403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-20.03.15.txt
 ## swap threshold exceeded
## server overview
2025-11-20.03.15 load[0] mem[63/65] mysql[3/10] httpd[13]
              total        used        free      shared  buff/cache   available
Mem:           2363        1390          91          59         882         739
Swap:          1999        1414         585
 03:15:01 up  2:20,  0 users,  load average: 0.57, 0.90, 0.90
## system overview
top - 03:15:01 up  2:20,  0 users,  load average: 0.57, 0.90, 0.90
Tasks: 214 total,   2 running, 211 sleeping,   0 stopped,   1 zombie
%Cpu(s): 65.6 us, 21.9 sy,  9.4 ni,  3.1 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,    87400 free,  1418052 used,   914848 buff/cache
KiB Swap:  2047996 total,   599548 free,  1448448 used.   762736 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  1752 mysql     20   0 1462280 241756   2924 S 112.5 10.0   3:11.04 /usr/sbin+
  8649 nigeria   20   0  404052  16140  10380 S  18.8  0.7   0:00.05 /opt/cpan+
   267 root       0 -20       0      0      0 S   6.2  0.0   0:01.16 [kworker/+
  3559 nobody    20   0  277496  19540   4496 S   6.2  0.8   0:00.60 /usr/sbin+
 88700 nobody    20   0  277704  21060   4984 S   6.2  0.9   0:02.35 /usr/sbin+
     1 root      20   0   44256   3348   1520 S   0.0  0.1   0:11.76 /usr/lib/+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:00.94 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:00.28 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:10.25 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.02 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:00.27 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:01.88 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:11.32 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.01 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   101 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [kauditd]
   248 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   251 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   252 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   253 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   255 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   257 root       0 -20       0      0      0 S   0.0  0.0   0:00.97 [kworker/+
   277 root      20   0       0      0      0 S   0.0  0.0   0:00.73 [jbd2/vda+
   278 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   359 root      20   0   40244   4220   3896 S   0.0  0.2   0:04.59 /usr/lib/+
   381 root      20   0   45352    268     96 S   0.0  0.0   0:00.34 /usr/lib/+
   410 root      16  -4   55532    516    384 S   0.0  0.0   0:00.73 /sbin/aud+
   412 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   413 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   476 polkitd   20   0  612240    852    488 S   0.0  0.0   0:01.23 /usr/lib/+
   477 dbus      20   0   58724   1344    624 S   0.0  0.1   0:04.72 /usr/bin/+
   486 rpc       20   0   69256    148     44 S   0.0  0.0   0:00.01 /sbin/rpc+
   495 root      20   0   24696   1164    808 S   0.0  0.0   0:02.06 /usr/lib/+
   499 root      20   0   52852    336    240 S   0.0  0.0   0:00.00 /usr/sbin+
   503 root      20   0  152780    132     88 S   0.0  0.0   0:00.00 /usr/sbin+
   505 nscd      20   0  994492   1392    684 S   0.0  0.1   0:06.38 /usr/sbin+
   506 root      20   0  224144   6368    796 S   0.0  0.3   0:00.15 queueproc+
   508 root      20   0   21540    408    296 S   0.0  0.0   0:00.19 /usr/sbin+
   515 root      20   0  195208      0      0 S   0.0  0.0   0:00.00 /usr/sbin+
   547 root      20   0    4388     36     32 S   0.0  0.0   0:00.00 /usr/sbin+
   555 root      20   0  124480    444    308 S   0.0  0.0   0:00.24 /usr/sbin+
   558 root      20   0   24208     72     48 S   0.0  0.0   0:00.00 /usr/sbin+
   568 root      20   0  114704     36     36 S   0.0  0.0   0:00.03 /bin/bash
   572 root      20   0  108296     52     48 S   0.0  0.0   0:00.00 /sbin/age+
   609 mailnull  20   0   89116   4008    932 S   0.0  0.2   0:00.25 /usr/sbin+
   646 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   669 root       0 -20       0      0      0 S   0.0  0.0   0:03.34 [loop0]
   683 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [jbd2/loo+
   684 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   920 root      20   0  153404    308    224 S   0.0  0.0   0:00.17 pure-ftpd+
   921 systuser  20   0   10388     48      0 S   0.0  0.0   0:00.00 /usr/loca+
   923 root      20   0   51508    504    340 S   0.0  0.0   0:00.14 /usr/sbin+
   925 systuser  20   0  113676   1848      0 S   0.0  0.1   0:00.00 /usr/loca+
   926 memcach+  20   0  342400      0      0 S   0.0  0.0   0:00.18 /usr/bin/+
   927 telegraf  20   0 5654048  38964   5864 S   0.0  1.6   0:04.81 /usr/loca+
   928 systuser  20   0  114016  14812   2548 S   0.0  0.6   0:02.06 /usr/loca+
   929 root      20   0 1349832   9352     24 S   0.0  0.4   0:30.53 /usr/bin/+
   930 root      20   0 1277312  11308     52 S   0.0  0.5   0:23.26 /usr/bin/+
   931 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.00 /usr/loca+
   933 root      20   0  240976   5072   3404 S   0.0  0.2   0:02.29 /usr/sbin+
   935 root      20   0  439788  11516  11300 S   0.0  0.5   0:00.36 php-fpm: +
   936 named     20   0  989260  34020   2040 S   0.0  1.4   0:06.47 /usr/sbin+
   938 root      20   0  261028   6596   1812 S   0.0  0.3   0:01.30 cpsrvd (S+
   942 root      20   0  400740   2888    652 S   0.0  0.1   0:02.20 php-fpm: +
   947 root      20   0 1763312 204064    696 S   0.0  8.4   0:14.15 /usr/loca+
   964 root      20   0  111304    412    316 S   0.0  0.0   0:00.98 /usr/sbin+
   972 root      20   0  389508    736    528 S   0.0  0.0   0:00.31 php-fpm: +
   979 cpanelc+  20   0   10612   3532   2316 S   0.0  0.1   0:07.03 /usr/loca+
   982 root      20   0  396248    660    480 S   0.0  0.0   0:00.27 php-fpm: +
   984 root      20   0  388892    756    544 S   0.0  0.0   0:00.28 php-fpm: +
   985 root      20   0  445028   3236   3124 S   0.0  0.1   0:00.39 sw-engine+
   986 systuser  20   0  113272   1820      0 S   0.0  0.1   0:00.00 /usr/loca+
   987 root      20   0  572372    864    288 S   0.0  0.0   0:00.83 /usr/bin/+
  1116 dovenull  20   0   46912   2060   1428 S   0.0  0.1   0:00.10 dovecot/p+
  1117 dovenull  20   0   47592   3184   1964 S   0.0  0.1   0:00.11 dovecot/i+
  1118 dovecot   20   0   10320    460    340 S   0.0  0.0   0:00.03 dovecot/a+
  1119 root      20   0   10452    624    448 S   0.0  0.0   0:00.09 dovecot/l+
  1120 dovenull  20   0   46912   2064   1420 S   0.0  0.1   0:00.15 dovecot/p+
  1121 dovenull  20   0   47336   3220   2124 S   0.0  0.1   0:00.06 dovecot/i+
  1128 root      20   0   24564   2312    348 S   0.0  0.1   0:00.07 dovecot/c+
  1133 systuser  20   0  157708   2860    808 S   0.0  0.1   0:00.05 SonarPush+
  1137 dovecot   20   0   13568    604    380 S   0.0  0.0   0:00.02 dovecot/s+
  1172 root      20   0  248320 119680   2788 S   0.0  4.9   0:03.82 /usr/loca+
  1190 dovecot   20   0   41276   1620    996 S   0.0  0.1   0:00.24 dovecot/a+
  1258 wp-tool+  20   0  412368  32680   1888 S   0.0  1.4   0:02.82 /usr/bin/+
  1259 wp-tool+  20   0  387528  13320   1692 S   0.0  0.6   0:00.17 /usr/bin/+
  1294 root      20   0  167452   3208   1836 S   0.0  0.1   0:00.20 dnsadmin +
  1298 root      20   0  262228  24236   6376 S   0.0  1.0   0:00.82 cpdavd - +
  1300 root      20   0  209644  11808   1836 S   0.0  0.5   0:02.10 tailwatchd
  1352 nobody    20   0  277760  20308   4572 S   0.0  0.8   0:00.75 /usr/sbin+
  1353 nobody    20   0  277764  19848   4560 S   0.0  0.8   0:00.84 /usr/sbin+
  1362 nobody    20   0  277892  19812   4524 S   0.0  0.8   0:00.84 /usr/sbin+
  1692 root      20   0  299272    868    488 S   0.0  0.0   0:00.23 php-fpm: +
  1709 root      38  18  130416   1436    708 S   0.0  0.1   0:00.01 cpanellog+
  1943 root      20   0  266992   8052    768 S   0.0  0.3   0:00.82 /usr/sbin+
  1945 root      20   0   12800    428    292 S   0.0  0.0   0:01.17 /usr/loca+
  1946 root      20   0   12732    300    228 S   0.0  0.0   0:01.01 /usr/loca+
  1947 root      20   0   12824    356    232 S   0.0  0.0   0:01.07 /usr/loca+
  1952 root      20   0   53268     92     92 S   0.0  0.0   0:00.04 /usr/loca+
  2017 root      20   0  182364  11116   1188 S   0.0  0.5   0:08.05 lfd - sle+
  2653 nobody    20   0  277592  20100   4496 S   0.0  0.8   0:00.73 /usr/sbin+
  2654 nobody    20   0  277764  19588   4312 S   0.0  0.8   0:00.78 /usr/sbin+
  3065 nobody    20   0  277904  19896   4364 S   0.0  0.8   0:00.69 /usr/sbin+
  3097 nobody    20   0  277784  19740   4312 S   0.0  0.8   0:00.68 /usr/sbin+
  3155 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
  3547 nobody    20   0  277760  19640   4340 S   0.0  0.8   0:00.40 /usr/sbin+
  3561 nobody    20   0  277764  19528   4344 S   0.0  0.8   0:00.70 /usr/sbin+
  3562 nobody    20   0  277784  19960   4404 S   0.0  0.8   0:00.56 /usr/sbin+
  3925 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
  5518 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
  6622 root      20   0  183052   1624   1056 S   0.0  0.1   0:00.00 /usr/sbin+
  6706 root      20   0  113284    700    520 S   0.0  0.0   0:00.00 /bin/sh -+
  6722 root      20   0  108056    280    208 S   0.0  0.0   0:00.00 sleep 2h +
  6770 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
  6775 oysipao+  20   0    3152    508     16 S   0.0  0.0   0:00.15 [kworker]
  6787 nobody    20   0  277760  19056   3948 S   0.0  0.8   0:00.21 /usr/sbin+
  7285 root      20   0  265396 128580   1716 S   0.0  5.3   0:01.31 spamd chi+
  7286 root      20   0  248320 117500    644 S   0.0  4.9   0:00.00 spamd chi+
  7691 root      20   0   41052   2788   2124 S   0.0  0.1   0:00.00 dovecot/a+
  7757 nobody    20   0  277764  18876   3800 S   0.0  0.8   0:00.13 /usr/sbin+
  7812 nobody    20   0  277904  18932   3864 S   0.0  0.8   0:00.12 /usr/sbin+
  7824 nobody    20   0  277528  18540   3688 S   0.0  0.8   0:00.11 /usr/sbin+
  8114 healtho+  20   0  467836  75144   4324 S   0.0  3.1   0:05.34 php-fpm: +
  8116 healtho+  20   0  463944  71300   4360 S   0.0  2.9   0:04.60 php-fpm: +
  8400 wp-tool+  20   0  445028    320    192 S   0.0  0.0   0:00.00 sw-engine+
  8474 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  8532 root      20   0  111304   4272   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  8533 sshd      20   0  115644   2632   1560 S   0.0  0.1   0:00.00 sshd: [ne+
  8563 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
  8575 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8576 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8577 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8578 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8579 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8580 root      20   0  183048   2156   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8581 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8582 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8583 root      20   0  183048   2152   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8585 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8586 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8587 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8589 root      20   0  183048   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
  8601 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8602 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  8603 root      20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /bin/sh -+
  8605 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8607 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8608 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8611 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
  8612 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8613 root      20   0   20164    960    764 S   0.0  0.0   0:00.00 jailshell+
  8615 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
  8616 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
  8617 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8619 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
  8621 root      20   0  188208  11088   5148 S   0.0  0.5   0:00.01 /usr/loca+
  8627 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
  8633 root      20   0  113288   1512   1300 S   0.0  0.1   0:00.00 /bin/bash+
  8635 pactpay   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
  8645 nigeria   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
  8647 pactpay   20   0  480124  17688  11892 S   0.0  0.7   0:00.02 /opt/cpan+
  8648 cloudsms  20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
  8654 root      20   0  160224   2356   1632 S   0.0  0.1   0:00.00 top -n 2 +
  8656 cloudsms  20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /usr/loca+
  8663 cloudsms  20   0  404052  15352  10008 S   0.0  0.6   0:00.01 /opt/cpan+
  8665 cloudw    20   0  353712  15976  10492 R   0.0  0.7   0:00.01 /opt/cpan+
  8674 nigeria   20   0  400460   5176   2188 S   0.0  0.2   0:00.00 php-fpm: +
  8735 root      20   0  160220   2064   1580 R   0.0  0.1   0:00.00 top -bcn1
  8738 root      30  10  113284   1488   1276 S   0.0  0.1   0:00.00 /bin/bash+
  8745 root      30  10  132964   4548   1012 S   0.0  0.2   0:00.00 ConfigSer+
  8752 root      30  10  113284   1200   1024 S   0.0  0.0   0:00.00 /bin/bash+
  8753 root      30  10  113644    980    832 S   0.0  0.0   0:00.00 awk -v pr+
  8754 root      30  10  108052    600    504 S   0.0  0.0   0:00.00 flock --e+
  8755 root      30  10 1232324   4960   3636 S   0.0  0.2   0:00.00 /usr/loca+
  8756 root      20   0  111304   4264   3248 S   0.0  0.2   0:00.00 sshd: [ac+
  8757 root      30  10  108056    356    284 S   0.0  0.0   0:00.00 sleep 152+
  8761 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 59263 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 71282 root      20   0       0      0      0 S   0.0  0.0   0:00.16 [kworker/+
 87973 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 90007 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 93655 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 97895 nobody    20   0  277900  20544   4692 S   0.0  0.8   0:01.59 /usr/sbin+
 98479 root      20   0       0      0      0 S   0.0  0.0   0:00.13 [kworker/+
 99520 root      20   0  123576    692    460 S   0.0  0.0   0:00.00 /usr/sbin+
100208 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
100883 nobody    20   0  277760  19984   4500 S   0.0  0.8   0:01.08 /usr/sbin+
101933 root      20   0       0      0      0 S   0.0  0.0   0:00.04 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    00:54   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [rcu_bh]
root          9  0.1  0.0      0     0 ?        S    00:54   0:10  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    00:54   0:01  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [watchdogd]
root         36  0.1  0.0      0     0 ?        S    00:54   0:11  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   00:54   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [deferwq]
root        101  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [kauditd]
root        248  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ata_sff]
root        251  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_0]
root        252  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_0]
root        253  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [scsi_eh_1]
root        254  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [scsi_tmf_1]
root        255  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ttm_swap]
root        257  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kworker/0:1H]
root        267  0.0  0.0      0     0 ?        S<   00:54   0:01  \_ [kworker/1:1H]
root        277  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/vda3-8]
root        278  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root        412  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [rpciod]
root        413  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [xprtiod]
root        646  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [kvm-irqfd-clean]
root        669  0.0  0.0      0     0 ?        S<   00:54   0:03  \_ [loop0]
root        683  0.0  0.0      0     0 ?        S    00:54   0:00  \_ [jbd2/loop0-8]
root        684  0.0  0.0      0     0 ?        S<   00:54   0:00  \_ [ext4-rsv-conver]
root      59263  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/0:1]
root      71282  0.0  0.0      0     0 ?        S    02:28   0:00  \_ [kworker/1:1]
root      87973  0.0  0.0      0     0 ?        S    02:48   0:00  \_ [kworker/0:2]
root      90007  0.0  0.0      0     0 ?        S    02:50   0:00  \_ [kworker/0:5]
root      93655  0.0  0.0      0     0 ?        S    02:54   0:00  \_ [kworker/1:0]
root      98479  0.0  0.0      0     0 ?        S    03:00   0:00  \_ [kworker/u200:0]
root     100208  0.0  0.0      0     0 ?        S    03:02   0:00  \_ [kworker/0:3]
root     101933  0.0  0.0      0     0 ?        S    03:04   0:00  \_ [kworker/1:3]
root       3155  0.0  0.0      0     0 ?        S    03:08   0:00  \_ [kworker/1:5]
root       3925  0.0  0.0      0     0 ?        S    03:09   0:00  \_ [kworker/u200:1]
root       5518  0.0  0.0      0     0 ?        S    03:11   0:00  \_ [kworker/0:0]
root          1  0.1  0.1  44256  3348 ?        Ss   00:54   0:11 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        359  0.0  0.1  40244  4220 ?        Ss   00:54   0:04 /usr/lib/systemd/systemd-journald
root        381  0.0  0.0  45352   268 ?        Ss   00:54   0:00 /usr/lib/systemd/systemd-udevd
root        410  0.0  0.0  55532   516 ?        S<sl 00:54   0:00 /sbin/auditd
polkitd     476  0.0  0.0 612240   852 ?        Ssl  00:54   0:01 /usr/lib/polkit-1/polkitd --no-debug
dbus        477  0.0  0.0  58724  1344 ?        Ss   00:54   0:04 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         486  0.0  0.0  69256   148 ?        Ss   00:54   0:00 /sbin/rpcbind -w
root        495  0.0  0.0  24696  1164 ?        Ss   00:54   0:02 /usr/lib/systemd/systemd-logind
root        499  0.0  0.0  52852   336 ?        Ss   00:54   0:00 /usr/sbin/smartd -n -q never
root        503  0.0  0.0 152780   132 ?        Ss   00:54   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
nscd        505  0.0  0.0 994492  1392 ?        Ssl  00:54   0:06 /usr/sbin/nscd
root        506  0.0  0.2 224144  6368 ?        Ss   00:54   0:00 queueprocd - waiting up to 60s to process a task
root        508  0.0  0.0  21540   408 ?        Ss   00:54   0:00 /usr/sbin/irqbalance --foreground
root        515  0.0  0.0 195208     0 ?        Ssl  00:54   0:00 /usr/sbin/gssproxy -D
root        547  0.0  0.0   4388    36 ?        Ss   00:54   0:00 /usr/sbin/acpid
root        555  0.0  0.0 124480   444 ?        Ss   00:54   0:00 /usr/sbin/crond -n
root       6622  0.0  0.0 183052  1624 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root       6706  0.0  0.0 113284   700 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root       6722  0.0  0.0 108056   280 ?        S    01:00   0:00  |       \_ sleep 2h 22m
root       8575  0.0  0.0 183048  2156 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root       8616  0.0  0.0 113284  1212 ?        Ss   03:15   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root       8627  0.0  0.0 108052   356 ?        S    03:15   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root       8633  0.0  0.0 113288  1512 ?        S    03:15   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root       8762  0.0  0.0 153840  2088 ?        R    03:15   0:00  |               \_ ps auxf
root       8576  0.0  0.0 183048  2156 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root       8607  0.0  0.0  20164   808 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root       8577  0.0  0.0 183048  2156 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root       8615  0.0  0.0  20164   804 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root       8578  0.0  0.0 183048  2156 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root       8608  0.0  0.0  20164   804 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root       8579  0.0  0.0 183048  2156 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root       8617  0.0  0.0  20164   808 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root       8580  0.0  0.0 183048  2156 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root       8605  0.0  0.0  20164   808 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root       8581  0.0  0.0 183048  2152 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root       8613  0.0  0.0  20164   960 ?        Ss   03:15   0:00  |   \_ jailshell (cloudsms) [8648] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms   8648  0.0  0.0  20164   256 ?        S    03:15   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms   8656  0.0  0.0 113284  1212 ?        S    03:15   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue6.php > /dev/null 2>&1
cloudsms   8663  0.0  0.6 404052 15352 ?        S    03:15   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/public_html/cron/process_queue6.php
root       8582  0.0  0.0 183048  2152 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root       8601  0.0  0.0  20164   804 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root       8583  0.0  0.0 183048  2152 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root       8619  0.0  0.0  20164   808 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root       8585  0.0  0.0 183048  2148 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root       8612  0.0  0.0  20164   808 ?        Ss   03:15   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root       8586  0.0  0.0 183048  2148 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root       8603  0.0  0.0 113284  1212 ?        Ss   03:15   0:00  |   \_ /bin/sh -c /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
root       8621  0.0  0.4 188208 11088 ?        S    03:15   0:00  |       \_ /usr/local/cpanel/bin/dcpumon
root       8654  0.0  0.0 160224  2356 ?        S    03:15   0:00  |           \_ top -n 2 -b -c
root       8587  0.0  0.0 183048  2148 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root       8611  0.0  0.0  20164   964 ?        Ss   03:15   0:00  |   \_ jailshell (pactpay) [8635] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    8635  0.0  0.0  20164   260 ?        S    03:15   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay    8647  0.0  0.7 480124 17688 ?        S    03:15   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root       8589  0.0  0.0 183048  2148 ?        S    03:15   0:00  \_ /usr/sbin/CROND -n
root       8602  0.0  0.0  20164   964 ?        Ss   03:15   0:00      \_ jailshell (nigeria) [8645] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    8645  0.0  0.0  20164   256 ?        S    03:15   0:00          \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria    8649  0.0  0.6 404052 16140 ?        R    03:15   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root        558  0.0  0.0  24208    72 ?        Ss   00:54   0:00 /usr/sbin/atd -f
root        568  0.0  0.0 114704    36 ttyS0    Ss+  00:54   0:00 /bin/bash
root        572  0.0  0.0 108296    52 tty1     Ss+  00:54   0:00 /sbin/agetty --noclear tty1 linux
mailnull    609  0.0  0.1  89116  4008 ?        Ss   00:54   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
root        920  0.0  0.0 153404   308 ?        Ss   00:54   0:00 pure-ftpd (SERVER)
systuser    921  0.0  0.0  10388    48 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        923  0.0  0.0  51508   504 ?        Ss   00:54   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1116  0.0  0.0  46912  2060 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1117  0.0  0.1  47592  3184 ?        S    00:54   0:00  \_ dovecot/imap-login
dovecot    1118  0.0  0.0  10320   460 ?        S    00:54   0:00  \_ dovecot/anvil
root       1119  0.0  0.0  10452   624 ?        S    00:54   0:00  \_ dovecot/log
dovenull   1120  0.0  0.0  46912  2064 ?        S    00:54   0:00  \_ dovecot/pop3-login
dovenull   1121  0.0  0.1  47336  3220 ?        S    00:54   0:00  \_ dovecot/imap-login
root       1128  0.0  0.0  24564  2312 ?        S    00:54   0:00  \_ dovecot/config
dovecot    1137  0.0  0.0  13568   604 ?        S    00:54   0:00  \_ dovecot/stats
dovecot    1190  0.0  0.0  41276  1620 ?        S    00:54   0:00  \_ dovecot/auth
root       7691  0.0  0.1  41052  2788 ?        S    03:13   0:00  \_ dovecot/auth -w
systuser    925  0.0  0.0 113676  1848 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
memcach+    926  0.0  0.0 342400     0 ?        Ssl  00:54   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
telegraf    927  0.0  1.6 5654048 38964 ?       SLsl 00:54   0:04 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
systuser    928  0.0  0.6 114016 14812 ?        Ssl  00:54   0:02 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        929  0.3  0.3 1349832 9352 ?        Ssl  00:54   0:30 /usr/bin/cspdaemon
root        930  0.2  0.4 1277312 11308 ?       Ssl  00:54   0:23 /usr/bin/checkstatus
systuser    931  0.0  0.0  12660    60 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        933  0.0  0.2 240976  5072 ?        Ssl  00:54   0:02 /usr/sbin/rsyslogd -n
root        935  0.0  0.4 439788 11516 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       936  0.0  1.4 989260 34020 ?        Ssl  00:54   0:06 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        938  0.0  0.2 261028  6596 ?        Ss   00:54   0:01 cpsrvd (SSL) - waiting for connections                   
root       8563  0.0  0.0      0     0 ?        Z    03:14   0:00  \_ [cpaneld - servi] <defunct>
root        942  0.0  0.1 400740  2888 ?        Ss   00:54   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
healtho+   8114 12.1  3.1 467836 75144 ?        S    03:14   0:05  \_ php-fpm: pool health_oyostate_gov_ng
healtho+   8116 10.6  2.9 463944 71300 ?        S    03:14   0:04  \_ php-fpm: pool health_oyostate_gov_ng
nigeria    8674  0.0  0.2 400460  5176 ?        S    03:15   0:00  \_ php-fpm: pool nigeriadecide_org
root        947  0.1  8.4 1763312 204064 ?      Ssl  00:54   0:14 /usr/local/cpanel/3rdparty/bin/clamd -F
root        964  0.0  0.0 111304   412 ?        Ss   00:54   0:00 /usr/sbin/sshd -D
root       8474  0.0  0.1 111304  4268 ?        Ss   03:14   0:00  \_ sshd: [accepted]
root       8532  0.0  0.1 111304  4272 ?        Ss   03:14   0:00  \_ sshd: [accepted]
sshd       8533  0.0  0.1 115644  2632 ?        S    03:14   0:00  |   \_ sshd: [net]
root       8756  0.0  0.1 111304  4264 ?        Ss   03:15   0:00  \_ sshd: [accepted]
sshd       8761  0.0  0.1 115644  2624 ?        S    03:15   0:00      \_ sshd: [net]
root        972  0.0  0.0 389508   736 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
cpanelc+    979  0.0  0.1  10612  3532 ?        Ss   00:54   0:07 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
root        982  0.0  0.0 396248   660 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        984  0.0  0.0 388892   756 ?        Ss   00:54   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        985  0.0  0.1 445028  3236 ?        Ss   00:54   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+   8400  0.0  0.0 445028   320 ?        S    03:14   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    986  0.0  0.0 113272  1820 ?        Ssl  00:54   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
root        987  0.0  0.0 572372   864 ?        Ssl  00:54   0:00 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
systuser   1133  0.0  0.1 157708  2860 ?        S    00:54   0:00 SonarPush 0.6.12 [sleeping]
root       1172  0.0  4.9 248320 119680 ?       Ss   00:54   0:03 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       7285  0.0  5.3 265396 128580 ?       S    01:00   0:01  \_ spamd child
root       7286  0.0  4.8 248320 117500 ?       S    01:00   0:00  \_ spamd child
wp-tool+   1258  0.0  1.3 412368 32680 ?        Ss   00:54   0:02 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
wp-tool+   1259  0.0  0.5 387528 13320 ?        Ss   00:54   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
root       1294  0.0  0.1 167452  3208 ?        Ss   00:54   0:00 dnsadmin - dormant mode
root       1298  0.0  1.0 262228 24236 ?        Ss   00:54   0:00 cpdavd - accepting connections on: 2091, 2077, 2078
root       1300  0.0  0.4 209644 11808 ?        Ss   00:54   0:02 tailwatchd
root       1692  0.0  0.0 299272   868 ?        Ss   00:54   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1709  0.0  0.0 130416  1436 ?        SN   00:54   0:00 cpanellogd - sleeping for logs
mysql      1752  2.2  9.9 1462280 241756 ?      Sl   00:54   3:11 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
root       1943  0.0  0.3 266992  8052 ?        Ss   00:54   0:00 /usr/sbin/httpd -k start
root       1945  0.0  0.0  12800   428 ?        S    00:54   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1946  0.0  0.0  12732   300 ?        S    00:54   0:01  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1947  0.0  0.0  12824   356 ?        S    00:54   0:01  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1952  0.0  0.0  53268    92 ?        S    00:54   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    88700  0.1  0.8 277704 21060 ?        S    02:48   0:02  \_ /usr/sbin/httpd -k start
nobody     8763  0.0  0.7 277704 18844 ?        R    03:15   0:00  |   \_ /usr/sbin/httpd -k start
nobody    97895  0.1  0.8 277900 20544 ?        S    02:59   0:01  \_ /usr/sbin/httpd -k start
nobody   100883  0.1  0.8 277760 19984 ?        S    03:02   0:01  \_ /usr/sbin/httpd -k start
nobody     1352  0.1  0.8 277760 20308 ?        S    03:05   0:00  \_ /usr/sbin/httpd -k start
nobody     1353  0.1  0.8 277764 19848 ?        S    03:05   0:00  \_ /usr/sbin/httpd -k start
nobody     1362  0.1  0.8 277892 19812 ?        S    03:05   0:00  \_ /usr/sbin/httpd -k start
nobody     2653  0.1  0.8 277592 20100 ?        S    03:07   0:00  \_ /usr/sbin/httpd -k start
nobody     2654  0.1  0.8 277764 19588 ?        S    03:07   0:00  \_ /usr/sbin/httpd -k start
nobody     3065  0.1  0.8 277904 19896 ?        S    03:07   0:00  \_ /usr/sbin/httpd -k start
cloudw     8665  0.0  0.6 353712 15976 ?        S    03:15   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody     3097  0.1  0.8 277784 19740 ?        S    03:07   0:00  \_ /usr/sbin/httpd -k start
nobody     3547  0.1  0.8 277760 19640 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody     3559  0.1  0.8 277496 19540 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody     3561  0.1  0.8 277764 19528 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody     3562  0.1  0.8 277784 19960 ?        S    03:08   0:00  \_ /usr/sbin/httpd -k start
nobody     6787  0.1  0.7 277760 19056 ?        S    03:12   0:00  \_ /usr/sbin/httpd -k start
nobody     7757  0.1  0.7 277764 18876 ?        S    03:13   0:00  \_ /usr/sbin/httpd -k start
nobody     7812  0.1  0.7 277904 18932 ?        S    03:13   0:00  \_ /usr/sbin/httpd -k start
nobody     7824  0.1  0.7 277528 18540 ?        S    03:13   0:00  \_ /usr/sbin/httpd -k start
root       2017  0.0  0.4 182364 11116 ?        Ss   00:54   0:08 lfd - sleeping
oysipao+   6770  0.0  0.0   3148   416 ?        Ss   01:00   0:00 [kworker]
oysipao+   6775  0.0  0.0   3152   508 ?        S    01:00   0:00  \_ [kworker]
root      99520  0.0  0.0 123576   692 ?        Ss   03:01   0:00 /usr/sbin/anacron -s
root       8738  0.0  0.0 113284  1488 ?        SN   03:15   0:00  \_ /bin/bash /bin/run-parts /etc/cron.daily
root       8752  0.0  0.0 113284  1200 ?        SN   03:15   0:00      \_ /bin/bash /etc/cron.daily/insight-cpanel-cron
root       8754  0.0  0.0 108052   600 ?        SN   03:15   0:00      |   \_ flock --exclusive --nonblock /var/run/insight.running --command /usr/local/lp/bin/insight-cpanel
root       8755  0.0  0.2 1232324 4960 ?        SNl  03:15   0:00      |       \_ /usr/local/lp/bin/insight-cpanel
root       8753  0.0  0.0 113644   980 ?        SN   03:15   0:00      \_ awk -v progname=/etc/cron.daily/insight-cpanel-cron progname { ????   print progname ":\n" ????   progname=""; ???       } ???       { print; }
root       8745  0.0  0.1 132964  4548 ?        SN   03:15   0:00 ConfigServer Version Check
root       8757  0.0  0.0 108056   356 ?        SN   03:15   0:00  \_ sleep 15284
## mysql stats
Uptime: 8444  Threads: 3  Questions: 1452407  Slow queries: 0  Opens: 4288  Flush tables: 1  Open tables: 2000  Queries per second avg: 172.004
*************************** 1. row ***************************
     Id: 22284
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Query
   Time: 0
  State: updating
   Info: UPDATE `currency_rate` SET
`response` = '{\n  \"error\": true,\n  \"status\": 401,\n  \"message\": 
*************************** 2. row ***************************
     Id: 22285
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 22293
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 113.128.67.219 TIME_WAIT
      1 114.119.132.104 TIME_WAIT
      1 114.119.137.160 TIME_WAIT
      1 122.188.34.173 TIME_WAIT
      1 142.44.228.217 TIME_WAIT
      1 192.178.4.96 TIME_WAIT
      1 ::1 TIME_WAIT
      1 49.113.95.9 TIME_WAIT
      1 52.167.144.208 TIME_WAIT
      1 5.255.231.163 TIME_WAIT
      1 74.7.241.139 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
     35 157.15.40.56 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Thursday, 20-Nov-2025 03:15:01 WAT
   Restart Time: Thursday, 20-Nov-2025 00:54:23 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 2 hours 20 minutes 38 seconds
   Server load: 0.57 0.90 0.90
   Total accesses: 52711 - Total Traffic: 1.1 GB - Total Duration: 31627047
   CPU Usage: u9.76 s4.21 cu556.45 cs416.19 - 11.7% CPU load
   6.25 requests/sec - 137.4 kB/second - 22.0 kB/request - 600.008 ms/request
   14 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

_K__KK.KWKWK.K.K.KW.KW_.........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID       Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client     Protocol           VHost                                        Request
   0-0  7757   0/22/2506   _ 0.59 0    0   1335469 0.0   0.62  47.67 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   1-0  6787   1/39/2234   K 0.83 2    345 1406459 34.2  0.92  47.95 192.178.4.101  http/1.1 team.cloudware.ng:443      GET /?l=2840714016 HTTP/1.1
   2-0  2653   0/138/2347  _ 2.94 0    389 1349336 0.0   4.69  53.30 192.178.4.102  http/1.1 team.cloudware.ng:443      GET /?l=1603331239 HTTP/1.1
   3-0  2654   0/139/2624  _ 3.25 0    49  1452628 0.0   3.49  57.56 18.205.127.11  http/1.1 nigeriadecide.org:443      GET /polling_unit_category.php/2019elections/2019elections/imag
   4-0  7812   4/22/2251   K 0.49 4    257 1466355 125.4 0.54  44.42 192.178.4.104  http/1.1 team.cloudware.ng:443      GET /?l=158772103 HTTP/1.1
   5-0  3065   3/143/2269  K 3.28 0    406 1569625 97.4  2.67  63.37 192.178.4.100  http/1.1 team.cloudware.ng:443      GET /?l=2513340376 HTTP/1.1
   6-0  -      0/0/2283    . 0.00 57   0   1304111 0.0   0.00  50.02 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   7-0  3097   8/172/2070  K 4.03 1    335 1357401 248.2 2.16  40.52 192.178.4.98   http/1.1 team.cloudware.ng:443      GET /?l=1174326610 HTTP/1.1
   8-0  100883 0/200/2123  W 4.28 0    0   1205196 0.0   4.62  45.54 157.15.40.56   http/1.1 health.oyostate.gov.ng:443 POST //xmlrpc.php HTTP/1.1
   9-0  3547   1/74/2173   K 1.48 3    307 1452598 33.5  15.25 58.77 66.249.69.106  http/1.1 team.cloudware.ng:443      GET /?l=2237785082 HTTP/1.1
   10-0 97895  0/278/2040  W 6.87 0    0   1170234 0.0   7.15  45.03 192.178.4.103  http/1.1 team.cloudware.ng:443      GET /?l=1119758270 HTTP/1.1
   11-0 7824   1/18/2105   K 0.47 1    339 1432905 35.4  0.54  47.46 192.178.4.97   http/1.1 team.cloudware.ng:443      GET /?l=1538540027 HTTP/1.1
   12-0 -      0/0/2039    . 0.00 3    0   1198622 0.0   0.00  48.02 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   13-0 3559   1/108/1732  K 2.40 0    324 940242  33.7  2.54  35.10 192.178.4.99   http/1.1 team.cloudware.ng:443      GET /?l=2284630833 HTTP/1.1
   14-0 -      0/0/1552    . 0.00 135  0   889708  0.0   0.00  31.27 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   15-0 1352   2/142/1633  K 3.13 0    326 1017660 67.9  5.85  33.42 192.178.4.99   http/1.1 team.cloudware.ng:443      GET /?l=505378838 HTTP/1.1
   16-0 -      0/0/1161    . 0.00 113  0   658574  0.0   0.00  24.26 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   17-0 1353   12/163/1529 K 3.77 1    27  848821  84.0  3.50  31.88 194.247.173.99 http/1.1 cloudsms.com.ng:443        GET /welcome.php/recharge/recharge/recharge/recharge/SendToAll/
   18-0 1362   0/164/1432  W 3.34 0    0   759676  0.0   3.67  28.67 ::1            http/1.1 chs1.nescrow.com.ng:80     GET //whm-server-status HTTP/1.0
   19-0 -      0/0/1266    . 0.00 381  0   716704  0.0   0.00  24.20 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   20-0 3561   1/122/838   K 2.95 3    346 468467  34.0  3.10  18.39 192.178.4.96   http/1.1 team.cloudware.ng:443      GET /?l=1489689370 HTTP/1.1
   21-0 88700  0/530/989   W 9.34 0    0   573932  0.0   9.77  20.12 192.178.4.103  http/1.1 team.cloudware.ng:443      GET /?l=2796417904 HTTP/1.1
   22-0 3562   0/104/1277  _ 2.29 0    1   708587  0.0   2.40  28.12 122.188.34.173 http/1.1
   23-0 -      0/0/1159    . 0.00 517  0   709750  0.0   0.00  28.36 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   24-0 -      0/0/1087    . 0.00 884  0   550154  0.0   0.00  22.24 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   25-0 -      0/0/825     . 0.00 1629 0   505866  0.0   0.00  15.07 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   26-0 -      0/0/1144    . 0.00 765  0   737298  0.0   0.00  23.85 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   27-0 -      0/0/91      . 0.00 1627 0   74231   0.0   0.00  0.91  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   28-0 -      0/0/738     . 0.00 1574 0   420670  0.0   0.00  13.83 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   29-0 -      0/0/938     . 0.00 55   0   593744  0.0   0.00  15.13 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   30-0 -      0/0/522     . 0.00 1410 0   329214  0.0   0.00  10.69 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   31-0 -      0/0/507     . 0.00 663  0   549073  0.0   0.00  10.93 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   32-0 -      0/0/1141    . 0.00 936  0   680053  0.0   0.00  21.11 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   33-0 -      0/0/845     . 0.00 1578 0   471702  0.0   0.00  18.85 ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   34-0 -      0/0/260     . 0.00 1579 0   148688  0.0   0.00  4.15  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   35-0 -      0/0/157     . 0.00 5345 0   115547  0.0   0.00  4.68  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   36-0 -      0/0/466     . 0.00 5252 0   274598  0.0   0.00  9.11  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   37-0 -      0/0/22      . 0.00 5344 0   10578   0.0   0.00  0.40  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   38-0 -      0/0/23      . 0.00 5278 0   11684   0.0   0.00  0.51  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   39-0 -      0/0/25      . 0.00 5279 0   15119   0.0   0.00  0.63  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   40-0 -      0/0/4       . 0.00 5569 0   1340    0.0   0.00  0.13  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   41-0 -      0/0/115     . 0.00 5062 0   65290   0.0   0.00  3.06  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   42-0 -      0/0/2       . 0.00 5577 0   7       0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   43-0 -      0/0/7       . 0.00 5553 0   2574    0.0   0.00  0.04  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   44-0 -      0/0/4       . 0.00 5567 0   1141    0.0   0.00  0.06  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   45-0 -      0/0/2       . 0.00 5576 0   60      0.0   0.00  0.01  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   46-0 -      0/0/4       . 0.00 5568 0   244     0.0   0.00  0.03  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   47-0 -      0/0/147     . 0.00 5022 0   75011   0.0   0.00  3.67  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
   48-0 -      0/0/3       . 0.00 5570 0   77      0.0   0.00  0.02  ::1            http/1.1 chs1.nescrow.com.ng:80     OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 895
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 8 seconds, (range: 0...38)
   index usage: 15%, cache usage: 21%
   total entries stored since starting: 27374
   total entries replaced since starting: 0
   total entries expired since starting: 26461
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 113 miss
   total removes since starting: 18 hit, 4 miss
Youez - 2016 - github.com/yon3zu
LinuXploit