113288  1516 ?        S    19:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      23076  0.0  0.0 153840  2092 ?        R    19:15   0:00  |               \_ ps auxf
root      22928  0.0  0.0 183048  2148 ?        S    19:15   0:00  \_ /usr/sbin/CROND -n
root      22994  0.0  0.0  20164   804 ?        Ss   19:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      22929  0.0  0.0 183048  2148 ?        S    19:15   0:00  \_ /usr/sbin/CROND -n
root      22993  0.0  0.0  20164   808 ?        Ss   19:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      22930  0.0  0.0 183048  2148 ?        S    19:15   0:00  \_ /usr/sbin/CROND -n
root      22996  0.0  0.0  20164   808 ?        Ss   19:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      22931  0.0  0.0 183048  2148 ?        S    19:15   0:00  \_ /usr/sbin/CROND -n
root      22999  0.0  0.0  20164   988 ?        Ss   19:15   0:00  |   \_ jailshell (cloudsms) [23072] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  23072  0.0  0.0  20164   260 ?        S    19:15   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  23073  0.0  0.0 113284  1212 ?        S    19:15   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  23075  0.0  0.6 404052 15608 ?        S    19:15   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      22932  0.0  0.0 183048  2144 ?        S    19:15   0:00  \_ /usr/sbin/CROND -n
root      22990  0.0  0.0  20164   808 ?        Ss   19:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      22933  0.0  0.0 183048  2144 ?        S    19:15   0:00  \_ /usr/sbin/CROND -n
root      23005  0.0  0.0  20164   808 ?        Ss   19:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      22934  0.0  0.0 183048  2144 ?        S    19:15   0:00  \_ /usr/sbin/CROND -n
root      22992  0.0  0.0  20164   808 ?        Ss   19:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      22935  0.0  0.0 183048  2144 ?        S    19:15   0:00  \_ /usr/sbin/CROND -n
root      23006  0.0  0.0  20164   808 ?        Ss   19:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      22937  0.0  0.0 183048  2140 ?        S    19:15   0:00  \_ /usr/sbin/CROND -n
root      22991  0.0  0.0  20164   808 ?        Ss   19:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      22938  0.0  0.0 183048  2140 ?        S    19:15   0:00  \_ /usr/sbin/CROND -n
root      23002  0.0  0.0 113284  1212 ?        Ss   19:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      23010  0.0  0.4 188228 11112 ?        S    19:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      23059  0.0  0.0 160224  2344 ?        S    19:15   0:00  |           \_ top -n 2 -b -c
root      22939  0.0  0.0 183048  2140 ?        S    19:15   0:00  \_ /usr/sbin/CROND -n
root      23003  0.0  0.0  20164   964 ?        Ss   19:15   0:00  |   \_ jailshell (pactpay) [23019] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   23019  0.0  0.0  20164   260 ?        S    19:15   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   23037  0.0  0.7 480124 17684 ?        S    19:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      22941  0.0  0.0 183048  2140 ?        S    19:15   0:00  \_ /usr/sbin/CROND -n
root      23000  0.0  0.0  20164   968 ?        Ss   19:15   0:00      \_ jailshell (nigeria) [23036] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   23036  0.0  0.0  20164   264 ?        S    19:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   23045  0.0  0.6 404052 16140 ?        S    19:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        585  0.0  0.0 114704   236 ttyS0    Ss+  17:02   0:00 /bin/bash
root        586  0.0  0.0 108296   236 tty1     Ss+  17:02   0:00 /sbin/agetty --noclear tty1 linux
mailnull    626  0.0  0.1  89120  3960 ?        Ss   17:02   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        933  0.0  0.1 306512  4656 ?        Ssl  17:02   0:02 /usr/sbin/rsyslogd -n
root        935  0.0  0.0 388892  1996 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
named       937  0.0  1.3 924724 32676 ?        Ssl  17:02   0:04 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        939  0.1 12.5 1763124 304328 ?      Ssl  17:02   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    941  0.0  0.0 112268    72 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
systuser    942  0.0  0.0  10132    28 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
systuser    943  0.0  0.0 111864    80 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
cpanelc+    944  0.0  0.1  10332  3184 ?        Ss   17:02   0:06 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        945  0.0  0.0 572372  1108 ?        Ssl  17:02   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        946  0.0  0.2 261296  6744 ?        Ss   17:02   0:01 cpsrvd (SSL) - waiting for connections                   
root      22920  0.0  0.0      0     0 ?        Z    19:14   0:00  \_ [cpaneld - servi] <defunct>
root        947  0.0  0.1 400740  3500 ?        Ss   17:02   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  22492 11.1  2.9 463156 71516 ?        S    19:14   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   22635  1.1  0.3 401184  9336 ?        S    19:14   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  22805  8.4  2.2 446304 53344 ?        S    19:14   0:00  \_ php-fpm: pool health_oyostate_gov_ng
cloudw    22856 22.2  3.4 546304 82692 ?        S    19:14   0:00  \_ php-fpm: pool cloudware_ng
root        952  0.0  0.0 396248   760 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        953  0.0  0.1 445028  4772 ?        Ss   17:02   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  22754  0.0  0.0 445028  1924 ?        S    19:14   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
wp-tool+  22774  0.0  0.0 445028  1700 ?        S    19:14   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        954  0.3  0.5 1277312 12128 ?       Ssl  17:02   0:26 /usr/bin/checkstatus
root        955  0.0  0.0  51508   708 ?        Ss   17:02   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1097  0.0  0.1  47544  3008 ?        S    17:02   0:00  \_ dovecot/pop3-login
dovenull   1098  0.0  0.1  47324  2908 ?        S    17:02   0:00  \_ dovecot/imap-login
dovecot    1099  0.0  0.0  10320   472 ?        S    17:02   0:00  \_ dovecot/anvil
root       1100  0.0  0.0  10452   740 ?        S    17:02   0:00  \_ dovecot/log
dovenull   1101  0.0  0.1  47596  3088 ?        S    17:02   0:00  \_ dovecot/pop3-login
dovenull   1102  0.0  0.1  47056  2604 ?        S    17:02   0:00  \_ dovecot/imap-login
root       1110  0.0  0.1  24528  2688 ?        S    17:02   0:00  \_ dovecot/config
dovecot    1117  0.0  0.0  13568   824 ?        S    17:02   0:00  \_ dovecot/stats
dovecot    1181  0.0  0.0  41188  1580 ?        S    17:02   0:00  \_ dovecot/auth
root        957  0.3  0.3 1415624 7780 ?        Ssl  17:02   0:25 /usr/bin/cspdaemon
systuser    959  0.0  0.0  12756    60 ?        Ssl  17:02   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        960  0.0  0.0 111304   616 ?        Ss   17:02   0:01 /usr/sbin/sshd -D
root      22059  0.0  0.1 111304  4264 ?        Ss   19:14   0:00  \_ sshd: [accepted]
root      22173  0.0  0.2 157100  5076 ?        Ss   19:14   0:00  \_ sshd: unknown [priv]
sshd      22174  0.0  0.1 115644  2628 ?        S    19:14   0:00  |   \_ sshd: unknown [net]
root      22433  0.0  0.1 111304  4272 ?        Ss   19:14   0:00  \_ sshd: [accepted]
root      22579  0.0  0.1 111304  4272 ?        Ss   19:14   0:00  \_ sshd: [accepted]
root      22611  0.0  0.1 111304  4264 ?        Ss   19:14   0:00  \_ sshd: [accepted]
root      22761  0.0  0.1 111304  4256 ?        Ss   19:14   0:00  \_ sshd: [accepted]
root      22778  0.0  0.1 111304  4264 ?        Ss   19:14   0:00  \_ sshd: [accepted]
root      23071  0.0  0.1 111304  4260 ?        Ss   19:15   0:00  \_ sshd: [accepted]
sshd      23074  0.0  0.1 115644  2628 ?        S    19:15   0:00      \_ sshd: [net]
root        962  0.0  0.0 153404   512 ?        Ss   17:02   0:00 pure-ftpd (SERVER)
systuser    980  0.0  0.5 114016 13192 ?        Ssl  17:02   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
memcach+    981  0.0  0.0 342400   308 ?        Ssl  17:02   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        987  0.0  0.0 389508   852 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
telegraf    989  0.0  1.5 5654048 36424 ?       SLsl 17:02   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        992  0.0  0.4 439788 11360 ?        Ss   17:02   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser   1136  0.0  0.1 157708  3012 ?        S    17:02   0:00 SonarPush 0.6.12 [sleeping]
root       1147  0.0  4.8 248052 118096 ?       Ss   17:02   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8203  0.0  5.2 261372 127700 ?       S    17:08   0:00  \_ spamd child
root       8204  0.0  4.8 248052 117144 ?       S    17:08   0:00  \_ spamd child
wp-tool+   1176  0.0  1.0 412368 24764 ?        Ss   17:02   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1177  0.0  0.5 387528 12512 ?        Ss   17:02   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1229  0.0  0.0 167452  1476 ?        Ss   17:02   0:00 dnsadmin - dormant mode
root       1231  0.0  0.2 183900  6100 ?        Ss   17:02   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1233  0.0  0.5 209860 12968 ?        Ss   17:02   0:01 tailwatchd
root       1607  0.0  0.0 299272   924 ?        Ss   17:02   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1637  0.0  0.0 130416  1540 ?        SN   17:02   0:00 cpanellogd - sleeping for logs
mysql      1750  1.5 10.4 1458592 253748 ?      Sl   17:02   1:59 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1985  0.0  0.3 266984  8396 ?        Ss   17:02   0:01 /usr/sbin/httpd -k start
root       1988  0.0  0.0  12848   488 ?        S    17:02   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1989  0.0  0.0  12732   436 ?        S    17:02   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1992  0.0  0.0  12888   488 ?        S    17:02   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1995  0.0  0.0  53340   276 ?        S    17:02   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     2692  0.1  0.8 277744 20300 ?        S    18:53   0:01  \_ /usr/sbin/httpd -k start
nobody     9554  0.1  0.8 277744 20132 ?        S    19:00   0:01  \_ /usr/sbin/httpd -k start
nobody    10733  0.1  0.8 277880 20376 ?        S    19:02   0:01  \_ /usr/sbin/httpd -k start
nobody    11201  0.1  0.8 277740 20416 ?        S    19:02   0:01  \_ /usr/sbin/httpd -k start
nobody    12503  0.1  0.8 277884 20316 ?        S    19:03   0:01  \_ /usr/sbin/httpd -k start
nobody    13899  0.1  0.8 277872 20128 ?        S    19:05   0:00  \_ /usr/sbin/httpd -k start
nobody    14257  0.1  0.8 277748 20052 ?        S    19:05   0:00  \_ /usr/sbin/httpd -k start
nobody    14296  0.1  0.8 277744 20184 ?        S    19:05   0:00  \_ /usr/sbin/httpd -k start
nobody    14298  0.0  0.8 277744 20268 ?        S    19:05   0:00  \_ /usr/sbin/httpd -k start
nobody    16513  0.1  0.8 277756 20156 ?        S    19:08   0:00  \_ /usr/sbin/httpd -k start
nobody    16528  0.1  0.8 277680 19968 ?        S    19:08   0:00  \_ /usr/sbin/httpd -k start
nobody    16529  0.2  0.8 277748 20068 ?        S    19:08   0:01  \_ /usr/sbin/httpd -k start
nobody    18902  0.1  0.8 277872 19636 ?        S    19:10   0:00  \_ /usr/sbin/httpd -k start
nobody    18923  0.1  0.8 277524 19568 ?        S    19:10   0:00  \_ /usr/sbin/httpd -k start
nobody    19233  0.1  0.8 277896 19512 ?        S    19:11   0:00  \_ /usr/sbin/httpd -k start
nobody    19248  0.1  0.8 277880 19772 ?        S    19:11   0:00  \_ /usr/sbin/httpd -k start
nobody    19400  0.1  0.8 277744 19900 ?        S    19:11   0:00  \_ /usr/sbin/httpd -k start
nobody    19771  0.1  0.8 277748 19792 ?        S    19:11   0:00  \_ /usr/sbin/httpd -k start
nobody    20320  0.1  0.8 277748 19612 ?        S    19:12   0:00  \_ /usr/sbin/httpd -k start
nobody    20519  0.1  0.8 277744 19600 ?        S    19:12   0:00  \_ /usr/sbin/httpd -k start
nobody    22075  0.1  0.8 277744 19380 ?        S    19:14   0:00  \_ /usr/sbin/httpd -k start
nobody    22091  0.2  0.7 277744 18604 ?        S    19:14   0:00  \_ /usr/sbin/httpd -k start
nobody    22092  0.1  0.7 277880 19056 ?        S    19:14   0:00  \_ /usr/sbin/httpd -k start
nobody    22360  0.1  0.8 277900 19388 ?        S    19:14   0:00  \_ /usr/sbin/httpd -k start
nobody    22410  0.0  0.7 277896 19136 ?        S    19:14   0:00  \_ /usr/sbin/httpd -k start
nobody    22659  0.2  0.7 277744 18464 ?        R    19:14   0:00  \_ /usr/sbin/httpd -k start
root       2081  0.1  0.4 182076 11424 ?        Ss   17:02   0:08 lfd - sleeping
oysipao+  58384  0.0  0.0   3148   412 ?        Ss   18:00   0:00 [kworker]
oysipao+  58386  0.0  0.0   3152   420 ?        S    18:00   0:00  \_ [kworker]
## mysql stats
Uptime: 7955  Threads: 5  Questions: 690200  Slow queries: 0  Opens: 3905  Flush tables: 1  Open tables: 2000  Queries per second avg: 86.763
*************************** 1. row ***************************
     Id: 11254
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 11255
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 11259
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 4. row ***************************
     Id: 11260
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 11262
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.136.120 TIME_WAIT
      1 114.119.144.127 TIME_WAIT
      1 142.147.167.62 TIME_WAIT
      1 142.147.216.31 TIME_WAIT
      1 148.113.128.114 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 185.55.249.123 TIME_WAIT
      1 ::1 TIME_WAIT
      1 207.46.13.107 TIME_WAIT
      1 37.59.204.159 TIME_WAIT
      1 51.222.168.128 TIME_WAIT
      1 54.39.203.89 TIME_WAIT
      1 54.39.89.69 TIME_WAIT
      1 95.111.244.224 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     31 104.248.90.230 TIME_WAIT
     39 124.248.184.195 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Sunday, 16-Nov-2025 19:15:01 WAT
   Restart Time: Sunday, 16-Nov-2025 17:02:33 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 2 hours 12 minutes 28 seconds
   Server load: 0.53 0.74 0.76
   Total accesses: 53051 - Total Traffic: 1.2 GB - Total Duration: 25015581
   CPU Usage: u10.81 s5.7 cu693.47 cs561.09 - 16% CPU load
   6.67 requests/sec - 156.6 kB/second - 23.5 kB/request - 471.538 ms/request
   17 requests currently being processed, 0 workers gracefully restarting, 9 idle workers

KKKRK___KKW_R_C_KKKK_K_KW....._.................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU    SS  Req   Dur   Conn  Child  Slot     Client      Protocol           VHost                                        Request
   0-0  9554  7/223/2127  K 5.51  2    293 937218  214.5 5.62  45.15 192.178.4.99    http/1.1 team.cloudware.ng:443      GET /?l=1406070932 HTTP/1.1
   1-0  12503 5/201/2453  K 4.59  1    398 1128919 157.2 4.64  50.17 192.178.4.97    http/1.1 team.cloudware.ng:443      GET /?l=545755866 HTTP/1.1
   2-0  16513 9/135/2297  K 3.01  3    21  1055443 11.8  2.81  51.32 66.249.70.7     http/1.1 test.cloudware.ng:443      GET /3001947584?goodscode=2998013946 HTTP/1.1
   3-0  18902 0/79/1961   R 1.90  1    295 995168  0.0   1.82  44.87 124.248.184.195 http/1.1 health.oyostate.gov.ng:443
   4-0  22360 2/13/1930   K 0.06  4    277 899444  66.4  0.15  45.75 192.178.4.96    http/1.1 team.cloudware.ng:443      GET /?l=579179724 HTTP/1.1
   5-0  19233 0/57/1907   _ 2.17  1    283 954268  0.0   1.33  49.28 192.178.4.105   http/1.1 team.cloudware.ng:443      GET /?l=759401112 HTTP/1.1
   6-0  2692  0/339/2178  _ 7.47  0    0   1082364 0.0   7.25  51.89 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   7-0  18923 0/77/2248   _ 1.91  0    0   939352  0.0   1.74  44.67 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET /whm-server-status HTTP/1.0
   8-0  19248 4/77/1770   K 1.63  4    267 867337  121.7 1.79  42.93 192.178.4.101   http/1.1 team.cloudware.ng:443      GET /?l=223029521 HTTP/1.1
   9-0  16528 64/158/1991 K 3.85  0    93  830813  426.5 2.29  41.27 212.146.150.61  http/1.1 cloudsms.com.ng:443        GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   10-0 16529 7/226/2122  W 29.47 0    0   980849  217.0 2.96  42.90 192.178.4.100   http/1.1 team.cloudware.ng:443      GET /?l=1342424143 HTTP/1.1
   11-0 22075 0/13/1862   _ 0.25  1    4   905580  0.0   0.26  41.33 103.180.203.6   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?lga=Mkpat+enin&state=Akwa+ibom H
   12-0 14257 0/145/1913  R 3.31  20   8   929568  0.0   3.80  49.23 45.251.112.73   http/1.1
   13-0 19771 0/63/1912   _ 1.29  1    1   914436  0.0   1.53  46.28 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80     GET / HTTP/1.1
   14-0 20519 2/50/1837   C 1.02  0    846 896800  26.7  1.38  39.62 45.251.112.73   http/1.1 cloudware.ng:443           POST /wp-login.php HTTP/1.1
   15-0 22091 0/21/1735   _ 0.56  0    279 785040  0.0   0.62  37.58 192.178.4.96    http/1.1 team.cloudware.ng:443      GET /sets/113368695278 HTTP/1.1
   16-0 22092 1/16/1764   K 0.38  2    295 843448  34.5  0.42  42.40 192.178.4.100   http/1.1 team.cloudware.ng:443      GET /?l=3039984281 HTTP/1.1
   17-0 10733 5/201/1526  K 4.27  0    401 702645  155.4 4.37  34.00 192.178.4.98    http/1.1 team.cloudware.ng:443      GET /?l=3268164930 HTTP/1.1
   18-0 14296 2/152/1737  K 3.25  1    347 836192  64.9  3.38  39.04 192.178.4.103   http/1.1 team.cloudware.ng:443      GET /ctg/search/similarImageSearchResultView/?ctgItemCd=714620
   19-0 20320 3/56/1637   K 1.37  0    273 848806  93.8  1.19  37.51 192.178.4.99    http/1.1 team.cloudware.ng:443      GET /?l=439032 HTTP/1.1
   20-0 22410 0/10/1999   _ 0.07  0    79  916612  0.0   0.15  58.29 100.28.204.82   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/2019elections/2019elections/blog
   21-0 19400 3/77/1200   K 1.71  2    257 551451  93.0  1.88  26.04 192.178.4.101   http/1.1 team.cloudware.ng:443      GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1641616
   22-0 22659 0/6/1209    _ 0.13  0    262 546244  0.0   0.18  25.94 192.178.4.102   http/1.1 team.cloudware.ng:443      GET /?l=2104697886 HTTP/1.1
   23-0 13899 4/161/1074  K 3.47  1    350 539767  125.3 3.71  26.46 192.178.4.102   http/1.1 team.cloudware.ng:443      GET /?l=3337211711 HTTP/1.1
   24-0 11201 0/372/1140  W 5.48  0    0   572943  0.0   5.50  28.52 ::1             http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   25-0 -     0/0/720     . 0.00  386  0   331849  0.0   0.00  15.68 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -     0/0/808     . 0.00  370  0   429716  0.0   0.00  20.52 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -     0/0/887     . 0.00  531  0   404324  0.0   0.00  21.70 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/559     . 0.00  442  0   297375  0.0   0.00  13.72 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/549     . 0.00  444  0   259087  0.0   0.00  11.49 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 14298 0/129/522   _ 2.16  0    295 242657  0.0   1.63  10.91 124.248.184.195 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   31-0 -     0/0/692     . 0.00  551  0   340863  0.0   0.00  15.89 ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/261     . 0.00  1382 0   135603  0.0   0.00  6.68  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/321     . 0.00  1402 0   147880  0.0   0.00  6.63  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/377     . 0.00  576  0   198139  0.0   0.00  9.31  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/206     . 0.00  1400 0   87118   0.0   0.00  4.40  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/249     . 0.00  1137 0   125311  0.0   0.00  8.48  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/281     . 0.00  1164 0   104922  0.0   0.00  5.75  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/138     . 0.00  1129 0   37965   0.0   0.00  2.20  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/129     . 0.00  1401 0   57212   0.0   0.00  2.90  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/165     . 0.00  1218 0   65065   0.0   0.00  3.10  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/64      . 0.00  1217 0   21758   0.0   0.00  1.16  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/146     . 0.00  913  0   76144   0.0   0.00  3.62  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/8       . 0.00  1390 0   1778    0.0   0.00  0.12  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/15      . 0.00  1398 0   7320    0.0   0.00  0.37  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/7       . 0.00  1406 0   2146    0.0   0.00  0.11  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/31      . 0.00  1404 0   16393   0.0   0.00  0.78  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/48      . 0.00  1396 0   31675   0.0   0.00  1.35  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/19      . 0.00  1348 0   10797   0.0   0.00  0.54  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/149     . 0.00  1385 0   51163   0.0   0.00  2.61  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/9       . 0.00  1376 0   1467    0.0   0.00  0.15  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/85      . 0.00  1105 0   28360   0.0   0.00  1.44  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/16      . 0.00  1335 0   7274    0.0   0.00  0.38  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/3       . 0.00  1393 0   1042    0.0   0.00  0.06  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/46      . 0.00  1234 0   27516   0.0   0.00  1.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/11      . 0.00  1356 0   4925    0.0   0.00  0.24  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/1       . 0.00  1408 0   0       0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1283
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...36)
   index usage: 22%, cache usage: 30%
   total entries stored since starting: 36631
   total entries replaced since starting: 0
   total entries expired since starting: 35342
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 5 hit, 51 miss
   total removes since starting: 6 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit