403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-19.11.30.txt
 ## swap threshold exceeded
## server overview
2025-11-19.11.30 load[0] mem[75/55] mysql[6/10] httpd[23]
              total        used        free      shared  buff/cache   available
Mem:           2363        1685          90          48         587         468
Swap:          1999        1191         808
 11:30:02 up  1:30,  0 users,  load average: 0.93, 2.69, 1.70
## system overview
top - 11:30:02 up  1:30,  0 users,  load average: 0.93, 2.69, 1.70
Tasks: 219 total,   4 running, 214 sleeping,   0 stopped,   1 zombie
%Cpu(s): 75.8 us, 21.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  3.0 si,  0.0 st
KiB Mem :  2420300 total,    80132 free,  1730132 used,   610036 buff/cache
KiB Swap:  2047996 total,   828216 free,  1219780 used.   475760 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1748 mysql     20   0 1464896 224104   2640 S 120.0  9.3   1:26.88 /usr/sbin+
 76832 nigeria   20   0  404052  16140  10384 S  13.3  0.7   0:00.05 /opt/cpan+
 76857 root      20   0  160224   2388   1636 S   6.7  0.1   0:00.01 top -n 2 +
 76906 cloudw    20   0  353712  15972  10492 S   6.7  0.7   0:00.01 /opt/cpan+
     1 root      20   0   44276   3328   1460 R   0.0  0.1   0:08.85 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.39 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.28 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:05.22 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.01 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.26 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.16 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:12.13 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.12 [kauditd]
   237 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   260 root       0 -20       0      0      0 S   0.0  0.0   0:01.16 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:01.27 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:00.41 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   356 root      20   0   40244   3768   3468 S   0.0  0.2   0:03.40 /usr/lib/+
   387 root      20   0   45352    316    172 S   0.0  0.0   0:00.36 /usr/lib/+
   406 root      16  -4   55532    392    264 S   0.0  0.0   0:00.53 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   479 polkitd   20   0  612240   2976    480 S   0.0  0.1   0:00.84 /usr/lib/+
   480 root      20   0   52852    400    304 S   0.0  0.0   0:00.01 /usr/sbin+
   481 root      20   0  152780    168    124 S   0.0  0.0   0:00.00 /usr/sbin+
   482 root      20   0  224276   7308   1240 S   0.0  0.3   0:00.22 queueproc+
   486 root      20   0   21540    428    316 S   0.0  0.0   0:00.12 /usr/sbin+
   492 dbus      20   0   58724   1444    704 S   0.0  0.1   0:03.04 /usr/bin/+
   495 rpc       20   0   69256    232    128 S   0.0  0.0   0:00.01 /sbin/rpc+
   498 root      20   0    4388    108    104 S   0.0  0.0   0:00.00 /usr/sbin+
   510 root      20   0   24704   1172    804 S   0.0  0.0   0:01.37 /usr/lib/+
   515 nscd      20   0 1371420   2532    668 S   0.0  0.1   0:04.83 /usr/sbin+
   521 root      20   0  195208     12     12 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  124480    468    336 S   0.0  0.0   0:00.16 /usr/sbin+
   556 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   579 root      20   0  114704    104    104 S   0.0  0.0   0:00.02 /bin/bash
   580 root      20   0  108296    144    140 S   0.0  0.0   0:00.00 /sbin/age+
   616 mailnull  20   0   90820   3640    580 S   0.0  0.2   0:00.19 /usr/sbin+
   638 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   670 root       0 -20       0      0      0 S   0.0  0.0   0:02.35 [loop0]
   747 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   748 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   910 systuser  20   0   12660     52      0 S   0.0  0.0   0:00.00 /usr/loca+
   911 telegraf  20   0 5654304  37592   5740 S   0.0  1.6   0:03.34 /usr/loca+
   913 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   914 root      20   0   51508    596    412 S   0.0  0.0   0:00.09 /usr/sbin+
   915 systuser  20   0  111864   1568      0 S   0.0  0.1   0:00.00 /usr/loca+
   916 memcach+  20   0  342400    184    184 S   0.0  0.0   0:00.12 /usr/bin/+
   917 root      20   0  153404    352    268 S   0.0  0.0   0:00.12 pure-ftpd+
   918 systuser  20   0  113676   1872      0 S   0.0  0.1   0:00.00 /usr/loca+
   919 root      20   0  572372   1000    408 S   0.0  0.0   0:00.56 /usr/bin/+
   920 systuser  20   0  114016  13604   2552 S   0.0  0.6   0:01.53 /usr/loca+
   921 root      20   0  111304    448    352 S   0.0  0.0   0:00.73 /usr/sbin+
   922 root      20   0 1349832  11528    116 S   0.0  0.5   0:26.57 /usr/bin/+
   923 root      20   0  445028   3196   3084 S   0.0  0.1   0:00.27 sw-engine+
   925 root      20   0 1277056  12260    116 S   0.0  0.5   0:29.98 /usr/bin/+
   931 root      20   0  400740   3176    668 S   0.0  0.1   0:00.96 php-fpm: +
   932 root      20   0 1836868 438960    712 S   0.0 18.1   0:17.22 /usr/loca+
   939 root      20   0  396248    632    456 S   0.0  0.0   0:00.21 php-fpm: +
   960 root      20   0  388892    580    376 S   0.0  0.0   0:00.19 php-fpm: +
   967 named     20   0 1121336  34852   1788 S   0.0  1.4   0:03.87 /usr/sbin+
   970 root      20   0  439788  11296  11088 S   0.0  0.5   0:00.25 php-fpm: +
   979 root      20   0  389508    752    536 S   0.0  0.0   0:00.22 php-fpm: +
   981 root      20   0  261020   6068   1408 S   0.0  0.3   0:00.83 cpsrvd (S+
   990 root      20   0  232784   3592   2804 S   0.0  0.1   0:01.55 /usr/sbin+
  1000 cpanelc+  20   0    9952   3188   2456 S   0.0  0.1   0:04.26 /usr/loca+
  1046 dovenull  20   0   46912   1528    940 S   0.0  0.1   0:00.06 dovecot/p+
  1047 dovenull  20   0   47300   1956    944 S   0.0  0.1   0:00.08 dovecot/i+
  1048 dovecot   20   0   10320    272    160 S   0.0  0.0   0:00.01 dovecot/a+
  1049 root      20   0   10452    464    280 S   0.0  0.0   0:00.05 dovecot/l+
  1050 dovenull  20   0   46912   1696   1044 S   0.0  0.1   0:00.09 dovecot/p+
  1051 dovenull  20   0   47136   1924   1028 S   0.0  0.1   0:00.04 dovecot/i+
  1058 root      20   0   24528   1840    224 S   0.0  0.1   0:00.09 dovecot/c+
  1062 dovecot   20   0   13568    580    356 S   0.0  0.0   0:00.01 dovecot/s+
  1089 systuser  20   0  157708   2832    804 S   0.0  0.1   0:00.05 SonarPush+
  1108 dovecot   20   0   41168   1284    812 S   0.0  0.1   0:00.13 dovecot/a+
  1148 wp-tool+  20   0  412368  32220   1532 S   0.0  1.3   0:01.92 /usr/bin/+
  1149 wp-tool+  20   0  387528  13096   1472 S   0.0  0.5   0:00.14 /usr/bin/+
  1235 root      20   0  167452   1404    800 S   0.0  0.1   0:00.12 dnsadmin +
  1236 root      20   0  209604  20020   2296 S   0.0  0.8   0:01.09 tailwatchd
  1237 root      20   0  262224  24696   6768 S   0.0  1.0   0:00.28 cpdavd - +
  1705 root      20   0  299272    804    424 S   0.0  0.0   0:00.14 php-fpm: +
  1711 root      38  18  130416   1424    700 S   0.0  0.1   0:00.01 cpanellog+
  1966 root      20   0  266992   8064    692 S   0.0  0.3   0:00.73 /usr/sbin+
  1968 root      20   0   12808    452    320 S   0.0  0.0   0:00.65 /usr/loca+
  1969 root      20   0   12732    328    256 S   0.0  0.0   0:00.56 /usr/loca+
  1970 root      20   0   12840    376    264 S   0.0  0.0   0:00.61 /usr/loca+
  1973 root      20   0   53340    152    152 S   0.0  0.0   0:00.04 /usr/loca+
  1979 root      20   0  181576  10392   1192 S   0.0  0.4   0:04.81 lfd - sle+
  2209 worencom  20   0   38492   1500    512 S   0.0  0.1   0:00.07 dovecot/i+
  3973 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  3989 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.11 [kworker]
 29325 root      20   0       0      0      0 S   0.0  0.0   0:00.49 [kworker/+
 44791 root      20   0  248112 119880   3188 S   0.0  5.0   0:03.15 /usr/loca+
 45797 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 47642 root      20   0  266596 130144   1948 S   0.0  5.4   0:14.98 spamd chi+
 47643 root      20   0  260192 125872   1936 S   0.0  5.2   0:08.23 spamd chi+
 49412 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 57815 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 60017 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 64812 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 67028 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
 68695 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 69212 nobody    20   0  277892  20248   4740 S   0.0  0.8   0:00.87 /usr/sbin+
 70599 nobody    20   0  277760  19928   4632 S   0.0  0.8   0:00.63 /usr/sbin+
 71341 nobody    20   0  277760  19916   4656 S   0.0  0.8   0:00.60 /usr/sbin+
 71342 nobody    20   0  277512  19472   4480 S   0.0  0.8   0:00.48 /usr/sbin+
 71343 nobody    20   0  277512  19720   4596 S   0.0  0.8   0:00.55 /usr/sbin+
 71777 nobody    20   0  277512  19584   4572 S   0.0  0.8   0:00.59 /usr/sbin+
 71873 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72709 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72799 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 73266 nobody    20   0  277512  19264   4272 S   0.0  0.8   0:00.51 /usr/sbin+
 74157 nobody    20   0  277904  19628   4392 S   0.0  0.8   0:00.36 /usr/sbin+
 74279 nobody    20   0  277760  19268   4076 S   0.0  0.8   0:00.30 /usr/sbin+
 74341 nobody    20   0  277512  19240   4212 S   0.0  0.8   0:00.26 /usr/sbin+
 75008 nobody    20   0  277784  19020   3808 S   0.0  0.8   0:00.24 /usr/sbin+
 75014 nobody    20   0  277904  19364   4144 S   0.0  0.8   0:00.18 /usr/sbin+
 75015 nobody    20   0  277892  19260   4084 S   0.0  0.8   0:00.24 /usr/sbin+
 75622 nobody    20   0  277712  19008   3856 S   0.0  0.8   0:00.11 /usr/sbin+
 75645 nobody    20   0  277912  18860   3688 S   0.0  0.8   0:00.17 /usr/sbin+
 75678 nobody    20   0  277860  18860   3748 S   0.0  0.8   0:00.06 /usr/sbin+
 75738 nobody    20   0  277708  18580   3476 S   0.0  0.8   0:00.15 /usr/sbin+
 75748 nobody    20   0  277052  15612   1320 S   0.0  0.6   0:00.00 /usr/sbin+
 75757 nobody    20   0  277904  18732   3564 S   0.0  0.8   0:00.09 /usr/sbin+
 75758 nobody    20   0  277760  19200   4036 S   0.0  0.8   0:00.10 /usr/sbin+
 75759 nobody    20   0  277576  17740   2976 S   0.0  0.7   0:00.00 /usr/sbin+
 75760 nobody    20   0  277920  18972   3796 S   0.0  0.8   0:00.12 /usr/sbin+
 76137 nobody    20   0  277780  19360   4152 S   0.0  0.8   0:00.09 /usr/sbin+
 76147 nobody    20   0  277928  18864   3724 S   0.0  0.8   0:00.06 /usr/sbin+
 76148 nobody    20   0  277860  18520   3384 S   0.0  0.8   0:00.06 /usr/sbin+
 76289 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 76492 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 76614 nigeria   20   0  483560  20392   6204 S   0.0  0.8   0:00.21 php-fpm: +
 76654 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 76669 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 76690 root      20   0  162436   5832   4340 S   0.0  0.2   0:00.01 sshd: roo+
 76691 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: roo+
 76701 workflo+  20   0  524940  59308   6068 S   0.0  2.5   0:00.24 php-fpm: +
 76705 workflo+  20   0  522608  56272   4412 S   0.0  2.3   0:00.20 php-fpm: +
 76707 root      20   0  162436   5832   4340 S   0.0  0.2   0:00.01 sshd: roo+
 76708 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 76746 nigeria   20   0  419612  26384   3904 S   0.0  1.1   0:00.19 php-fpm: +
 76747 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 76748 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 76752 root      20   0  183052   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76753 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76754 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 76755 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 76756 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 76757 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 76759 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 76760 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 76761 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 76762 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 76764 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 76766 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 76767 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76768 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 76770 root      20   0  183048   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 76780 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 76781 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 76782 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 76783 root      20   0   20164    812    632 S   0.0  0.0   0:00.00 /usr/loca+
 76785 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 76786 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 76787 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 76788 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 76790 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 76791 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 76792 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 76793 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 76794 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 76795 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 76797 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 76800 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 76801 root      20   0  188216  11100   5148 S   0.0  0.5   0:00.02 /usr/loca+
 76808 root      20   0  113284   1480   1256 S   0.0  0.1   0:00.00 bash /usr+
 76809 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 76814 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 76817 pactpay   20   0  480124  17684  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 76827 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 76896 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 76908 cloudw    20   0  284176  11168   7756 R   0.0  0.5   0:00.00 /opt/cpan+
 76910 root      20   0  113284    608    380 S   0.0  0.0   0:00.00 bash /usr+
 76912 root      20   0  113284    228      0 R   0.0  0.0   0:00.00 bash /usr+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:59   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    09:59   0:05  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:59   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [watchdogd]
root         36  0.2  0.0      0     0 ?        S    09:59   0:12  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:59   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:59   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [deferwq]
root        104  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [kauditd]
root        237  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [ata_sff]
root        249  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [scsi_eh_0]
root        250  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [scsi_eh_1]
root        252  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [ttm_swap]
root        260  0.0  0.0      0     0 ?        S<   09:59   0:01  \_ [kworker/0:1H]
root        265  0.0  0.0      0     0 ?        S<   09:59   0:01  \_ [kworker/1:1H]
root        275  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [xprtiod]
root        638  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [kvm-irqfd-clean]
root        670  0.0  0.0      0     0 ?        S<   09:59   0:02  \_ [loop0]
root        747  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [jbd2/loop0-8]
root        748  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [ext4-rsv-conver]
root      29325  0.0  0.0      0     0 ?        S    10:31   0:00  \_ [kworker/u200:1]
root      45797  0.0  0.0      0     0 ?        S    10:51   0:00  \_ [kworker/1:0]
root      49412  0.0  0.0      0     0 ?        S    10:56   0:00  \_ [kworker/0:2]
root      57815  0.0  0.0      0     0 ?        S    11:06   0:00  \_ [kworker/0:0]
root      60017  0.0  0.0      0     0 ?        S    11:09   0:00  \_ [kworker/1:3]
root      64812  0.0  0.0      0     0 ?        S    11:15   0:00  \_ [kworker/1:1]
root      67028  0.0  0.0      0     0 ?        S    11:18   0:00  \_ [kworker/0:1]
root      68695  0.0  0.0      0     0 ?        S    11:20   0:00  \_ [kworker/0:4]
root      71873  0.0  0.0      0     0 ?        S    11:24   0:00  \_ [kworker/u200:2]
root      72709  0.0  0.0      0     0 ?        S    11:25   0:00  \_ [kworker/1:2]
root      72799  0.0  0.0      0     0 ?        S    11:25   0:00  \_ [kworker/0:3]
root          1  0.1  0.1  44276  3328 ?        Ss   09:59   0:08 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.1  40244  3768 ?        Ss   09:59   0:03 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   316 ?        Ss   09:59   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   392 ?        S<sl 09:59   0:00 /sbin/auditd
polkitd     479  0.0  0.1 612240  2976 ?        Ssl  09:59   0:00 /usr/lib/polkit-1/polkitd --no-debug
root        480  0.0  0.0  52852   400 ?        Ss   09:59   0:00 /usr/sbin/smartd -n -q never
root        481  0.0  0.0 152780   168 ?        Ss   09:59   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        482  0.0  0.3 224276  7308 ?        Ss   09:59   0:00 queueprocd - waiting up to 60s to process a task
root        486  0.0  0.0  21540   428 ?        Ss   09:59   0:00 /usr/sbin/irqbalance --foreground
dbus        492  0.0  0.0  58724  1444 ?        Ss   09:59   0:03 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         495  0.0  0.0  69256   232 ?        Ss   09:59   0:00 /sbin/rpcbind -w
root        498  0.0  0.0   4388   108 ?        Ss   09:59   0:00 /usr/sbin/acpid
root        510  0.0  0.0  24704  1172 ?        Ss   09:59   0:01 /usr/lib/systemd/systemd-logind
nscd        515  0.0  0.1 1371420 2532 ?        Ssl  09:59   0:04 /usr/sbin/nscd
root        521  0.0  0.0 195208    12 ?        Ssl  09:59   0:00 /usr/sbin/gssproxy -D
root        552  0.0  0.0 124480   468 ?        Ss   09:59   0:00 /usr/sbin/crond -n
root      76752  0.0  0.0 183052  2148 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      76793  0.0  0.0 113284  1208 ?        Ss   11:30   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      76808  0.0  0.0 114252  2400 ?        S    11:30   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      76753  0.0  0.0 183048  2148 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      76782  0.0  0.0 113284  1208 ?        Ss   11:30   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      76800  0.0  0.0 108052   356 ?        S    11:30   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      76809  0.0  0.0 113288  1516 ?        S    11:30   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      76913  0.0  0.0 153840  2096 ?        R    11:30   0:00  |               \_ ps auxf
root      76754  0.0  0.0 183048  2152 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      76788  0.0  0.0  20164   808 ?        Ss   11:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      76755  0.0  0.0 183048  2152 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      76783  0.0  0.0  20164   812 ?        Ss   11:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      76756  0.0  0.0 183048  2152 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      76791  0.0  0.0  20164   804 ?        Ss   11:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      76757  0.0  0.0 183048  2152 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      76781  0.0  0.0  20164   808 ?        Ss   11:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      76759  0.0  0.0 183048  2152 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      76787  0.0  0.0  20164   808 ?        Ss   11:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/queue_status.php > /dev/null 2>&1
root      76760  0.0  0.0 183048  2152 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      76794  0.0  0.0  20164   804 ?        Ss   11:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      76761  0.0  0.0 183048  2152 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      76795  0.0  0.0  20164   808 ?        Ss   11:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      76762  0.0  0.0 183048  2152 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      76790  0.0  0.0  20164   804 ?        Ss   11:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      76764  0.0  0.0 183048  2148 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      76786  0.0  0.0  20164   808 ?        Ss   11:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      76766  0.0  0.0 183048  2144 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      76785  0.0  0.0  20164   984 ?        Ss   11:30   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      76767  0.0  0.0 183048  2140 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      76792  0.0  0.0 113284  1212 ?        Ss   11:30   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      76801  0.0  0.4 188216 11100 ?        S    11:30   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      76857  0.0  0.0 160224  2388 ?        S    11:30   0:00  |           \_ top -n 2 -b -c
root      76768  0.0  0.0 183048  2140 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      76797  0.0  0.0  20164   964 ?        Ss   11:30   0:00  |   \_ jailshell (pactpay) [76814] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   76814  0.0  0.0  20164   260 ?        S    11:30   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   76817  0.0  0.7 480124 17684 ?        S    11:30   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      76770  0.0  0.0 183048  2144 ?        S    11:30   0:00  \_ /usr/sbin/CROND -n
root      76780  0.0  0.0  20164   964 ?        Ss   11:30   0:00      \_ jailshell (nigeria) [76827] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   76827  0.0  0.0  20164   256 ?        S    11:30   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   76832  0.0  0.6 404052 16140 ?        R    11:30   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        556  0.0  0.0  24208     0 ?        Ss   09:59   0:00 /usr/sbin/atd -f
root        579  0.0  0.0 114704   104 ttyS0    Ss+  09:59   0:00 /bin/bash
root        580  0.0  0.0 108296   144 tty1     Ss+  09:59   0:00 /sbin/agetty --noclear tty1 linux
mailnull    616  0.0  0.1  90820  3640 ?        Ss   09:59   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    910  0.0  0.0  12660    52 ?        Ssl  09:59   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    911  0.0  1.5 5654304 37592 ?       SLsl 09:59   0:03 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    913  0.0  0.0  10132    44 ?        Ssl  09:59   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        914  0.0  0.0  51508   596 ?        Ss   09:59   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1046  0.0  0.0  46912  1528 ?        S    09:59   0:00  \_ dovecot/pop3-login
dovenull   1047  0.0  0.0  47300  1956 ?        S    09:59   0:00  \_ dovecot/imap-login
dovecot    1048  0.0  0.0  10320   272 ?        S    09:59   0:00  \_ dovecot/anvil
root       1049  0.0  0.0  10452   464 ?        S    09:59   0:00  \_ dovecot/log
dovenull   1050  0.0  0.0  46912  1696 ?        S    09:59   0:00  \_ dovecot/pop3-login
dovenull   1051  0.0  0.0  47136  1924 ?        S    09:59   0:00  \_ dovecot/imap-login
root       1058  0.0  0.0  24528  1840 ?        S    09:59   0:00  \_ dovecot/config
dovecot    1062  0.0  0.0  13568   580 ?        S    09:59   0:00  \_ dovecot/stats
dovecot    1108  0.0  0.0  41168  1284 ?        S    09:59   0:00  \_ dovecot/auth
worencom   2209  0.0  0.0  38492  1500 ?        S    10:00   0:00  \_ dovecot/imap
systuser    915  0.0  0.0 111864  1568 ?        Ssl  09:59   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
memcach+    916  0.0  0.0 342400   184 ?        Ssl  09:59   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        917  0.0  0.0 153404   352 ?        Ss   09:59   0:00 pure-ftpd (SERVER)
systuser    918  0.0  0.0 113676  1872 ?        Ssl  09:59   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        919  0.0  0.0 572372  1000 ?        Ssl  09:59   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    920  0.0  0.5 114016 13604 ?        Ssl  09:59   0:01 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        921  0.0  0.0 111304   448 ?        Ss   09:59   0:00 /usr/sbin/sshd -D
root      76289  0.0  0.1 111304  4272 ?        Ss   11:29   0:00  \_ sshd: [accepted]
root      76654  0.0  0.1 111304  4268 ?        Ss   11:29   0:00  \_ sshd: [accepted]
root      76690  0.2  0.2 162436  5832 ?        Ss   11:29   0:00  \_ sshd: root [priv]
sshd      76691  0.0  0.1 115644  2628 ?        S    11:29   0:00  |   \_ sshd: root [net]
root      76707  0.5  0.2 162436  5832 ?        Ss   11:29   0:00  \_ sshd: root [priv]
sshd      76708  0.0  0.1 115644  2628 ?        S    11:29   0:00  |   \_ sshd: root [net]
root      76747  0.0  0.1 111304  4272 ?        Ss   11:30   0:00  \_ sshd: [accepted]
sshd      76748  0.0  0.1 115644  2624 ?        S    11:30   0:00      \_ sshd: [net]
root        922  0.4  0.4 1349832 11528 ?       Ssl  09:59   0:26 /usr/bin/cspdaemon
root        923  0.0  0.1 445028  3196 ?        Ss   09:59   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  76492  0.0  0.0 445028   320 ?        S    11:29   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        925  0.5  0.5 1277056 12260 ?       Ssl  09:59   0:29 /usr/bin/checkstatus
root        931  0.0  0.1 400740  3176 ?        Ss   09:59   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   76614  1.9  0.8 483560 20392 ?        S    11:29   0:00  \_ php-fpm: pool nigeriadecide_org
workflo+  76701  8.0  2.4 524940 59308 ?        S    11:29   0:00  \_ php-fpm: pool blog_workflow-management-software_com
workflo+  76705  6.6  2.3 522608 56272 ?        S    11:29   0:00  \_ php-fpm: pool blog_workflow-management-software_com
nigeria   76746 19.0  1.0 419612 26384 ?        S    11:30   0:00  \_ php-fpm: pool nigeriadecide_org
root        932  0.3 18.1 1836868 438960 ?      Ssl  09:59   0:17 /usr/local/cpanel/3rdparty/bin/clamd -F
root        939  0.0  0.0 396248   632 ?        Ss   09:59   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        960  0.0  0.0 388892   580 ?        Ss   09:59   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
named       967  0.0  1.4 1121336 34852 ?       Ssl  09:59   0:03 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        970  0.0  0.4 439788 11296 ?        Ss   09:59   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        979  0.0  0.0 389508   752 ?        Ss   09:59   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        981  0.0  0.2 261020  6068 ?        Ss   09:59   0:00 cpsrvd (SSL) - waiting for connections                   
root      76669  0.0  0.0      0     0 ?        Z    11:29   0:00  \_ [cpaneld - servi] <defunct>
root        990  0.0  0.1 232784  3592 ?        Ssl  09:59   0:01 /usr/sbin/rsyslogd -n
cpanelc+   1000  0.0  0.1   9952  3188 ?        Ss   09:59   0:04 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1089  0.0  0.1 157708  2832 ?        S    09:59   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1148  0.0  1.3 412368 32220 ?        Ss   09:59   0:01 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1149  0.0  0.5 387528 13096 ?        Ss   09:59   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1235  0.0  0.0 167452  1404 ?        Ss   09:59   0:00 dnsadmin - dormant mode
root       1236  0.0  0.8 209604 20020 ?        Ss   09:59   0:01 tailwatchd
root       1237  0.0  1.0 262224 24696 ?        Ss   09:59   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1705  0.0  0.0 299272   804 ?        Ss   09:59   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1711  0.0  0.0 130416  1424 ?        SN   09:59   0:00 cpanellogd - sleeping for logs
mysql      1748  1.6  9.2 1464896 224104 ?      Sl   09:59   1:26 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1966  0.0  0.3 266992  8064 ?        Ss   09:59   0:00 /usr/sbin/httpd -k start
root       1968  0.0  0.0  12808   452 ?        S    09:59   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1969  0.0  0.0  12732   328 ?        S    09:59   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1970  0.0  0.0  12840   376 ?        S    09:59   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1973  0.0  0.0  53340   152 ?        S    09:59   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    69212  0.1  0.8 277892 20248 ?        S    11:20   0:00  \_ /usr/sbin/httpd -k start
nobody    70599  0.1  0.8 277760 19928 ?        S    11:22   0:00  \_ /usr/sbin/httpd -k start
nobody    71341  0.1  0.8 277760 19916 ?        S    11:23   0:00  \_ /usr/sbin/httpd -k start
nobody    71342  0.1  0.8 277512 19472 ?        S    11:23   0:00  \_ /usr/sbin/httpd -k start
nobody    71343  0.1  0.8 277512 19720 ?        S    11:23   0:00  \_ /usr/sbin/httpd -k start
nobody    71777  0.1  0.8 277512 19584 ?        S    11:24   0:00  \_ /usr/sbin/httpd -k start
nobody    73266  0.1  0.7 277512 19264 ?        S    11:25   0:00  \_ /usr/sbin/httpd -k start
nobody    74157  0.1  0.8 277904 19628 ?        S    11:26   0:00  \_ /usr/sbin/httpd -k start
nobody    74279  0.1  0.7 277760 19268 ?        S    11:26   0:00  \_ /usr/sbin/httpd -k start
cloudw    76906  0.0  0.6 353712 15972 ?        S    11:30   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    74341  0.1  0.7 277512 19240 ?        S    11:26   0:00  \_ /usr/sbin/httpd -k start
nobody    75008  0.1  0.7 277784 19020 ?        S    11:27   0:00  \_ /usr/sbin/httpd -k start
nobody    75014  0.1  0.8 277904 19364 ?        S    11:27   0:00  \_ /usr/sbin/httpd -k start
cloudw    76908  0.0  0.6 353712 15976 ?        R    11:30   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    75015  0.1  0.7 277892 19260 ?        S    11:27   0:00  \_ /usr/sbin/httpd -k start
nobody    75622  0.1  0.7 277712 19008 ?        S    11:28   0:00  \_ /usr/sbin/httpd -k start
nobody    75645  0.1  0.7 277912 18860 ?        S    11:28   0:00  \_ /usr/sbin/httpd -k start
nobody    75678  0.0  0.7 277860 18860 ?        S    11:28   0:00  \_ /usr/sbin/httpd -k start
nobody    75738  0.1  0.7 277708 18580 ?        S    11:28   0:00  \_ /usr/sbin/httpd -k start
nobody    75748  0.0  0.6 277052 15612 ?        S    11:28   0:00  \_ /usr/sbin/httpd -k start
nobody    75757  0.1  0.7 277904 18732 ?        S    11:28   0:00  \_ /usr/sbin/httpd -k start
nobody    75758  0.1  0.7 277760 19200 ?        S    11:28   0:00  \_ /usr/sbin/httpd -k start
nobody    75759  0.0  0.7 277576 17740 ?        S    11:28   0:00  \_ /usr/sbin/httpd -k start
nobody    75760  0.1  0.7 277920 18972 ?        S    11:28   0:00  \_ /usr/sbin/httpd -k start
nobody    76137  0.1  0.7 277780 19360 ?        S    11:29   0:00  \_ /usr/sbin/httpd -k start
nobody    76147  0.1  0.7 277928 18864 ?        S    11:29   0:00  \_ /usr/sbin/httpd -k start
nobody    76148  0.1  0.7 277860 18520 ?        S    11:29   0:00  \_ /usr/sbin/httpd -k start
root       1979  0.0  0.4 181576 10392 ?        Ss   09:59   0:04 lfd - sleeping
oysipao+   3973  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+   3989  0.0  0.0   3152   492 ?        S    10:01   0:00  \_ [kworker]
root      44791  0.1  4.9 248112 119880 ?       Ss   10:49   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      47642  0.6  5.3 266596 130144 ?       S    10:53   0:14  \_ spamd child
root      47643  0.3  5.2 260192 125872 ?       S    10:53   0:08  \_ spamd child
## mysql stats
Uptime: 27138  Threads: 5  Questions: 521736  Slow queries: 0  Opens: 3276  Flush tables: 1  Open tables: 2000  Queries per second avg: 19.225
*************************** 1. row ***************************
     Id: 7150
   User: workflow_wp673
   Host: localhost
     db: workflow_wp673
Command: Sleep
   Time: 2
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 7151
   User: workflow_wp673
   Host: localhost
     db: workflow_wp673
Command: Sleep
   Time: 3
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 7168
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 4. row ***************************
     Id: 7170
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 7174
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.129.22 TIME_WAIT
      1 138.226.19.170 TIME_WAIT
      1 15.235.27.116 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 185.138.88.86 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      1 51.222.95.135 TIME_WAIT
      1 95.215.0.144 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      9 112.45.117.238 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Wednesday, 19-Nov-2025 11:30:02 WAT
   Restart Time: Wednesday, 19-Nov-2025 03:57:52 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 7 hours 32 minutes 10 seconds
   Server load: 0.93 2.69 1.70
   Total accesses: 28473 - Total Traffic: 758.3 MB - Total Duration: 60478554
   CPU Usage: u5 s2.54 cu381.5 cs306.32 - 2.56% CPU load
   1.05 requests/sec - 28.6 kB/second - 27.3 kB/request - 2124.07 ms/request
   22 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

_KW_WWKRK_R.KCKRR.W...RWK..RKWR.R...............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req    Dur    Conn  Child  Slot     Client      Protocol              VHost                                          Request
   0-0  76137 0/18/1327  _ 0.58 0     8    777293   0.0   0.37  36.47 127.0.0.1       http/1.1 chs1.nescrow.com.ng:80          GET /whm-server-status HTTP/1.0
   1-0  71777 6/135/1403 K 2.07 0     322  786075   187.9 2.32  37.78 192.178.4.96    http/1.1 team.cloudware.ng:443           GET /ctg/search/similarImageSearchResultView/?ctgItemCd=352593
   2-0  75008 49/78/1375 W 0.47 0     0    780025   859.9 1.42  38.87 111.48.234.129  http/1.1 cloudware.ng:443                GET /wp-content/uploads/2019/06/lower_0001_D2GLMBRWwAACk5Y-1.pn
   3-0  74157 0/66/1273  _ 1.44 0     0    770673   0.0   1.57  33.85 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   4-0  74279 8/57/1180  W 1.18 0     0    713981   248.8 1.24  30.73 192.178.4.104   http/1.1 team.cloudware.ng:443           GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2069036
   5-0  75014 6/35/1332  W 0.62 0     0    732171   185.0 0.75  34.10 192.178.4.103   http/1.1 team.cloudware.ng:443           GET /?l=1566795541 HTTP/1.1
   6-0  71341 1/147/1272 K 2.15 3     1    734870   0.7   2.68  40.84 44.220.185.221  http/1.1 workflow-management-software.co GET / HTTP/1.1
   7-0  76147 0/10/1245  R 0.22 21    340  733147   0.0   0.26  34.31 192.178.4.101   http/1.1 team.cloudware.ng:443           GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2262101
   8-0  74341 1/61/1101  K 0.93 1     297  600374   37.2  1.04  25.48 192.178.4.98    http/1.1 team.cloudware.ng:443           GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1090479
   9-0  75015 0/42/986   _ 1.05 0     40   598984   0.0   1.10  23.89 217.113.194.15  http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php?state=Lagos&lga=Ikorodu&ward=Bai
   10-0 76148 0/11/1034  R 0.51 21    339  599271   0.0   0.30  28.51 192.178.4.98    http/1.1 team.cloudware.ng:443           GET /?l=1571977956 HTTP/1.1
   11-0 -     0/0/1086   . 0.00 65    0    687692   0.0   0.00  27.83 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   12-0 71342 1/125/1105 K 1.48 3     351  654641   33.5  1.75  28.79 192.178.4.99    http/1.1 team.cloudware.ng:443           GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2410910
   13-0 75622 1/22/1183  C 0.42 5     5    710668   9.8   0.46  31.41 138.117.223.136 http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php?lga=Isi+uzo&state=Enugu&ward=Nek
   14-0 69212 1/186/1027 K 3.83 3     300  623204   36.1  3.69  24.67 192.178.4.101   http/1.1 team.cloudware.ng:443           GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2526274
   15-0 70599 0/143/762  R 2.23 21    4424 43859504 0.0   2.47  17.44 112.45.117.238  http/1.1 cloudware.ng:443                GET /wp-content/uploads/2019/06/lower_0001_D2GLMBRWwAACk5Y-1.pn
   16-0 71343 0/135/705  R 1.85 35    273  446974   0.0   2.06  17.25 120.233.50.112  http/1.1
   17-0 -     0/0/743    . 0.00 60    0    459376   0.0   0.00  18.94 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-0 75645 0/28/623   W 0.67 3     0    421948   0.0   0.83  16.13 96.30.57.23     http/1.1 blog.workflow-management-softwa POST /wp-cron.php?doing_wp_cron=1763548199.32569503784179687500
   19-0 -     0/0/966    . 0.00 67    0    642338   0.0   0.00  27.22 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   20-0 -     0/0/800    . 0.00 68    0    476333   0.0   0.00  19.38 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 -     0/0/1179   . 0.00 62    0    707437   0.0   0.00  29.63 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   22-0 75678 0/11/526   R 0.20 21    397  313394   0.0   0.23  13.18 192.178.4.103   http/1.1 team.cloudware.ng:443           GET /ctg/search/similarImageSearchResultView/?ctgItemCd=1680701
   23-0 73266 0/104/660  W 2.05 0     0    395866   0.0   2.19  17.26 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   24-0 75738 3/26/549   K 0.52 4     297  350605   97.9  0.76  18.76 192.178.4.105   http/1.1 team.cloudware.ng:443           GET /?l=4281699960 HTTP/1.1
   25-0 -     0/0/420    . 0.00 70    0    290800   0.0   0.00  10.70 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   26-0 -     0/0/784    . 0.00 66    0    472385   0.0   0.00  23.37 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 75748 0/0/582    R 0.00 79    0    375250   0.0   0.00  15.56 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 75757 1/15/195   K 0.36 1     228  110966   13.7  0.37  6.38  166.88.82.39    http/1.1 nigeriadecide.org:443           GET /blog/press-release-nigeriadecide-org-set-to-prevent-electi
   29-0 75758 0/16/76    W 0.39 3     0    37472    0.0   0.42  2.89  44.220.185.221  http/1.1 blog.workflow-management-softwa GET / HTTP/1.1
   30-0 75759 0/1/216    R 0.00 72    206  165909   0.0   0.01  5.85  92.71.66.237    http/1.1 nigeriadecide.org:443           GET /blog/inec-time-table-and-schedule-of-activities-for-govern
   31-0 -     0/0/97     . 0.00 64    0    88240    0.0   0.00  1.99  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 75760 0/22/128   R 0.49 22    305  70721    0.0   0.55  3.38  192.178.4.101   http/1.1 team.cloudware.ng:443           GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2402528
   33-0 -     0/0/32     . 0.00 26827 0    19103    0.0   0.00  0.86  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   34-0 -     0/0/10     . 0.00 26905 0    5552     0.0   0.00  0.26  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/180    . 0.00 26331 0    103001   0.0   0.00  5.61  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   36-0 -     0/0/1      . 0.00 26826 0    0        0.0   0.00  0.00  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   37-0 -     0/0/6      . 0.00 26922 0    2734     0.0   0.00  0.14  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   38-0 -     0/0/17     . 0.00 26868 0    8545     0.0   0.00  0.47  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   39-0 -     0/0/6      . 0.00 26931 0    3692     0.0   0.00  0.15  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   40-0 -     0/0/3      . 0.00 26926 0    1364     0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   41-0 -     0/0/3      . 0.00 26925 0    1247     0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   42-0 -     0/0/6      . 0.00 26919 0    3775     0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   43-0 -     0/0/4      . 0.00 26912 0    1332     0.0   0.00  0.08  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   44-0 -     0/0/4      . 0.00 26933 0    656      0.0   0.00  0.05  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   45-0 -     0/0/4      . 0.00 26918 0    1404     0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   46-0 -     0/0/3      . 0.00 26924 0    1264     0.0   0.00  0.07  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   47-0 -     0/0/6      . 0.00 26904 0    3807     0.0   0.00  0.16  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   48-0 -     0/0/4      . 0.00 26906 0    2243     0.0   0.00  0.10  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   49-0 -     0/0/7      . 0.00 26897 0    2445     0.0   0.00  0.13  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   50-0 -     0/0/4      . 0.00 26917 0    1064     0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   51-0 -     0/0/7      . 0.00 26915 0    3531     0.0   0.00  0.19  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   52-0 -     0/0/8      . 0.00 26913 0    4670     0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   53-0 -     0/0/11     . 0.00 26907 0    5804     0.0   0.00  0.27  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   54-0 -     0/0/14     . 0.00 26893 0    7651     0.0   0.00  0.35  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   55-0 -     0/0/3      . 0.00 26914 0    579      0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   56-0 -     0/0/2      . 0.00 26920 0    607      0.0   0.00  0.04  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   57-0 -     0/0/25     . 0.00 26814 0    14460    0.0   0.00  0.73  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   58-0 -     0/0/8      . 0.00 26909 0    4320     0.0   0.00  0.22  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   59-0 -     0/0/8      . 0.00 26911 0    4325     0.0   0.00  0.21  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   60-0 -     0/0/7      . 0.00 26903 0    3573     0.0   0.00  0.18  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   61-0 -     0/0/140    . 0.00 26407 0    77185    0.0   0.00  4.63  ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1900
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 4 seconds, (range: 0...17)
   index usage: 33%, cache usage: 46%
   total entries stored since starting: 18921
   total entries replaced since starting: 0
   total entries expired since starting: 17020
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 54 miss
   total removes since starting: 3 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit