403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-19.12.15.txt
 ## swap threshold exceeded
## server overview
2025-11-19.12.15 load[0] mem[71/59] mysql[3/10] httpd[24]
              total        used        free      shared  buff/cache   available
Mem:           2363        1624          88          56         650         521
Swap:          1999        1283         716
 12:15:01 up  2:15,  0 users,  load average: 0.47, 0.56, 0.64
## system overview
top - 12:15:02 up  2:15,  0 users,  load average: 0.47, 0.56, 0.64
Tasks: 220 total,   9 running, 210 sleeping,   0 stopped,   1 zombie
%Cpu(s): 81.8 us, 15.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  3.0 si,  0.0 st
KiB Mem :  2420300 total,    95028 free,  1659292 used,   665980 buff/cache
KiB Swap:  2047996 total,   733436 free,  1314560 used.   538324 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1748 mysql     20   0 1464896 225716   3320 S 106.2  9.3   2:10.77 /usr/sbin+
 14096 healtho+  20   0  463200  69356   4188 R  37.5  2.9   0:02.12 php-fpm: +
 14333 root      20   0  162436   5828   4336 S   6.2  0.2   0:00.01 sshd: roo+
 14439 nigeria   20   0  404052  16140  10384 R   6.2  0.7   0:00.05 /opt/cpan+
     1 root      20   0   44276   3364   1488 S   0.0  0.1   0:12.74 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.57 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.41 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:08.21 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.39 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.76 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:13.54 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.20 [kauditd]
   237 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   250 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   260 root       0 -20       0      0      0 S   0.0  0.0   0:01.34 [kworker/+
   265 root       0 -20       0      0      0 S   0.0  0.0   0:01.53 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:00.57 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   356 root      20   0   40244   5632   5332 S   0.0  0.2   0:05.30 /usr/lib/+
   387 root      20   0   45352    316    172 S   0.0  0.0   0:00.36 /usr/lib/+
   406 root      16  -4   55532    504    376 S   0.0  0.0   0:00.85 /sbin/aud+
   411 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   479 polkitd   20   0  612240   2976    480 S   0.0  0.1   0:01.21 /usr/lib/+
   480 root      20   0   52852    360    264 S   0.0  0.0   0:00.01 /usr/sbin+
   481 root      20   0  152780    200    156 S   0.0  0.0   0:00.00 /usr/sbin+
   482 root      20   0  224276   7164   1096 S   0.0  0.3   0:00.24 queueproc+
   486 root      20   0   21540    428    316 S   0.0  0.0   0:00.17 /usr/sbin+
   492 dbus      20   0   58724   1444    704 S   0.0  0.1   0:04.51 /usr/bin/+
   495 rpc       20   0   69256    232    128 S   0.0  0.0   0:00.01 /sbin/rpc+
   498 root      20   0    4388    108    104 S   0.0  0.0   0:00.00 /usr/sbin+
   510 root      20   0   24704   1172    804 S   0.0  0.0   0:02.01 /usr/lib/+
   515 nscd      20   0 1371420   2652    732 S   0.0  0.1   0:07.29 /usr/sbin+
   521 root      20   0  195208     12     12 S   0.0  0.0   0:00.00 /usr/sbin+
   552 root      20   0  124480    468    336 S   0.0  0.0   0:00.24 /usr/sbin+
   556 root      20   0   24208    144    120 S   0.0  0.0   0:00.00 /usr/sbin+
   559 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
   579 root      20   0  114704    104    104 S   0.0  0.0   0:00.02 /bin/bash
   580 root      20   0  108296    144    140 S   0.0  0.0   0:00.00 /sbin/age+
   616 mailnull  20   0   90820   3944    880 S   0.0  0.2   0:00.24 /usr/sbin+
   638 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   670 root       0 -20       0      0      0 S   0.0  0.0   0:02.37 [loop0]
   747 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [jbd2/loo+
   748 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   910 systuser  20   0   12660     52      0 S   0.0  0.0   0:00.01 /usr/loca+
   911 telegraf  20   0 5654304  37536   5584 S   0.0  1.6   0:04.81 /usr/loca+
   913 systuser  20   0   10132     44      0 S   0.0  0.0   0:00.01 /usr/loca+
   914 root      20   0   51508    656    472 S   0.0  0.0   0:00.13 /usr/sbin+
   915 systuser  20   0  111864   1568      0 S   0.0  0.1   0:00.00 /usr/loca+
   916 memcach+  20   0  342400    184    184 S   0.0  0.0   0:00.17 /usr/bin/+
   917 root      20   0  153404    352    268 S   0.0  0.0   0:00.18 pure-ftpd+
   918 systuser  20   0  113676   1872      0 S   0.0  0.1   0:00.00 /usr/loca+
   919 root      20   0  572372   1000    408 S   0.0  0.0   0:00.79 /usr/bin/+
   920 systuser  20   0  114016  13840   2680 S   0.0  0.6   0:02.16 /usr/loca+
   921 root      20   0  111304    448    352 S   0.0  0.0   0:01.21 /usr/sbin+
   922 root      20   0 1349832  11528    116 S   0.0  0.5   0:26.60 /usr/bin/+
   923 root      20   0  445028   3248   3136 S   0.0  0.1   0:00.38 sw-engine+
   925 root      20   0 1277056  12260    116 S   0.0  0.5   0:29.99 /usr/bin/+
   931 root      20   0  400740   3176    668 S   0.0  0.1   0:01.43 php-fpm: +
   932 root      20   0 1836868 338328   1208 S   0.0 14.0   0:17.32 /usr/loca+
   939 root      20   0  396248    632    456 S   0.0  0.0   0:00.28 php-fpm: +
   960 root      20   0  388892    676    472 S   0.0  0.0   0:00.26 php-fpm: +
   967 named     20   0 1121336  37172   1628 S   0.0  1.5   0:05.72 /usr/sbin+
   970 root      20   0  439788  11324  11116 R   0.0  0.5   0:00.32 php-fpm: +
   979 root      20   0  389508    768    552 S   0.0  0.0   0:00.29 php-fpm: +
   981 root      20   0  261020   6160   1420 S   0.0  0.3   0:01.13 cpsrvd (S+
   990 root      20   0  240976   5340   4464 S   0.0  0.2   0:02.47 /usr/sbin+
  1000 cpanelc+  20   0   10080   3292   2464 R   0.0  0.1   0:06.44 /usr/loca+
  1046 dovenull  20   0   46912   2528   1912 S   0.0  0.1   0:00.10 dovecot/p+
  1047 dovenull  20   0   47300   2944   1932 S   0.0  0.1   0:00.11 dovecot/i+
  1048 dovecot   20   0   10320    524    408 S   0.0  0.0   0:00.02 dovecot/a+
  1049 root      20   0   10452    464    280 S   0.0  0.0   0:00.09 dovecot/l+
  1050 dovenull  20   0   46912   2488   1836 S   0.0  0.1   0:00.13 dovecot/p+
  1051 dovenull  20   0   47268   3108   2100 S   0.0  0.1   0:00.08 dovecot/i+
  1058 root      20   0   24396   2308    552 S   0.0  0.1   0:00.10 dovecot/c+
  1062 dovecot   20   0   13568    580    356 S   0.0  0.0   0:00.02 dovecot/s+
  1089 systuser  20   0  157708   2832    804 S   0.0  0.1   0:00.06 SonarPush+
  1108 dovecot   20   0   41168   1540   1068 S   0.0  0.1   0:00.20 dovecot/a+
  1148 wp-tool+  20   0  412368  32396   1712 S   0.0  1.3   0:02.74 /usr/bin/+
  1149 wp-tool+  20   0  387528  13152   1528 S   0.0  0.5   0:00.16 /usr/bin/+
  1235 root      20   0  167452   1420    816 S   0.0  0.1   0:00.16 dnsadmin +
  1236 root      20   0  209340  20780   3244 S   0.0  0.9   0:01.32 tailwatchd
  1237 root      20   0  262228  22856   4996 S   0.0  0.9   0:00.37 cpdavd - +
  1705 root      20   0  299272    948    568 S   0.0  0.0   0:00.22 php-fpm: +
  1711 root      38  18  130416   1452    728 S   0.0  0.1   0:00.01 cpanellog+
  1966 root      20   0  266992   8064    692 S   0.0  0.3   0:01.10 /usr/sbin+
  1968 root      20   0   12768    456    320 S   0.0  0.0   0:00.99 /usr/loca+
  1969 root      20   0   12732    332    256 S   0.0  0.0   0:00.86 /usr/loca+
  1970 root      20   0   12776    380    264 S   0.0  0.0   0:00.93 /usr/loca+
  1973 root      20   0   53340    152    152 S   0.0  0.0   0:00.04 /usr/loca+
  1979 root      20   0  181984  10928   1192 S   0.0  0.5   0:07.50 lfd - sle+
  3578 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
  3973 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  3989 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.16 [kworker]
  4209 nobody    20   0  277636  19772   4388 S   0.0  0.8   0:01.07 /usr/sbin+
  5959 nobody    20   0  277696  20084   4548 S   0.0  0.8   0:00.94 /usr/sbin+
  6545 nobody    20   0  277904  20084   4428 S   0.0  0.8   0:00.89 /usr/sbin+
  7780 nobody    20   0  277892  19444   4184 S   0.0  0.8   0:00.77 /usr/sbin+
  7997 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  8127 nobody    20   0  277568  19732   4340 S   0.0  0.8   0:00.64 /usr/sbin+
  8158 nobody    20   0  277760  19552   4276 S   0.0  0.8   0:00.69 /usr/sbin+
  8345 nobody    20   0  277896  19732   4428 S   0.0  0.8   0:00.63 /usr/sbin+
  8918 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  9439 nobody    20   0  277572  19300   4200 S   0.0  0.8   0:00.60 /usr/sbin+
  9700 nobody    20   0  277628  19696   4476 S   0.0  0.8   0:00.40 /usr/sbin+
 10187 nobody    20   0  277760  18964   3756 S   0.0  0.8   0:00.39 /usr/sbin+
 10188 nobody    20   0  277760  19292   4072 S   0.0  0.8   0:00.48 /usr/sbin+
 10814 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 11386 nobody    20   0  277948  19696   4340 S   0.0  0.8   0:00.31 /usr/sbin+
 12700 nobody    20   0  277760  19184   3964 S   0.0  0.8   0:00.14 /usr/sbin+
 12719 nobody    20   0  277760  19488   4016 S   0.0  0.8   0:00.16 /usr/sbin+
 12940 nobody    20   0  277760  19008   3812 S   0.0  0.8   0:00.19 /usr/sbin+
 12949 nobody    20   0  277760  19088   3912 S   0.0  0.8   0:00.21 /usr/sbin+
 13149 nobody    20   0  277368  18240   3492 S   0.0  0.8   0:00.19 /usr/sbin+
 13327 nobody    20   0  277760  18936   3760 S   0.0  0.8   0:00.16 /usr/sbin+
 13345 nobody    20   0  277764  18848   3692 S   0.0  0.8   0:00.14 /usr/sbin+
 13358 nobody    20   0  277760  19072   3868 S   0.0  0.8   0:00.08 /usr/sbin+
 13361 nobody    20   0  277760  18964   3792 S   0.0  0.8   0:00.08 /usr/sbin+
 13428 mailnull  20   0   91204   4288   1176 S   0.0  0.2   0:00.00 /usr/sbin+
 13540 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 13726 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 13892 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 14009 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
 14074 healtho+  20   0  460640  67776   4192 S   0.0  2.8   0:02.26 php-fpm: +
 14211 root      20   0  111304   4440   3408 S   0.0  0.2   0:00.00 sshd: [ac+
 14212 sshd      20   0  115644   2620   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 14223 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 14232 mailnull  20   0   91196   5692   2468 S   0.0  0.2   0:00.00 /usr/sbin+
 14243 nigeria   20   0  400460   5444   2196 S   0.0  0.2   0:00.00 php-fpm: +
 14252 mailnull  20   0   90996   5756   2508 S   0.0  0.2   0:00.00 /usr/sbin+
 14276 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 14324 nobody    20   0  277592  18048   3196 S   0.0  0.7   0:00.00 /usr/sbin+
 14334 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: roo+
 14347 nobody    20   0  277320  17840   3212 S   0.0  0.7   0:00.00 /usr/sbin+
 14348 nobody    20   0  277628  18188   3264 S   0.0  0.8   0:00.00 /usr/sbin+
 14358 nobody    20   0  277188  17428   2988 S   0.0  0.7   0:00.00 /usr/sbin+
 14359 nobody    20   0  277616  18052   3160 S   0.0  0.7   0:00.00 /usr/sbin+
 14360 nobody    20   0  277056  16400   2044 S   0.0  0.7   0:00.00 /usr/sbin+
 14361 nobody    20   0  277616  18044   3164 S   0.0  0.7   0:00.00 /usr/sbin+
 14367 root      20   0  183052   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 14369 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 14371 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 14374 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 14375 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 14376 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 14377 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 14378 root      20   0  183048   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 14381 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 14382 root      20   0  183048   2136   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 14383 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 14385 root      20   0  183048   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 14396 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 14397 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 14399 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 14400 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 14402 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 14403 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 14404 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 14405 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 14406 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 14409 root      20   0   20164    988    784 S   0.0  0.0   0:00.00 jailshell+
 14411 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 14413 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 14415 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 14416 root      20   0  113284   1468   1256 S   0.0  0.1   0:00.00 bash /usr+
 14419 root      20   0  159140  13272   2884 D   0.0  0.5   0:00.06 /usr/loca+
 14423 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 14424 root      20   0  188224  11108   5152 S   0.0  0.5   0:00.01 /usr/loca+
 14428 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 14431 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 14435 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 14478 root      20   0  160224   2364   1636 S   0.0  0.1   0:00.01 top -n 2 +
 14515 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
 14517 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 14519 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
 14520 cloudsms  20   0  404052  15344  10008 S   0.0  0.6   0:00.00 /opt/cpan+
 14525 root      20   0  113284    616    396 S   0.0  0.0   0:00.00 bash /usr+
 14526 root      20   0    6516    416    336 R   0.0  0.0   0:00.00 /usr/sbin+
 14530 root      20   0  113284    220      0 R   0.0  0.0   0:00.00 bash /usr+
 14531 root      20   0  159140  13272   2884 R   0.0  0.5   0:00.00 /usr/loca+
 29325 root      20   0       0      0      0 S   0.0  0.0   0:00.60 [kworker/+
 44791 root      20   0  248112 119972   3280 S   0.0  5.0   0:03.48 /usr/loca+
 47642 root      20   0  267916 132800   3432 S   0.0  5.5   0:16.16 spamd chi+
 47643 root      20   0  260192 125820   1884 S   0.0  5.2   0:08.25 spamd chi+
 78600 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 97897 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 98792 root      20   0       0      0      0 S   0.0  0.0   0:00.11 [kworker/+
 98861 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    09:59   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    09:59   0:08  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    09:59   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    09:59   0:13  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   09:59   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   09:59   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [deferwq]
root        104  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [kauditd]
root        237  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [ata_sff]
root        249  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [scsi_eh_0]
root        250  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [scsi_tmf_0]
root        251  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [scsi_eh_1]
root        252  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [scsi_tmf_1]
root        253  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [ttm_swap]
root        260  0.0  0.0      0     0 ?        S<   09:59   0:01  \_ [kworker/0:1H]
root        265  0.0  0.0      0     0 ?        S<   09:59   0:01  \_ [kworker/1:1H]
root        275  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [ext4-rsv-conver]
root        411  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [rpciod]
root        412  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [xprtiod]
root        638  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [kvm-irqfd-clean]
root        670  0.0  0.0      0     0 ?        S<   09:59   0:02  \_ [loop0]
root        747  0.0  0.0      0     0 ?        S    09:59   0:00  \_ [jbd2/loop0-8]
root        748  0.0  0.0      0     0 ?        S<   09:59   0:00  \_ [ext4-rsv-conver]
root      29325  0.0  0.0      0     0 ?        S    10:31   0:00  \_ [kworker/u200:1]
root      78600  0.0  0.0      0     0 ?        S    11:32   0:00  \_ [kworker/1:0]
root      97897  0.0  0.0      0     0 ?        S    11:55   0:00  \_ [kworker/u200:0]
root      98792  0.0  0.0      0     0 ?        S    11:56   0:00  \_ [kworker/0:1]
root      98861  0.0  0.0      0     0 ?        S    11:56   0:00  \_ [kworker/0:2]
root        559  0.0  0.0      0     0 ?        S    12:00   0:00  \_ [kworker/1:2]
root       3578  0.0  0.0      0     0 ?        S    12:03   0:00  \_ [kworker/0:0]
root       7997  0.0  0.0      0     0 ?        S    12:08   0:00  \_ [kworker/1:1]
root       8918  0.0  0.0      0     0 ?        S    12:09   0:00  \_ [kworker/0:3]
root      10814  0.0  0.0      0     0 ?        S    12:11   0:00  \_ [kworker/0:4]
root      13540  0.0  0.0      0     0 ?        S    12:14   0:00  \_ [kworker/1:3]
root          1  0.1  0.1  44276  3364 ?        Ss   09:59   0:12 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        356  0.0  0.2  40244  5632 ?        Ss   09:59   0:05 /usr/lib/systemd/systemd-journald
root        387  0.0  0.0  45352   316 ?        Ss   09:59   0:00 /usr/lib/systemd/systemd-udevd
root        406  0.0  0.0  55532   504 ?        S<sl 09:59   0:00 /sbin/auditd
polkitd     479  0.0  0.1 612240  2976 ?        Ssl  09:59   0:01 /usr/lib/polkit-1/polkitd --no-debug
root        480  0.0  0.0  52852   360 ?        Ss   09:59   0:00 /usr/sbin/smartd -n -q never
root        481  0.0  0.0 152780   200 ?        Ss   09:59   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        482  0.0  0.2 224276  7164 ?        Ss   09:59   0:00 queueprocd - waiting up to 60s to process a task
root        486  0.0  0.0  21540   428 ?        Ss   09:59   0:00 /usr/sbin/irqbalance --foreground
dbus        492  0.0  0.0  58724  1444 ?        Ss   09:59   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         495  0.0  0.0  69256   232 ?        Ss   09:59   0:00 /sbin/rpcbind -w
root        498  0.0  0.0   4388   108 ?        Ss   09:59   0:00 /usr/sbin/acpid
root        510  0.0  0.0  24704  1172 ?        Ss   09:59   0:02 /usr/lib/systemd/systemd-logind
nscd        515  0.0  0.1 1371420 2652 ?        Ssl  09:59   0:07 /usr/sbin/nscd
root        521  0.0  0.0 195208    12 ?        Ssl  09:59   0:00 /usr/sbin/gssproxy -D
root        552  0.0  0.0 124480   468 ?        Ss   09:59   0:00 /usr/sbin/crond -n
root      14367  0.0  0.0 183052  2144 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root      14403  0.0  0.0 113284  1208 ?        Ss   12:15   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      14416  0.0  0.0 113284  1468 ?        S    12:15   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      14533  0.0  0.0 113284   220 ?        R    12:15   0:00  |           \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      14369  0.0  0.0 183048  2144 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root      14405  0.0  0.0 113284  1212 ?        Ss   12:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      14415  0.0  0.0 108052   356 ?        S    12:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      14423  0.0  0.0 113288  1516 ?        S    12:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      14532  0.0  0.0 153840  2092 ?        R    12:15   0:00  |               \_ ps auxf
root      14371  0.0  0.0 183048  2152 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root      14396  0.0  0.0  20164   808 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      14374  0.0  0.0 183048  2152 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root      14411  0.0  0.0  20164   804 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      14375  0.0  0.0 183048  2152 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root      14409  0.0  0.0  20164   988 ?        Ss   12:15   0:00  |   \_ jailshell (cloudsms) [14517] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  14517  0.0  0.0  20164   260 ?        S    12:15   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  14519  0.0  0.0 113284  1212 ?        S    12:15   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms  14520  0.0  0.6 404052 15344 ?        S    12:15   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root      14376  0.0  0.0 183048  2152 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root      14399  0.0  0.0  20164   808 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      14377  0.0  0.0 183048  2152 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root      14406  0.0  0.0  20164   808 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      14378  0.0  0.0 183048  2148 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root      14404  0.0  0.0  20164   804 ?        Ss   12:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      14381  0.0  0.0 183048  2136 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root      14413  0.0  0.0 113284  1212 ?        Ss   12:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      14424  1.0  0.4 188224 11108 ?        S    12:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      14478  0.0  0.0 160224  2364 ?        S    12:15   0:00  |           \_ top -n 2 -b -c
root      14382  0.0  0.0 183048  2136 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root      14397  0.0  0.0 113284  1212 ?        Ss   12:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1
root      14419  6.0  0.5 159140 13272 ?        R    12:15   0:00  |       \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/scripts/autorepair recoverymgmt
root      14383  0.0  0.0 183048  2140 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root      14400  0.0  0.0  20164   964 ?        Ss   12:15   0:00  |   \_ jailshell (pactpay) [14428] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   14428  0.0  0.0  20164   260 ?        S    12:15   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   14435  2.0  0.7 480124 17688 ?        S    12:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      14385  0.0  0.0 183048  2140 ?        S    12:15   0:00  \_ /usr/sbin/CROND -n
root      14402  0.0  0.0  20164   964 ?        Ss   12:15   0:00      \_ jailshell (nigeria) [14431] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   14431  0.0  0.0  20164   260 ?        S    12:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   14439  5.0  0.6 404052 16140 ?        S    12:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        556  0.0  0.0  24208   144 ?        Ss   09:59   0:00 /usr/sbin/atd -f
root        579  0.0  0.0 114704   104 ttyS0    Ss+  09:59   0:00 /bin/bash
root        580  0.0  0.0 108296   144 tty1     Ss+  09:59   0:00 /sbin/agetty --noclear tty1 linux
mailnull    616  0.0  0.1  90820  3944 ?        Ss   09:59   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  13428  0.0  0.1  91204  4288 ?        S    12:13   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  14232  0.0  0.2  91196  5692 ?        S    12:14   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  14252  0.0  0.2  90996  5756 ?        S    12:14   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    910  0.0  0.0  12660    52 ?        Ssl  09:59   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
telegraf    911  0.0  1.5 5654304 37536 ?       SLsl 09:59   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    913  0.0  0.0  10132    44 ?        Ssl  09:59   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        914  0.0  0.0  51508   656 ?        Ss   09:59   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1046  0.0  0.1  46912  2528 ?        S    09:59   0:00  \_ dovecot/pop3-login
dovenull   1047  0.0  0.1  47300  2944 ?        S    09:59   0:00  \_ dovecot/imap-login
dovecot    1048  0.0  0.0  10320   524 ?        S    09:59   0:00  \_ dovecot/anvil
root       1049  0.0  0.0  10452   464 ?        S    09:59   0:00  \_ dovecot/log
dovenull   1050  0.0  0.1  46912  2488 ?        S    09:59   0:00  \_ dovecot/pop3-login
dovenull   1051  0.0  0.1  47268  3108 ?        S    09:59   0:00  \_ dovecot/imap-login
root       1058  0.0  0.0  24396  2308 ?        S    09:59   0:00  \_ dovecot/config
dovecot    1062  0.0  0.0  13568   580 ?        S    09:59   0:00  \_ dovecot/stats
dovecot    1108  0.0  0.0  41168  1540 ?        S    09:59   0:00  \_ dovecot/auth
systuser    915  0.0  0.0 111864  1568 ?        Ssl  09:59   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
memcach+    916  0.0  0.0 342400   184 ?        Ssl  09:59   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
root        917  0.0  0.0 153404   352 ?        Ss   09:59   0:00 pure-ftpd (SERVER)
systuser    918  0.0  0.0 113676  1872 ?        Ssl  09:59   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        919  0.0  0.0 572372  1000 ?        Ssl  09:59   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser    920  0.0  0.5 114016 13840 ?        Ssl  09:59   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        921  0.0  0.0 111304   448 ?        Ss   09:59   0:01 /usr/sbin/sshd -D
root      13726  0.0  0.1 111304  4272 ?        Ss   12:14   0:00  \_ sshd: [accepted]
root      13892  0.0  0.1 111304  4268 ?        Ss   12:14   0:00  \_ sshd: [accepted]
root      14211  0.0  0.1 111304  4440 ?        Ss   12:14   0:00  \_ sshd: [accepted]
sshd      14212  0.0  0.1 115644  2620 ?        S    12:14   0:00  |   \_ sshd: [net]
root      14223  0.0  0.1 111304  4264 ?        Ss   12:14   0:00  \_ sshd: [accepted]
root      14333  0.5  0.2 162436  5828 ?        Ss   12:14   0:00  \_ sshd: root [priv]
sshd      14334  0.0  0.1 115644  2628 ?        S    12:14   0:00      \_ sshd: root [net]
root        922  0.3  0.4 1349832 11528 ?       Ssl  09:59   0:26 /usr/bin/cspdaemon
root        923  0.0  0.1 445028  3248 ?        Ss   09:59   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  14009  0.0  0.0 445028   320 ?        S    12:14   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
root        925  0.3  0.5 1277056 12260 ?       Ssl  09:59   0:29 /usr/bin/checkstatus
root        931  0.0  0.1 400740  3176 ?        Ss   09:59   0:01 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+  14074  9.0  2.8 460640 67776 ?        S    12:14   0:02  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  14096  9.3  2.8 463200 69356 ?        R    12:14   0:02  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   14243  0.0  0.2 400460  5444 ?        S    12:14   0:00  \_ php-fpm: pool nigeriadecide_org
root        932  0.2 13.9 1836868 338328 ?      Ssl  09:59   0:17 /usr/local/cpanel/3rdparty/bin/clamd -F
root        939  0.0  0.0 396248   632 ?        Ss   09:59   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        960  0.0  0.0 388892   676 ?        Ss   09:59   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
named       967  0.0  1.5 1121336 37172 ?       Ssl  09:59   0:05 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        970  0.0  0.4 439788 11324 ?        Ss   09:59   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
root        979  0.0  0.0 389508   768 ?        Ss   09:59   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        981  0.0  0.2 261020  6160 ?        Ss   09:59   0:01 cpsrvd (SSL) - waiting for connections                   
root      14276  0.0  0.0      0     0 ?        Z    12:14   0:00  \_ [cpaneld - servi] <defunct>
root        990  0.0  0.2 240976  5340 ?        Ssl  09:59   0:02 /usr/sbin/rsyslogd -n
cpanelc+   1000  0.0  0.1  10080  3292 ?        Ss   09:59   0:06 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser   1089  0.0  0.1 157708  2832 ?        S    09:59   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1148  0.0  1.3 412368 32396 ?        Ss   09:59   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1149  0.0  0.5 387528 13152 ?        Ss   09:59   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1235  0.0  0.0 167452  1420 ?        Ss   09:59   0:00 dnsadmin - dormant mode
root       1236  0.0  0.8 209340 20780 ?        Ss   09:59   0:01 tailwatchd
root       1237  0.0  0.9 262228 22856 ?        Ss   09:59   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1705  0.0  0.0 299272   948 ?        Ss   09:59   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1711  0.0  0.0 130416  1452 ?        SN   09:59   0:00 cpanellogd - sleeping for logs
mysql      1748  1.6  9.3 1464896 225716 ?      Sl   09:59   2:10 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1966  0.0  0.3 266992  8064 ?        Ss   09:59   0:01 /usr/sbin/httpd -k start
root       1968  0.0  0.0  12768   456 ?        S    09:59   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1969  0.0  0.0  12732   332 ?        S    09:59   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1970  0.0  0.0  12776   380 ?        S    09:59   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1973  0.0  0.0  53340   152 ?        S    09:59   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     4209  0.1  0.8 277636 19772 ?        S    12:03   0:01  \_ /usr/sbin/httpd -k start
nobody     5959  0.1  0.8 277696 20084 ?        S    12:05   0:00  \_ /usr/sbin/httpd -k start
nobody     6545  0.1  0.8 277904 20084 ?        S    12:06   0:00  \_ /usr/sbin/httpd -k start
nobody     7780  0.1  0.8 277892 19444 ?        S    12:07   0:00  \_ /usr/sbin/httpd -k start
nobody     8127  0.1  0.8 277568 19732 ?        S    12:08   0:00  \_ /usr/sbin/httpd -k start
nobody     8158  0.1  0.8 277760 19552 ?        S    12:08   0:00  \_ /usr/sbin/httpd -k start
nobody     8345  0.1  0.8 277896 19732 ?        S    12:08   0:00  \_ /usr/sbin/httpd -k start
nobody     9439  0.1  0.7 277572 19300 ?        S    12:09   0:00  \_ /usr/sbin/httpd -k start
nobody     9700  0.1  0.8 277628 19696 ?        S    12:10   0:00  \_ /usr/sbin/httpd -k start
nobody    10187  0.1  0.7 277760 18964 ?        S    12:10   0:00  \_ /usr/sbin/httpd -k start
nobody    10188  0.1  0.7 277760 19292 ?        S    12:10   0:00  \_ /usr/sbin/httpd -k start
nobody    11386  0.1  0.8 277948 19696 ?        S    12:11   0:00  \_ /usr/sbin/httpd -k start
nobody    12700  0.1  0.7 277760 19184 ?        S    12:13   0:00  \_ /usr/sbin/httpd -k start
nobody    12719  0.1  0.8 277760 19488 ?        S    12:13   0:00  \_ /usr/sbin/httpd -k start
nobody    12940  0.1  0.7 277760 19008 ?        S    12:13   0:00  \_ /usr/sbin/httpd -k start
nobody    12949  0.2  0.7 277760 19088 ?        S    12:13   0:00  \_ /usr/sbin/httpd -k start
nobody    13149  0.2  0.7 277368 18240 ?        S    12:13   0:00  \_ /usr/sbin/httpd -k start
nobody    13327  0.2  0.7 277760 18936 ?        S    12:13   0:00  \_ /usr/sbin/httpd -k start
nobody    13345  0.1  0.7 277764 18848 ?        S    12:13   0:00  \_ /usr/sbin/httpd -k start
nobody    13358  0.1  0.7 277760 19072 ?        S    12:13   0:00  \_ /usr/sbin/httpd -k start
nobody    13361  0.1  0.7 277760 18964 ?        S    12:13   0:00  \_ /usr/sbin/httpd -k start
nobody    14324  0.0  0.7 277592 18048 ?        S    12:14   0:00  \_ /usr/sbin/httpd -k start
nobody    14347  0.0  0.7 277320 17840 ?        S    12:14   0:00  \_ /usr/sbin/httpd -k start
cloudw    14526  0.0  0.5 285108 12936 ?        R    12:15   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    14348  0.0  0.7 277628 18188 ?        S    12:14   0:00  \_ /usr/sbin/httpd -k start
nobody    14358  0.0  0.7 277188 17428 ?        S    12:15   0:00  \_ /usr/sbin/httpd -k start
nobody    14359  0.0  0.7 277616 18052 ?        S    12:15   0:00  \_ /usr/sbin/httpd -k start
nobody    14360  0.0  0.6 277056 16400 ?        S    12:15   0:00  \_ /usr/sbin/httpd -k start
nobody    14361  0.0  0.7 277616 18044 ?        S    12:15   0:00  \_ /usr/sbin/httpd -k start
root       1979  0.0  0.4 181984 10928 ?        Ss   09:59   0:07 lfd - sleeping
oysipao+   3973  0.0  0.0   3148   416 ?        Ss   10:01   0:00 [kworker]
oysipao+   3989  0.0  0.0   3152   492 ?        S    10:01   0:00  \_ [kworker]
root      44791  0.0  4.9 248112 119972 ?       Ss   10:49   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root      47642  0.3  5.4 267916 132800 ?       S    10:53   0:16  \_ spamd child
root      47643  0.1  5.1 260192 125820 ?       S    10:53   0:08  \_ spamd child
## mysql stats
Uptime: 29838  Threads: 4  Questions: 782822  Slow queries: 0  Opens: 4194  Flush tables: 1  Open tables: 2000  Queries per second avg: 26.235
*************************** 1. row ***************************
     Id: 11417
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 11419
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 11425
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 4. row ***************************
     Id: 11431
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.154.89 TIME_WAIT
      1 114.119.157.111 TIME_WAIT
      1 15.235.98.137 TIME_WAIT
      1 15.235.98.251 TIME_WAIT
      1 173.199.190.172 TIME_WAIT
      1 192.110.213.58 TIME_WAIT
      1 192.178.4.99 TIME_WAIT
      1 ::1 TIME_WAIT
      1 40.77.167.62 TIME_WAIT
      1 43.153.86.78 TIME_WAIT
      1 54.39.210.171 TIME_WAIT
      1 66.249.70.195 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     38 152.42.189.164 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Wednesday, 19-Nov-2025 12:15:02 WAT
   Restart Time: Wednesday, 19-Nov-2025 03:57:52 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 8 hours 17 minutes 10 seconds
   Server load: 0.47 0.56 0.64
   Total accesses: 44514 - Total Traffic: 1.2 GB - Total Duration: 69108908
   CPU Usage: u6.67 s3.59 cu593.32 cs471.03 - 3.6% CPU load
   1.49 requests/sec - 41.6 kB/second - 27.9 kB/request - 1552.52 ms/request
   23 requests currently being processed, 0 workers gracefully restarting, 5 idle workers

_KKK_KCWKKK_KKWKK_KKKWR_KKK...K.................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS   Req   Dur    Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  12700 0/26/1972  _ 0.52 0     298 1114409  0.0   0.64  52.82 66.249.64.33   http/1.1 team.cloudware.ng:443      GET /?l=1305359058 HTTP/1.1
   1-0  14324 1/1/2054   K 0.00 2     268 1138740  33.6  0.03  56.38 66.249.70.36   http/1.1 team.cloudware.ng:443      GET /ctg/search/similarImageSearchResultView/?ctgItemCd=813787
   2-0  7780  1/132/2143 K 3.54 4     283 1210851  34.3  3.92  61.38 66.249.70.136  http/1.1 team.cloudware.ng:443      GET /?l=2384547003 HTTP/1.1
   3-0  4209  1/246/2088 K 3.99 2     350 1194578  33.6  4.66  52.99 66.249.64.131  http/1.1 team.cloudware.ng:443      GET /?l=598239064 HTTP/1.1
   4-0  11386 0/59/1916  _ 1.22 0     0   1116797  0.0   1.42  50.78 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   5-0  12719 1/28/2026  K 0.87 3     260 1140235  34.1  0.67  51.24 66.249.64.76   http/1.1 team.cloudware.ng:443      GET /?l=3432780902 HTTP/1.1
   6-0  8127  1/120/1881 C 2.87 6     7   1098270  10.1  3.88  56.65 196.75.63.26   http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php?lga=Kankia&state=Katsina&ward=Ga
   7-0  14347 0/1/1820   W 0.00 0     0   1016993  0.0   0.01  49.41 192.178.4.98   http/1.1 team.cloudware.ng:443      GET /?l=3640400162 HTTP/1.1
   8-0  12940 1/34/1682  K 0.84 0     294 962006   34.4  0.87  41.65 66.249.64.64   http/1.1 team.cloudware.ng:443      GET /?l=1415699218 HTTP/1.1
   9-0  13327 1/26/1594  K 0.69 3     272 1007002  33.6  0.75  40.20 66.249.70.32   http/1.1 team.cloudware.ng:443      GET /?l=4209809548 HTTP/1.1
   10-0 8345  2/127/1673 K 3.09 2     299 955960   66.4  2.67  46.62 66.249.64.229  http/1.1 team.cloudware.ng:443      GET /?l=3071370908 HTTP/1.1
   11-0 6545  0/161/1593 _ 3.72 0     300 943879   0.0   4.39  54.57 66.249.70.165  http/1.1 team.cloudware.ng:443      GET /?l=1679169664 HTTP/1.1
   12-0 12949 1/32/1621  K 0.87 3     263 916623   34.9  0.96  41.72 66.249.64.174  http/1.1 team.cloudware.ng:443      GET /?l=3744433189 HTTP/1.1
   13-0 14348 1/2/1640   K 0.01 0     407 973575   34.5  0.04  43.68 192.178.4.97   http/1.1 team.cloudware.ng:443      GET /?l=2401355959 HTTP/1.1
   14-0 14358 0/0/1513   W 0.00 0     0   878283   0.0   0.00  51.23 152.42.189.164 http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   15-0 14359 1/1/1221   K 0.00 0     442 44100490 38.3  0.04  29.47 192.178.4.99   http/1.1 team.cloudware.ng:443      GET /?l=2644278371 HTTP/1.1
   16-0 9439  1/107/1357 K 2.40 1     294 781308   36.7  2.79  33.88 66.249.64.36   http/1.1 team.cloudware.ng:443      GET /?l=400710456 HTTP/1.1
   17-0 8158  0/175/1272 _ 4.45 0     22  706043   0.0   2.35  31.26 66.249.70.7    http/1.1 test.cloudware.ng:443      GET /195834614?goodscode=0195578714 HTTP/1.1
   18-0 5959  1/179/1146 K 4.37 0     18  712657   45.5  4.34  33.10 54.39.0.247    http/1.1 cloudsms.com.ng:443        GET /adverts/17.png HTTP/1.1
   19-0 13149 57/58/1495 K 1.48 0     102 911095   382.7 0.38  40.42 185.203.216.90 http/1.1 cloudsms.com.ng:443        GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   20-0 9700  1/78/1217  K 1.55 4     279 680393   34.3  1.95  29.22 66.249.64.66   http/1.1 team.cloudware.ng:443      GET /?l=773404262 HTTP/1.1
   21-0 14360 0/1/1583   W 0.00 0     0   864978   0.0   0.02  41.32 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   22-0 10187 0/63/872   R 1.74 115   1   499460   0.0   1.81  22.19 47.128.96.141  http/1.1
   23-0 10188 0/83/986   _ 2.02 0     24  565575   0.0   2.17  26.84 116.203.129.16 http/1.1 cloudsms.com.ng:443        GET /cron/process_queue1.php HTTP/1.1
   24-0 14361 1/1/728    K 0.00 0     445 452924   33.8  0.03  23.76 192.178.4.99   http/1.1 team.cloudware.ng:443      GET /?l=3472874744 HTTP/1.1
   25-0 13345 1/26/745   K 0.62 3     260 466240   34.5  0.70  19.73 66.249.70.130  http/1.1 team.cloudware.ng:443      GET /?l=1638989664 HTTP/1.1
   26-0 13358 1/15/1193  K 0.30 2     300 700539   36.7  0.39  35.82 66.249.64.229  http/1.1 team.cloudware.ng:443      GET /?l=3895829088 HTTP/1.1
   27-0 -     0/0/706    . 0.00 55    0   431206   0.0   0.00  17.92 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -     0/0/805    . 0.00 49    0   415390   0.0   0.00  21.55 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -     0/0/165    . 0.00 48    0   82919    0.0   0.00  4.84  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 13361 1/14/366   K 0.30 2     265 246678   34.9  0.38  9.80  66.249.64.170  http/1.1 team.cloudware.ng:443      GET /?l=2904862833 HTTP/1.1
   31-0 -     0/0/376    . 0.00 386   0   238863   0.0   0.00  9.74  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -     0/0/387    . 0.00 385   0   214465   0.0   0.00  10.07 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -     0/0/173    . 0.00 801   0   97942    0.0   0.00  4.57  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -     0/0/14     . 0.00 803   0   6230     0.0   0.00  0.40  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -     0/0/180    . 0.00 29031 0   103001   0.0   0.00  5.61  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -     0/0/1      . 0.00 29526 0   0        0.0   0.00  0.00  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -     0/0/6      . 0.00 29622 0   2734     0.0   0.00  0.14  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -     0/0/17     . 0.00 29568 0   8545     0.0   0.00  0.47  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -     0/0/6      . 0.00 29631 0   3692     0.0   0.00  0.15  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -     0/0/3      . 0.00 29626 0   1364     0.0   0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -     0/0/3      . 0.00 29625 0   1247     0.0   0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -     0/0/6      . 0.00 29619 0   3775     0.0   0.00  0.08  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -     0/0/4      . 0.00 29612 0   1332     0.0   0.00  0.08  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -     0/0/4      . 0.00 29633 0   656      0.0   0.00  0.05  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -     0/0/4      . 0.00 29618 0   1404     0.0   0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -     0/0/3      . 0.00 29624 0   1264     0.0   0.00  0.07  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -     0/0/6      . 0.00 29604 0   3807     0.0   0.00  0.16  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -     0/0/4      . 0.00 29606 0   2243     0.0   0.00  0.10  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   49-0 -     0/0/7      . 0.00 29597 0   2445     0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   50-0 -     0/0/4      . 0.00 29617 0   1064     0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   51-0 -     0/0/7      . 0.00 29615 0   3531     0.0   0.00  0.19  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   52-0 -     0/0/8      . 0.00 29613 0   4670     0.0   0.00  0.22  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   53-0 -     0/0/11     . 0.00 29607 0   5804     0.0   0.00  0.27  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   54-0 -     0/0/14     . 0.00 29593 0   7651     0.0   0.00  0.35  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   55-0 -     0/0/3      . 0.00 29614 0   579      0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   56-0 -     0/0/2      . 0.00 29620 0   607      0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   57-0 -     0/0/25     . 0.00 29514 0   14460    0.0   0.00  0.73  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   58-0 -     0/0/8      . 0.00 29609 0   4320     0.0   0.00  0.22  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   59-0 -     0/0/8      . 0.00 29611 0   4325     0.0   0.00  0.21  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   60-0 -     0/0/7      . 0.00 29603 0   3573     0.0   0.00  0.18  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   61-0 -     0/0/140    . 0.00 29107 0   77185    0.0   0.00  4.63  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1113
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 11 seconds, (range: 0...49)
   index usage: 19%, cache usage: 26%
   total entries stored since starting: 28321
   total entries replaced since starting: 0
   total entries expired since starting: 27198
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 79 miss
   total removes since starting: 10 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit