403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.01.12.txt
 ## mem threshold exceeded
 ## swap threshold exceeded
## server overview
2025-11-20.01.12 load[6] mem[85/58] mysql[5/10] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1834         141          19         387         324
Swap:          1999        1224         775
 01:12:02 up 17 min,  0 users,  load average: 6.09, 4.73, 2.45
## system overview
top - 01:12:03 up 17 min,  0 users,  load average: 6.09, 4.73, 2.45
Tasks: 211 total,   6 running, 204 sleeping,   0 stopped,   1 zombie
%Cpu(s): 76.9 us, 20.5 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  2.6 si,  0.0 st
KiB Mem :  2420300 total,    97776 free,  1887624 used,   434900 buff/cache
KiB Swap:  2047996 total,   794620 free,  1253376 used.   322884 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1752 mysql     20   0 1461928 211984   2936 S  52.6  8.8   0:26.61 /usr/sbin+
 15607 healtho+  20   0  465248  71828   4172 R  42.1  3.0   0:03.95 php-fpm: +
 15667 healtho+  20   0  460772  67412   4172 R  26.3  2.8   0:02.05 php-fpm: +
 15718 cloudw    20   0  573692 108488   6592 S  21.1  4.5   0:00.56 php-fpm: +
   495 root      20   0   24696   1160    812 S   5.3  0.0   0:00.28 /usr/lib/+
  4787 nobody    20   0  277760  19964   4452 S   5.3  0.8   0:01.43 /usr/sbin+
 13369 nobody    20   0  277772  19052   3868 S   5.3  0.8   0:00.26 /usr/sbin+
 13395 nobody    20   0  277760  18796   3668 S   5.3  0.8   0:00.22 /usr/sbin+
 15666 oyrtmay+  20   0  448472  55160   4148 R   5.3  2.3   0:00.89 php-fpm: +
 15797 nigeria   20   0  404052  16144  10384 S   5.3  0.7   0:00.05 /opt/cpan+
 15836 cloudw    20   0  285108  12940   8672 S   5.3  0.5   0:00.01 /opt/cpan+
     1 root      20   0   44256   3256   1440 S   0.0  0.1   0:02.25 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     3 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:01.12 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.26 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    30 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    31 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [kworker/+
    36 root      20   0       0      0      0 S   0.0  0.0   0:06.91 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    48 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kauditd]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
   257 root       0 -20       0      0      0 S   0.0  0.0   0:00.41 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:00.47 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.15 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40240   5544   5220 S   0.0  0.2   0:00.77 /usr/lib/+
   381 root      20   0   45352    268     96 S   0.0  0.0   0:00.34 /usr/lib/+
   410 root      16  -4   55532    172     60 S   0.0  0.0   0:00.11 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   476 polkitd   20   0  612240    864    500 S   0.0  0.0   0:00.17 /usr/lib/+
   477 dbus      20   0   58592   1296    624 S   0.0  0.1   0:00.63 /usr/bin/+
   486 rpc       20   0   69256    168     60 S   0.0  0.0   0:00.01 /sbin/rpc+
   499 root      20   0   52852    104    100 S   0.0  0.0   0:00.00 /usr/sbin+
   503 root      20   0  152780     60     52 S   0.0  0.0   0:00.00 /usr/sbin+
   505 nscd      20   0  928956   1212    512 R   0.0  0.1   0:00.81 /usr/sbin+
   506 root      20   0  224144   6360    784 S   0.0  0.3   0:00.08 queueproc+
   508 root      20   0   21540    408    296 S   0.0  0.0   0:00.02 /usr/sbin+
   515 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   547 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124480    448    312 S   0.0  0.0   0:00.03 /usr/sbin+
   558 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   568 root      20   0  114704     36     36 S   0.0  0.0   0:00.03 /bin/bash
   572 root      20   0  108296     52     48 S   0.0  0.0   0:00.00 /sbin/age+
   609 mailnull  20   0   89116   3428    428 S   0.0  0.1   0:00.05 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   669 root       0 -20       0      0      0 D   0.0  0.0   0:02.59 [loop0]
   683 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   684 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   920 root      20   0  153404    284    200 S   0.0  0.0   0:00.02 pure-ftpd+
   921 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   923 root      20   0   51508    416    256 S   0.0  0.0   0:00.06 /usr/sbin+
   925 systuser  20   0  113676   1848      0 S   0.0  0.1   0:00.00 /usr/loca+
   926 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.02 /usr/bin/+
   927 telegraf  20   0 5654048  34112    140 S   0.0  1.4   0:00.79 /usr/loca+
   928 systuser  20   0  114016  11956    712 S   0.0  0.5   0:00.35 /usr/loca+
   929 root      20   0 1276100   9312     12 S   0.0  0.4   0:30.44 /usr/bin/+
   930 root      20   0 1277312  11308     52 S   0.0  0.5   0:23.22 /usr/bin/+
   931 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   933 root      20   0  216400   5776   4328 S   0.0  0.2   0:00.37 /usr/sbin+
   935 root      20   0  439788  11272  11064 S   0.0  0.5   0:00.15 php-fpm: +
   936 named     20   0  637996  21704   1416 S   0.0  0.9   0:01.01 /usr/sbin+
   938 root      20   0  261028   3052    784 S   0.0  0.1   0:00.25 cpsrvd (S+
   942 root      20   0  400740   2884    648 S   0.0  0.1   0:00.50 php-fpm: +
   947 root      20   0 1689580 429408     80 S   0.0 17.7   0:13.58 /usr/loca+
   964 root      20   0  111304    412    316 S   0.0  0.0   0:00.14 /usr/sbin+
   972 root      20   0  389508    596    388 S   0.0  0.0   0:00.10 php-fpm: +
   979 cpanelc+  20   0    9700   2548   2208 S   0.0  0.1   0:00.87 /usr/loca+
   982 root      20   0  396248    260    180 S   0.0  0.0   0:00.11 php-fpm: +
   984 root      20   0  388892    708    496 S   0.0  0.0   0:00.10 php-fpm: +
   985 root      20   0  445028   3016   2904 S   0.0  0.1   0:00.10 sw-engine+
   986 systuser  20   0  113272   1820      0 S   0.0  0.1   0:00.00 /usr/loca+
   987 root      20   0  572372    760    292 S   0.0  0.0   0:00.22 /usr/bin/+
  1116 dovenull  20   0   46912   1344    760 S   0.0  0.1   0:00.01 dovecot/p+
  1117 dovenull  20   0   47056   1808   1044 S   0.0  0.1   0:00.02 dovecot/i+
  1118 dovecot   20   0   10320    240    124 S   0.0  0.0   0:00.00 dovecot/a+
  1119 root      20   0   10452    380    212 S   0.0  0.0   0:00.00 dovecot/l+
  1120 dovenull  20   0   46912   1400    816 S   0.0  0.1   0:00.02 dovecot/p+
  1121 dovenull  20   0   46780    632    364 S   0.0  0.0   0:00.00 dovecot/i+
  1128 root      20   0   24528   1812    280 S   0.0  0.1   0:00.02 dovecot/c+
  1133 systuser  20   0  157708   2104     52 S   0.0  0.1   0:00.01 SonarPush+
  1137 dovecot   20   0   13568    496    288 S   0.0  0.0   0:00.00 dovecot/s+
  1172 root      20   0  248320 119544   2652 S   0.0  4.9   0:02.95 /usr/loca+
  1190 dovecot   20   0   41056    956    560 S   0.0  0.0   0:00.03 dovecot/a+
  1258 wp-tool+  20   0  412368  32236   1444 S   0.0  1.3   0:00.58 /usr/bin/+
  1259 wp-tool+  20   0  387528  12748   1120 S   0.0  0.5   0:00.10 /usr/bin/+
  1294 root      20   0  167452   1368    764 S   0.0  0.1   0:00.06 dnsadmin +
  1298 root      20   0  183900     72     72 S   0.0  0.0   0:00.09 cpdavd - +
  1300 root      20   0  209344   9928   1132 S   0.0  0.4   0:00.41 tailwatchd
  1692 root      20   0  299272    672    292 S   0.0  0.0   0:00.02 php-fpm: +
  1709 root      38  18  130416   1396    684 S   0.0  0.1   0:00.00 cpanellog+
  1943 root      20   0  266992   8036    752 S   0.0  0.3   0:00.19 /usr/sbin+
  1945 root      20   0   12748    424    292 S   0.0  0.0   0:00.15 /usr/loca+
  1946 root      20   0   12732    272    200 S   0.0  0.0   0:00.13 /usr/loca+
  1947 root      20   0   12752    340    232 S   0.0  0.0   0:00.14 /usr/loca+
  1952 root      20   0   53268     92     92 S   0.0  0.0   0:00.04 /usr/loca+
  2017 root      20   0  181200   9444   1168 S   0.0  0.4   0:01.15 lfd - sle+
  2273 root      20   0       0      0      0 D   0.0  0.0   0:00.06 [kworker/+
  3922 nobody    20   0  277784  19904   4360 S   0.0  0.8   0:01.35 /usr/sbin+
  4823 nobody    20   0  277896  20000   4352 S   0.0  0.8   0:01.43 /usr/sbin+
  6131 nobody    20   0  277900  20120   4272 S   0.0  0.8   0:01.13 /usr/sbin+
  6622 root      20   0  183052   1628   1060 S   0.0  0.1   0:00.00 /usr/sbin+
  6706 root      20   0  113284    700    520 S   0.0  0.0   0:00.00 /bin/sh -+
  6722 root      20   0  108056    280    208 S   0.0  0.0   0:00.00 sleep 2h +
  6770 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  6775 oysipao+  20   0    3152    524     32 S   0.0  0.0   0:00.00 [kworker]
  7285 root      20   0  249444 119144   1080 S   0.0  4.9   0:00.08 spamd chi+
  7286 root      20   0  248320 117508    652 S   0.0  4.9   0:00.00 spamd chi+
  7626 nobody    20   0  277888  19756   4324 S   0.0  0.8   0:01.07 /usr/sbin+
  7815 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9334 nobody    20   0  277892  19800   4332 S   0.0  0.8   0:00.99 /usr/sbin+
  9391 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12301 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12309 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12325 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12513 nobody    20   0  277764  19560   3988 S   0.0  0.8   0:00.39 /usr/sbin+
 12668 nobody    20   0  277900  19060   3916 S   0.0  0.8   0:00.37 /usr/sbin+
 13141 nobody    20   0  277764  18864   3720 S   0.0  0.8   0:00.32 /usr/sbin+
 13370 nobody    20   0  277760  19100   3848 S   0.0  0.8   0:00.34 /usr/sbin+
 13394 nobody    20   0  277648  19112   4028 S   0.0  0.8   0:00.34 /usr/sbin+
 13396 nobody    20   0  277764  19140   3968 S   0.0  0.8   0:00.31 /usr/sbin+
 13398 nobody    20   0  277900  19172   4016 S   0.0  0.8   0:00.37 /usr/sbin+
 13399 nobody    20   0  277920  19000   3824 S   0.0  0.8   0:00.21 /usr/sbin+
 13621 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 13761 root      20   0   22224   1168    880 D   0.0  0.0   0:03.06 /usr/bin/+
 14802 root      20   0   60820   2976   1988 S   0.0  0.1   0:00.00 dovecot/l+
 14914 nobody    20   0  277900  18784   3696 S   0.0  0.8   0:00.16 /usr/sbin+
 14931 nobody    20   0  277900  18804   3688 S   0.0  0.8   0:00.16 /usr/sbin+
 14932 nobody    20   0  277772  18860   3704 S   0.0  0.8   0:00.17 /usr/sbin+
 14950 nobody    20   0  277628  18596   3568 S   0.0  0.8   0:00.04 /usr/sbin+
 14951 nobody    20   0  277764  18756   3628 S   0.0  0.8   0:00.12 /usr/sbin+
 15389 oyrtmay+  20   0  456664  63420   4152 S   0.0  2.6   0:04.53 php-fpm: +
 15454 oyrtmay+  20   0  456664  63416   4148 S   0.0  2.6   0:03.79 php-fpm: +
 15540 nigeria   20   0  400460   5416   2396 S   0.0  0.2   0:00.01 php-fpm: +
 15550 wp-tool+  20   0  445028    192     64 S   0.0  0.0   0:00.00 sw-engine+
 15588 oyrtmay+  20   0  454616  61360   4148 S   0.0  2.5   0:01.79 php-fpm: +
 15633 healtho+  20   0  462688  69452   4172 S   0.0  2.9   0:03.11 php-fpm: +
 15689 root      20   0  157100   5080   3788 S   0.0  0.2   0:00.00 sshd: unk+
 15690 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: unk+
 15719 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 15734 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 15735 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15738 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15740 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15741 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15742 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15743 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15744 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15745 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15746 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 15748 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 15751 root      20   0  157100   5076   3792 S   0.0  0.2   0:00.00 sshd: unk+
 15752 sshd      20   0  115644   2624   1560 S   0.0  0.1   0:00.00 sshd: unk+
 15755 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 15757 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 15758 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 15759 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 15760 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 15761 root      20   0   20164    992    788 S   0.0  0.0   0:00.00 jailshell+
 15763 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 15765 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 15766 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 15767 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 15769 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 15770 root      20   0  108052    360    284 S   0.0  0.0   0:00.00 /usr/bin/+
 15776 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 15786 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 15789 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 15790 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 15824 healtho+  20   0  400460   2904    572 S   0.0  0.1   0:00.00 php-fpm: +
 15831 root      20   0  160220   2068   1580 R   0.0  0.1   0:00.00 top -bcn1
 15838 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 15839 cloudsms  20   0   20164    264      0 R   0.0  0.0   0:00.00 /usr/loca+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          3  0.0  0.0      0     0 ?        R    00:54   0:00  \_ [kworker/0:0]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        R    00:54   0:01  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         30  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/0:1]
root         31  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/1:1]
root         36  0.6  0.0      0     0 ?        S    00:54   0:06  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         48  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/u200:1]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        104  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/0:2]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        251  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        252  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        253  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        R    00:54   0:00  \_ [kworker/u200:3]
root        257  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:1H]
root        267  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        R    00:54   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        669  0.2  0.0      0     0 ?        S<   00:54   0:02  \_ [loop0]
root        683  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        684  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root       2273  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [kworker/1:3]
root       7815  0.0  0.0      0     0 ?        S    01:01   0:00  \_ [kworker/1:0]
root       9391  0.0  0.0      0     0 ?        S    01:03   0:00  \_ [kworker/0:3]
root      12301  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/0:4]
root      12309  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/u200:0]
root      12325  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/1:2]
root      13621  0.0  0.0      0     0 ?        S    01:09   0:00  \_ [kworker/1:4]
root          1  0.2  0.1  44256  3256 ?        Ss   00:54   0:02 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.2  40240  5544 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-journald
root        381  0.0  0.0  45352   268 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   172 ?        S<sl 00:54   0:00 /sbin/auditd
polkitd     476  0.0  0.0 612240   864 ?        Ssl  00:54   0:00 /usr/lib/polkit-1/polkitd --no-debug
dbus        477  0.0  0.0  58592  1296 ?        Ss   00:54   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         486  0.0  0.0  69256   168 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        495  0.0  0.0  24696  1160 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-logind
root        499  0.0  0.0  52852   104 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        503  0.0  0.0 152780    60 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        505  0.0  0.0 928956  1212 ?        Ssl  00:54   0:00 /usr/sbin/nscd
root        506  0.0  0.2 224144  6360 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        508  0.0  0.0  21540   408 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        515  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        547  0.0  0.0   4388    36 ?        Ss   00:54   0:00 /usr/sbin/acpid
root        555  0.0  0.0 124480   448 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       6622  0.0  0.0 183052  1628 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6706  0.0  0.0 113284   700 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       6722  0.0  0.0 108056   280 ?        S    01:00   0:00  |       \_ sleep 2h 22m
root      15734  0.0  0.0 183048  2160 ?        S    01:12   0:00  \_ /usr/sbin/CROND -n
root      15763  0.0  0.0 113284  1208 ?        Ss   01:12   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      15770  0.0  0.0 108052   360 ?        S    01:12   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      15776  0.0  0.0 113288  1516 ?        S    01:12   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      15840  0.0  0.0 153840  2096 ?        R    01:12   0:00  |               \_ ps auxf
root      15735  0.0  0.0 183048  2156 ?        S    01:12   0:00  \_ /usr/sbin/CROND -n
root      15755  0.0  0.0  20164   804 ?        Ss   01:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      15738  0.0  0.0 183048  2156 ?        S    01:12   0:00  \_ /usr/sbin/CROND -n
root      15760  0.0  0.0  20164   808 ?        Ss   01:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      15740  0.0  0.0 183048  2152 ?        S    01:12   0:00  \_ /usr/sbin/CROND -n
root      15766  0.0  0.0  20164   804 ?        Ss   01:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      15741  0.0  0.0 183048  2152 ?        S    01:12   0:00  \_ /usr/sbin/CROND -n
root      15767  0.0  0.0  20164   808 ?        Ss   01:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      15742  0.0  0.0 183048  2152 ?        S    01:12   0:00  \_ /usr/sbin/CROND -n
root      15765  0.0  0.0  20164   804 ?        Ss   01:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      15743  0.0  0.0 183048  2148 ?        S    01:12   0:00  \_ /usr/sbin/CROND -n
root      15758  0.0  0.0  20164   804 ?        Ss   01:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      15744  0.0  0.0 183048  2148 ?        S    01:12   0:00  \_ /usr/sbin/CROND -n
root      15761  0.0  0.0  20164   992 ?        Ss   01:12   0:00  |   \_ jailshell (cloudsms) [15838] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  15838  0.0  0.0  20164   264 ?        S    01:12   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  15839  0.0  0.0 113284  1212 ?        S    01:12   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
cloudsms  15841  0.0  0.2 226664  5692 ?        R    01:12   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue3.php
root      15745  0.0  0.0 183048  2148 ?        S    01:12   0:00  \_ /usr/sbin/CROND -n
root      15757  0.0  0.0  20164   804 ?        Ss   01:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      15746  0.0  0.0 183048  2148 ?        S    01:12   0:00  \_ /usr/sbin/CROND -n
root      15759  0.0  0.0  20164   968 ?        Ss   01:12   0:00  |   \_ jailshell (pactpay) [15786] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   15786  0.0  0.0  20164   256 ?        S    01:12   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   15789  2.0  0.7 480124 17688 ?        S    01:12   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      15748  0.0  0.0 183048  2144 ?        S    01:12   0:00  \_ /usr/sbin/CROND -n
root      15769  0.0  0.0  20164   968 ?        Ss   01:12   0:00      \_ jailshell (nigeria) [15790] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   15790  0.0  0.0  20164   260 ?        S    01:12   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   15797  5.0  0.6 404052 16144 ?        S    01:12   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0  24208     0 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        568  0.0  0.0 114704    36 ttyS0    Ss+  00:54   0:00 /bin/bash
root        572  0.0  0.0 108296    52 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
mailnull    609  0.0  0.1  89116  3428 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        920  0.0  0.0 153404   284 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    921  0.0  0.0  10388    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        923  0.0  0.0  51508   416 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1116  0.0  0.0  46912  1344 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1117  0.0  0.0  47056  1808 ?        S    00:54   0:00  \_ dovecot/imap-login
dovecot    1118  0.0  0.0  10320   240 ?        S    00:54   0:00  \_ dovecot/anvil
root       1119  0.0  0.0  10452   380 ?        S    00:54   0:00  \_ dovecot/log
dovenull   1120  0.0  0.0  46912  1400 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1121  0.0  0.0  46780   632 ?        S    00:54   0:00  \_ dovecot/imap-login
root       1128  0.0  0.0  24528  1812 ?        S    00:54   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   496 ?        S    00:54   0:00  \_ dovecot/stats
dovecot    1190  0.0  0.0  41056   956 ?        S    00:54   0:00  \_ dovecot/auth
root      14802  0.0  0.1  60820  2976 ?        S    01:10   0:00  \_ dovecot/lmtp
systuser    925  0.0  0.0 113676  1848 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    926  0.0  0.0 342400     0 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
telegraf    927  0.0  1.4 5654048 34112 ?       SLsl 00:54   0:00 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    928  0.0  0.4 114016 11956 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        929  2.8  0.3 1276100 9312 ?        Ssl  00:54   0:30 /usr/bin/cspdaemon
root        930  2.1  0.4 1277312 11308 ?       Ssl  00:54   0:23 /usr/bin/checkstatus
systuser    931  0.0  0.0  12660    60 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        933  0.0  0.2 216400  5776 ?        Ssl  00:54   0:00 /usr/sbin/rsyslogd -n
root        935  0.0  0.4 439788 11272 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       936  0.0  0.8 637996 21704 ?        Ssl  00:54   0:01 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        938  0.0  0.1 261028  3052 ?        Ss   00:54   0:00 cpsrvd (SSL) - waiting for connections                   
root      15719  0.0  0.0      0     0 ?        Z    01:11   0:00  \_ [cpaneld - servi] <defunct>
root        942  0.0  0.1 400740  2884 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
oyrtmay+  15389 11.6  2.6 456664 63420 ?        S    01:11   0:04  \_ php-fpm: pool oyrtmayouthvolunteers_oyostate_gov_ng
oyrtmay+  15454 11.4  2.6 456664 63416 ?        S    01:11   0:03  \_ php-fpm: pool oyrtmayouthvolunteers_oyostate_gov_ng
nigeria   15540  0.0  0.2 400460  5416 ?        S    01:11   0:00  \_ php-fpm: pool nigeriadecide_org
oyrtmay+  15588 10.5  2.5 454616 61360 ?        S    01:11   0:01  \_ php-fpm: pool oyrtmayouthvolunteers_oyostate_gov_ng
healtho+  15607 24.7  2.8 462688 69456 ?        S    01:11   0:03  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  15633 23.9  2.8 462688 69452 ?        S    01:11   0:03  \_ php-fpm: pool health_oyostate_gov_ng
oyrtmay+  15666  9.8  2.2 448472 55160 ?        R    01:11   0:00  \_ php-fpm: pool oyrtmayouthvolunteers_oyostate_gov_ng
healtho+  15667 23.1  2.7 460772 67412 ?        R    01:11   0:02  \_ php-fpm: pool health_oyostate_gov_ng
cloudw    15718 19.0  4.5 575932 109020 ?       R    01:11   0:00  \_ php-fpm: pool cloudware_ng
healtho+  15824  0.0  0.1 400460  2904 ?        S    01:12   0:00  \_ php-fpm: pool health_oyostate_gov_ng
root        947  1.2 17.7 1689580 429408 ?      Ssl  00:54   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        964  0.0  0.0 111304   412 ?        Ss   00:54   0:00 /usr/sbin/sshd -D
root      15689  0.0  0.2 157100  5080 ?        Ss   01:11   0:00  \_ sshd: unknown [priv]
sshd      15690  0.0  0.1 115644  2632 ?        S    01:11   0:00  |   \_ sshd: unknown [net]
root      15751  0.0  0.2 157100  5076 ?        Ss   01:12   0:00  \_ sshd: unknown [priv]
sshd      15752  0.0  0.1 115644  2624 ?        S    01:12   0:00      \_ sshd: unknown [net]
root        972  0.0  0.0 389508   596 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
cpanelc+    979  0.0  0.1   9700  2548 ?        Rs   00:54   0:00 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 396248   260 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        984  0.0  0.0 388892   708 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.1 445028  3016 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  15550  0.0  0.0 445028   192 ?        S    01:11   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    986  0.0  0.0 113272  1820 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        987  0.0  0.0 572372   760 ?        Ssl  00:54   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1133  0.0  0.0 157708  2104 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.2  4.9 248320 119544 ?       Ss   00:54   0:02 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7285  0.0  4.9 249444 119144 ?       S    01:00   0:00  \_ spamd child
root       7286  0.0  4.8 248320 117508 ?       S    01:00   0:00  \_ spamd child
wp-tool+   1258  0.0  1.3 412368 32236 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1259  0.0  0.5 387528 12748 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1294  0.0  0.0 167452  1368 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1298  0.0  0.0 183900    72 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1300  0.0  0.4 209344  9928 ?        Ss   00:54   0:00 tailwatchd
root       1692  0.0  0.0 299272   672 ?        Rs   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1709  0.0  0.0 130416  1396 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1752  2.4  8.7 1461928 212208 ?      Sl   00:54   0:26 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1943  0.0  0.3 266992  8036 ?        Ss   00:54   0:00 /usr/sbin/httpd -k start
root       1945  0.0  0.0  12748   424 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1946  0.0  0.0  12732   272 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1947  0.0  0.0  12752   340 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1952  0.0  0.0  53268    92 ?        S    00:54   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     3922  0.1  0.8 277784 19904 ?        R    00:56   0:01  \_ /usr/sbin/httpd -k start
nobody     4787  0.1  0.8 277760 19964 ?        S    00:57   0:01  \_ /usr/sbin/httpd -k start
nobody     4823  0.1  0.8 277896 20000 ?        S    00:57   0:01  \_ /usr/sbin/httpd -k start
nobody     6131  0.1  0.8 277900 20120 ?        S    00:59   0:01  \_ /usr/sbin/httpd -k start
nobody     7626  0.1  0.8 277888 19756 ?        S    01:00   0:01  \_ /usr/sbin/httpd -k start
nobody     9334  0.1  0.8 277892 19800 ?        S    01:03   0:00  \_ /usr/sbin/httpd -k start
nobody    12513  0.1  0.8 277764 19560 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    12668  0.1  0.7 277900 19060 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    13141  0.1  0.7 277764 18864 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    13369  0.1  0.7 277772 19052 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
cloudw    15836  0.0  0.6 288176 15948 ?        Rl   01:12   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    13370  0.1  0.7 277760 19100 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    13394  0.1  0.7 277648 19112 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    13395  0.1  0.7 277760 18796 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    13396  0.1  0.7 277764 19140 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    13398  0.1  0.7 277900 19172 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    13399  0.1  0.7 277920 19000 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    14914  0.1  0.7 277900 18784 ?        S    01:10   0:00  \_ /usr/sbin/httpd -k start
nobody    14931  0.2  0.7 277900 18804 ?        S    01:10   0:00  \_ /usr/sbin/httpd -k start
nobody    14932  0.2  0.7 277772 18860 ?        S    01:10   0:00  \_ /usr/sbin/httpd -k start
nobody    14950  0.0  0.7 277628 18596 ?        S    01:10   0:00  \_ /usr/sbin/httpd -k start
nobody    14951  0.1  0.7 277764 18756 ?        S    01:10   0:00  \_ /usr/sbin/httpd -k start
root       2017  0.1  0.3 181200  9444 ?        Ss   00:54   0:01 lfd - sleeping
oysipao+   6770  0.0  0.0   3148   416 ?        Ss   01:00   0:00 [kworker]
oysipao+   6775  0.0  0.0   3152   524 ?        S    01:00   0:00  \_ [kworker]
root      13761  1.7  0.0  22224  1168 ?        Rs   01:09   0:03 /usr/bin/systemd-tmpfiles --clean
## mysql stats
Uptime: 1066  Threads: 6  Questions: 205734  Slow queries: 0  Opens: 1557  Flush tables: 1  Open tables: 1499  Queries per second avg: 192.996
*************************** 1. row ***************************
     Id: 3280
   User: cloudw_wp466
   Host: localhost
     db: cloudw_wp466
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 3292
   User: oyrtmayouthvol78_mda
   Host: localhost
     db: oyrtmayouthvol78_mda
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 3295
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `osun_official_polling_unit` WHERE `pu_code`='29/28/03/009(	pu)' LIMIT 1
*************************** 4. row ***************************
     Id: 3296
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 1
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 5. row ***************************
     Id: 3302
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 6. row ***************************
     Id: 3304
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.149.43 TIME_WAIT
      1 129.226.174.80 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.161.65.218 TIME_WAIT
      1 87.250.224.16 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
    295 129.212.183.198 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 01:12:03 WAT
   Restart Time: Thursday, 20-Nov-2025 00:54:23 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 17 minutes 39 seconds
   Server load: 6.09 4.73 2.45
   Total accesses: 6699 - Total Traffic: 128.9 MB - Total Duration: 4673195
   CPU Usage: u8.28 s3.05 cu56.06 cs44.36 - 10.6% CPU load
   6.33 requests/sec - 124.7 kB/second - 19.7 kB/request - 697.596 ms/request
   13 requests currently being processed, 0 workers gracefully restarting, 8 idle workers

KWK_.R__KK_.__....WW..._._..RWW.KR..............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU  SS  Req   Dur   Conn  Child Slot     Client      Protocol              VHost                                          Request
   0-0  14914 1/43/268  K 0.39 2   349  164547 35.2  0.53  5.37 192.178.4.103   http/1.1 team.cloudware.ng:443           GET /?l=2989317129 HTTP/1.1
   1-0  6131  0/255/293 W 4.43 0   0    213528 0.0   4.27  4.94 129.212.183.198 http/1.1 oyrtmayouthvolunteers.oyostate. POST //xmlrpc.php HTTP/1.1
   2-0  14931 1/40/261  K 0.50 0   3253 174102 73.8  0.65  5.59 57.141.0.64     http/1.1 cloudware.ng:443                GET /medical-practice-management-software-solutions/ HTTP/1.1
   3-0  14932 0/41/348  _ 0.44 0   395  226936 0.0   0.57  6.91 192.178.4.100   http/1.1 team.cloudware.ng:443           GET /?l=1212664903 HTTP/1.1
   4-0  -     0/0/277   . 0.00 31  1    188780 0.0   0.00  5.29 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   5-0  14950 0/12/322  R 0.07 51  415  216561 0.0   0.31  5.29 105.112.225.91  http/1.1
   6-0  7626  0/252/279 _ 4.05 0   367  209070 0.0   4.13  4.75 192.178.4.98    http/1.1 team.cloudware.ng:443           GET /?l=3350031155 HTTP/1.1
   7-0  9334  0/219/242 _ 3.44 1   432  182569 0.0   4.01  4.42 129.212.183.198 http/1.1 oyrtmayouthvolunteers.oyostate. POST //xmlrpc.php HTTP/1.1
   8-0  12513 1/93/281  K 1.22 0   391  185349 35.9  1.39  4.08 192.178.4.105   http/1.1 team.cloudware.ng:443           GET /?l=891345752 HTTP/1.1
   9-0  13141 4/82/159  K 0.87 1   359  128823 126.5 1.10  2.50 192.178.4.99    http/1.1 team.cloudware.ng:443           GET /?l=3325378840 HTTP/1.1
   10-0 14951 0/37/118  _ 0.27 1   380  95820  0.0   0.36  2.09 129.212.183.198 http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   11-0 -     0/0/305   . 0.00 73  0    222875 0.0   0.00  7.21 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   12-0 3922  0/267/271 _ 5.48 0   743  187584 0.0   5.95  5.97 129.212.183.198 http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   13-0 12668 0/101/184 _ 0.98 0   3    130360 0.0   1.23  3.47 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   14-0 -     0/0/147   . 0.00 71  0    110563 0.0   0.00  2.70 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   15-0 -     0/0/66    . 0.00 144 0    58466  0.0   0.00  1.15 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   16-0 -     0/0/259   . 0.00 192 0    167556 0.0   0.00  5.99 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   17-0 -     0/0/99    . 0.00 131 0    51120  0.0   0.00  2.32 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-0 13369 0/64/180  W 0.76 0   0    116572 0.0   0.93  3.89 192.178.4.97    http/1.1 team.cloudware.ng:443           GET /?l=1351774207 HTTP/1.1
   19-0 13370 0/85/222  W 1.08 0   0    146716 0.0   1.27  4.63 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   20-0 -     0/0/118   . 0.00 70  0    81108  0.0   0.00  2.62 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 -     0/0/69    . 0.00 132 0    49435  0.0   0.00  1.14 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   22-0 -     0/0/296   . 0.00 74  0    198687 0.0   0.00  7.74 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 4787  0/278/278 _ 5.30 0   437  211252 0.0   7.26  7.26 192.178.4.96    http/1.1 team.cloudware.ng:443           GET /?l=724415783 HTTP/1.1
   24-0 -     0/0/228   . 0.00 196 0    94755  0.0   0.00  3.90 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 4823  0/297/297 _ 5.36 0   801  197223 0.0   5.81  5.81 129.212.183.198 http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   26-0 -     0/0/256   . 0.00 72  0    158062 0.0   0.00  5.20 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/69    . 0.00 69  0    69389  0.0   0.00  0.68 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 13394 0/87/87   R 1.02 17  380  72787  0.0   1.24  1.24 105.112.225.91  http/1.1
   29-0 13395 0/56/56   W 0.62 0   0    47158  0.0   0.76  0.76 129.212.183.198 http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   30-0 13396 0/88/88   W 0.84 0   0    75039  0.0   1.06  1.06 18.215.24.66    http/1.1 nigeriadecide.org:443           GET /polling_unit_category.php/images/images/2019elections/2019
   31-0 -     0/0/15    . 0.00 157 0    12776  0.0   0.00  0.10 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 13398 4/101/101 K 0.95 1   418  86276  125.1 1.21  1.21 192.178.4.104   http/1.1 team.cloudware.ng:443           GET /?l=2809848905 HTTP/1.1
   33-0 13399 0/62/62   R 0.54 1   418  53276  0.0   0.75  0.75 129.212.183.198 http/1.1
   34-0 -     0/0/3     . 0.00 193 0    3111   0.0   0.00  0.01 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/95    . 0.00 21  0    84944  0.0   0.00  0.89 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 946
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 11 seconds, (range: 1...33)
   index usage: 16%, cache usage: 22%
   total entries stored since starting: 3232
   total entries replaced since starting: 0
   total entries expired since starting: 2279
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 5 miss
   total removes since starting: 7 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit