403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.01.15.txt
 ## swap threshold exceeded
## server overview
2025-11-20.01.15 load[3] mem[78/59] mysql[5/10] httpd[17]
              total        used        free      shared  buff/cache   available
Mem:           2363        1740          84          20         538         419
Swap:          1999        1253         746
 01:15:02 up 20 min,  0 users,  load average: 4.98, 4.64, 2.82
## system overview
top - 01:15:02 up 20 min,  0 users,  load average: 4.98, 4.64, 2.82
Tasks: 212 total,   8 running, 203 sleeping,   0 stopped,   1 zombie
%Cpu(s): 84.8 us, 15.2 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    77180 free,  1798332 used,   544788 buff/cache
KiB Swap:  2047996 total,   764668 free,  1283328 used.   413700 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1752 mysql     20   0 1462084 214120   3532 S  62.5  8.8   0:34.99 /usr/sbin+
 17604 healtho+  20   0  465248  71840   4188 R  43.8  3.0   0:04.46 php-fpm: +
 17489 oyrtmay+  20   0  459224  65008   4160 R  37.5  2.7   0:03.16 php-fpm: +
 17738 healtho+  20   0  450912  58344   4188 R  18.8  2.4   0:00.53 php-fpm: +
    36 root      20   0       0      0      0 S   6.2  0.0   0:07.34 [kswapd0]
 17860 nigeria   20   0  404052  16140  10384 S   6.2  0.7   0:00.05 /opt/cpan+
 17939 cloudw    20   0  353712  15976  10492 S   6.2  0.7   0:00.01 /opt/cpan+
 17942 root      20   0  160220   2060   1580 R   6.2  0.1   0:00.01 top -bcn1
     1 root      20   0   44256   3288   1468 S   0.0  0.1   0:02.45 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     3 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 R   0.0  0.0   0:00.20 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 R   0.0  0.0   0:01.32 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.03 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:00.32 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    31 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.00 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kauditd]
   104 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   256 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
   257 root       0 -20       0      0      0 S   0.0  0.0   0:00.45 [kworker/+
   267 root       0 -20       0      0      0 S   0.0  0.0   0:00.52 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.19 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40240   5968   5644 S   0.0  0.2   0:00.86 /usr/lib/+
   381 root      20   0   45352    268     96 S   0.0  0.0   0:00.34 /usr/lib/+
   410 root      16  -4   55532    168     56 S   0.0  0.0   0:00.13 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   476 polkitd   20   0  612240    864    500 S   0.0  0.0   0:00.21 /usr/lib/+
   477 dbus      20   0   58592   1296    624 S   0.0  0.1   0:00.73 /usr/bin/+
   486 rpc       20   0   69256    168     60 S   0.0  0.0   0:00.01 /sbin/rpc+
   495 root      20   0   24696   1160    812 S   0.0  0.0   0:00.33 /usr/lib/+
   499 root      20   0   52852    104    100 S   0.0  0.0   0:00.00 /usr/sbin+
   503 root      20   0  152780     60     52 S   0.0  0.0   0:00.00 /usr/sbin+
   505 nscd      20   0  928956   1348    648 S   0.0  0.1   0:00.94 /usr/sbin+
   506 root      20   0  224144   6404    828 S   0.0  0.3   0:00.08 queueproc+
   508 root      20   0   21540    408    296 S   0.0  0.0   0:00.02 /usr/sbin+
   515 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   547 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124480    448    312 S   0.0  0.0   0:00.03 /usr/sbin+
   558 root      20   0   24208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   568 root      20   0  114704     36     36 S   0.0  0.0   0:00.03 /bin/bash
   572 root      20   0  108296     52     48 S   0.0  0.0   0:00.00 /sbin/age+
   609 mailnull  20   0   89116   3544    544 S   0.0  0.1   0:00.06 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:02.70 [loop0]
   683 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [jbd2/loo+
   684 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   920 root      20   0  153404    308    224 S   0.0  0.0   0:00.03 pure-ftpd+
   921 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   923 root      20   0   51508    500    340 S   0.0  0.0   0:00.06 /usr/sbin+
   925 systuser  20   0  113676   1848      0 S   0.0  0.1   0:00.00 /usr/loca+
   926 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.02 /usr/bin/+
   927 telegraf  20   0 5654048  39324   5844 S   0.0  1.6   0:00.91 /usr/loca+
   928 systuser  20   0  114016  13964   2696 S   0.0  0.6   0:00.39 /usr/loca+
   929 root      20   0 1349832   9352     24 S   0.0  0.4   0:30.44 /usr/bin/+
   930 root      20   0 1277312  11308     52 S   0.0  0.5   0:23.22 /usr/bin/+
   931 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   933 root      20   0  216400   6144   4692 S   0.0  0.3   0:00.42 /usr/sbin+
   935 root      20   0  439788  11212  11004 S   0.0  0.5   0:00.15 php-fpm: +
   936 named     20   0  637996  23252   2076 S   0.0  1.0   0:01.16 /usr/sbin+
   938 root      20   0  261028   4732   1296 S   0.0  0.2   0:00.27 cpsrvd (S+
   942 root      20   0  400740   2884    648 S   0.0  0.1   0:00.61 php-fpm: +
   947 root      20   0 1689580 397748    304 S   0.0 16.4   0:13.58 /usr/loca+
   964 root      20   0  111304    412    316 S   0.0  0.0   0:00.16 /usr/sbin+
   972 root      20   0  389508    584    376 S   0.0  0.0   0:00.10 php-fpm: +
   979 cpanelc+  20   0    9828   2748   2316 S   0.0  0.1   0:01.02 /usr/loca+
   982 root      20   0  396248    248    168 S   0.0  0.0   0:00.11 php-fpm: +
   984 root      20   0  388892    696    484 S   0.0  0.0   0:00.10 php-fpm: +
   985 root      20   0  445028   3236   3124 S   0.0  0.1   0:00.11 sw-engine+
   986 systuser  20   0  113272   1820      0 S   0.0  0.1   0:00.00 /usr/loca+
   987 root      20   0  572372    760    292 S   0.0  0.0   0:00.23 /usr/bin/+
  1116 dovenull  20   0   46912   1544    960 S   0.0  0.1   0:00.01 dovecot/p+
  1117 dovenull  20   0   47056   1804   1040 S   0.0  0.1   0:00.02 dovecot/i+
  1118 dovecot   20   0   10320    240    124 S   0.0  0.0   0:00.00 dovecot/a+
  1119 root      20   0   10452    380    212 S   0.0  0.0   0:00.01 dovecot/l+
  1120 dovenull  20   0   46912   1816   1224 S   0.0  0.1   0:00.03 dovecot/p+
  1121 dovenull  20   0   46780    632    364 S   0.0  0.0   0:00.00 dovecot/i+
  1128 root      20   0   24396   2032    500 S   0.0  0.1   0:00.02 dovecot/c+
  1133 systuser  20   0  157708   2996    944 S   0.0  0.1   0:00.01 SonarPush+
  1137 dovecot   20   0   13568    476    268 S   0.0  0.0   0:00.00 dovecot/s+
  1172 root      20   0  248320 119544   2652 S   0.0  4.9   0:02.97 /usr/loca+
  1190 dovecot   20   0   41144   1348    884 S   0.0  0.1   0:00.04 dovecot/a+
  1258 wp-tool+  20   0  412368  32236   1444 S   0.0  1.3   0:00.64 /usr/bin/+
  1259 wp-tool+  20   0  387528  12948   1320 S   0.0  0.5   0:00.11 /usr/bin/+
  1294 root      20   0  167452   1364    760 S   0.0  0.1   0:00.07 dnsadmin +
  1298 root      20   0  183900     72     72 S   0.0  0.0   0:00.09 cpdavd - +
  1300 root      20   0  209344   9904   1108 S   0.0  0.4   0:00.45 tailwatchd
  1692 root      20   0  299272    672    292 S   0.0  0.0   0:00.02 php-fpm: +
  1709 root      38  18  130416   1392    680 S   0.0  0.1   0:00.00 cpanellog+
  1943 root      20   0  266992   8036    752 S   0.0  0.3   0:00.19 /usr/sbin+
  1945 root      20   0   12796    424    292 S   0.0  0.0   0:00.19 /usr/loca+
  1946 root      20   0   12732    272    200 S   0.0  0.0   0:00.17 /usr/loca+
  1947 root      20   0   12824    340    232 S   0.0  0.0   0:00.17 /usr/loca+
  1952 root      20   0   53268     92     92 S   0.0  0.0   0:00.04 /usr/loca+
  2017 root      20   0  181200   9532   1192 S   0.0  0.4   0:01.32 lfd - sle+
  2273 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
  3922 nobody    20   0  277784  20084   4520 S   0.0  0.8   0:01.70 /usr/sbin+
  4787 nobody    20   0  277760  20276   4548 S   0.0  0.8   0:01.79 /usr/sbin+
  4823 nobody    20   0  277896  20168   4464 S   0.0  0.8   0:01.72 /usr/sbin+
  6131 nobody    20   0  277900  20228   4372 S   0.0  0.8   0:01.50 /usr/sbin+
  6622 root      20   0  183052   1628   1060 S   0.0  0.1   0:00.00 /usr/sbin+
  6706 root      20   0  113284    700    520 S   0.0  0.0   0:00.00 /bin/sh -+
  6722 root      20   0  108056    280    208 S   0.0  0.0   0:00.00 sleep 2h +
  6770 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  6775 oysipao+  20   0    3152    524     32 S   0.0  0.0   0:00.01 [kworker]
  7285 root      20   0  249444 119140   1076 S   0.0  4.9   0:00.08 spamd chi+
  7286 root      20   0  248320 117508    652 S   0.0  4.9   0:00.00 spamd chi+
  7626 nobody    20   0  277888  19800   4368 S   0.0  0.8   0:01.22 /usr/sbin+
  7815 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  9334 nobody    20   0  277892  19960   4420 S   0.0  0.8   0:01.32 /usr/sbin+
 12301 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12309 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 12513 nobody    20   0  277764  19784   4124 S   0.0  0.8   0:00.60 /usr/sbin+
 12668 nobody    20   0  277900  19776   4292 S   0.0  0.8   0:00.61 /usr/sbin+
 13141 nobody    20   0  277764  19632   4048 S   0.0  0.8   0:00.60 /usr/sbin+
 13369 nobody    20   0  277772  19620   4168 S   0.0  0.8   0:00.63 /usr/sbin+
 13370 nobody    20   0  277760  19448   4180 S   0.0  0.8   0:00.68 /usr/sbin+
 13394 nobody    20   0  277648  19276   4188 S   0.0  0.8   0:00.50 /usr/sbin+
 13396 nobody    20   0  277764  19360   4188 S   0.0  0.8   0:00.64 /usr/sbin+
 13399 nobody    20   0  277920  19380   4136 S   0.0  0.8   0:00.59 /usr/sbin+
 13621 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 14914 nobody    20   0  277900  19208   4060 S   0.0  0.8   0:00.45 /usr/sbin+
 14931 nobody    20   0  277900  19096   3956 S   0.0  0.8   0:00.52 /usr/sbin+
 14932 nobody    20   0  277772  19252   3976 S   0.0  0.8   0:00.54 /usr/sbin+
 14950 nobody    20   0  277628  18836   3808 S   0.0  0.8   0:00.29 /usr/sbin+
 14951 nobody    20   0  277764  19308   4140 S   0.0  0.8   0:00.53 /usr/sbin+
 15871 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 16400 mailnull  20   0   89332   4576   1484 S   0.0  0.2   0:00.00 /usr/sbin+
 16571 nobody    20   0  277764  18872   3764 S   0.0  0.8   0:00.22 /usr/sbin+
 17383 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 17384 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 17573 nigeria   20   0  479336  16068   6160 S   0.0  0.7   0:00.22 php-fpm: +
 17586 oyrtmay+  20   0  456664  63420   4160 S   0.0  2.6   0:02.28 php-fpm: +
 17591 healtho+  20   0  462688  69472   4188 S   0.0  2.9   0:04.77 php-fpm: +
 17650 wp-tool+  20   0  445028    324    196 S   0.0  0.0   0:00.00 sw-engine+
 17677 oyrtmay+  20   0  448472  55144   4164 S   0.0  2.3   0:00.78 php-fpm: +
 17683 healtho+  20   0  460772  67428   4192 S   0.0  2.8   0:01.72 php-fpm: +
 17685 nigeria   20   0  409376  15928   3920 S   0.0  0.7   0:00.18 php-fpm: +
 17741 root      20   0  157100   5084   3792 S   0.0  0.2   0:00.00 sshd: unk+
 17742 sshd      20   0  115644   2632   1564 S   0.0  0.1   0:00.00 sshd: unk+
 17764 oyrtmay+  20   0  400460   2900    568 S   0.0  0.1   0:00.00 php-fpm: +
 17769 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 17772 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17775 root      20   0  183048   2160   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17780 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17781 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17783 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17785 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17786 root      20   0  183048   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 17787 root      20   0  183048   2144   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 17789 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 17791 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 17796 root      20   0  188208  11096   5148 S   0.0  0.5   0:00.01 /usr/loca+
 17802 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 17809 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 17810 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 17815 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 17816 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 17818 root      20   0   20164    984    784 S   0.0  0.0   0:00.00 jailshell+
 17820 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 17823 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 17824 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
 17832 root      20   0  113284   1468   1256 S   0.0  0.1   0:00.00 bash /usr+
 17834 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 17845 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 17847 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 17850 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.02 /opt/cpan+
 17855 root      20   0  160224   2388   1636 S   0.0  0.1   0:00.01 top -n 2 +
 17872 root      20   0  111304   4444   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 17884 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 17905 root      20   0   41052   2728   2088 S   0.0  0.1   0:00.00 dovecot/a+
 17917 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpsrvd (+
 17936 cloudw    20   0  353712  15976  10492 S   0.0  0.7   0:00.01 /opt/cpan+
 17948 cloudsms  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 17951 cloudsms  20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /usr/loca+
 17953 cloudsms  20   0  243944   6088   4272 R   0.0  0.3   0:00.00 /opt/cpan+
 17957 root      20   0  113284    220      0 R   0.0  0.0   0:00.00 bash /usr+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          3  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/0:0]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:54   0:01  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         31  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/1:1]
root         36  0.5  0.0      0     0 ?        S    00:54   0:07  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        104  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/0:2]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        251  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        252  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        253  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        256  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kworker/u200:3]
root        257  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:1H]
root        267  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        669  0.2  0.0      0     0 ?        S<   00:54   0:02  \_ [loop0]
root        683  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        684  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root       2273  0.0  0.0      0     0 ?        S    00:55   0:00  \_ [kworker/1:3]
root       7815  0.0  0.0      0     0 ?        S    01:01   0:00  \_ [kworker/1:0]
root      12301  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/0:4]
root      12309  0.0  0.0      0     0 ?        S    01:07   0:00  \_ [kworker/u200:0]
root      13621  0.0  0.0      0     0 ?        S    01:09   0:00  \_ [kworker/1:4]
root      15871  0.0  0.0      0     0 ?        S    01:12   0:00  \_ [kworker/0:1]
root          1  0.1  0.1  44256  3288 ?        Ss   00:54   0:02 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.2  40240  5968 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-journald
root        381  0.0  0.0  45352   268 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   168 ?        S<sl 00:54   0:00 /sbin/auditd
polkitd     476  0.0  0.0 612240   864 ?        Ssl  00:54   0:00 /usr/lib/polkit-1/polkitd --no-debug
dbus        477  0.0  0.0  58592  1296 ?        Ss   00:54   0:00 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         486  0.0  0.0  69256   168 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        495  0.0  0.0  24696  1160 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-logind
root        499  0.0  0.0  52852   104 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        503  0.0  0.0 152780    60 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        505  0.0  0.0 928956  1348 ?        Ssl  00:54   0:00 /usr/sbin/nscd
root        506  0.0  0.2 224144  6404 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        508  0.0  0.0  21540   408 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        515  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        547  0.0  0.0   4388    36 ?        Ss   00:54   0:00 /usr/sbin/acpid
root        555  0.0  0.0 124480   448 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       6622  0.0  0.0 183052  1628 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6706  0.0  0.0 113284   700 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       6722  0.0  0.0 108056   280 ?        S    01:00   0:00  |       \_ sleep 2h 22m
root      17772  0.0  0.0 183048  2160 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      17824  0.0  0.0 113284  1212 ?        Ss   01:15   0:00  |   \_ /bin/sh -c /usr/local/maldetect/maldet --mkpubpaths >> /dev/null 2>&1
root      17832  0.0  0.0 113284  1476 ?        S    01:15   0:00  |       \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      17959  0.0  0.0 113284   600 ?        S    01:15   0:00  |           \_ bash /usr/local/maldetect/maldet --mkpubpaths
root      17775  0.0  0.0 183048  2160 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      17802  0.0  0.0 113284  1212 ?        Ss   01:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      17809  0.0  0.0 108052   356 ?        S    01:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      17834  0.0  0.0 113288  1516 ?        S    01:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      17958  0.0  0.0 153840  2092 ?        R    01:15   0:00  |               \_ ps auxf
root      17780  0.0  0.0 183048  2156 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      17820  0.0  0.0  20164   804 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      17781  0.0  0.0 183048  2152 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      17810  0.0  0.0  20164   804 ?        Rs   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
root      17783  0.0  0.0 183048  2148 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      17815  0.0  0.0  20164   984 ?        Ss   01:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      17960  0.0  0.0  20164   260 ?        R    01:15   0:00  |       \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      17785  0.0  0.0 183048  2148 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      17818  0.0  0.0  20164   984 ?        Ss   01:15   0:00  |   \_ jailshell (cloudsms) [17948] ll -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  17948  0.0  0.0  20164   260 ?        S    01:15   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  17951  0.0  0.0 113284  1208 ?        S    01:15   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
cloudsms  17953  0.0  0.6 404052 15080 ?        R    01:15   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue1.php
root      17786  0.0  0.0 183048  2152 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      17791  0.0  0.0 113284  1208 ?        Ss   01:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root      17796  1.0  0.4 188208 11096 ?        S    01:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root      17855  1.0  0.0 160224  2388 ?        S    01:15   0:00  |           \_ top -n 2 -b -c
root      17787  0.0  0.0 183048  2144 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      17823  0.0  0.0  20164   968 ?        Ss   01:15   0:00  |   \_ jailshell (pactpay) [17847] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   17847  0.0  0.0  20164   260 ?        S    01:15   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   17850  2.0  0.7 480124 17688 ?        S    01:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      17789  0.0  0.0 183048  2148 ?        S    01:15   0:00  \_ /usr/sbin/CROND -n
root      17816  0.0  0.0  20164   968 ?        Ss   01:15   0:00      \_ jailshell (nigeria) [17845] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   17845  0.0  0.0  20164   260 ?        S    01:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   17860  5.0  0.6 404052 16140 ?        R    01:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0  24208     0 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        568  0.0  0.0 114704    36 ttyS0    Ss+  00:54   0:00 /bin/bash
root        572  0.0  0.0 108296    52 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
mailnull    609  0.0  0.1  89116  3544 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
mailnull  16400  0.0  0.1  89332  4576 ?        S    01:12   0:00  \_ /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        920  0.0  0.0 153404   308 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    921  0.0  0.0  10388    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        923  0.0  0.0  51508   500 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1116  0.0  0.0  46912  1544 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1117  0.0  0.0  47056  1804 ?        S    00:54   0:00  \_ dovecot/imap-login
dovecot    1118  0.0  0.0  10320   240 ?        S    00:54   0:00  \_ dovecot/anvil
root       1119  0.0  0.0  10452   380 ?        S    00:54   0:00  \_ dovecot/log
dovenull   1120  0.0  0.0  46912  1816 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1121  0.0  0.0  46780   632 ?        S    00:54   0:00  \_ dovecot/imap-login
root       1128  0.0  0.0  24396  2032 ?        S    00:54   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   476 ?        S    00:54   0:00  \_ dovecot/stats
dovecot    1190  0.0  0.0  41144  1348 ?        S    00:54   0:00  \_ dovecot/auth
root      17905  0.0  0.1  41052  2728 ?        S    01:15   0:00  \_ dovecot/auth -w
systuser    925  0.0  0.0 113676  1848 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    926  0.0  0.0 342400     0 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
telegraf    927  0.0  1.6 5654048 39324 ?       SLsl 00:54   0:00 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    928  0.0  0.5 114016 13964 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        929  2.4  0.3 1349832 9352 ?        Ssl  00:54   0:30 /usr/bin/cspdaemon
root        930  1.8  0.4 1277312 11308 ?       Ssl  00:54   0:23 /usr/bin/checkstatus
systuser    931  0.0  0.0  12660    60 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        933  0.0  0.2 216400  6144 ?        Ssl  00:54   0:00 /usr/sbin/rsyslogd -n
root        935  0.0  0.4 439788 11212 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       936  0.0  0.9 637996 23252 ?        Ssl  00:54   0:01 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        938  0.0  0.1 261028  4732 ?        Ss   00:54   0:00 cpsrvd (SSL) - waiting for connections                   
root      17917  0.0  0.0      0     0 ?        Z    01:15   0:00  \_ [cpsrvd (SSL) - ] <defunct>
root        942  0.0  0.1 400740  2884 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
oyrtmay+  17489 11.7  2.6 459224 65008 ?        R    01:14   0:03  \_ php-fpm: pool oyrtmayouthvolunteers_oyostate_gov_ng
nigeria   17573  1.0  0.6 479336 16068 ?        S    01:14   0:00  \_ php-fpm: pool nigeriadecide_org
oyrtmay+  17586 11.4  2.6 456664 63420 ?        S    01:14   0:02  \_ php-fpm: pool oyrtmayouthvolunteers_oyostate_gov_ng
healtho+  17591 25.1  2.8 462688 69472 ?        S    01:14   0:04  \_ php-fpm: pool health_oyostate_gov_ng
healtho+  17604 24.7  2.8 462688 69468 ?        S    01:14   0:04  \_ php-fpm: pool health_oyostate_gov_ng
oyrtmay+  17677  9.7  2.2 448472 55144 ?        S    01:14   0:00  \_ php-fpm: pool oyrtmayouthvolunteers_oyostate_gov_ng
healtho+  17683 21.5  2.7 460772 67428 ?        S    01:14   0:01  \_ php-fpm: pool health_oyostate_gov_ng
nigeria   17685  2.5  0.6 409376 15928 ?        S    01:14   0:00  \_ php-fpm: pool nigeriadecide_org
healtho+  17738 17.6  2.4 450912 58344 ?        R    01:14   0:00  \_ php-fpm: pool health_oyostate_gov_ng
oyrtmay+  17764  0.0  0.1 400460  2900 ?        S    01:14   0:00  \_ php-fpm: pool oyrtmayouthvolunteers_oyostate_gov_ng
root        947  1.0 16.4 1689580 397748 ?      Ssl  00:54   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        964  0.0  0.0 111304   412 ?        Ss   00:54   0:00 /usr/sbin/sshd -D
root      17383  0.0  0.1 111304  4268 ?        Ss   01:14   0:00  \_ sshd: [accepted]
sshd      17384  0.0  0.1 115644  2632 ?        S    01:14   0:00  |   \_ sshd: [net]
root      17741  0.0  0.2 157100  5084 ?        Ss   01:14   0:00  \_ sshd: unknown [priv]
sshd      17742  0.0  0.1 115644  2632 ?        S    01:14   0:00  |   \_ sshd: unknown [net]
root      17769  0.0  0.1 111304  4276 ?        Ss   01:15   0:00  \_ sshd: [accepted]
root      17872  0.0  0.1 111304  4444 ?        Ss   01:15   0:00  \_ sshd: [accepted]
sshd      17884  0.0  0.1 115644  2628 ?        S    01:15   0:00      \_ sshd: [net]
root        972  0.0  0.0 389508   584 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
cpanelc+    979  0.0  0.1   9828  2748 ?        Ss   00:54   0:01 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 396248   248 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        984  0.0  0.0 388892   696 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.1 445028  3236 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  17650  0.0  0.0 445028   324 ?        S    01:14   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    986  0.0  0.0 113272  1820 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        987  0.0  0.0 572372   760 ?        Ssl  00:54   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1133  0.0  0.1 157708  2996 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.2  4.9 248320 119544 ?       Ss   00:54   0:02 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7285  0.0  4.9 249444 119140 ?       S    01:00   0:00  \_ spamd child
root       7286  0.0  4.8 248320 117508 ?       S    01:00   0:00  \_ spamd child
wp-tool+   1258  0.0  1.3 412368 32236 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1259  0.0  0.5 387528 12948 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1294  0.0  0.0 167452  1364 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1298  0.0  0.0 183900    72 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1300  0.0  0.4 209344  9904 ?        Ss   00:54   0:00 tailwatchd
root       1692  0.0  0.0 299272   672 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1709  0.0  0.0 130416  1392 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1752  2.8  8.8 1462084 214120 ?      Sl   00:54   0:35 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1943  0.0  0.3 266992  8036 ?        Ss   00:54   0:00 /usr/sbin/httpd -k start
root       1945  0.0  0.0  12796   424 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1946  0.0  0.0  12732   272 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1947  0.0  0.0  12824   340 ?        S    00:54   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1952  0.0  0.0  53268    92 ?        S    00:54   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody     3922  0.1  0.8 277784 20084 ?        S    00:56   0:01  \_ /usr/sbin/httpd -k start
nobody     4787  0.1  0.8 277760 20276 ?        S    00:57   0:01  \_ /usr/sbin/httpd -k start
nobody     4823  0.1  0.8 277896 20168 ?        S    00:57   0:01  \_ /usr/sbin/httpd -k start
nobody     6131  0.1  0.8 277900 20228 ?        S    00:59   0:01  \_ /usr/sbin/httpd -k start
nobody     7626  0.1  0.8 277888 19800 ?        S    01:00   0:01  \_ /usr/sbin/httpd -k start
nobody     9334  0.1  0.8 277892 19960 ?        S    01:03   0:01  \_ /usr/sbin/httpd -k start
nobody    12513  0.1  0.8 277764 19784 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    12668  0.1  0.8 277900 19776 ?        S    01:07   0:00  \_ /usr/sbin/httpd -k start
nobody    13141  0.1  0.8 277764 19632 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    13369  0.1  0.8 277772 19620 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
cloudw    17936  0.0  0.6 353712 15976 ?        S    01:15   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    13370  0.1  0.8 277760 19448 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    13394  0.1  0.7 277648 19276 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
cloudw    17939  0.0  0.6 353712 15976 ?        S    01:15   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    13396  0.1  0.7 277764 19360 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    13399  0.1  0.8 277920 19380 ?        S    01:08   0:00  \_ /usr/sbin/httpd -k start
nobody    14914  0.1  0.7 277900 19208 ?        S    01:10   0:00  \_ /usr/sbin/httpd -k start
nobody    14931  0.2  0.7 277900 19096 ?        S    01:10   0:00  \_ /usr/sbin/httpd -k start
nobody    14932  0.2  0.7 277772 19252 ?        S    01:10   0:00  \_ /usr/sbin/httpd -k start
nobody    14950  0.1  0.7 277628 18836 ?        S    01:10   0:00  \_ /usr/sbin/httpd -k start
nobody    14951  0.2  0.7 277764 19308 ?        S    01:10   0:00  \_ /usr/sbin/httpd -k start
nobody    16571  0.1  0.7 277764 18872 ?        S    01:13   0:00  \_ /usr/sbin/httpd -k start
root       2017  0.1  0.3 181200  9532 ?        Ss   00:54   0:01 lfd - sleeping
oysipao+   6770  0.0  0.0   3148   416 ?        Ss   01:00   0:00 [kworker]
oysipao+   6775  0.0  0.0   3152   524 ?        S    01:00   0:00  \_ [kworker]
## mysql stats
Uptime: 1245  Threads: 5  Questions: 282464  Slow queries: 0  Opens: 1657  Flush tables: 1  Open tables: 1595  Queries per second avg: 226.878
*************************** 1. row ***************************
     Id: 4464
   User: healthoyostate78_oyohealth
   Host: localhost
     db: healthoyostate78_oyohealth
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 4467
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 3. row ***************************
     Id: 4468
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Query
   Time: 0
  State: Sending data
   Info: SELECT * FROM `02` WHERE `phone`='2348062245945' LIMIT 1
*************************** 4. row ***************************
     Id: 4475
   User: oyrtmayouthvol78_mda
   Host: localhost
     db: oyrtmayouthvol78_mda
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 5. row ***************************
     Id: 4479
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 15.235.98.152 TIME_WAIT
      1 17.246.15.156 TIME_WAIT
      1 173.199.190.175 TIME_WAIT
      1 178.250.7.71 TIME_WAIT
      1 194.164.107.4 TIME_WAIT
      1 ::1 TIME_WAIT
      1 51.161.37.186 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
    325 129.212.183.198 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 01:15:02 WAT
   Restart Time: Thursday, 20-Nov-2025 00:54:23 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 20 minutes 39 seconds
   Server load: 4.98 4.64 2.82
   Total accesses: 8392 - Total Traffic: 152.6 MB - Total Duration: 5810835
   CPU Usage: u12.45 s4.38 cu64.66 cs51.33 - 10.7% CPU load
   6.77 requests/sec - 126.2 kB/second - 18.6 kB/request - 692.426 ms/request
   17 requests currently being processed, 0 workers gracefully restarting, 3 idle workers

CKKKKKR_K__.WW....WK...K.W..W.K..K..............................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc    M CPU  SS  Req   Dur   Conn  Child Slot     Client      Protocol              VHost                                          Request
   0-0  14914 1/129/354 C 1.16 0   1110 219886 5.7   1.49  6.33 129.212.183.198 http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   1-0  6131  2/353/391 K 5.51 4   321  277646 64.2  5.62  6.29 192.178.4.98    http/1.1 team.cloudware.ng:443           GET /?l=2202798139 HTTP/1.1
   2-0  14931 1/124/345 K 1.73 3   293  231188 36.8  2.06  7.00 192.178.4.103   http/1.1 team.cloudware.ng:443           GET /?l=927957147 HTTP/1.1
   3-0  14932 2/131/438 K 2.03 3   311  291334 65.6  2.03  8.38 192.178.4.98    http/1.1 team.cloudware.ng:443           GET /?l=514265486 HTTP/1.1
   4-0  16571 2/53/330  K 0.73 3   347  224811 65.5  0.88  6.17 192.178.4.102   http/1.1 team.cloudware.ng:443           GET /?l=3395346546 HTTP/1.1
   5-0  14950 3/77/387  K 0.84 0   556  259740 96.6  1.29  6.27 192.178.4.105   http/1.1 team.cloudware.ng:443           GET /?l=3904713654 HTTP/1.1
   6-0  7626  0/302/329 R 4.45 90  314  242076 0.0   4.64  5.26 105.112.225.91  http/1.1
   7-0  9334  0/312/335 _ 4.36 0   695  242841 0.0   5.16  5.57 129.212.183.198 http/1.1 oyrtmayouthvolunteers.oyostate. POST //xmlrpc.php HTTP/1.1
   8-0  12513 1/154/342 K 2.11 4   315  229114 34.9  2.13  4.83 192.178.4.104   http/1.1 team.cloudware.ng:443           GET /?l=345401135 HTTP/1.1
   9-0  13141 0/169/246 _ 1.92 0   890  186758 0.0   2.12  3.51 129.212.183.198 http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   10-0 14951 0/128/209 _ 1.75 0   0    155997 0.0   2.04  3.77 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   11-0 -     0/0/305   . 0.00 252 0    222875 0.0   0.00  7.21 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   12-0 3922  0/348/352 W 6.97 0   0    244153 0.0   7.31  7.33 129.212.183.198 http/1.1 health.oyostate.gov.ng:443      POST //xmlrpc.php HTTP/1.1
   13-0 12668 0/167/250 W 1.80 0   0    186704 0.0   2.11  4.36 ::1             http/1.1 chs1.nescrow.com.ng:80          GET //whm-server-status HTTP/1.0
   14-0 -     0/0/147   . 0.00 250 0    110563 0.0   0.00  2.70 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   15-0 -     0/0/66    . 0.00 324 0    58466  0.0   0.00  1.15 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   16-0 -     0/0/259   . 0.00 372 0    167556 0.0   0.00  5.99 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   17-0 -     0/0/99    . 0.00 310 0    51120  0.0   0.00  2.32 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   18-0 13369 8/151/267 W 1.91 0   0    172199 248.0 2.48  5.43 192.178.4.97    http/1.1 team.cloudware.ng:443           GET /?l=2415663848 HTTP/1.1
   19-0 13370 4/187/324 K 1.95 2   276  212426 125.1 2.44  5.80 192.178.4.96    http/1.1 team.cloudware.ng:443           GET /?l=3749263653 HTTP/1.1
   20-0 -     0/0/118   . 0.00 249 0    81108  0.0   0.00  2.62 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   21-0 -     0/0/69    . 0.00 312 0    49435  0.0   0.00  1.14 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   22-0 -     0/0/296   . 0.00 253 0    198687 0.0   0.00  7.74 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   23-0 4787  8/374/374 K 6.44 2   341  273266 249.2 8.61  8.61 192.178.4.101   http/1.1 team.cloudware.ng:443           GET /?l=979288234 HTTP/1.1
   24-0 -     0/0/228   . 0.00 376 0    94755  0.0   0.00  3.90 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   25-0 4823  0/377/377 W 6.24 0   0    249999 0.0   6.89  6.89 129.212.183.198 http/1.1 oyrtmayouthvolunteers.oyostate. POST //xmlrpc.php HTTP/1.1
   26-0 -     0/0/256   . 0.00 251 0    158062 0.0   0.00  5.20 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   27-0 -     0/0/69    . 0.00 248 0    69389  0.0   0.00  0.68 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   28-0 13394 2/133/133 W 1.39 0   0    105838 66.3  1.77  1.77 192.178.4.100   http/1.1 team.cloudware.ng:443           GET /?l=613040058 HTTP/1.1
   29-0 -     0/0/90    . 0.00 113 0    69087  0.0   0.00  1.20 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   30-0 13396 2/182/182 K 1.74 3   292  133202 67.6  2.20  2.20 192.178.4.104   http/1.1 team.cloudware.ng:443           GET /?l=1918305774 HTTP/1.1
   31-0 -     0/0/15    . 0.00 337 0    12776  0.0   0.00  0.10 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   32-0 -     0/0/157   . 0.00 52  0    126421 0.0   0.00  1.89 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   33-0 13399 3/155/155 K 1.75 4   417  113284 94.0  2.16  2.16 192.178.4.103   http/1.1 team.cloudware.ng:443           GET /ctg/search/similarImageSearchResultView/?ctgItemCd=288672
   34-0 -     0/0/3     . 0.00 373 0    3111   0.0   0.00  0.01 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
   35-0 -     0/0/95    . 0.00 200 0    84944  0.0   0.00  0.89 ::1             http/1.1 chs1.nescrow.com.ng:80          OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 832
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 9 seconds, (range: 2...39)
   index usage: 14%, cache usage: 19%
   total entries stored since starting: 3705
   total entries replaced since starting: 0
   total entries expired since starting: 2866
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 5 miss
   total removes since starting: 7 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit