403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-17.04.30.txt
 ## swap threshold exceeded
## server overview
2025-11-17.04.30 load[3] mem[65/64] mysql[3/25] httpd[16]
              total        used        free      shared  buff/cache   available
Mem:           2363        1474         162          33         726         689
Swap:          1999        1423         576
 04:30:01 up  5:11,  0 users,  load average: 3.16, 1.43, 0.91
## system overview
top - 04:30:02 up  5:11,  0 users,  load average: 3.16, 1.43, 0.91
Tasks: 212 total,   6 running, 206 sleeping,   0 stopped,   0 zombie
%Cpu(s): 75.8 us, 21.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  3.0 si,  0.0 st
KiB Mem :  2420300 total,   164496 free,  1509748 used,   746056 buff/cache
KiB Swap:  2047996 total,   589956 free,  1458040 used.   706032 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2639 mysql     20   0 1468028 274496   4592 S 137.5 11.3   4:20.04 /usr/sbin+
 72730 nigeria   20   0  404052  16136  10384 S  18.8  0.7   0:00.05 /opt/cpan+
 72714 root      20   0  188860  12952   5544 R  12.5  0.5   0:00.05 /usr/loca+
   939 root      20   0  261296   6492   1736 S   6.2  0.3   0:04.23 cpsrvd (S+
 62896 nobody    20   0  277680  19388   4844 S   6.2  0.8   0:00.59 /usr/sbin+
     1 root      20   0   44400   3224   1452 S   0.0  0.1   0:25.03 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.30 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.07 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:20.51 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.04 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.05 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.76 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:47.90 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   100 root      20   0       0      0      0 S   0.0  0.0   0:00.39 [kauditd]
   229 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   240 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   243 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   246 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   258 root       0 -20       0      0      0 S   0.0  0.0   0:04.34 [kworker/+
   263 root       0 -20       0      0      0 S   0.0  0.0   0:03.46 [kworker/+
   274 root      20   0       0      0      0 S   0.0  0.0   0:01.16 [jbd2/vda+
   275 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   355 root      20   0   39500   3756   3520 S   0.0  0.2   0:10.50 /usr/lib/+
   376 root      20   0   45376      8      4 S   0.0  0.0   0:00.33 /usr/lib/+
   407 root      16  -4   55532    452    320 S   0.0  0.0   0:01.64 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   470 root      20   0  152780     80     36 S   0.0  0.0   0:00.01 /usr/sbin+
   475 polkitd   20   0  612240    976    620 S   0.0  0.0   0:02.63 /usr/lib/+
   476 root      20   0   24716   1140    792 R   0.0  0.0   0:04.40 /usr/lib/+
   483 root      20   0   21540    348    260 S   0.0  0.0   0:00.41 /usr/sbin+
   484 rpc       20   0   69256      4      0 S   0.0  0.0   0:00.03 /sbin/rpc+
   485 root      20   0   52852    320    220 S   0.0  0.0   0:00.01 /usr/sbin+
   492 dbus      20   0   58700   1328    600 S   0.0  0.1   0:10.09 /usr/bin/+
   494 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   502 nscd      20   0  994492   1388    704 S   0.0  0.1   0:18.20 /usr/sbin+
   515 root      20   0    4388      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   519 root      20   0  224148   3088    804 S   0.0  0.1   0:00.28 queueproc+
   545 root      20   0  124480    424    292 R   0.0  0.0   0:00.54 /usr/sbin+
   546 root      20   0   24208      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  114704      0      0 S   0.0  0.0   0:00.02 /bin/bash
   556 root      20   0  108296      4      0 S   0.0  0.0   0:00.00 /sbin/age+
   625 mailnull  20   0   89120   3604    692 S   0.0  0.1   0:00.33 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   672 root       0 -20       0      0      0 S   0.0  0.0   0:03.69 [loop0]
   726 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [jbd2/loo+
   727 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   911 root      20   0  111304    356    256 S   0.0  0.0   0:02.35 /usr/sbin+
   912 systuser  20   0  113016     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   917 root      20   0  273744   3716   3136 S   0.0  0.2   0:05.28 /usr/sbin+
   918 named     20   0 1185864  30996   1812 S   0.0  1.3   0:12.59 /usr/sbin+
   919 root      20   0 1828136 529120    180 S   0.0 21.9   0:35.39 /usr/loca+
   924 systuser  20   0   10388      8      0 S   0.0  0.0   0:00.01 /usr/loca+
   925 root      20   0   51508    456    292 S   0.0  0.0   0:00.23 /usr/sbin+
   926 root      20   0  572372    784    320 S   0.0  0.0   0:01.69 /usr/bin/+
   928 root      20   0  445028    588    480 S   0.0  0.0   0:00.73 sw-engine+
   937 root      20   0  439788    368    276 S   0.0  0.0   0:00.76 php-fpm: +
   938 systuser  20   0  114016  13588   2448 S   0.0  0.6   0:04.61 /usr/loca+
   943 root      20   0 1277312   3688      8 S   0.0  0.2   0:20.29 /usr/bin/+
   944 root      20   0 1276356   6404      4 S   0.0  0.3   0:24.90 /usr/bin/+
   947 cpanelc+  20   0   10416   3308   2296 S   0.0  0.1   0:15.86 /usr/loca+
   952 root      20   0  396248    300    216 S   0.0  0.0   0:00.68 php-fpm: +
   957 root      20   0  388892    548    448 S   0.0  0.0   0:00.69 php-fpm: +
   962 systuser  20   0   14068     36      0 S   0.0  0.0   0:00.02 /usr/loca+
   963 telegraf  20   0 5654048  34988   5880 S   0.0  1.4   0:10.71 /usr/loca+
   964 root      20   0  153404    220    136 S   0.0  0.0   0:00.38 pure-ftpd+
   967 root      20   0  400740    776    604 S   0.0  0.0   0:03.18 php-fpm: +
   968 systuser  20   0  112524     32      0 S   0.0  0.0   0:00.01 /usr/loca+
   969 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.42 /usr/bin/+
   974 root      20   0  389508    260    176 R   0.0  0.0   0:00.64 php-fpm: +
  1080 dovenull  20   0   46912   2056   1520 S   0.0  0.1   0:00.29 dovecot/p+
  1081 dovenull  20   0   47608   2460   1644 S   0.0  0.1   0:00.13 dovecot/i+
  1082 dovecot   20   0   10320    280    188 S   0.0  0.0   0:00.03 dovecot/a+
  1083 root      20   0   10452    604    436 S   0.0  0.0   0:00.20 dovecot/l+
  1084 dovenull  20   0   46984    724    464 S   0.0  0.0   0:00.34 dovecot/p+
  1085 dovenull  20   0   47564   2476   1564 S   0.0  0.1   0:00.12 dovecot/i+
  1091 root      20   0   24528   1972    328 S   0.0  0.1   0:00.13 dovecot/c+
  1095 dovecot   20   0   13568    552    376 S   0.0  0.0   0:00.04 dovecot/s+
  1123 root      20   0  248032   3568    708 S   0.0  0.1   0:05.08 /usr/loca+
  1160 dovecot   20   0   41160   1396    960 S   0.0  0.1   0:00.39 dovecot/a+
  1168 systuser  20   0  157704   2968   1008 S   0.0  0.1   0:00.10 SonarPush+
  1176 wp-tool+  20   0  387556   3332   1412 S   0.0  0.1   0:00.24 /usr/bin/+
  1177 wp-tool+  20   0  412368   9844   1388 S   0.0  0.4   0:06.21 /usr/bin/+
  1211 root      20   0  209308   9836   2316 S   0.0  0.4   0:02.22 tailwatchd
  1213 root      20   0  183900   6072   2844 S   0.0  0.3   0:01.00 cpdavd - +
  1216 root      20   0  167452   1212    652 S   0.0  0.1   0:00.42 dnsadmin +
  1627 root      20   0  299272    488    324 S   0.0  0.0   0:00.51 php-fpm: +
  1673 root      38  18  130416   1356    692 S   0.0  0.1   0:00.05 cpanellog+
  1928 root      20   0  266984   4956    468 S   0.0  0.2   0:02.36 /usr/sbin+
  1932 root      20   0   12820    324    212 S   0.0  0.0   0:02.46 /usr/loca+
  1933 root      20   0   12732    288    208 S   0.0  0.0   0:02.15 /usr/loca+
  1934 root      20   0   12860    332    216 S   0.0  0.0   0:02.32 /usr/loca+
  1939 root      20   0   53256      4      4 S   0.0  0.0   0:00.04 /usr/loca+
  8393 root      20   0  266004  45068   1028 S   0.0  1.9   0:04.09 spamd chi+
  8394 root      20   0  248032   2112    376 S   0.0  0.1   0:00.00 spamd chi+
 10515 root      30  10  132964   2804      0 S   0.0  0.1   0:00.00 ConfigSer+
 10528 root      30  10  108056     28      0 S   0.0  0.0   0:00.00 sleep 161+
 15866 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 30014 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 37613 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
 40045 oysipao+  20   0    3148     16      0 S   0.0  0.0   0:00.00 [kworker]
 40049 oysipao+  20   0    3152     44      0 S   0.0  0.0   0:00.34 [kworker]
 40218 root      20   0  182760   9560   1100 S   0.0  0.4   0:16.42 lfd - sle+
 51481 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 52400 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 54180 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 57432 nobody    20   0  277740  19760   4748 S   0.0  0.8   0:01.50 /usr/sbin+
 57555 nobody    20   0  277684  19488   4808 S   0.0  0.8   0:01.59 /usr/sbin+
 59312 nobody    20   0  277680  19456   4884 S   0.0  0.8   0:01.08 /usr/sbin+
 60272 nobody    20   0  277676  19912   4840 S   0.0  0.8   0:01.18 /usr/sbin+
 60853 nobody    20   0  277680  19440   4800 S   0.0  0.8   0:01.14 /usr/sbin+
 61742 nobody    20   0  277756  19068   4700 S   0.0  0.8   0:01.06 /usr/sbin+
 63744 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64149 nobody    20   0  277552  19120   4636 S   0.0  0.8   0:00.87 /usr/sbin+
 64314 root      20   0       0      0      0 S   0.0  0.0   0:00.43 [kworker/+
 65763 nobody    20   0  277744  19428   4564 S   0.0  0.8   0:00.51 /usr/sbin+
 66789 nobody    20   0  277680  18152   4048 S   0.0  0.7   0:00.35 /usr/sbin+
 66790 nobody    20   0  277872  19144   4692 S   0.0  0.8   0:00.41 /usr/sbin+
 67662 nobody    20   0  277756  18664   4432 S   0.0  0.8   0:00.56 /usr/sbin+
 68448 nobody    20   0  277744  18816   4488 S   0.0  0.8   0:00.41 /usr/sbin+
 68463 nobody    20   0  277480  18328   4380 S   0.0  0.8   0:00.42 /usr/sbin+
 69133 nobody    20   0  277688  18508   4304 S   0.0  0.8   0:00.41 /usr/sbin+
 69152 nobody    20   0  277744  18872   4436 S   0.0  0.8   0:00.42 /usr/sbin+
 70482 nobody    20   0  277744  18500   4228 S   0.0  0.8   0:00.26 /usr/sbin+
 70600 nobody    20   0  277744  18308   4224 S   0.0  0.8   0:00.23 /usr/sbin+
 70635 nobody    20   0  277884  17964   4008 S   0.0  0.7   0:00.21 /usr/sbin+
 70651 nobody    20   0  277880  18608   4276 S   0.0  0.8   0:00.22 /usr/sbin+
 71498 nobody    20   0  277884  18264   4176 S   0.0  0.8   0:00.09 /usr/sbin+
 71624 nobody    20   0  277744  17488   3624 S   0.0  0.7   0:00.05 /usr/sbin+
 71800 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72089 root      20   0  111304   4264   3244 S   0.0  0.2   0:00.00 sshd: [ac+
 72281 wp-tool+  20   0  445028    312    188 S   0.0  0.0   0:00.00 sw-engine+
 72575 root      20   0  111304   4448   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 72576 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 72607 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72608 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72609 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72610 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72612 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72613 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72614 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72615 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72616 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72617 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72618 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72621 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72622 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72623 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 72625 root      20   0  183048   2144   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 72679 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72680 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 72682 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 72685 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 72687 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72688 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 72689 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72691 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 72692 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72693 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 72695 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72696 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72697 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 72698 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 72700 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 72704 root      20   0  108052    352    284 S   0.0  0.0   0:00.00 /usr/bin/+
 72705 root      20   0  188212  11104   5148 S   0.0  0.5   0:00.01 /usr/loca+
 72716 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 72719 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 72726 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 72729 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 72750 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72752 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 72760 root      20   0  160224   2368   1636 S   0.0  0.1   0:00.00 top -n 2 +
 72796 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 72801 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 72802 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 72804 root      20   0  261428   8604   2384 S   0.0  0.4   0:00.00 cpsrvd (S+
 72806 root      20   0  261296   7592   1408 S   0.0  0.3   0:00.00 webmaild +
 72808 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
 88136 root      20   0       0      0      0 D   0.0  0.0   0:00.44 [kworker/+
 93318 root      20   0  183052      4      0 S   0.0  0.0   0:00.00 /usr/sbin+
 93348 root      20   0  113284      0      0 S   0.0  0.0   0:00.00 /bin/sh -+
 93349 root      20   0  108056      0      0 S   0.0  0.0   0:00.00 sleep 4h +
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov16   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov16   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov16   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    Nov16   0:20  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov16   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov16   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    Nov16   0:47  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov16   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [deferwq]
root        100  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [kauditd]
root        229  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ata_sff]
root        240  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_0]
root        243  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_0]
root        244  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [scsi_eh_1]
root        246  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [scsi_tmf_1]
root        248  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ttm_swap]
root        258  0.0  0.0      0     0 ?        S<   Nov16   0:04  \_ [kworker/1:1H]
root        263  0.0  0.0      0     0 ?        S<   Nov16   0:03  \_ [kworker/0:1H]
root        274  0.0  0.0      0     0 ?        S    Nov16   0:01  \_ [jbd2/vda3-8]
root        275  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [kvm-irqfd-clean]
root        672  0.0  0.0      0     0 ?        S<   Nov16   0:03  \_ [loop0]
root        726  0.0  0.0      0     0 ?        S    Nov16   0:00  \_ [jbd2/loop0-8]
root        727  0.0  0.0      0     0 ?        S<   Nov16   0:00  \_ [ext4-rsv-conver]
root      64314  0.0  0.0      0     0 ?        S    02:31   0:00  \_ [kworker/1:0]
root      88136  0.0  0.0      0     0 ?        S    02:58   0:00  \_ [kworker/u200:2]
root      15866  0.0  0.0      0     0 ?        S    03:30   0:00  \_ [kworker/u200:1]
root      30014  0.0  0.0      0     0 ?        S    03:46   0:00  \_ [kworker/0:0]
root      37613  0.0  0.0      0     0 ?        S    03:54   0:00  \_ [kworker/1:1]
root      51481  0.0  0.0      0     0 ?        S    04:08   0:00  \_ [kworker/0:2]
root      52400  0.0  0.0      0     0 ?        S    04:09   0:00  \_ [kworker/1:2]
root      54180  0.0  0.0      0     0 ?        S    04:11   0:00  \_ [kworker/0:4]
root      63744  0.0  0.0      0     0 ?        S    04:21   0:00  \_ [kworker/0:1]
root      71800  0.0  0.0      0     0 ?        S    04:29   0:00  \_ [kworker/0:3]
root      72750  0.0  0.0      0     0 ?        S    04:30   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44400  3224 ?        Ss   Nov16   0:25 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        355  0.0  0.1  39500  3756 ?        Ss   Nov16   0:10 /usr/lib/systemd/systemd-journald
root        376  0.0  0.0  45376     8 ?        Ss   Nov16   0:00 /usr/lib/systemd/systemd-udevd
root        407  0.0  0.0  55532   452 ?        S<sl Nov16   0:01 /sbin/auditd
root        470  0.0  0.0 152780    80 ?        Ss   Nov16   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
polkitd     475  0.0  0.0 612240   976 ?        Ssl  Nov16   0:02 /usr/lib/polkit-1/polkitd --no-debug
root        476  0.0  0.0  24716  1140 ?        Rs   Nov16   0:04 /usr/lib/systemd/systemd-logind
root        483  0.0  0.0  21540   348 ?        Ss   Nov16   0:00 /usr/sbin/irqbalance --foreground
rpc         484  0.0  0.0  69256     4 ?        Ss   Nov16   0:00 /sbin/rpcbind -w
root        485  0.0  0.0  52852   320 ?        Ss   Nov16   0:00 /usr/sbin/smartd -n -q never
dbus        492  0.0  0.0  58700  1328 ?        Ss   Nov16   0:10 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
root        494  0.0  0.0 195208     0 ?        Ssl  Nov16   0:00 /usr/sbin/gssproxy -D
nscd        502  0.0  0.0 994492  1388 ?        Ssl  Nov16   0:18 /usr/sbin/nscd
root        515  0.0  0.0   4388     4 ?        Ss   Nov16   0:00 /usr/sbin/acpid
root        519  0.0  0.1 224148  3088 ?        Ss   Nov16   0:00 queueprocd - waiting up to 60s to process a task
root        545  0.0  0.0 124480   424 ?        Ss   Nov16   0:00 /usr/sbin/crond -n
root      93318  0.0  0.0 183052     4 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      93348  0.0  0.0 113284     0 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      93349  0.0  0.0 108056     0 ?        S    01:00   0:00  |       \_ sleep 4h 32m
root      72607  0.0  0.0 183048  2148 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      72688  0.0  0.0 113284  1212 ?        Ss   04:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      72704  0.0  0.0 108052   352 ?        S    04:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      72716  0.0  0.0 113288  1516 ?        S    04:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      72809  0.0  0.0 153840  2096 ?        R    04:30   0:00  |               \_ ps auxf
root      72608  0.0  0.0 183048  2144 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      72692  0.0  0.0  20164   808 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      72609  0.0  0.0 183048  2144 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      72696  0.0  0.0  20164   808 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      72610  0.0  0.0 183048  2144 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      72689  0.0  0.0  20164   808 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      72612  0.0  0.0 183048  2144 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      72679  0.0  0.0  20164   992 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      72810  0.0  0.2  38384  5272 ?        R    04:30   0:00  |       \_ /usr/local/cpanel/bin/setupvirtfs 1014
root      72613  0.0  0.0 183048  2144 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      72698  0.0  0.0  20164   804 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      72614  0.0  0.0 183048  2144 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      72697  0.0  0.0  20164   808 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      72615  0.0  0.0 183048  2144 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      72687  0.0  0.0  20164   808 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      72616  0.0  0.0 183048  2144 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      72685  0.0  0.0  20164   804 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      72617  0.0  0.0 183048  2144 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      72700  0.0  0.0  20164   804 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      72618  0.0  0.0 183048  2144 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      72695  0.0  0.0  20164   808 ?        Ss   04:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      72621  0.0  0.0 183048  2148 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      72682  0.0  0.0 113284  1212 ?        Ss   04:30   0:00  |   \_ /bin/sh -c /usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache
root      72714  5.0  0.5 188860 12952 ?        R    04:30   0:00  |       \_ /usr/local/cpanel/bin/update_db_cache
root      72622  0.0  0.0 183048  2148 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      72693  0.0  0.0 113284  1212 ?        Ss   04:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      72705  1.0  0.4 188212 11104 ?        S    04:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      72760  0.0  0.0 160224  2368 ?        S    04:30   0:00  |           \_ top -n 2 -b -c
root      72623  0.0  0.0 183048  2148 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      72691  0.0  0.0  20164   968 ?        Ss   04:30   0:00  |   \_ jailshell (pactpay) [72726] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   72726  0.0  0.0  20164   260 ?        S    04:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   72729  2.0  0.7 480124 17688 ?        S    04:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      72625  0.0  0.0 183048  2144 ?        S    04:30   0:00  \_ /usr/sbin/CROND -n
root      72680  0.0  0.0  20164   968 ?        Ss   04:30   0:00      \_ jailshell (nigeria) [72719] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   72719  0.0  0.0  20164   260 ?        S    04:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   72730  5.0  0.6 404052 16136 ?        S    04:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        546  0.0  0.0  24208     4 ?        Ss   Nov16   0:00 /usr/sbin/atd -f
root        555  0.0  0.0 114704     0 ttyS0    Ss+  Nov16   0:00 /bin/bash
root        556  0.0  0.0 108296     4 tty1     Ss+  Nov16   0:00 /sbin/agetty --noclear tty1 linux
mailnull    625  0.0  0.1  89120  3604 ?        Ss   Nov16   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        911  0.0  0.0 111304   356 ?        Ss   Nov16   0:02 /usr/sbin/sshd -D
root      72089  0.0  0.1 111304  4264 ?        Ss   04:29   0:00  \_ sshd: [accepted]
root      72575  0.0  0.1 111304  4448 ?        Ss   04:29   0:00  \_ sshd: [accepted]
sshd      72576  0.0  0.1 115644  2632 ?        S    04:29   0:00  |   \_ sshd: [net]
root      72801  0.0  0.1 111304  4272 ?        Ss   04:30   0:00  \_ sshd: [accepted]
sshd      72802  0.0  0.1 115644  2632 ?        S    04:30   0:00      \_ sshd: [net]
systuser    912  0.0  0.0 113016    32 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        917  0.0  0.1 273744  3716 ?        Ssl  Nov16   0:05 /usr/sbin/rsyslogd -n
named       918  0.0  1.2 1185864 30996 ?       Ssl  Nov16   0:12 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        919  0.1 21.8 1828136 529120 ?      Ssl  Nov16   0:35 /usr/local/cpanel/3rdparty/bin/clamd -F
systuser    924  0.0  0.0  10388     8 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        925  0.0  0.0  51508   456 ?        Ss   Nov16   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1080  0.0  0.0  46912  2056 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1081  0.0  0.1  47608  2460 ?        S    Nov16   0:00  \_ dovecot/imap-login
dovecot    1082  0.0  0.0  10320   280 ?        S    Nov16   0:00  \_ dovecot/anvil
root       1083  0.0  0.0  10452   604 ?        S    Nov16   0:00  \_ dovecot/log
dovenull   1084  0.0  0.0  46984   724 ?        S    Nov16   0:00  \_ dovecot/pop3-login
dovenull   1085  0.0  0.1  47564  2476 ?        S    Nov16   0:00  \_ dovecot/imap-login
root       1091  0.0  0.0  24528  1972 ?        S    Nov16   0:00  \_ dovecot/config
dovecot    1095  0.0  0.0  13568   552 ?        S    Nov16   0:00  \_ dovecot/stats
dovecot    1160  0.0  0.0  41160  1396 ?        S    Nov16   0:00  \_ dovecot/auth
root        926  0.0  0.0 572372   784 ?        Ssl  Nov16   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root        928  0.0  0.0 445028   588 ?        Ss   Nov16   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  72281  0.0  0.0 445028   312 ?        S    04:29   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        937  0.0  0.0 439788   368 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
systuser    938  0.0  0.5 114016 13588 ?        Ssl  Nov16   0:04 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        939  0.0  0.2 261296  6492 ?        Ss   Nov16   0:04 cpsrvd (SSL) - waiting for connections                   
root      72804  0.0  0.0      0     0 ?        Z    04:30   0:00  \_ [cpsrvd (SSL) - ] <defunct>
root      72806  0.0  0.3 261296  7592 ?        S    04:30   0:00  \_ webmaild - serving 148.113.221.28
root        943  0.1  0.1 1277312 3688 ?        Ssl  Nov16   0:20 /usr/bin/checkstatus
root        944  0.1  0.2 1276356 6404 ?        Ssl  Nov16   0:24 /usr/bin/cspdaemon
cpanelc+    947  0.0  0.1  10416  3308 ?        Ss   Nov16   0:15 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        952  0.0  0.0 396248   300 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        957  0.0  0.0 388892   548 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
systuser    962  0.0  0.0  14068    36 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    963  0.0  1.4 5654048 34988 ?       SLsl Nov16   0:10 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        964  0.0  0.0 153404   220 ?        Ss   Nov16   0:00 pure-ftpd (SERVER)
root        967  0.0  0.0 400740   776 ?        Ss   Nov16   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
systuser    968  0.0  0.0 112524    32 ?        Ssl  Nov16   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    969  0.0  0.0 342400     0 ?        Ssl  Nov16   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        974  0.0  0.0 389508   260 ?        Ss   Nov16   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root       1123  0.0  0.1 248032  3568 ?        Ss   Nov16   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       8393  0.0  1.8 266004 45068 ?        S    Nov16   0:04  \_ spamd child
root       8394  0.0  0.0 248032  2112 ?        S    Nov16   0:00  \_ spamd child
systuser   1168  0.0  0.1 157704  2968 ?        S    Nov16   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1176  0.0  0.1 387556  3332 ?        Ss   Nov16   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1177  0.0  0.4 412368  9844 ?        Ss   Nov16   0:06 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1211  0.0  0.4 209308  9836 ?        Ss   Nov16   0:02 tailwatchd
root       1213  0.0  0.2 183900  6072 ?        Ss   Nov16   0:01 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1216  0.0  0.0 167452  1212 ?        Ss   Nov16   0:00 dnsadmin - dormant mode
root       1627  0.0  0.0 299272   488 ?        Ss   Nov16   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1673  0.0  0.0 130416  1356 ?        SN   Nov16   0:00 cpanellogd - sleeping for logs
root       1928  0.0  0.2 266984  4956 ?        Ss   Nov16   0:02 /usr/sbin/httpd -k start
root       1932  0.0  0.0  12820   324 ?        S    Nov16   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1933  0.0  0.0  12732   288 ?        S    Nov16   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1934  0.0  0.0  12860   332 ?        S    Nov16   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1939  0.0  0.0  53256     4 ?        S    Nov16   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    57432  0.1  0.8 277740 19760 ?        S    04:14   0:01  \_ /usr/sbin/httpd -k start
nobody    57555  0.1  0.8 277684 19488 ?        S    04:14   0:01  \_ /usr/sbin/httpd -k start
nobody    59312  0.1  0.8 277680 19456 ?        S    04:16   0:01  \_ /usr/sbin/httpd -k start
nobody    60272  0.1  0.8 277676 19912 ?        S    04:17   0:01  \_ /usr/sbin/httpd -k start
nobody    60853  0.1  0.8 277680 19440 ?        S    04:18   0:01  \_ /usr/sbin/httpd -k start
nobody    61742  0.1  0.7 277756 19068 ?        S    04:19   0:01  \_ /usr/sbin/httpd -k start
nobody    62896  0.0  0.8 277680 19388 ?        S    04:20   0:00  \_ /usr/sbin/httpd -k start
nobody    64149  0.1  0.7 277552 19120 ?        S    04:21   0:00  \_ /usr/sbin/httpd -k start
cloudw    72752  1.0  0.6 353712 15976 ?        S    04:30   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    65763  0.1  0.8 277744 19428 ?        S    04:22   0:00  \_ /usr/sbin/httpd -k start
nobody    66789  0.0  0.7 277680 18152 ?        S    04:23   0:00  \_ /usr/sbin/httpd -k start
nobody    66790  0.1  0.7 277872 19144 ?        S    04:23   0:00  \_ /usr/sbin/httpd -k start
nobody    67662  0.1  0.7 277756 18664 ?        S    04:24   0:00  \_ /usr/sbin/httpd -k start
nobody    68448  0.1  0.7 277744 18816 ?        S    04:25   0:00  \_ /usr/sbin/httpd -k start
nobody    68463  0.1  0.7 277480 18328 ?        S    04:25   0:00  \_ /usr/sbin/httpd -k start
nobody    69133  0.1  0.7 277688 18508 ?        S    04:26   0:00  \_ /usr/sbin/httpd -k start
nobody    69152  0.1  0.7 277744 18872 ?        S    04:26   0:00  \_ /usr/sbin/httpd -k start
nobody    70482  0.1  0.7 277744 18500 ?        S    04:27   0:00  \_ /usr/sbin/httpd -k start
nobody    70600  0.1  0.7 277744 18308 ?        S    04:27   0:00  \_ /usr/sbin/httpd -k start
nobody    70635  0.1  0.7 277884 17964 ?        S    04:27   0:00  \_ /usr/sbin/httpd -k start
nobody    70651  0.1  0.7 277880 18608 ?        S    04:27   0:00  \_ /usr/sbin/httpd -k start
nobody    71498  0.1  0.7 277884 18264 ?        S    04:28   0:00  \_ /usr/sbin/httpd -k start
nobody    71624  0.0  0.7 277744 17488 ?        S    04:28   0:00  \_ /usr/sbin/httpd -k start
mysql      2639  1.3 11.3 1468028 274496 ?      Sl   Nov16   4:20 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  40045  0.0  0.0   3148    16 ?        Ss   00:00   0:00 [kworker]
oysipao+  40049  0.0  0.0   3152    44 ?        S    00:00   0:00  \_ [kworker]
root      40218  0.1  0.3 182760  9560 ?        Ss   00:00   0:16 lfd - sleeping
root      10515  0.0  0.1 132964  2804 ?        SN   03:25   0:00 ConfigServer Version Check
root      10528  0.0  0.0 108056    28 ?        SN   03:25   0:00  \_ sleep 16186
## mysql stats
Uptime: 18628  Threads: 3  Questions: 1504799  Slow queries: 0  Opens: 8777  Flush tables: 1  Open tables: 2000  Queries per second avg: 80.781
*************************** 1. row ***************************
     Id: 21262
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: starting
   Info: NULL
*************************** 2. row ***************************
     Id: 21267
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 21275
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.137.160 TIME_WAIT
      1 142.147.189.60 TIME_WAIT
      1 142.44.228.22 TIME_WAIT
      1 148.113.130.64 TIME_WAIT
      1 148.113.130.87 TIME_WAIT
      1 173.199.190.174 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 192.178.4.99 TIME_WAIT
      1 ::1 TIME_WAIT
      1 204.93.184.114 TIME_WAIT
      1 213.201.148.34 TIME_WAIT
      1 2.56.75.202 TIME_WAIT
      1 37.139.53.80 TIME_WAIT
      1 47.128.29.75 TIME_WAIT
      1 47.128.57.254 TIME_WAIT
      1 47.128.97.20 TIME_WAIT
      1 54.39.89.187 TIME_WAIT
      1 66.240.236.13 TIME_WAIT
      1 66.249.64.11 TIME_WAIT
      2 101.53.245.15 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 5.135.43.82 TIME_WAIT
      2 78.157.49.100 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Monday, 17-Nov-2025 04:30:02 WAT
   Restart Time: Sunday, 16-Nov-2025 23:18:49 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 5 hours 11 minutes 12 seconds
   Server load: 3.16 1.43 0.91
   Total accesses: 110978 - Total Traffic: 2.8 GB - Total Duration: 56956865
   CPU Usage: u9.81 s6.11 cu1512.78 cs1249.13 - 14.9% CPU load
   5.94 requests/sec - 155.9 kB/second - 26.2 kB/request - 513.227 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

KRWKKKKKKK___.._K..__._K_KK.....................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur   Conn  Child  Slot      Client     Protocol         VHost                             Request
   0-0  70600 1/39/4914  K 0.95 1     345 2587065 33.9  1.07  124.19 192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=3801915414 HTTP/1.1
   1-0  69133 0/66/4371  R 1.80 4     346 2326376 0.0   1.99  128.30 74.208.183.129 http/1.1 cloudware.ng:443
   2-0  65763 0/99/4790  W 2.59 0     0   2289056 0.0   2.15  115.74 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   3-0  71624 2/12/4629  K 0.23 2     256 2287978 65.6  0.18  114.82 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=1541055286 HTTP/1.1
   4-0  59312 2/180/4597 K 4.82 3     305 2216148 69.6  6.39  119.51 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=4091468035 HTTP/1.1
   5-0  66789 1/72/4251  K 1.81 1     393 2118531 34.5  1.70  111.00 192.178.4.97   http/1.1 team.cloudware.ng:443  GET /?l=134623899 HTTP/1.1
   6-0  61742 1/183/4523 K 4.76 1     483 2264520 223.2 4.87  117.18 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /vendor/twig/twig/lib/Twig/Node/ HTTP/1.1
   7-0  57432 1/269/4340 K 6.36 1     350 2216949 34.3  6.51  110.29 192.178.4.96   http/1.1 team.cloudware.ng:443  GET /?l=3435452861 HTTP/1.1
   8-0  69152 6/69/4332  K 1.81 3     273 2088430 185.1 1.92  106.05 192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=1293215685 HTTP/1.1
   9-0  64149 5/146/4318 K 3.76 0     491 2198848 158.2 3.88  111.43 192.178.4.96   http/1.1 team.cloudware.ng:443  GET /?l=717114025 HTTP/1.1
   10-0 67662 0/91/4347  _ 2.41 1     313 2213094 0.0   2.57  113.71 192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=4153742316 HTTP/1.1
   11-0 66790 0/73/4061  _ 1.66 0     0   2077587 0.0   1.82  101.10 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET /whm-server-status HTTP/1.0
   12-0 62896 0/108/4024 _ 2.25 0     364 2068549 0.0   3.10  104.54 192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=970353908 HTTP/1.1
   13-0 -     0/0/4176   . 0.00 15    0   2151164 0.0   0.00  105.15 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   14-0 -     0/0/3851   . 0.00 16    0   1980818 0.0   0.00  99.68  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-0 68448 0/72/3781  _ 1.69 0     0   1951636 0.0   1.86  98.07  ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   16-0 57555 2/330/4158 K 8.35 4     254 2081345 65.4  5.59  104.08 192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=1045934758 HTTP/1.1
   17-0 -     0/0/3839   . 0.00 37    0   1994432 0.0   0.00  102.24 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   18-0 -     0/0/3505   . 0.00 45    0   1819771 0.0   0.00  92.89  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-0 71498 0/17/3203  _ 0.33 0     344 1646824 0.0   0.36  84.67  192.178.4.103  http/1.1 team.cloudware.ng:443  GET /?l=3254204421 HTTP/1.1
   20-0 68463 0/74/3459  _ 1.80 0     262 1730261 0.0   1.75  83.96  192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=3697681208 HTTP/1.1
   21-0 -     0/0/2972   . 0.00 42    0   1615544 0.0   0.00  81.70  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-0 70482 0/41/2473  _ 1.09 0     306 1467869 0.0   1.15  59.59  192.178.4.99   http/1.1 team.cloudware.ng:443  GET /?l=2096791832 HTTP/1.1
   23-0 70635 1/33/2590  K 0.91 0     369 1264743 34.8  1.16  68.20  66.249.64.173  http/1.1 team.cloudware.ng:443  GET /?l=4166880164 HTTP/1.1
   24-0 60853 0/199/2547 _ 5.23 0     273 1318071 0.0   6.80  67.69  192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=311858548 HTTP/1.1
   25-0 70651 5/38/1771  K 0.93 4     24  1137257 8.6   0.93  45.97  66.249.70.7    http/1.1 test.cloudware.ng:443  GET /1571041907?goodscode=1568983638 HTTP/1.1
   26-0 60272 4/215/1710 K 5.10 3     285 821349  127.5 6.09  39.57  192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=955015873 HTTP/1.1
   27-0 -     0/0/1168   . 0.00 17    0   882149  0.0   0.00  30.56  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/1362   . 0.00 739   0   694441  0.0   0.00  33.04  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/667    . 0.00 677   0   330377  0.0   0.00  16.20  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/1288   . 0.00 492   0   633597  0.0   0.00  30.22  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/774    . 0.00 585   0   357622  0.0   0.00  17.29  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/317    . 0.00 990   0   125012  0.0   0.00  6.04   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/273    . 0.00 711   0   134022  0.0   0.00  7.31   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/355    . 0.00 2595  0   184428  0.0   0.00  9.27   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/586    . 0.00 2812  0   324653  0.0   0.00  16.02  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/239    . 0.00 2632  0   125237  0.0   0.00  6.18   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/370    . 0.00 2825  0   194052  0.0   0.00  9.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/160    . 0.00 2760  0   86409   0.0   0.00  4.07   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/427    . 0.00 2815  0   221231  0.0   0.00  11.39  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/128    . 0.00 2690  0   35694   0.0   0.00  2.32   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/34     . 0.00 2691  0   15628   0.0   0.00  0.83   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/43     . 0.00 14633 0   22487   0.0   0.00  0.98   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/114    . 0.00 14777 0   52913   0.0   0.00  2.30   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/661    . 0.00 12418 0   366544  0.0   0.00  17.77  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/42     . 0.00 14782 0   19040   0.0   0.00  0.83   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/11     . 0.00 14754 0   5124    0.0   0.00  0.16   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/20     . 0.00 14715 0   7973    0.0   0.00  0.58   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   48-0 -     0/0/83     . 0.00 14466 0   40607   0.0   0.00  1.94   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   49-0 -     0/0/37     . 0.00 14770 0   18588   0.0   0.00  0.72   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   50-0 -     0/0/7      . 0.00 14764 0   3381    0.0   0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   51-0 -     0/0/9      . 0.00 14738 0   3457    0.0   0.00  0.11   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   52-0 -     0/0/2      . 0.00 17474 0   1702    0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   53-0 -     0/0/7      . 0.00 17449 0   2649    0.0   0.00  0.07   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   54-0 -     0/0/2      . 0.00 17473 0   1806    0.0   0.00  0.01   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   55-0 -     0/0/27     . 0.00 17394 0   13156   0.0   0.00  0.55   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   56-0 -     0/0/189    . 0.00 16640 0   98784   0.0   0.00  5.53   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   57-0 -     0/0/44     . 0.00 17334 0   19861   0.0   0.00  0.82   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1660
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 1...18)
   index usage: 29%, cache usage: 39%
   total entries stored since starting: 83865
   total entries replaced since starting: 0
   total entries expired since starting: 82188
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 18 hit, 322 miss
   total removes since starting: 17 hit, 16 miss
Youez - 2016 - github.com/yon3zu
LinuXploit