403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.02.45.txt
 ## swap threshold exceeded
## server overview
2025-11-17.02.45 load[0] mem[62/63] mysql[6/8] httpd[14]
              total        used        free      shared  buff/cache   available
Mem:           2363        1397         107          64         857         736
Swap:          1999        1373         626
 02:45:02 up  3:26,  0 users,  load average: 0.27, 0.24, 0.24
## system overview
top - 02:45:02 up  3:26,  0 users,  load average: 0.27, 0.24, 0.24
Tasks: 213 total,   2 running, 201 sleeping,   0 stopped,  10 zombie
%Cpu(s): 87.1 us, 12.9 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    91924 free,  1429048 used,   899328 buff/cache
KiB Swap:  2047996 total,   642032 free,  1405964 used.   756144 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1461652 271816   4800 S 137.5 11.2   2:38.00 /usr/sbin+
 75974 nigeria   20   0  404052  16140  10384 S  12.5  0.7   0:00.06 /opt/cpan+
    14 root      20   0       0      0      0 S   6.2  0.0   0:02.30 [ksoftirq+
   492 dbus      20   0   58700   1520    768 S   6.2  0.1   0:06.58 /usr/bin/+
 75157 wp-tool+  20   0  431444  76392  16936 S   6.2  3.2   0:00.59 /usr/bin/+
     1 root      20   0   44400   3492   1624 S   0.0  0.1   0:16.94 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.76 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.69 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:13.26 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.67 [migratio+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:12.75 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.25 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:01.63 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:01.33 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:00.72 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40244   7432   7128 S   0.0  0.3   0:06.85 /usr/lib/+
   376 root      20   0   45376    584    436 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    584    456 S   0.0  0.0   0:01.05 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780    316    272 S   0.0  0.0   0:00.01 /usr/sbin+
   475 polkitd   20   0  612240   1288    864 S   0.0  0.1   0:01.73 /usr/lib/+
   476 root      20   0   24716   1316    940 S   0.0  0.1   0:02.89 /usr/lib/+
   483 root      20   0   21540    536    424 S   0.0  0.0   0:00.26 /usr/sbin+
   484 rpc       20   0   69256    172     68 S   0.0  0.0   0:00.01 /sbin/rpc+
   485 root      20   0   52852    440    344 S   0.0  0.0   0:00.01 /usr/sbin+
   494 root      20   0  195208    116    116 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  926904   1524    896 S   0.0  0.1   0:11.59 /usr/sbin+
   515 root      20   0    4388    112    108 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   6076   1364 S   0.0  0.3   0:00.21 queueproc+
   545 root      20   0  124480    692    536 S   0.0  0.0   0:00.37 /usr/sbin+
   546 root      20   0   24208    244    224 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704    212    212 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296    212    208 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120   4092   1068 S   0.0  0.2   0:00.22 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:02.21 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    584    484 S   0.0  0.0   0:01.53 /usr/sbin+
   912 systuser  20   0  113016     80      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  249168   7112   6240 S   0.0  0.3   0:03.43 /usr/sbin+
   918 named     20   0 1185864  38664   2416 S   0.0  1.6   0:07.58 /usr/sbin+
   919 root      20   0 1763124 246084    664 S   0.0 10.2   0:14.12 /usr/loca+
   924 systuser  20   0   10388     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   925 root      20   0   51508    672    508 S   0.0  0.0   0:00.16 /usr/sbin+
   926 root      20   0  572372   1176    596 S   0.0  0.0   0:01.11 /usr/bin/+
   928 root      20   0  445028   3388   3280 S   0.0  0.1   0:00.46 sw-engine+
   937 root      20   0  439788  11508  11300 S   0.0  0.5   0:00.46 php-fpm: +
   938 systuser  20   0  114016  13976   2528 S   0.0  0.6   0:03.03 /usr/loca+
   939 root      20   0  261296   7624   2060 S   0.0  0.3   0:02.53 cpsrvd (S+
   943 root      20   0 1277312  10588    228 S   0.0  0.4   0:20.27 /usr/bin/+
   944 root      20   0 1276356   8028    228 S   0.0  0.3   0:24.83 /usr/bin/+
   947 cpanelc+  20   0   10308   3544   2424 S   0.0  0.1   0:10.36 /usr/loca+
   952 root      20   0  396248    852    668 S   0.0  0.0   0:00.41 php-fpm: +
   957 root      20   0  388892    712    612 S   0.0  0.0   0:00.43 php-fpm: +
   962 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   963 telegraf  20   0 5654048  35984   5596 S   0.0  1.5   0:07.02 /usr/loca+
   964 root      20   0  153404    468    384 S   0.0  0.0   0:00.25 pure-ftpd+
   967 root      20   0  400740   1016    844 S   0.0  0.0   0:02.09 php-fpm: +
   968 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 memcach+  20   0  342400    192    192 S   0.0  0.0   0:00.27 /usr/bin/+
   974 root      20   0  389508    768    564 S   0.0  0.0   0:00.39 php-fpm: +
  1080 dovenull  20   0   46912   2576   1864 S   0.0  0.1   0:00.20 dovecot/p+
  1081 dovenull  20   0   47340   3304   2216 S   0.0  0.1   0:00.09 dovecot/i+
  1082 dovecot   20   0   10320    388    272 S   0.0  0.0   0:00.02 dovecot/a+
  1083 root      20   0   10452    568    388 S   0.0  0.0   0:00.13 dovecot/l+
  1084 dovenull  20   0   46984   2496   1764 S   0.0  0.1   0:00.24 dovecot/p+
  1085 dovenull  20   0   47308   3200   2164 S   0.0  0.1   0:00.09 dovecot/i+
  1091 root      20   0   24528   2500    632 S   0.0  0.1   0:00.09 dovecot/c+
  1095 dovecot   20   0   13568    660    432 S   0.0  0.0   0:00.03 dovecot/s+
  1123 root      20   0  248032 119020   2528 S   0.0  4.9   0:04.30 /usr/loca+
  1160 dovecot   20   0   41160   1588   1128 S   0.0  0.1   0:00.24 dovecot/a+
  1168 systuser  20   0  157704   3068   1088 S   0.0  0.1   0:00.07 SonarPush+
  1176 wp-tool+  20   0  387556   5308   1936 S   0.0  0.2   0:00.18 /usr/bin/+
  1177 wp-tool+  20   0  412368  32508   1732 S   0.0  1.3   0:04.07 /usr/bin/+
  1211 root      20   0  209308  11916   2292 S   0.0  0.5   0:01.49 tailwatchd
  1213 root      20   0  183900   6084   2852 S   0.0  0.3   0:00.68 cpdavd - +
  1216 root      20   0  167452   4120   2748 S   0.0  0.2   0:00.30 dnsadmin +
  1560 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  1627 root      20   0  299272    888    548 S   0.0  0.0   0:00.33 php-fpm: +
  1673 root      38  18  130416   1588    816 S   0.0  0.1   0:00.03 cpanellog+
  1928 root      20   0  266984   8180    860 S   0.0  0.3   0:01.50 /usr/sbin+
  1932 root      20   0   12792    520    376 S   0.0  0.0   0:01.57 /usr/loca+
  1933 root      20   0   12732    480    368 S   0.0  0.0   0:01.37 /usr/loca+
  1934 root      20   0   12812    500    348 S   0.0  0.0   0:01.48 /usr/loca+
  1939 root      20   0   53256    256    256 S   0.0  0.0   0:00.04 /usr/loca+
  8393 root      20   0  264952 129272   2844 S   0.0  5.3   0:01.78 spamd chi+
  8394 root      20   0  248032 117032    584 S   0.0  4.8   0:00.00 spamd chi+
 14071 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 40045 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.18 [kworker]
 40218 root      20   0  181996  29344   1644 S   0.0  1.2   0:09.92 lfd - sle+
 48575 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 48576 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 50830 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 54829 nobody    20   0  277692  20872   5056 S   0.0  0.9   0:02.04 /usr/sbin+
 56483 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 58187 nobody    20   0  277676  20352   4928 S   0.0  0.8   0:01.71 /usr/sbin+
 63584 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64181 nobody    20   0  277744  19904   4652 S   0.0  0.8   0:00.98 /usr/sbin+
 64182 nobody    20   0  277680  20104   4768 S   0.0  0.8   0:01.15 /usr/sbin+
 64314 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 65900 nobody    20   0  277680  20188   4704 S   0.0  0.8   0:01.04 /usr/sbin+
 68701 nobody    20   0  277680  19744   4508 S   0.0  0.8   0:00.80 /usr/sbin+
 68702 nobody    20   0  277612  19488   4400 S   0.0  0.8   0:00.66 /usr/sbin+
 69138 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 69224 nobody    20   0  277744  19456   4300 S   0.0  0.8   0:00.53 /usr/sbin+
 69806 nobody    20   0  277484  19508   4312 S   0.0  0.8   0:00.46 /usr/sbin+
 69878 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 70372 nobody    20   0  277680  19320   4204 S   0.0  0.8   0:00.42 /usr/sbin+
 71731 nobody    20   0  277520  19276   4308 S   0.0  0.8   0:00.47 /usr/sbin+
 72381 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 73243 nobody    20   0  277488  19032   4164 S   0.0  0.8   0:00.30 /usr/sbin+
 73256 nobody    20   0  277504  19192   4208 S   0.0  0.8   0:00.21 /usr/sbin+
 73262 nobody    20   0  277772  19152   3992 S   0.0  0.8   0:00.18 /usr/sbin+
 73278 nobody    20   0  277544  19200   4152 S   0.0  0.8   0:00.22 /usr/sbin+
 73414 nobody    20   0  277848  19108   4036 S   0.0  0.8   0:00.22 /usr/sbin+
 73433 nobody    20   0  277716  19124   3924 S   0.0  0.8   0:00.24 /usr/sbin+
 73447 nobody    20   0  277744  19212   4016 S   0.0  0.8   0:00.21 /usr/sbin+
 73448 nobody    20   0  277720  19144   4040 S   0.0  0.8   0:00.21 /usr/sbin+
 73724 nobody    20   0  277520  18708   3752 S   0.0  0.8   0:00.24 /usr/sbin+
 73770 nobody    20   0  277520  19040   4080 S   0.0  0.8   0:00.16 /usr/sbin+
 74929 root      20   0  111304   4260   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 74999 wp-tool+  20   0  445028    312    188 S   0.0  0.0   0:00.00 sw-engine+
 75060 root      20   0   60820   4512   3524 S   0.0  0.2   0:00.00 dovecot/l+
 75099 mailnull  20   0   90236   7480   3332 S   0.0  0.3   0:00.00 /usr/sbin+
 75471 nobody    20   0  277528  18036   3204 S   0.0  0.7   0:00.03 /usr/sbin+
 75578 nigeria   20   0  400460   4420   2328 S   0.0  0.2   0:00.00 php-fpm: +
 75882 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 75884 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 75885 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 75888 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 75889 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 75890 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 75891 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 75892 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 75893 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 75894 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 75896 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 75902 root      20   0  162436   5824   4336 S   0.0  0.2   0:00.01 sshd: roo+
 75903 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: roo+
 75904 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 75905 root      20   0  188208  11100   5152 S   0.0  0.5   0:00.02 /usr/loca+
 75906 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 75908 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 75910 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 75912 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 75916 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 75917 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 75918 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 75919 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 75920 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 75924 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 75927 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 75942 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 75951 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 75954 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 75972 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 75977 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 75978 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 75979 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 75980 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 75984 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 75985 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 75987 root      20   0  160224   2372   1636 S   0.0  0.1   0:00.00 top -n 2 +
 75988 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 75989 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 75990 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [webmaild+
 75991 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 76049 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.00 /opt/cpan+
 76068 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 76075 root      20   0  138136   4552   3396 S   0.0  0.2   0:00.00 sudo -E -+
 76077 cloudsms  20   0   46076   5304   2724 S   0.0  0.2   0:00.00 uapi --us+
 76079 cloudsms  20   0   80252   9608   3428 R   0.0  0.4   0:00.00 /usr/loca+
 93318 root      20   0  183052   2108   1544 S   0.0  0.1   0:00.00 /usr/sbin+
 93348 root      20   0  113284   1112    936 S   0.0  0.0   0:00.00 /bin/sh -+
 93349 root      20   0  108056    308    232 S   0.0  0.0   0:00.00 sleep 4h +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov16   0:13  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov16   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov16   0:12  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   Nov16   0:01  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   Nov16   0:01  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   Nov16   0:02  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root       1560  0.0  0.0      0     0 ?        S    01:12   0:00  \_ [kworker/u200:2]
root      14071  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/0:1]
root      48575  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/0:0]
root      48576  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/u200:1]
root      50830  0.0  0.0      0     0 ?        S    02:14   0:00  \_ [kworker/1:2]
root      56483  0.0  0.0      0     0 ?        S    02:21   0:00  \_ [kworker/1:3]
root      63584  0.0  0.0      0     0 ?        S    02:30   0:00  \_ [kworker/0:4]
root      64314  0.0  0.0      0     0 ?        S    02:31   0:00  \_ [kworker/1:0]
root      69138  0.0  0.0      0     0 ?        S    02:37   0:00  \_ [kworker/0:2]
root      69878  0.0  0.0      0     0 ?        S    02:38   0:00  \_ [kworker/1:4]
root      72381  0.0  0.0      0     0 ?        S    02:41   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44400  3492 ?        Ss   Nov16   0:16 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.3  40244  7432 ?        Ss   Nov16   0:06 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376   584 ?        Ss   Nov16   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   584 ?        S<sl Nov16   0:01 /sbin/auditd
root        470  0.0  0.0 152780   316 ?        Ss   Nov16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240  1288 ?        Ssl  Nov16   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1316 ?        Ss   Nov16   0:02 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   536 ?        Ss   Nov16   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256   172 ?        Ss   Nov16   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   440 ?        Ss   Nov16   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1520 ?        Ss   Nov16   0:06 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208   116 ?        Ssl  Nov16   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 926904  1524 ?        Ssl  Nov16   0:11 /usr/sbin/nscd
root        515  0.0  0.0   4388   112 ?        Ss   Nov16   0:00 /usr/sbin/acpid
root        519  0.0  0.2 224148  6076 ?        Ss   Nov16   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   692 ?        Ss   Nov16   0:00 /usr/sbin/crond -n
root      93318  0.0  0.0 183052  2108 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93348  0.0  0.0 113284  1112 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      93349  0.0  0.0 108056   308 ?        S    01:00   0:00  |       \_ sleep 4h 32m
root      75882  0.0  0.0 183048  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      75919  0.0  0.0 113284  1208 ?        Ss   02:45   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      75927  0.0  0.0 108052   356 ?        S    02:45   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      75942  0.0  0.0 113288  1516 ?        S    02:45   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      76080  0.0  0.0 153840  2096 ?        R    02:45   0:00  |               \_ ps auxf
root      75884  0.0  0.0 183048  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      75924  0.0  0.0  20164   812 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      75885  0.0  0.0 183048  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      75908  0.0  0.0  20164   808 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      75888  0.0  0.0 183048  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      75917  0.0  0.0  20164   804 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      75889  0.0  0.0 183048  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      75906  0.0  0.0  20164   804 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      75890  0.0  0.0 183048  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      75918  0.0  0.0  20164   804 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      75891  0.0  0.0 183048  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      75912  0.0  0.0  20164   804 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      75892  0.0  0.0 183048  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      75910  0.0  0.0  20164   992 ?        Ss   02:45   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      76081  0.0  0.0  20164   264 ?        R    02:45   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      75893  0.0  0.0 183048  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      75904  0.0  0.0 113284  1212 ?        Ss   02:45   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      75905  2.0  0.4 188208 11100 ?        S    02:45   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      75987  0.0  0.0 160224  2372 ?        S    02:45   0:00  |           \_ top -n 2 -b -c
root      75894  0.0  0.0 183048  2152 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      75920  0.0  0.0  20164   960 ?        Ss   02:45   0:00  |   \_ jailshell (pactpay) [75951] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   75951  0.0  0.0  20164   256 ?        S    02:45   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   75954  1.0  0.7 480124 17688 ?        S    02:45   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      75896  0.0  0.0 183048  2148 ?        S    02:45   0:00  \_ /usr/sbin/CROND -n
root      75916  0.0  0.0  20164   964 ?        Ss   02:45   0:00      \_ jailshell (nigeria) [75972] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   75972  0.0  0.0  20164   260 ?        S    02:45   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   75974  6.0  0.6 404052 16140 ?        S    02:45   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208   244 ?        Ss   Nov16   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704   212 ttyS0    Ss+  Nov16   0:00 /bin/bash
root        556  0.0  0.0 108296   212 tty1     Ss+  Nov16   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.1  89120  4092 ?        Ss   Nov16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  75099  0.0  0.3  90236  7480 ?        S    02:44   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   584 ?        Ss   Nov16   0:01 /usr/sbin/sshd -D
root      74929  0.0  0.1 111304  4260 ?        Ss   02:44   0:00  \_ sshd: [accepted]
root      75902  1.0  0.2 162436  5824 ?        Ss   02:45   0:00  \_ sshd: root [priv]
sshd      75903  0.0  0.1 115644  2624 ?        S    02:45   0:00      \_ sshd: root [net]
systuser    912  0.0  0.0 113016    80 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.2 249168  7112 ?        Ssl  Nov16   0:03 /usr/sbin/rsyslogd -n
named       918  0.0  1.5 1185864 38664 ?       Ssl  Nov16   0:07 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.1 10.1 1763124 246084 ?      Ssl  Nov16   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388    36 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   672 ?        Ss   Nov16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.1  46912  2576 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  47340  3304 ?        S    Nov16   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   388 ?        S    Nov16   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   568 ?        S    Nov16   0:00  \_ dovecot/log
dovenull   1084  0.0  0.1  46984  2496 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  47308  3200 ?        S    Nov16   0:00  \_ dovecot/imap-login
root       1091  0.0  0.1  24528  2500 ?        S    Nov16   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   660 ?        S    Nov16   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41160  1588 ?        S    Nov16   0:00  \_ dovecot/auth
root      75060  0.0  0.1  60820  4512 ?        S    02:44   0:00  \_ dovecot/lmtp
root        926  0.0  0.0 572372  1176 ?        Ssl  Nov16   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.1 445028  3388 ?        Ss   Nov16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  74999  0.0  0.0 445028   312 ?        S    02:44   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.4 439788 11508 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 13976 ?        Ssl  Nov16   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.3 261296  7624 ?        Ss   Nov16   0:02 cpsrvd (SSL) - waiting for connections                   
root      75977  0.0  0.0      0     0 ?        Z    02:45   0:00  \_ [webmaild - serv] <defunct>
root      75978  0.0  0.0      0     0 ?        Z    02:45   0:00  \_ [webmaild - serv] <defunct>
root      75979  0.0  0.0      0     0 ?        Z    02:45   0:00  \_ [cpaneld - servi] <defunct>
root      75980  0.0  0.0      0     0 ?        Z    02:45   0:00  \_ [webmaild - serv] <defunct>
root      75984  0.0  0.0      0     0 ?        Z    02:45   0:00  \_ [cpaneld - servi] <defunct>
root      75985  0.0  0.0      0     0 ?        Z    02:45   0:00  \_ [webmaild - serv] <defunct>
root      75988  0.0  0.0      0     0 ?        Z    02:45   0:00  \_ [webmaild - serv] <defunct>
root      75989  0.0  0.0      0     0 ?        Z    02:45   0:00  \_ [webmaild - serv] <defunct>
root      75990  0.0  0.0      0     0 ?        Z    02:45   0:00  \_ [webmaild - serv] <defunct>
root      75991  0.0  0.0      0     0 ?        Z    02:45   0:00  \_ [cpaneld - servi] <defunct>
root        943  0.1  0.4 1277312 10588 ?       Ssl  Nov16   0:20 /usr/bin/checkstatus
root        944  0.2  0.3 1276356 8028 ?        Ssl  Nov16   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10308  3544 ?        Ss   Nov16   0:10 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   852 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   712 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    48 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.4 5654048 35984 ?       SLsl Nov16   0:07 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   468 ?        Ss   Nov16   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740  1016 ?        Ss   Nov16   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   75578  0.0  0.1 400460  4420 ?        S    02:44   0:00  \_ php-fpm: pool nigeriadecide_org
systuser    968  0.0  0.0 112524    72 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400   192 ?        Ssl  Nov16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   768 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1123  0.0  4.9 248032 119020 ?       Ss   Nov16   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8393  0.0  5.3 264952 129272 ?       S    Nov16   0:01  \_ spamd child
root       8394  0.0  4.8 248032 117032 ?       S    Nov16   0:00  \_ spamd child
systuser   1168  0.0  0.1 157704  3068 ?        S    Nov16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.2 387556  5308 ?        Ss   Nov16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+  75157  2.8  3.1 431444 76392 ?        S    02:44   0:00  \_ /usr/bin/sw-engine -d auto_prepend_file=/usr/local/cpanel/3rdparty/wp-toolkit/scripts/scheduled-task-prepend-file.php /usr/local/cpanel/3rdparty/wp-toolkit/plib/scripts/instances-auto-update.php
root      76075  0.0  0.1 138136  4552 ?        S    02:45   0:00      \_ sudo -E -u root /bin/sh -c uapi --user=cloudsms DirectoryPrivacy is_directory_protected dir=/home/cloudsms/public_html/blog --output=json
cloudsms  76077  0.0  0.2  46076  5304 ?        S    02:45   0:00          \_ uapi --user=cloudsms DirectoryPrivacy is_directory_protected dir=/home/cloudsms/public_html/blog --output=json
cloudsms  76079  0.0  0.6  90352 15608 ?        R    02:45   0:00              \_ /usr/local/cpanel/uapi --json-connect
wp-tool+   1177  0.0  1.3 412368 32508 ?        Ss   Nov16   0:04 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.4 209308 11916 ?        Ss   Nov16   0:01 tailwatchd
root       1213  0.0  0.2 183900  6084 ?        Ss   Nov16   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1216  0.0  0.1 167452  4120 ?        Ss   Nov16   0:00 dnsadmin - dormant mode
root       1627  0.0  0.0 299272   888 ?        Ss   Nov16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1588 ?        SN   Nov16   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.3 266984  8180 ?        Ss   Nov16   0:01 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12792   520 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   480 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12812   500 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256   256 ?        S    Nov16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    54829  0.1  0.8 277692 20872 ?        S    02:19   0:02  \_ /usr/sbin/httpd -k start
nobody    58187  0.1  0.8 277676 20352 ?        S    02:23   0:01  \_ /usr/sbin/httpd -k start
nobody    64181  0.1  0.8 277744 19904 ?        S    02:30   0:00  \_ /usr/sbin/httpd -k start
nobody    64182  0.1  0.8 277680 20104 ?        S    02:30   0:01  \_ /usr/sbin/httpd -k start
nobody    65900  0.1  0.8 277680 20188 ?        S    02:33   0:01  \_ /usr/sbin/httpd -k start
nobody    68701  0.1  0.8 277680 19744 ?        S    02:36   0:00  \_ /usr/sbin/httpd -k start
nobody    68702  0.1  0.8 277612 19488 ?        S    02:36   0:00  \_ /usr/sbin/httpd -k start
nobody    69224  0.1  0.8 277744 19456 ?        S    02:37   0:00  \_ /usr/sbin/httpd -k start
nobody    69806  0.1  0.8 277484 19508 ?        S    02:37   0:00  \_ /usr/sbin/httpd -k start
nobody    70372  0.1  0.7 277680 19320 ?        S    02:38   0:00  \_ /usr/sbin/httpd -k start
nobody    71731  0.1  0.7 277520 19276 ?        S    02:40   0:00  \_ /usr/sbin/httpd -k start
nobody    73243  0.1  0.7 277488 19032 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    73256  0.1  0.7 277504 19192 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    73262  0.1  0.7 277772 19152 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    73278  0.1  0.7 277544 19200 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    73414  0.1  0.7 277848 19108 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
cloudw    76049  0.0  0.6 353712 15976 ?        S    02:45   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    73433  0.1  0.7 277716 19124 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    73447  0.1  0.7 277744 19212 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    73448  0.1  0.7 277720 19144 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    73724  0.1  0.7 277520 18708 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    73770  0.1  0.7 277520 19040 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    75471  0.2  0.7 277528 18036 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.2 11.2 1461652 271816 ?      Sl   Nov16   2:38 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148   416 ?        Ss   00:00   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152   424 ?        S    00:00   0:00  \_ [kworker]
root      40218  0.1  1.2 181996 29344 ?        Ss   00:00   0:09 lfd - sleeping
## mysql stats
Uptime: 12328  Threads: 3  Questions: 947300  Slow queries: 0  Opens: 5177  Flush tables: 1  Open tables: 2000  Queries per second avg: 76.841
*************************** 1. row ***************************
     Id: 14032
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 14034
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 14042
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 101.32.52.164 TIME_WAIT
      1 103.74.116.73 TIME_WAIT
      1 110.249.202.233 TIME_WAIT
      1 142.44.220.64 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 192.178.4.100 TIME_WAIT
      1 ::1 TIME_WAIT
      1 40.77.167.151 TIME_WAIT
      1 43.135.36.201 TIME_WAIT
      1 51.161.65.174 TIME_WAIT
      1 54.39.136.250 TIME_WAIT
      1 54.39.210.221 TIME_WAIT
      1 74.7.230.56 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 02:45:02 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 3 hours 26 minutes 13 seconds
   Server load: 0.27 0.24 0.24
   Total accesses: 70791 - Total Traffic: 1.8 GB - Total Duration: 35429228
   CPU Usage: u8.98 s5 cu958.22 cs781.1 - 14.2% CPU load
   5.72 requests/sec - 149.7 kB/second - 26.2 kB/request - 500.476 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

K_KK_..RKK___K.RK._R.._RK..._WK.................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req    Dur   Conn  Child  Slot     Client     Protocol         VHost                                      Request
   0-0  73724 3/41/3250   K 1.09 3     274  1657701 99.6  1.15  82.67 192.178.4.97   http/1.1 team.cloudware.ng:443  GET /?l=2184721007 HTTP/1.1
   1-0  73770 0/34/2857   _ 0.66 1     399  1470547 0.0   0.62  83.05 192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=881126591 HTTP/1.1
   2-0  73243 9/54/3044   K 1.15 0     366  1497296 279.5 1.41  77.66 192.178.4.96   http/1.1 team.cloudware.ng:443  GET /sets/112143328548 HTTP/1.1
   3-0  65900 1/204/3161  K 4.86 2     273  1562205 34.8  4.83  76.79 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1018235
   4-0  75471 0/4/3096    _ 0.09 1     344  1408881 0.0   0.12  78.20 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /sets/111476981407 HTTP/1.1
   5-0  -     0/0/2836    . 0.00 146   0    1393454 0.0   0.00  74.19 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   6-0  -     0/0/3060    . 0.00 144   0    1479498 0.0   0.00  77.01 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   7-0  64181 0/162/2596  R 4.21 87    341  1365287 0.0   4.69  68.09 181.117.184.27 http/1.1 nigeriadecide.org:443
   8-0  64182 10/221/2816 K 5.04 2     262  1379918 312.3 4.83  68.88 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1020004
   9-0  73414 4/37/2928   K 0.98 0     463  1471193 128.5 2.35  74.46 192.178.4.102  http/1.1 team.cloudware.ng:443  GET /sets/111897952093 HTTP/1.1
   10-0 69224 0/107/2887  _ 2.48 1     22   1443939 0.0   2.17  73.85 66.249.70.7    http/1.1 test.cloudware.ng:443  GET /877518504?goodscode=0876369178 HTTP/1.1
   11-0 71731 0/78/2652   _ 2.33 0     0    1371962 0.0   2.10  69.00 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   12-0 69806 0/91/2541   _ 1.82 0     8    1324920 0.0   2.22  66.28 23.23.214.190  http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/2019elections/2019elections/blog
   13-0 73256 5/47/2747   K 0.73 2     265  1455207 154.8 1.10  71.56 192.178.4.105  http/1.1 team.cloudware.ng:443  GET /sets/131711898613 HTTP/1.1
   14-0 -     0/0/2436    . 0.00 149   0    1254564 0.0   0.00  63.04 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 73262 0/36/2614   R 0.69 66    1014 1321484 0.0   1.11  66.57 102.89.76.159  http/1.1
   16-0 54829 1/402/2569  K 9.69 2     22   1286562 0.7   9.05  63.72 66.249.70.5    http/1.1 test.cloudware.ng:80   GET /2369641474?goodscode=2366536546 HTTP/1.1
   17-0 -     0/0/2514    . 0.00 154   0    1273610 0.0   0.00  67.41 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 68701 0/144/2191  _ 3.51 2     6    1114272 0.0   3.68  56.68 54.39.136.250  http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php?state=Jigawa&lga=Birniwa&ward=Ka
   19-0 70372 0/81/1975   R 1.79 65    0    995666  0.0   2.06  54.49 102.89.76.159  http/1.1
   20-0 -     0/0/2035    . 0.00 153   0    1029632 0.0   0.00  50.90 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 -     0/0/1978    . 0.00 145   0    1047894 0.0   0.00  53.63 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 73433 0/43/1375   _ 1.13 0     0    700681  0.0   1.31  34.01 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET /whm-server-status HTTP/1.0
   23-0 68702 0/125/1349  R 3.04 36    406  640777  0.0   2.77  32.73 194.164.126.55 http/1.1 cloudware.ng:443
   24-0 73278 6/43/1628   K 1.00 1     261  843837  190.3 1.26  42.63 192.178.4.100  http/1.1 team.cloudware.ng:443  GET /sets/111955834887 HTTP/1.1
   25-0 -     0/0/1018    . 0.00 103   0    484095  0.0   0.00  25.85 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/879     . 0.00 152   0    344977  0.0   0.00  17.07 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/754     . 0.00 155   0    369813  0.0   0.00  19.33 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 58187 0/299/899   _ 7.52 1     357  457353  0.0   7.52  22.11 192.178.4.102  http/1.1 team.cloudware.ng:443  GET /sets/133176258961 HTTP/1.1
   29-0 73447 0/70/187    W 1.32 0     0    66755   0.0   0.52  3.02  ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   30-0 73448 3/39/667    K 0.93 2     278  304366  94.4  1.00  14.70 192.178.4.104  http/1.1 team.cloudware.ng:443  GET /sets/111006581638 HTTP/1.1
   31-0 -     0/0/500     . 0.00 3566  0    230058  0.0   0.00  10.64 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/183     . 0.00 3631  0    79523   0.0   0.00  3.91  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/106     . 0.00 8479  0    46426   0.0   0.00  3.26  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/292     . 0.00 8472  0    156256  0.0   0.00  7.78  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/28      . 0.00 8466  0    6362    0.0   0.00  0.28  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/170     . 0.00 8412  0    85805   0.0   0.00  4.16  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/11      . 0.00 8476  0    7767    0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/144     . 0.00 8459  0    77733   0.0   0.00  3.62  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/424     . 0.00 7066  0    220703  0.0   0.00  11.36 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/88      . 0.00 8346  0    19096   0.0   0.00  1.31  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/8       . 0.00 8478  0    3054    0.0   0.00  0.05  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/43      . 0.00 8334  0    22487   0.0   0.00  0.98  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/114     . 0.00 8477  0    52913   0.0   0.00  2.30  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/661     . 0.00 6118  0    366544  0.0   0.00  17.77 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/42      . 0.00 8482  0    19040   0.0   0.00  0.83  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/11      . 0.00 8455  0    5124    0.0   0.00  0.16  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/20      . 0.00 8416  0    7973    0.0   0.00  0.58  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/83      . 0.00 8166  0    40607   0.0   0.00  1.94  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/37      . 0.00 8470  0    18588   0.0   0.00  0.72  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/7       . 0.00 8465  0    3381    0.0   0.00  0.08  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/9       . 0.00 8439  0    3457    0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/2       . 0.00 11174 0    1702    0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/7       . 0.00 11150 0    2649    0.0   0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2       . 0.00 11173 0    1806    0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/27      . 0.00 11095 0    13156   0.0   0.00  0.55  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/189     . 0.00 10340 0    98784   0.0   0.00  5.53  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/44      . 0.00 11035 0    19861   0.0   0.00  0.82  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1204
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 5 seconds, (range: 1...29)
   index usage: 21%, cache usage: 28%
   total entries stored since starting: 53167
   total entries replaced since starting: 0
   total entries expired since starting: 51959
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 7 hit, 120 miss
   total removes since starting: 4 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit