403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.02.48.txt
 ## swap threshold exceeded
## server overview
2025-11-17.02.48 load[0] mem[59/63] mysql[1/8] httpd[18]
              total        used        free      shared  buff/cache   available
Mem:           2363        1355         191          64         816         778
Swap:          1999        1370         629
 02:48:02 up  3:29,  0 users,  load average: 0.31, 0.29, 0.26
## system overview
top - 02:48:02 up  3:29,  0 users,  load average: 0.31, 0.29, 0.26
Tasks: 210 total,   8 running, 201 sleeping,   0 stopped,   1 zombie
%Cpu(s): 58.1 us, 22.6 sy,  0.0 ni,  0.0 id, 19.4 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   209044 free,  1369464 used,   841792 buff/cache
KiB Swap:  2047996 total,   644336 free,  1403660 used.   815400 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1461652 271920   4852 S 106.7 11.2   2:40.35 /usr/sbin+
 79637 nigeria   20   0  404052  16140  10384 R  20.0  0.7   0:00.04 /opt/cpan+
   672 root       0 -20       0      0      0 S   6.7  0.0   0:02.22 [loop0]
 78966 nobody    20   0  277720  18992   3632 S   6.7  0.8   0:00.10 /usr/sbin+
 79648 root      20   0  125324   6052    956 R   6.7  0.3   0:00.01 find /tmp+
     1 root      20   0   44400   3480   1612 S   0.0  0.1   0:17.26 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.78 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.70 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:13.47 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.68 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:02.33 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:12.92 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.26 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:01.66 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:01.38 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:00.76 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   40244   8212   7908 S   0.0  0.3   0:07.01 /usr/lib/+
   376 root      20   0   45376    584    436 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    584    456 S   0.0  0.0   0:01.08 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780    316    272 S   0.0  0.0   0:00.01 /usr/sbin+
   475 polkitd   20   0  612240   1288    864 S   0.0  0.1   0:01.80 /usr/lib/+
   476 root      20   0   24716   1316    940 S   0.0  0.1   0:02.99 /usr/lib/+
   483 root      20   0   21540    536    424 S   0.0  0.0   0:00.28 /usr/sbin+
   484 rpc       20   0   69256    172     68 S   0.0  0.0   0:00.01 /sbin/rpc+
   485 root      20   0   52852    440    344 S   0.0  0.0   0:00.01 /usr/sbin+
   492 dbus      20   0   58700   1520    768 S   0.0  0.1   0:06.81 /usr/bin/+
   494 root      20   0  195208    116    116 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  926904   1528    900 S   0.0  0.1   0:11.78 /usr/sbin+
   515 root      20   0    4388    112    108 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   5960   1248 S   0.0  0.2   0:00.21 queueproc+
   545 root      20   0  124480    692    536 S   0.0  0.0   0:00.37 /usr/sbin+
   546 root      20   0   24208    244    224 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704    212    212 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296    212    208 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120   4092   1068 S   0.0  0.2   0:00.22 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    584    484 S   0.0  0.0   0:01.55 /usr/sbin+
   912 systuser  20   0  113016     80      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  249168   7812   6928 S   0.0  0.3   0:03.50 /usr/sbin+
   918 named     20   0 1185864  38768   2416 S   0.0  1.6   0:07.69 /usr/sbin+
   919 root      20   0 1763124 247616   1020 S   0.0 10.2   0:14.15 /usr/loca+
   924 systuser  20   0   10388     36      0 S   0.0  0.0   0:00.00 /usr/loca+
   925 root      20   0   51508    672    508 S   0.0  0.0   0:00.16 /usr/sbin+
   926 root      20   0  572372   1176    596 S   0.0  0.0   0:01.14 /usr/bin/+
   928 root      20   0  445028   3388   3280 S   0.0  0.1   0:00.46 sw-engine+
   937 root      20   0  439788  11504  11296 S   0.0  0.5   0:00.46 php-fpm: +
   938 systuser  20   0  114016  14068   2596 S   0.0  0.6   0:03.08 /usr/loca+
   939 root      20   0  261296   7620   2048 S   0.0  0.3   0:02.61 cpsrvd (S+
   943 root      20   0 1277312  10588    228 S   0.0  0.4   0:20.27 /usr/bin/+
   944 root      20   0 1276356   8028    228 S   0.0  0.3   0:24.84 /usr/bin/+
   947 cpanelc+  20   0   10416   3588   2436 R   0.0  0.1   0:10.51 /usr/loca+
   952 root      20   0  396248    808    624 S   0.0  0.0   0:00.41 php-fpm: +
   957 root      20   0  388892    700    600 S   0.0  0.0   0:00.43 php-fpm: +
   962 systuser  20   0   14068     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   963 telegraf  20   0 5654048  35076   4592 S   0.0  1.4   0:07.10 /usr/loca+
   964 root      20   0  153404    468    384 S   0.0  0.0   0:00.26 pure-ftpd+
   967 root      20   0  400740   1012    840 S   0.0  0.0   0:02.11 php-fpm: +
   968 systuser  20   0  112524     72      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 memcach+  20   0  342400    192    192 S   0.0  0.0   0:00.27 /usr/bin/+
   974 root      20   0  389508    768    564 S   0.0  0.0   0:00.39 php-fpm: +
  1080 dovenull  20   0   46912   2568   1856 S   0.0  0.1   0:00.20 dovecot/p+
  1081 dovenull  20   0   47480   3292   2204 S   0.0  0.1   0:00.09 dovecot/i+
  1082 dovecot   20   0   10320    388    272 S   0.0  0.0   0:00.03 dovecot/a+
  1083 root      20   0   10452    568    388 S   0.0  0.0   0:00.13 dovecot/l+
  1084 dovenull  20   0   46984   2488   1756 S   0.0  0.1   0:00.24 dovecot/p+
  1085 dovenull  20   0   47308   3188   2152 S   0.0  0.1   0:00.09 dovecot/i+
  1091 root      20   0   24528   2496    628 S   0.0  0.1   0:00.09 dovecot/c+
  1095 dovecot   20   0   13568    660    432 S   0.0  0.0   0:00.03 dovecot/s+
  1123 root      20   0  248032 119020   2528 S   0.0  4.9   0:04.32 /usr/loca+
  1160 dovecot   20   0   41160   1580   1120 S   0.0  0.1   0:00.24 dovecot/a+
  1168 systuser  20   0  157704   3068   1088 S   0.0  0.1   0:00.07 SonarPush+
  1176 wp-tool+  20   0  387556   5328   1956 S   0.0  0.2   0:00.18 /usr/bin/+
  1177 wp-tool+  20   0  412368  32508   1732 S   0.0  1.3   0:04.12 /usr/bin/+
  1211 root      20   0  209308  12192   2568 S   0.0  0.5   0:01.50 tailwatchd
  1213 root      20   0  183900   6076   2844 S   0.0  0.3   0:00.68 cpdavd - +
  1216 root      20   0  167452   4112   2740 S   0.0  0.2   0:00.30 dnsadmin +
  1560 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  1627 root      20   0  299272    888    548 S   0.0  0.0   0:00.34 php-fpm: +
  1673 root      38  18  130416   1584    812 S   0.0  0.1   0:00.03 cpanellog+
  1928 root      20   0  266984   8180    860 S   0.0  0.3   0:01.52 /usr/sbin+
  1932 root      20   0   12824    520    376 R   0.0  0.0   0:01.59 /usr/loca+
  1933 root      20   0   12732    480    368 R   0.0  0.0   0:01.38 /usr/loca+
  1934 root      20   0   12852    500    348 S   0.0  0.0   0:01.50 /usr/loca+
  1939 root      20   0   53256    256    256 S   0.0  0.0   0:00.04 /usr/loca+
  8393 root      20   0  264952 129872   3444 S   0.0  5.4   0:01.97 spamd chi+
  8394 root      20   0  248032 117032    584 S   0.0  4.8   0:00.00 spamd chi+
 14071 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 40045 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152    424      0 S   0.0  0.0   0:00.18 [kworker]
 40218 root      20   0  181996  29356   1644 S   0.0  1.2   0:10.10 lfd - sle+
 48575 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 48576 root      20   0       0      0      0 S   0.0  0.0   0:00.10 [kworker/+
 50830 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 54829 nobody    20   0  277692  20828   5012 S   0.0  0.9   0:02.13 /usr/sbin+
 56483 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 58187 nobody    20   0  277676  20312   4888 S   0.0  0.8   0:01.81 /usr/sbin+
 63584 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64181 nobody    20   0  277744  19988   4668 S   0.0  0.8   0:01.19 /usr/sbin+
 64182 nobody    20   0  277680  20100   4764 S   0.0  0.8   0:01.44 /usr/sbin+
 64314 root      20   0       0      0      0 S   0.0  0.0   0:00.09 [kworker/+
 65900 nobody    20   0  277680  20268   4772 S   0.0  0.8   0:01.34 /usr/sbin+
 68701 nobody    20   0  277680  19852   4544 S   0.0  0.8   0:00.91 /usr/sbin+
 68702 nobody    20   0  277616  19748   4532 S   0.0  0.8   0:00.88 /usr/sbin+
 69224 nobody    20   0  277744  19804   4544 S   0.0  0.8   0:00.78 /usr/sbin+
 69878 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 71731 nobody    20   0  277520  19504   4520 S   0.0  0.8   0:00.55 /usr/sbin+
 72381 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 73243 nobody    20   0  277488  19252   4304 S   0.0  0.8   0:00.60 /usr/sbin+
 73262 nobody    20   0  277772  19348   4176 S   0.0  0.8   0:00.27 /usr/sbin+
 73278 nobody    20   0  277552  19260   4204 S   0.0  0.8   0:00.26 /usr/sbin+
 73414 nobody    20   0  277848  19392   4216 S   0.0  0.8   0:00.37 /usr/sbin+
 73433 nobody    20   0  277652  19664   4476 S   0.0  0.8   0:00.43 /usr/sbin+
 73447 nobody    20   0  277744  19628   4408 S   0.0  0.8   0:00.46 /usr/sbin+
 73724 nobody    20   0  277520  19308   4268 S   0.0  0.8   0:00.52 /usr/sbin+
 73770 nobody    20   0  277520  19212   4248 S   0.0  0.8   0:00.36 /usr/sbin+
 75471 nobody    20   0  277528  19044   4140 S   0.0  0.8   0:00.28 /usr/sbin+
 76910 nobody    20   0  277852  19156   4088 S   0.0  0.8   0:00.29 /usr/sbin+
 77269 nobody    20   0  277844  19260   4028 S   0.0  0.8   0:00.12 /usr/sbin+
 78279 nobody    20   0  277720  19244   4088 S   0.0  0.8   0:00.14 /usr/sbin+
 78582 root      20   0   41052   2732   2088 S   0.0  0.1   0:00.00 dovecot/a+
 78903 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 78934 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 79070 nobody    20   0  277720  18348   3352 S   0.0  0.8   0:00.06 /usr/sbin+
 79331 wp-tool+  20   0  445028    312    188 S   0.0  0.0   0:00.00 sw-engine+
 79443 nobody    20   0  277720  18172   3180 S   0.0  0.8   0:00.03 /usr/sbin+
 79525 root      20   0  162436   5836   4340 S   0.0  0.2   0:00.01 sshd: roo+
 79526 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: roo+
 79535 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 79551 root      20   0  162436   5732   4232 S   0.0  0.2   0:00.01 sshd: roo+
 79552 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 79558 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 79561 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 79562 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 79563 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 79564 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 79565 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 79566 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 79567 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 79568 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 79569 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 79570 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 79571 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 79573 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 79578 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 79579 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 79580 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 79602 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 79604 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 79605 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 79606 root      20   0  113284   1196   1024 S   0.0  0.0   0:00.00 /bin/sh /+
 79607 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 79608 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 79609 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 79610 root      20   0   20164    988    788 S   0.0  0.0   0:00.00 jailshell+
 79611 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 79612 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 79613 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 79615 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 79616 root      20   0  129960   2320   1824 S   0.0  0.1   0:00.00 /usr/bin/+
 79627 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 79629 pactpay   20   0  480124  17692  11892 S   0.0  0.7   0:00.01 /opt/cpan+
 79633 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 79647 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 sh -c fin+
 79649 root      20   0  112812   1012    860 S   0.0  0.0   0:00.00 grep -Ef +
 79657 root      20   0  160220   2060   1580 R   0.0  0.1   0:00.00 top -bcn1
 79659 root      20   0  111304   4268   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 79663 sshd      20   0  115644   2628   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 79664 root      20   0   20164    260      0 R   0.0  0.0   0:00.00 /usr/loca+
 93318 root      20   0  183052   2108   1544 S   0.0  0.1   0:00.00 /usr/sbin+
 93348 root      20   0  113284   1112    936 S   0.0  0.0   0:00.00 /bin/sh -+
 93349 root      20   0  108056    308    232 S   0.0  0.0   0:00.00 sleep 4h +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov16   0:13  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov16   0:02  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    Nov16   0:12  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   Nov16   0:01  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   Nov16   0:01  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   Nov16   0:02  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root       1560  0.0  0.0      0     0 ?        S    01:12   0:00  \_ [kworker/u200:2]
root      14071  0.0  0.0      0     0 ?        S    01:27   0:00  \_ [kworker/0:1]
root      48575  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/0:0]
root      48576  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/u200:1]
root      50830  0.0  0.0      0     0 ?        S    02:14   0:00  \_ [kworker/1:2]
root      56483  0.0  0.0      0     0 ?        S    02:21   0:00  \_ [kworker/1:3]
root      63584  0.0  0.0      0     0 ?        S    02:30   0:00  \_ [kworker/0:4]
root      64314  0.0  0.0      0     0 ?        S    02:31   0:00  \_ [kworker/1:0]
root      69878  0.0  0.0      0     0 ?        S    02:38   0:00  \_ [kworker/1:4]
root      72381  0.0  0.0      0     0 ?        S    02:41   0:00  \_ [kworker/0:3]
root      78903  0.0  0.0      0     0 ?        S    02:47   0:00  \_ [kworker/u200:0]
root      78934  0.0  0.0      0     0 ?        S    02:47   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44400  3480 ?        Ss   Nov16   0:17 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.3  40244  8212 ?        Ss   Nov16   0:07 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376   584 ?        Ss   Nov16   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   584 ?        S<sl Nov16   0:01 /sbin/auditd
root        470  0.0  0.0 152780   316 ?        Ss   Nov16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240  1288 ?        Ssl  Nov16   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1316 ?        Ss   Nov16   0:02 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   536 ?        Ss   Nov16   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256   172 ?        Ss   Nov16   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   440 ?        Ss   Nov16   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1520 ?        Ss   Nov16   0:06 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208   116 ?        Ssl  Nov16   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 926904  1528 ?        Ssl  Nov16   0:11 /usr/sbin/nscd
root        515  0.0  0.0   4388   112 ?        Ss   Nov16   0:00 /usr/sbin/acpid
root        519  0.0  0.2 224148  5960 ?        Ss   Nov16   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   692 ?        Ss   Nov16   0:00 /usr/sbin/crond -n
root      93318  0.0  0.0 183052  2108 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93348  0.0  0.0 113284  1112 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      93349  0.0  0.0 108056   308 ?        S    01:00   0:00  |       \_ sleep 4h 32m
root      79558  0.0  0.0 183048  2148 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79578  0.0  0.0 113284  1212 ?        Ss   02:48   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      79579  0.0  0.0 108052   356 ?        S    02:48   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      79580  0.0  0.0 113288  1516 ?        S    02:48   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      79665  0.0  0.0 153840  2100 ?        R    02:48   0:00  |               \_ ps auxf
root      79561  0.0  0.0 183048  2148 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79607  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      79562  0.0  0.0 183048  2148 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79605  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      79563  0.0  0.0 183048  2148 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79611  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      79564  0.0  0.0 183048  2148 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79610  0.0  0.0  20164   988 ?        Ss   02:48   0:00  |   \_ jailshell (cloudsms) [79664] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  79664  0.0  0.0  20164   260 ?        S    02:48   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  79668  0.0  0.0 113284  1212 ?        S    02:48   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  79669  0.0  0.1 157752  3300 ?        R    02:48   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      79565  0.0  0.0 183048  2148 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79609  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      79566  0.0  0.0 183048  2148 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79608  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      79567  0.0  0.0 183048  2148 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79604  0.0  0.0  20164   804 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      79568  0.0  0.0 183048  2148 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79602  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      79569  0.0  0.0 183048  2148 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79613  0.0  0.0  20164   808 ?        Ss   02:48   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      79570  0.0  0.0 183048  2148 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79606  0.0  0.0 113284  1196 ?        Ss   02:48   0:00  |   \_ /bin/sh /usr/local/lp/apps/security/cronwrapper.sh
root      79616  0.0  0.0 129960  2320 ?        S    02:48   0:00  |       \_ /usr/bin/perl /usr/local/lp/apps/security/infected.pl
root      79647  0.0  0.0 113284  1212 ?        S    02:48   0:00  |           \_ sh -c find /tmp/ -type f | grep -Ef /usr/local/lp/apps/security/blacklists/tmp.list
root      79648  0.0  0.3 126908  7636 ?        R    02:48   0:00  |               \_ find /tmp/ -type f
root      79649  0.0  0.0 112812  1012 ?        S    02:48   0:00  |               \_ grep -Ef /usr/local/lp/apps/security/blacklists/tmp.list
root      79571  0.0  0.0 183048  2152 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79615  0.0  0.0  20164   960 ?        Ss   02:48   0:00  |   \_ jailshell (pactpay) [79627] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   79627  0.0  0.0  20164   256 ?        S    02:48   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   79629  1.0  0.7 480124 17692 ?        S    02:48   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      79573  0.0  0.0 183048  2148 ?        S    02:48   0:00  \_ /usr/sbin/CROND -n
root      79612  0.0  0.0  20164   964 ?        Ss   02:48   0:00      \_ jailshell (nigeria) [79633] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   79633  0.0  0.0  20164   260 ?        S    02:48   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   79637  4.0  0.6 404052 16140 ?        S    02:48   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208   244 ?        Ss   Nov16   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704   212 ttyS0    Ss+  Nov16   0:00 /bin/bash
root        556  0.0  0.0 108296   212 tty1     Ss+  Nov16   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.1  89120  4092 ?        Ss   Nov16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   584 ?        Ss   Nov16   0:01 /usr/sbin/sshd -D
root      79525  0.3  0.2 162436  5836 ?        Ss   02:47   0:00  \_ sshd: root [priv]
sshd      79526  0.0  0.1 115644  2632 ?        S    02:47   0:00  |   \_ sshd: root [net]
root      79551  1.0  0.2 162436  5732 ?        Ss   02:48   0:00  \_ sshd: root [priv]
sshd      79552  0.0  0.1 115644  2628 ?        S    02:48   0:00  |   \_ sshd: root [net]
root      79659  0.0  0.1 111304  4268 ?        Ss   02:48   0:00  \_ sshd: [accepted]
sshd      79663  0.0  0.1 115644  2628 ?        S    02:48   0:00      \_ sshd: [net]
systuser    912  0.0  0.0 113016    80 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.3 249168  7812 ?        Ssl  Nov16   0:03 /usr/sbin/rsyslogd -n
named       918  0.0  1.6 1185864 38768 ?       Ssl  Nov16   0:07 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.1 10.2 1763124 247616 ?      Ssl  Nov16   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388    36 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   672 ?        Ss   Nov16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.1  46912  2568 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  47480  3292 ?        S    Nov16   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   388 ?        S    Nov16   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   568 ?        S    Nov16   0:00  \_ dovecot/log
dovenull   1084  0.0  0.1  46984  2488 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  47308  3188 ?        S    Nov16   0:00  \_ dovecot/imap-login
root       1091  0.0  0.1  24528  2496 ?        S    Nov16   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   660 ?        S    Nov16   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41160  1580 ?        S    Nov16   0:00  \_ dovecot/auth
root      78582  0.0  0.1  41052  2732 ?        S    02:46   0:00  \_ dovecot/auth -w
root        926  0.0  0.0 572372  1176 ?        Ssl  Nov16   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.1 445028  3388 ?        Ss   Nov16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  79331  0.0  0.0 445028   312 ?        S    02:47   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.4 439788 11504 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 14068 ?        Ssl  Nov16   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.3 261296  7620 ?        Ss   Nov16   0:02 cpsrvd (SSL) - waiting for connections                   
root      79535  0.0  0.0      0     0 ?        Z    02:47   0:00  \_ [cpaneld - servi] <defunct>
root        943  0.1  0.4 1277312 10588 ?       Ssl  Nov16   0:20 /usr/bin/checkstatus
root        944  0.1  0.3 1276356 8028 ?        Ssl  Nov16   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10416  3588 ?        Ss   Nov16   0:10 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   808 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   700 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    48 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.4 5654048 35076 ?       SLsl Nov16   0:07 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   468 ?        Ss   Nov16   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740  1012 ?        Ss   Nov16   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
systuser    968  0.0  0.0 112524    72 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400   192 ?        Ssl  Nov16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   768 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1123  0.0  4.9 248032 119020 ?       Ss   Nov16   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8393  0.0  5.3 264952 129872 ?       S    Nov16   0:01  \_ spamd child
root       8394  0.0  4.8 248032 117032 ?       S    Nov16   0:00  \_ spamd child
systuser   1168  0.0  0.1 157704  3068 ?        S    Nov16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.2 387556  5328 ?        Ss   Nov16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  1.3 412368 32508 ?        Ss   Nov16   0:04 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.5 209308 12192 ?        Ss   Nov16   0:01 tailwatchd
root       1213  0.0  0.2 183900  6076 ?        Ss   Nov16   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1216  0.0  0.1 167452  4112 ?        Ss   Nov16   0:00 dnsadmin - dormant mode
root       1627  0.0  0.0 299272   888 ?        Ss   Nov16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1584 ?        SN   Nov16   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.3 266984  8180 ?        Ss   Nov16   0:01 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12824   520 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   480 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12852   500 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256   256 ?        S    Nov16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    54829  0.1  0.8 277692 20828 ?        S    02:19   0:02  \_ /usr/sbin/httpd -k start
nobody    79667  0.0  0.7 277692 18588 ?        R    02:48   0:00  |   \_ /usr/sbin/httpd -k start
nobody    58187  0.1  0.8 277676 20312 ?        S    02:23   0:01  \_ /usr/sbin/httpd -k start
nobody    79666  0.0  0.7 277676 18464 ?        R    02:48   0:00  |   \_ /usr/sbin/httpd -k start
nobody    64181  0.1  0.8 277744 19988 ?        S    02:30   0:01  \_ /usr/sbin/httpd -k start
nobody    64182  0.1  0.8 277680 20100 ?        S    02:30   0:01  \_ /usr/sbin/httpd -k start
nobody    65900  0.1  0.8 277680 20268 ?        S    02:33   0:01  \_ /usr/sbin/httpd -k start
nobody    68701  0.1  0.8 277680 19852 ?        S    02:36   0:00  \_ /usr/sbin/httpd -k start
nobody    68702  0.1  0.8 277616 19748 ?        S    02:36   0:00  \_ /usr/sbin/httpd -k start
nobody    69224  0.1  0.8 277744 19804 ?        S    02:37   0:00  \_ /usr/sbin/httpd -k start
nobody    71731  0.1  0.8 277520 19504 ?        S    02:40   0:00  \_ /usr/sbin/httpd -k start
nobody    73243  0.1  0.7 277488 19252 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    73262  0.0  0.7 277772 19348 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    73278  0.0  0.7 277552 19260 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    73414  0.1  0.8 277848 19392 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    73433  0.1  0.8 277652 19664 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    73447  0.1  0.8 277744 19628 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    73724  0.1  0.7 277520 19308 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    73770  0.1  0.7 277520 19212 ?        S    02:42   0:00  \_ /usr/sbin/httpd -k start
nobody    75471  0.1  0.7 277528 19044 ?        S    02:44   0:00  \_ /usr/sbin/httpd -k start
nobody    76910  0.1  0.7 277852 19156 ?        S    02:45   0:00  \_ /usr/sbin/httpd -k start
nobody    77269  0.0  0.7 277844 19260 ?        S    02:45   0:00  \_ /usr/sbin/httpd -k start
nobody    78279  0.1  0.7 277720 19244 ?        S    02:46   0:00  \_ /usr/sbin/httpd -k start
nobody    78966  0.1  0.7 277720 18992 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    79070  0.1  0.7 277720 18348 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
nobody    79443  0.2  0.7 277720 18172 ?        S    02:47   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.2 11.2 1461652 271920 ?      Sl   Nov16   2:40 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148   416 ?        Ss   00:00   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152   424 ?        S    00:00   0:00  \_ [kworker]
root      40218  0.1  1.2 181996 29356 ?        Ss   00:00   0:10 lfd - sleeping
## mysql stats
Uptime: 12508  Threads: 4  Questions: 960344  Slow queries: 0  Opens: 5299  Flush tables: 1  Open tables: 2000  Queries per second avg: 76.778
*************************** 1. row ***************************
     Id: 14314
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 14318
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 14320
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 4. row ***************************
     Id: 14322
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 14323
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 103.48.64.94 TIME_WAIT
      1 106.8.139.162 TIME_WAIT
      1 116.132.252.224 TIME_WAIT
      1 124.239.12.251 TIME_WAIT
      1 142.44.220.65 TIME_WAIT
      1 148.113.128.63 TIME_WAIT
      1 172.213.21.112 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 192.178.4.97 TIME_WAIT
      1 192.178.4.98 TIME_WAIT
      1 ::1 TIME_WAIT
      1 216.73.216.115 TIME_WAIT
      1 45.119.85.202 TIME_WAIT
      1 51.222.168.26 TIME_WAIT
      1 54.39.0.219 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 173.199.190.175 TIME_WAIT
      3 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 02:48:02 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 3 hours 29 minutes 12 seconds
   Server load: 0.31 0.29 0.26
   Total accesses: 71660 - Total Traffic: 1.8 GB - Total Duration: 35861405
   CPU Usage: u10.91 s5.92 cu970.32 cs790.33 - 14.2% CPU load
   5.71 requests/sec - 149.2 kB/second - 26.1 kB/request - 500.438 ms/request
   19 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

KKKR_KKKKRK_KW__W._.R.RKR...WK..................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS   Req   Dur   Conn  Child  Slot     Client     Protocol         VHost                                      Request
   0-0  73724 1/91/3300  K 2.66  1     277 1690312 33.4  2.23  83.75 192.178.4.99   http/1.1 team.cloudware.ng:443  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1406496
   1-0  73770 1/68/2891  K 1.54  4     346 1487158 33.8  1.49  83.93 192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=1300906114 HTTP/1.1
   2-0  73243 2/101/3091 K 2.45  0     339 1524921 66.5  2.70  78.95 192.178.4.97   http/1.1 team.cloudware.ng:443  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1971366
   3-0  65900 0/253/3210 R 6.19  2     1   1590023 0.0   6.12  78.08 192.178.4.105  http/1.1 team.cloudware.ng:443
   4-0  75471 0/51/3143  _ 1.18  0     346 1429168 0.0   1.20  79.27 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1406476
   5-0  79443 4/4/2879   K 0.09  1     277 1409246 123.5 0.12  74.89 192.178.4.99   http/1.1 team.cloudware.ng:443  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2246338
   6-0  76910 1/47/3107  K 1.49  0     259 1505662 35.4  1.31  78.33 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1712425
   7-0  64181 2/198/2632 K 5.15  4     353 1388231 66.1  5.76  69.15 192.178.4.104  http/1.1 team.cloudware.ng:443  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1560054
   8-0  64182 8/271/2866 K 6.32  3     262 1403190 246.9 6.03  70.07 192.178.4.96   http/1.1 team.cloudware.ng:443  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=525197
   9-0  73414 0/66/2957  R 1.68  65    269 1483376 0.0   2.89  75.01 192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=1926236235 HTTP/1.1
   10-0 69224 3/150/2930 K 4.02  2     393 1464131 95.9  3.17  74.85 192.178.4.97   http/1.1 team.cloudware.ng:443  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2411729
   11-0 71731 0/98/2672  _ 2.78  1     346 1375823 0.0   2.28  69.18 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=237689
   12-0 78966 2/19/2581  K 0.34  0     308 1342767 63.8  0.43  67.20 192.178.4.102  http/1.1 team.cloudware.ng:443  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=667470
   13-0 78279 0/27/2777  W 0.57  0     0   1467197 0.0   0.60  72.17 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   14-0 79070 0/8/2451   _ 0.22  0     359 1262416 0.0   0.26  63.43 192.178.4.105  http/1.1 team.cloudware.ng:443  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1741187
   15-0 73262 0/59/2637  _ 1.19  0     27  1327564 0.0   1.41  66.87 66.249.70.7    http/1.1 test.cloudware.ng:443  GET /11402206?goodscode=0011388026 HTTP/1.1
   16-0 54829 8/417/2584 W 10.38 0     0   1297352 254.5 9.45  64.12 192.178.4.100  http/1.1 team.cloudware.ng:443  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=224317
   17-0 -     0/0/2536   . 0.00  14    0   1286378 0.0   0.00  68.01 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 68701 0/164/2211 _ 4.01  0     0   1124953 0.0   4.21  57.21 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   19-0 -     0/0/2014   . 0.00  15    0   1017772 0.0   0.00  55.57 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-0 77269 0/23/2058  R 0.50  55    398 1037972 0.0   0.45  51.36 157.15.90.185  http/1.1 nigeriadecide.org:443
   21-0 -     0/0/1978   . 0.00  325   0   1047894 0.0   0.00  53.63 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 73433 0/80/1412  R 2.03  36    348 713809  0.0   2.15  34.85 102.90.103.193 http/1.1
   23-0 68702 1/163/1387 K 4.00  0     309 660180  36.3  3.77  33.72 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1942956
   24-0 73278 0/47/1632  R 1.11  36    401 845964  0.0   1.37  42.74 102.90.103.193 http/1.1
   25-0 -     0/0/1018   . 0.00  283   0   484095  0.0   0.00  25.85 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/879    . 0.00  332   0   344977  0.0   0.00  17.07 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/754    . 0.00  335   0   369813  0.0   0.00  19.33 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 58187 0/314/914  W 7.94  0     0   465816  0.0   7.93  22.52 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=149232
   29-0 73447 1/114/231  K 3.17  0     358 92639   34.8  1.64  4.14  192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=3318893555 HTTP/1.1
   30-0 -     0/0/676    . 0.00  143   0   309723  0.0   0.00  15.12 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/500    . 0.00  3746  0   230058  0.0   0.00  10.64 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/183    . 0.00  3811  0   79523   0.0   0.00  3.91  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/106    . 0.00  8659  0   46426   0.0   0.00  3.26  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/292    . 0.00  8652  0   156256  0.0   0.00  7.78  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/28     . 0.00  8646  0   6362    0.0   0.00  0.28  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/170    . 0.00  8591  0   85805   0.0   0.00  4.16  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/11     . 0.00  8656  0   7767    0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/144    . 0.00  8639  0   77733   0.0   0.00  3.62  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/424    . 0.00  7246  0   220703  0.0   0.00  11.36 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/88     . 0.00  8525  0   19096   0.0   0.00  1.31  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/8      . 0.00  8658  0   3054    0.0   0.00  0.05  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/43     . 0.00  8513  0   22487   0.0   0.00  0.98  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/114    . 0.00  8657  0   52913   0.0   0.00  2.30  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/661    . 0.00  6298  0   366544  0.0   0.00  17.77 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/42     . 0.00  8662  0   19040   0.0   0.00  0.83  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/11     . 0.00  8635  0   5124    0.0   0.00  0.16  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/20     . 0.00  8595  0   7973    0.0   0.00  0.58  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/83     . 0.00  8346  0   40607   0.0   0.00  1.94  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/37     . 0.00  8650  0   18588   0.0   0.00  0.72  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/7      . 0.00  8645  0   3381    0.0   0.00  0.08  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/9      . 0.00  8619  0   3457    0.0   0.00  0.11  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/2      . 0.00  11354 0   1702    0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/7      . 0.00  11330 0   2649    0.0   0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00  11353 0   1806    0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/27     . 0.00  11274 0   13156   0.0   0.00  0.55  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/189    . 0.00  10520 0   98784   0.0   0.00  5.53  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/44     . 0.00  11214 0   19861   0.0   0.00  0.82  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1147
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 0...53)
   index usage: 20%, cache usage: 27%
   total entries stored since starting: 53879
   total entries replaced since starting: 0
   total entries expired since starting: 52728
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 7 hit, 120 miss
   total removes since starting: 4 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit