403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.03.42.txt
 ## swap threshold exceeded
## server overview
2025-11-17.03.42 load[5] mem[61/74] mysql[2/25] httpd[19]
              total        used        free      shared  buff/cache   available
Mem:           2363        1340         611           5         411         859
Swap:          1999        1615         384
 03:42:02 up  4:23,  0 users,  load average: 5.21, 2.18, 1.03
## system overview
top - 03:42:02 up  4:23,  0 users,  load average: 5.21, 2.18, 1.03
Tasks: 215 total,   1 running, 213 sleeping,   0 stopped,   1 zombie
%Cpu(s): 56.2 us, 31.2 sy,  0.0 ni,  0.0 id,  9.4 wa,  0.0 hi,  3.1 si,  0.0 st
KiB Mem :  2420300 total,   579488 free,  1391816 used,   448996 buff/cache
KiB Swap:  2047996 total,   399084 free,  1648912 used.   861468 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1467796 187252   3448 S  87.5  7.7   3:34.02 /usr/sbin+
 26065 cloudw    20   0  353712  15976  10492 S  12.5  0.7   0:00.02 /opt/cpan+
   263 root       0 -20       0      0      0 S   6.2  0.0   0:03.17 [kworker/+
 26087 nigeria   20   0  404052  16136  10384 S   6.2  0.7   0:00.03 /opt/cpan+
 26111 cloudsms  20   0  404052  15608  10164 S   6.2  0.6   0:00.01 /opt/cpan+
 26115 cloudw    20   0  353712  15980  10492 S   6.2  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44400   3020   1368 S   0.0  0.1   0:21.39 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.10 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.89 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:17.10 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.87 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.13 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:46.32 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.02 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.32 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:03.97 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:00.97 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   39500   1800   1644 S   0.0  0.1   0:08.67 /usr/lib/+
   376 root      20   0   45376      8      4 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    220     96 S   0.0  0.0   0:01.34 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780      4      0 S   0.0  0.0   0:00.01 /usr/sbin+
   475 polkitd   20   0  612240    980    624 S   0.0  0.0   0:02.24 /usr/lib/+
   476 root      20   0   24716   1068    784 S   0.0  0.0   0:03.74 /usr/lib/+
   483 root      20   0   21540    304    216 S   0.0  0.0   0:00.35 /usr/sbin+
   484 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.02 /sbin/rpc+
   485 root      20   0   52852      8      0 S   0.0  0.0   0:00.01 /usr/sbin+
   492 dbus      20   0   58700   1240    600 S   0.0  0.1   0:08.54 /usr/bin/+
   494 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  994492    324      0 S   0.0  0.0   0:15.16 /usr/sbin+
   515 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   2304     68 S   0.0  0.1   0:00.25 queueproc+
   545 root      20   0  124480    416    284 S   0.0  0.0   0:00.46 /usr/sbin+
   546 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120     24      4 S   0.0  0.0   0:00.29 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:03.67 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    204    104 S   0.0  0.0   0:01.93 /usr/sbin+
   912 systuser  20   0  113016     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  265552    852    480 S   0.0  0.0   0:04.41 /usr/sbin+
   918 named     20   0 1185864  21080    604 S   0.0  0.9   0:10.47 /usr/sbin+
   919 root      20   0 1828136 623164    180 S   0.0 25.7   0:35.39 /usr/loca+
   924 systuser  20   0   10388      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   925 root      20   0   51508    204     88 S   0.0  0.0   0:00.20 /usr/sbin+
   926 root      20   0  572372    784    320 S   0.0  0.0   0:01.46 /usr/bin/+
   928 root      20   0  445028    200     92 S   0.0  0.0   0:00.61 sw-engine+
   937 root      20   0  439788     96     12 S   0.0  0.0   0:00.69 php-fpm: +
   938 systuser  20   0  114016  12680   2072 S   0.0  0.5   0:03.92 /usr/loca+
   939 root      20   0  261296   2980    704 S   0.0  0.1   0:03.59 cpsrvd (S+
   943 root      20   0 1277312   3648      8 S   0.0  0.2   0:20.28 /usr/bin/+
   944 root      20   0 1276356   6260      4 S   0.0  0.3   0:24.87 /usr/bin/+
   947 cpanelc+  20   0   10416   3124   2268 S   0.0  0.1   0:13.35 /usr/loca+
   952 root      20   0  396248    284    204 S   0.0  0.0   0:00.61 php-fpm: +
   957 root      20   0  388892    164     72 S   0.0  0.0   0:00.61 php-fpm: +
   962 systuser  20   0   14068      0      0 S   0.0  0.0   0:00.01 /usr/loca+
   963 telegraf  20   0 5654048  20488     24 S   0.0  0.8   0:09.10 /usr/loca+
   964 root      20   0  153404     92      8 S   0.0  0.0   0:00.32 pure-ftpd+
   967 root      20   0  400740    584    420 S   0.0  0.0   0:02.69 php-fpm: +
   968 systuser  20   0  112524     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.35 /usr/bin/+
   974 root      20   0  389508    108     24 S   0.0  0.0   0:00.57 php-fpm: +
  1080 dovenull  20   0   46912    472    216 S   0.0  0.0   0:00.25 dovecot/p+
  1081 dovenull  20   0   47608    396      0 S   0.0  0.0   0:00.11 dovecot/i+
  1082 dovecot   20   0   10320      4      0 S   0.0  0.0   0:00.03 dovecot/a+
  1083 root      20   0   10452    368    212 S   0.0  0.0   0:00.17 dovecot/l+
  1084 dovenull  20   0   46984    204      0 S   0.0  0.0   0:00.29 dovecot/p+
  1085 dovenull  20   0   47432    100      0 S   0.0  0.0   0:00.11 dovecot/i+
  1091 root      20   0   24528    196      0 S   0.0  0.0   0:00.10 dovecot/c+
  1095 dovecot   20   0   13568      4      0 S   0.0  0.0   0:00.04 dovecot/s+
  1123 root      20   0  248032   2548    436 S   0.0  0.1   0:04.74 /usr/loca+
  1160 dovecot   20   0   41160    128      0 S   0.0  0.0   0:00.32 dovecot/a+
  1168 systuser  20   0  157704     64      0 S   0.0  0.0   0:00.09 SonarPush+
  1176 wp-tool+  20   0  387556   1084      0 S   0.0  0.0   0:00.22 /usr/bin/+
  1177 wp-tool+  20   0  412368   8948   1184 S   0.0  0.4   0:05.31 /usr/bin/+
  1211 root      20   0  209308   3500    184 S   0.0  0.1   0:01.80 tailwatchd
  1213 root      20   0  262224   2536      0 S   0.0  0.1   0:00.89 cpdavd - +
  1216 root      20   0  167452    756    284 S   0.0  0.0   0:00.38 dnsadmin +
  1627 root      20   0  299272    276    128 S   0.0  0.0   0:00.44 php-fpm: +
  1673 root      38  18  130416     40      0 S   0.0  0.0   0:00.04 cpanellog+
  1928 root      20   0  266984   4916    428 S   0.0  0.2   0:01.96 /usr/sbin+
  1932 root      20   0   12832    296    136 S   0.0  0.0   0:02.04 /usr/loca+
  1933 root      20   0   12732    120     44 S   0.0  0.0   0:01.78 /usr/loca+
  1934 root      20   0   12888    196      0 S   0.0  0.0   0:01.94 /usr/loca+
  1939 root      20   0   53256      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  4229 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  5177 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  8393 root      20   0  266004   2688      0 S   0.0  0.1   0:03.76 spamd chi+
  8394 root      20   0  248032   1280      0 S   0.0  0.1   0:00.00 spamd chi+
 10515 root      30  10  132964   2804      0 S   0.0  0.1   0:00.00 ConfigSer+
 10528 root      30  10  108056     28      0 S   0.0  0.0   0:00.00 sleep 161+
 12704 nobody    20   0  277760   8444   2636 S   0.0  0.3   0:01.43 /usr/sbin+
 13393 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 15866 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 17108 nobody    20   0  277868  10872   2752 S   0.0  0.4   0:01.01 /usr/sbin+
 18095 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 19840 nobody    20   0  277744   7248   1932 S   0.0  0.3   0:00.71 /usr/sbin+
 20610 nobody    20   0  277824   8304   2736 S   0.0  0.3   0:00.69 /usr/sbin+
 20656 nobody    20   0  277592   7316   1876 S   0.0  0.3   0:00.62 /usr/sbin+
 20659 nobody    20   0  277676   7552   1984 S   0.0  0.3   0:00.71 /usr/sbin+
 20663 nobody    20   0  277680   8040   2084 S   0.0  0.3   0:00.78 /usr/sbin+
 21720 nobody    20   0  277680   7516   2084 S   0.0  0.3   0:00.63 /usr/sbin+
 22340 nobody    20   0  277744   8300   2748 S   0.0  0.3   0:00.41 /usr/sbin+
 22341 nobody    20   0  277744   7752   2116 S   0.0  0.3   0:00.42 /usr/sbin+
 22343 nobody    20   0  277912   8380   2692 S   0.0  0.3   0:00.47 /usr/sbin+
 22482 nobody    20   0  277868   5724     16 S   0.0  0.2   0:00.39 /usr/sbin+
 23410 nobody    20   0  277680   8316   2708 S   0.0  0.3   0:00.27 /usr/sbin+
 23411 nobody    20   0  277680   7928   2276 S   0.0  0.3   0:00.40 /usr/sbin+
 23520 nobody    20   0  277680   8336   2736 S   0.0  0.3   0:00.37 /usr/sbin+
 23560 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 24899 mailnull  20   0   89308      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
 25101 root      20   0   60820      0      0 S   0.0  0.0   0:00.00 dovecot/l+
 25474 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 25624 root      20   0  111304    428      0 S   0.0  0.0   0:00.01 sshd: [ac+
 25641 nobody    20   0  277876  13472   2320 S   0.0  0.6   0:00.17 /usr/sbin+
 25668 nobody    20   0  277744  15428   3108 S   0.0  0.6   0:00.10 /usr/sbin+
 25673 nobody    20   0  277876  13744   2036 S   0.0  0.6   0:00.23 /usr/sbin+
 25682 nobody    20   0  277892  13712   2136 S   0.0  0.6   0:00.14 /usr/sbin+
 25684 nobody    20   0  277876  14496   2748 S   0.0  0.6   0:00.18 /usr/sbin+
 25685 nobody    20   0  277308  11216     56 S   0.0  0.5   0:00.17 /usr/sbin+
 25761 wp-tool+  20   0  445028    148      4 S   0.0  0.0   0:00.00 sw-engine+
 25806 nobody    20   0  277744  14496   2120 S   0.0  0.6   0:00.08 /usr/sbin+
 25845 nobody    20   0  277744  16660   3000 S   0.0  0.7   0:00.05 /usr/sbin+
 25876 root      20   0  111304   2068   1052 S   0.0  0.1   0:00.00 sshd: [ac+
 25901 root      20   0  111304   2048   1032 S   0.0  0.1   0:00.00 sshd: [ac+
 25912 sshd      20   0  115644   1836    772 S   0.0  0.1   0:00.00 sshd: [ne+
 25999 root      20   0       0      0      0 Z   0.0  0.0   0:00.01 [cpaneld +
 26004 root      20   0  157312   4880   3600 S   0.0  0.2   0:00.00 sshd: roo+
 26005 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: roo+
 26011 cloudw    20   0  525628  60816   6756 S   0.0  2.5   0:00.59 php-fpm: +
 26023 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26024 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26026 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26027 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26028 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26029 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26030 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26032 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26033 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26034 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26035 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26037 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 26038 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 26042 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 26043 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 26044 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26046 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 26047 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26048 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 26049 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 26051 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 26052 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
 26053 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 26054 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 26055 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 26056 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 26062 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 26063 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 26079 saboakin  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 26081 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 26082 nigeria   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 26084 saboakin  20   0  404052  15616  10160 S   0.0  0.6   0:00.01 /opt/cpan+
 26086 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 26098 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 26106 root      20   0  160220   2216   1584 R   0.0  0.1   0:00.00 top -bcn1
 26108 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 26110 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 40045 oysipao+  20   0    3148     16      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152     44      0 S   0.0  0.0   0:00.30 [kworker]
 40218 root      20   0  182216   5824    832 S   0.0  0.2   0:13.37 lfd - sle+
 64314 root      20   0       0      0      0 S   0.0  0.0   0:00.30 [kworker/+
 88136 root      20   0       0      0      0 S   0.0  0.0   0:00.33 [kworker/+
 93318 root      20   0  183052      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
 93348 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
 93349 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
 99607 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
101261 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov16   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    Nov16   0:17  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov16   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    Nov16   0:46  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   Nov16   0:03  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   Nov16   0:03  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   Nov16   0:03  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root      64314  0.0  0.0      0     0 ?        S    02:31   0:00  \_ [kworker/1:0]
root      88136  0.0  0.0      0     0 ?        S    02:58   0:00  \_ [kworker/u200:2]
root      99607  0.0  0.0      0     0 ?        S    03:10   0:00  \_ [kworker/0:4]
root     101261  0.0  0.0      0     0 ?        S    03:12   0:00  \_ [kworker/1:2]
root       4229  0.0  0.0      0     0 ?        S    03:18   0:00  \_ [kworker/0:1]
root       5177  0.0  0.0      0     0 ?        S    03:19   0:00  \_ [kworker/0:3]
root      13393  0.0  0.0      0     0 ?        S    03:28   0:00  \_ [kworker/1:3]
root      15866  0.0  0.0      0     0 ?        S    03:30   0:00  \_ [kworker/u200:1]
root      18095  0.0  0.0      0     0 ?        S    03:33   0:00  \_ [kworker/0:0]
root      23560  0.0  0.0      0     0 ?        S    03:39   0:00  \_ [kworker/0:2]
root      25474  0.0  0.0      0     0 ?        S    03:41   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44400  3020 ?        Ss   Nov16   0:21 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.0  39500  1800 ?        Ss   Nov16   0:08 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376     8 ?        Ss   Nov16   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   220 ?        S<sl Nov16   0:01 /sbin/auditd
root        470  0.0  0.0 152780     4 ?        Ss   Nov16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240   980 ?        Ssl  Nov16   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1068 ?        Ss   Nov16   0:03 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   304 ?        Ss   Nov16   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256     4 ?        Ss   Nov16   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852     8 ?        Ss   Nov16   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1240 ?        Ss   Nov16   0:08 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208     0 ?        Ssl  Nov16   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 994492   324 ?        Ssl  Nov16   0:15 /usr/sbin/nscd
root        515  0.0  0.0   4388     4 ?        Ss   Nov16   0:00 /usr/sbin/acpid
root        519  0.0  0.0 224148  2304 ?        Ss   Nov16   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   416 ?        Ss   Nov16   0:00 /usr/sbin/crond -n
root      93318  0.0  0.0 183052     4 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93348  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      93349  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 4h 32m
root      26023  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      26049  0.0  0.0 113284  1212 ?        Ss   03:42   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      26062  0.0  0.0 108052   356 ?        S    03:42   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      26063  0.0  0.0 113288  1516 ?        S    03:42   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      26119  0.0  0.0 153840  2092 ?        R    03:42   0:00  |               \_ ps auxf
root      26024  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      26053  0.0  0.0  20164   804 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      26026  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      26054  0.0  0.0  20164   808 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      26027  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      26051  0.0  0.0  20164   804 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      26028  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      26046  0.0  0.0  20164   804 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      26029  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      26055  0.0  0.0  20164   984 ?        Ss   03:42   0:00  |   \_ jailshell (cloudsms) [26108] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  26108  0.0  0.0  20164   260 ?        S    03:42   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  26110  0.0  0.0 113284  1212 ?        S    03:42   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
cloudsms  26111  0.0  0.6 404052 15608 ?        S    03:42   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/massmailer/cron.php
root      26030  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      26044  0.0  0.0  20164   808 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      26032  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      26048  0.0  0.0  20164   812 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      26033  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      26042  0.0  0.0  20164   804 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      26034  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      26047  0.0  0.0  20164   808 ?        Ss   03:42   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      26035  0.0  0.0 183048  2148 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      26052  0.0  0.0  20164   960 ?        Ss   03:42   0:00  |   \_ jailshell (pactpay) [26081] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   26081  0.0  0.0  20164   256 ?        S    03:42   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   26086  0.0  0.7 480124 17688 ?        S    03:42   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      26037  0.0  0.0 183048  2144 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      26043  0.0  0.0  20164   968 ?        Ss   03:42   0:00  |   \_ jailshell (nigeria) [26082] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   26082  0.0  0.0  20164   264 ?        S    03:42   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   26087  0.0  0.6 404052 16136 ?        S    03:42   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      26038  0.0  0.0 183048  2148 ?        S    03:42   0:00  \_ /usr/sbin/CROND -n
root      26056  0.0  0.0  20164   968 ?        Ss   03:42   0:00      \_ jailshell (saboakin) [26079] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  26079  0.0  0.0  20164   260 ?        S    03:42   0:00          \_ jailshell (saboakin) [init] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  26084  0.0  0.6 404052 15616 ?        S    03:42   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/saboakin/public_html/massmailer/cron.php
root        546  0.0  0.0  24208     4 ?        Ss   Nov16   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704     0 ttyS0    Ss+  Nov16   0:00 /bin/bash
root        556  0.0  0.0 108296     4 tty1     Ss+  Nov16   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.0  89120    24 ?        Ss   Nov16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  24899  0.0  0.0  89308     0 ?        S    03:40   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   204 ?        Ss   Nov16   0:01 /usr/sbin/sshd -D
root      25624  0.0  0.0 111304   428 ?        Ss   03:41   0:00  \_ sshd: [accepted]
root      25876  0.0  0.0 111304  2068 ?        Ss   03:41   0:00  \_ sshd: [accepted]
root      25901  0.0  0.0 111304  2048 ?        Ss   03:41   0:00  \_ sshd: [accepted]
sshd      25912  0.0  0.0 115644  1836 ?        S    03:41   0:00  |   \_ sshd: [net]
root      26004  0.0  0.2 157312  4880 ?        Ss   03:41   0:00  \_ sshd: root [priv]
sshd      26005  0.0  0.1 115644  2632 ?        S    03:41   0:00      \_ sshd: root [net]
systuser    912  0.0  0.0 113016    32 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.0 265552   852 ?        Ssl  Nov16   0:04 /usr/sbin/rsyslogd -n
named       918  0.0  0.8 1185864 21080 ?       Ssl  Nov16   0:10 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.2 25.7 1828136 623164 ?      Ssl  Nov16   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388     8 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   204 ?        Ss   Nov16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.0  46912   472 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.0  47608   396 ?        S    Nov16   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320     4 ?        S    Nov16   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   368 ?        S    Nov16   0:00  \_ dovecot/log
dovenull   1084  0.0  0.0  46984   204 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.0  47432   100 ?        S    Nov16   0:00  \_ dovecot/imap-login
root       1091  0.0  0.0  24528   196 ?        S    Nov16   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568     4 ?        S    Nov16   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41160   128 ?        S    Nov16   0:00  \_ dovecot/auth
root      25101  0.0  0.0  60820     0 ?        S    03:40   0:00  \_ dovecot/lmtp
root        926  0.0  0.0 572372   784 ?        Ssl  Nov16   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.0 445028   200 ?        Ss   Nov16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  25761  0.0  0.0 445028   148 ?        S    03:41   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.0 439788    96 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 12680 ?        Ssl  Nov16   0:03 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.1 261296  2980 ?        Ss   Nov16   0:03 cpsrvd (SSL) - waiting for connections                   
root      25999  0.5  0.0      0     0 ?        Z    03:41   0:00  \_ [cpaneld - servi] <defunct>
root        943  0.1  0.1 1277312 3648 ?        Ssl  Nov16   0:20 /usr/bin/checkstatus
root        944  0.1  0.2 1276356 6260 ?        Ssl  Nov16   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10416  3124 ?        Ss   Nov16   0:13 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   284 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   164 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068     0 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  0.8 5654048 20488 ?       SLsl Nov16   0:09 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404    92 ?        Ss   Nov16   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740   584 ?        Ss   Nov16   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
cloudw    26011 29.5  2.5 525628 60816 ?        S    03:41   0:00  \_ php-fpm: pool cloudware_ng
systuser    968  0.0  0.0 112524    32 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400     0 ?        Ssl  Nov16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   108 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1123  0.0  0.1 248032  2548 ?        Ss   Nov16   0:04 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8393  0.0  0.1 266004  2688 ?        S    Nov16   0:03  \_ spamd child
root       8394  0.0  0.0 248032  1280 ?        S    Nov16   0:00  \_ spamd child
systuser   1168  0.0  0.0 157704    64 ?        S    Nov16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.0 387556  1084 ?        Ss   Nov16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  0.3 412368  8948 ?        Ss   Nov16   0:05 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.1 209308  3500 ?        Ss   Nov16   0:01 tailwatchd
root       1213  0.0  0.1 262224  2536 ?        Ss   Nov16   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1216  0.0  0.0 167452   756 ?        Ss   Nov16   0:00 dnsadmin - dormant mode
root       1627  0.0  0.0 299272   276 ?        Ss   Nov16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416    40 ?        SN   Nov16   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.2 266984  4916 ?        Ss   Nov16   0:01 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12832   296 ?        S    Nov16   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   120 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12888   196 ?        S    Nov16   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256     4 ?        S    Nov16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    12704  0.1  0.3 277760  8444 ?        S    03:27   0:01  \_ /usr/sbin/httpd -k start
cloudw    26098  0.0  0.6 353712 15976 ?        S    03:42   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    17108  0.1  0.4 277868 10872 ?        S    03:31   0:01  \_ /usr/sbin/httpd -k start
cloudw    26065  0.0  0.6 353712 15976 ?        S    03:42   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    19840  0.1  0.2 277744  7248 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
nobody    20610  0.1  0.3 277824  8304 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
nobody    20656  0.1  0.3 277592  7316 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
nobody    20659  0.1  0.3 277676  7552 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
nobody    20663  0.2  0.3 277680  8040 ?        S    03:35   0:00  \_ /usr/sbin/httpd -k start
nobody    21720  0.2  0.3 277680  7516 ?        S    03:37   0:00  \_ /usr/sbin/httpd -k start
nobody    22340  0.1  0.3 277744  8300 ?        S    03:37   0:00  \_ /usr/sbin/httpd -k start
nobody    22341  0.1  0.3 277744  7752 ?        S    03:37   0:00  \_ /usr/sbin/httpd -k start
nobody    22343  0.1  0.3 277912  8380 ?        S    03:37   0:00  \_ /usr/sbin/httpd -k start
nobody    22482  0.1  0.2 277868  5724 ?        S    03:37   0:00  \_ /usr/sbin/httpd -k start
nobody    23410  0.1  0.3 277680  8316 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
nobody    23411  0.2  0.3 277680  7928 ?        S    03:38   0:00  \_ /usr/sbin/httpd -k start
nobody    23520  0.2  0.3 277680  8336 ?        S    03:39   0:00  \_ /usr/sbin/httpd -k start
nobody    25641  0.3  0.5 277876 13472 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    25668  0.2  0.6 277744 15428 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    25673  0.5  0.5 277876 13744 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
cloudw    26115  0.0  0.6 353712 15980 ?        S    03:42   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    25682  0.3  0.5 277892 13712 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    25684  0.4  0.5 277876 14496 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    25685  0.3  0.4 277308 11216 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    25806  0.4  0.5 277744 14496 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
nobody    25845  0.3  0.6 277744 16660 ?        S    03:41   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.3  7.7 1467796 187656 ?      Sl   Nov16   3:34 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148    16 ?        Ss   00:00   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152    44 ?        S    00:00   0:00  \_ [kworker]
root      40218  0.1  0.2 182216  5824 ?        Ss   00:00   0:13 lfd - sleeping
root      10515  0.0  0.1 132964  2804 ?        SN   03:25   0:00 ConfigServer Version Check
root      10528  0.0  0.0 108056    28 ?        SN   03:25   0:00  \_ sleep 16186
## mysql stats
Uptime: 15748  Threads: 7  Questions: 1253728  Slow queries: 0  Opens: 7571  Flush tables: 1  Open tables: 2000  Queries per second avg: 79.611
*************************** 1. row ***************************
     Id: 17789
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: init
   Info: SELECT * FROM `05` WHERE `phone`='2348035171663' LIMIT 1
*************************** 2. row ***************************
     Id: 17790
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT `id` FROM `currency_rate` WHERE `day`='2025-11-17' LIMIT 1
*************************** 3. row ***************************
     Id: 17791
   User: saboakin_saboaki
   Host: localhost
     db: saboakin_sabo
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 10
*************************** 4. row ***************************
     Id: 17792
   User: saboakin_saboaki
   Host: localhost
     db: saboakin_sabo
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 17795
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `massmailer` WHERE `other`='' LIMIT 30
*************************** 6. row ***************************
     Id: 17796
   User: cloudsms_root
   Host: localhost
     db: cloudsms_sms
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 7. row ***************************
     Id: 17798
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 103.4.249.0 TIME_WAIT
      1 114.119.133.35 TIME_WAIT
      1 114.119.137.160 TIME_WAIT
      1 119.249.100.110 TIME_WAIT
      1 119.249.100.245 TIME_WAIT
      1 148.113.128.24 TIME_WAIT
      1 148.113.130.107 TIME_WAIT
      1 15.235.98.170 TIME_WAIT
      1 168.205.75.88 TIME_WAIT
      1 185.152.39.78 TIME_WAIT
      1 185.191.171.15 TIME_WAIT
      1 ::1 TIME_WAIT
      1 220.181.51.90 TIME_WAIT
      1 52.34.76.65 TIME_WAIT
      1 54.70.53.60 TIME_WAIT
      1 74.7.228.57 TIME_WAIT
      1 85.208.96.210 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 35.245.147.132 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 03:42:02 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 4 hours 23 minutes 13 seconds
   Server load: 5.21 2.18 1.03
   Total accesses: 91580 - Total Traffic: 2.3 GB - Total Duration: 46389434
   CPU Usage: u6.05 s6.31 cu1254.97 cs1030.3 - 14.5% CPU load
   5.8 requests/sec - 151.0 kB/second - 26.0 kB/request - 506.545 ms/request
   19 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

KK_KKC.WK.WK.WK..WKK__W.K_KW..K.................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID      Acc     M CPU   SS   Req    Dur   Conn  Child  Slot      Client     Protocol         VHost                                      Request
   0-0  20610 3/99/4131   K 2.48 0     399  2166464 100.2 2.77  104.66 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=3405797710 HTTP/1.1
   1-0  25806 4/5/3602    K 0.22 1     349  1879819 126.3 0.16  102.77 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=2481311819 HTTP/1.1
   2-0  25641 0/11/3975   _ 0.81 0     1    1919510 0.0   0.26  97.20  ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   3-0  25668 1/6/3864    K 0.50 0     388  1901595 34.5  0.29  95.84  192.178.4.99   http/1.1 team.cloudware.ng:443  GET /?l=3551324667 HTTP/1.1
   4-0  23410 2/44/3930   K 1.41 3     262  1858531 65.0  0.95  97.91  192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=287415733 HTTP/1.1
   5-0  23411 1/52/3585   C 1.21 0     1275 1807058 26.8  1.62  92.98  221.229.106.25 http/1.1 cloudware.ng:443       GET / HTTP/1.1
   6-0  -     0/0/3787    . 0.00 10    0    1874105 0.0   0.00  94.70  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   7-0  25673 5/12/3595   W 0.56 0     0    1853593 154.5 0.27  93.04  192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=481237560 HTTP/1.1
   8-0  25845 4/7/3701    K 0.24 0     22   1775542 8.1   0.10  88.74  66.249.70.7    http/1.1 test.cloudware.ng:443  GET /1260196986?goodscode=1258546114 HTTP/1.1
   9-0  -     0/0/3667    . 0.00 34    57   1855790 0.0   0.00  94.07  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   10-0 12704 0/242/3665  W 6.89 0     0    1877968 0.0   8.56  95.89  192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=3147157837 HTTP/1.1
   11-0 23520 2/51/3398   K 2.09 0     370  1751914 66.9  1.31  86.22  192.178.4.99   http/1.1 team.cloudware.ng:443  GET /?l=2860037097 HTTP/1.1
   12-0 -     0/0/3392    . 0.00 36    889  1762346 0.0   0.00  87.42  54.70.53.60    http/1.1
   13-0 17108 0/170/3543  W 5.01 0     0    1817880 0.0   3.44  88.81  192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=2963076709 HTTP/1.1
   14-0 25682 6/10/3196   K 0.82 0     362  1630236 185.6 0.26  80.80  192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=3613952571 HTTP/1.1
   15-0 -     0/0/3208    . 0.00 35    1997 1667609 0.0   0.00  82.62  192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=3011770274 HTTP/1.1
   16-0 -     0/0/3309    . 0.00 35    56   1678209 0.0   0.00  82.05  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 20656 0/93/3196   W 2.79 0     0    1637421 0.0   2.86  85.24  ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   18-0 22340 2/57/2915   K 1.90 3     264  1504406 66.3  1.24  76.16  192.178.4.96   http/1.1 team.cloudware.ng:443  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1010464
   19-0 25684 1/5/2616    K 0.24 4     305  1361902 35.3  0.11  70.39  192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=993285999 HTTP/1.1
   20-0 21720 0/90/2724   _ 3.11 1     307  1405520 0.0   2.40  67.87  192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=3644173567 HTTP/1.1
   21-0 22341 0/63/2416   _ 2.20 0     414  1307405 0.0   1.61  65.38  192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=1547846416 HTTP/1.1
   22-0 25685 0/3/1784    W 0.15 18    0    880271  0.0   0.01  42.88  116.179.37.222 http/1.1 cloudsms.com.ng:443    GET /fonts/Open_Sans/OpenSans-Bold.ttf HTTP/1.1
   23-0 -     0/0/1925    . 0.00 32    12   956163  0.0   0.00  49.22  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 19840 38/125/1967 K 4.68 1     29   1044801 252.8 2.20  50.62  178.25.244.124 http/1.1 cloudsms.com.ng:443    GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   25-0 22343 0/61/1302   _ 2.18 0     411  637162  0.0   1.51  32.44  192.178.4.96   http/1.1 team.cloudware.ng:443  GET /?l=3903734326 HTTP/1.1
   26-0 20659 1/92/1071   K 3.17 1     2    476711  0.9   2.50  22.10  185.152.39.28  http/1.1 theforge.com.ng:80     GET / HTTP/1.1
   27-0 22482 0/63/912    W 1.59 21    0    486605  0.0   1.55  23.44  116.179.37.49  http/1.1 cloudsms.com.ng:443    GET /fonts/Open_Sans/OpenSans-Bold.ttf HTTP/1.1
   28-0 -     0/0/1106    . 0.00 224   0    566581  0.0   0.00  27.52  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/563     . 0.00 359   0    267709  0.0   0.00  13.29  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 20663 4/129/1126  K 3.95 1     278  549655  129.2 3.17  26.30  192.178.4.102  http/1.1 team.cloudware.ng:443  GET /sets/114156708097 HTTP/1.1
   31-0 -     0/0/688     . 0.00 593   0    315754  0.0   0.00  15.18  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/198     . 0.00 827   0    86620   0.0   0.00  4.17   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/118     . 0.00 798   0    52981   0.0   0.00  3.58   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/296     . 0.00 832   0    157708  0.0   0.00  7.85   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/583     . 0.00 350   0    324571  0.0   0.00  16.01  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/195     . 0.00 745   0    98581   0.0   0.00  4.98   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/369     . 0.00 282   0    194051  0.0   0.00  9.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/144     . 0.00 11879 0    77733   0.0   0.00  3.62   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/424     . 0.00 10486 0    220703  0.0   0.00  11.36  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/88      . 0.00 11766 0    19096   0.0   0.00  1.31   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/8       . 0.00 11898 0    3054    0.0   0.00  0.05   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/43      . 0.00 11754 0    22487   0.0   0.00  0.98   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/114     . 0.00 11897 0    52913   0.0   0.00  2.30   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/661     . 0.00 9538  0    366544  0.0   0.00  17.77  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/42      . 0.00 11902 0    19040   0.0   0.00  0.83   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/11      . 0.00 11875 0    5124    0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/20      . 0.00 11836 0    7973    0.0   0.00  0.58   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/83      . 0.00 11586 0    40607   0.0   0.00  1.94   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/37      . 0.00 11890 0    18588   0.0   0.00  0.72   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/7       . 0.00 11885 0    3381    0.0   0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/9       . 0.00 11859 0    3457    0.0   0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/2       . 0.00 14594 0    1702    0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/7       . 0.00 14570 0    2649    0.0   0.00  0.07   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2       . 0.00 14593 0    1806    0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/27      . 0.00 14515 0    13156   0.0   0.00  0.55   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/189     . 0.00 13760 0    98784   0.0   0.00  5.53   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/44      . 0.00 14455 0    19861   0.0   0.00  0.82   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1508
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 3 seconds, (range: 0...21)
   index usage: 26%, cache usage: 35%
   total entries stored since starting: 68571
   total entries replaced since starting: 0
   total entries expired since starting: 67058
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 18 hit, 257 miss
   total removes since starting: 10 hit, 11 miss
Youez - 2016 - github.com/yon3zu
LinuXploit