403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.01.06.txt
 ## swap threshold exceeded
## server overview
2025-11-21.01.06 load[0] mem[56/65] mysql[1/10] httpd[12]
              total        used        free      shared  buff/cache   available
Mem:           2363        1239         162          92         961         848
Swap:          1999        1377         622
 01:06:01 up  6:16,  0 users,  load average: 0.06, 0.14, 0.21
## system overview
top - 01:06:01 up  6:16,  0 users,  load average: 0.06, 0.14, 0.21
Tasks: 208 total,   7 running, 200 sleeping,   0 stopped,   1 zombie
%Cpu(s): 51.4 us, 45.7 sy,  0.0 ni,  0.0 id,  0.0 wa,  0.0 hi,  2.9 si,  0.0 st
KiB Mem :  2420300 total,   150204 free,  1285100 used,   984996 buff/cache
KiB Swap:  2047996 total,   637436 free,  1410560 used.   852408 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2435 mysql     20   0 1462004 274096   3660 S  18.8 11.3   4:29.78 /usr/sbin+
     1 root      20   0   44396   3516   1640 S   6.2  0.1   0:31.97 /usr/lib/+
   522 nscd      20   0 1344744   2300    928 S   6.2  0.1   0:18.16 /usr/sbin+
 81902 nobody    20   0  277600  19896   4564 S   6.2  0.8   0:01.02 /usr/sbin+
 89296 nobody    20   0  277900  18916   3712 S   6.2  0.8   0:00.09 /usr/sbin+
 89776 nigeria   20   0  404052  16136  10380 S   6.2  0.7   0:00.01 /opt/cpan+
 89785 pactpay   20   0  412248  16140  10560 S   6.2  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.30 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.12 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:22.27 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.05 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.09 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:03.92 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:14.80 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.43 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   245 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.72 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:01.65 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:01.11 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   357 root      20   0   40244   2188   1872 S   0.0  0.1   0:11.26 /usr/lib/+
   386 root      20   0   45360    532    388 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    584    456 S   0.0  0.0   0:01.78 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   481 root      20   0   21540    556    444 S   0.0  0.0   0:00.49 /usr/sbin+
   482 root      20   0  152780    360    320 S   0.0  0.0   0:00.01 /usr/sbin+
   485 root      20   0  224148   6780   1196 S   0.0  0.3   0:00.29 queueproc+
   486 dbus      20   0   58728   1520    792 S   0.0  0.1   0:11.96 /usr/bin/+
   496 rpc       20   0   69256    312    208 S   0.0  0.0   0:00.03 /sbin/rpc+
   516 root      20   0   52852    484    372 S   0.0  0.0   0:00.00 /usr/sbin+
   518 root      20   0   24720   1300    940 S   0.0  0.1   0:05.27 /usr/lib/+
   523 polkitd   20   0  610540   3220    712 S   0.0  0.1   0:03.07 /usr/lib/+
   549 root      20   0    4388    176    172 S   0.0  0.0   0:00.00 /usr/sbin+
   553 root      20   0  195208    204    204 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0  124476    628    500 S   0.0  0.0   0:00.64 /usr/sbin+
   575 root      20   0   24208    244    224 S   0.0  0.0   0:00.00 /usr/sbin+
   586 root      20   0  108296    308    304 S   0.0  0.0   0:00.00 /sbin/age+
   587 root      20   0  114704    304    304 S   0.0  0.0   0:00.02 /bin/bash
   603 mailnull  20   0   90820   4172   1084 S   0.0  0.2   0:00.59 /usr/sbin+
   618 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:02.57 [loop0]
   661 root      20   0       0      0      0 S   0.0  0.0   0:00.05 [jbd2/loo+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   912 systuser  20   0  114016  13200   2536 S   0.0  0.5   0:05.47 /usr/loca+
   913 root      20   0  111304    660    560 S   0.0  0.0   0:02.47 /usr/sbin+
   914 root      20   0  153404    544    460 S   0.0  0.0   0:00.47 pure-ftpd+
   915 root      20   0  445028   3400   3284 S   0.0  0.1   0:00.97 sw-engine+
   916 systuser  20   0  111608   1620      0 S   0.0  0.1   0:00.01 /usr/loca+
   917 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.01 /usr/loca+
   920 root      20   0 1277056  11168    276 S   0.0  0.5   0:35.77 /usr/bin/+
   923 root      20   0  396248    736    564 S   0.0  0.0   0:00.58 php-fpm: +
   927 root      20   0  439788  12244  11296 S   0.0  0.5   0:00.66 php-fpm: +
   929 named     20   0 1055796  39276   2020 S   0.0  1.6   0:10.94 /usr/sbin+
   930 root      20   0 1763340 217044   1092 S   0.0  9.0   0:13.76 /usr/loca+
   937 root      20   0  261028   6900   1936 S   0.0  0.3   0:03.26 cpsrvd (S+
   944 systuser  20   0  113932   2036      0 S   0.0  0.1   0:00.01 /usr/loca+
   948 root      20   0   51508    724    560 S   0.0  0.0   0:00.31 /usr/sbin+
   951 memcach+  20   0  342400    204    204 S   0.0  0.0   0:00.49 /usr/bin/+
   952 cpanelc+  20   0   10592   3608   2388 R   0.0  0.1   0:18.44 /usr/loca+
   956 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   957 root      20   0  281936   2936   1920 S   0.0  0.1   0:05.69 /usr/sbin+
   966 root      20   0  389508    824    608 S   0.0  0.0   0:00.63 php-fpm: +
   975 root      20   0  400740   2460    836 S   0.0  0.1   0:02.75 php-fpm: +
   976 telegraf  20   0 5654304  36232   6000 S   0.0  1.5   0:12.27 /usr/loca+
   985 root      20   0  388892    888    680 S   0.0  0.0   0:00.59 php-fpm: +
   986 root      20   0 1341892   9740    280 S   0.0  0.4   0:23.13 /usr/bin/+
   987 root      20   0  572372   1256    680 S   0.0  0.1   0:01.97 /usr/bin/+
  1078 dovenull  20   0   47276   2972   1984 S   0.0  0.1   0:00.53 dovecot/p+
  1079 dovenull  20   0   47668   3264   1928 S   0.0  0.1   0:00.27 dovecot/i+
  1080 dovecot   20   0   10320    584    468 S   0.0  0.0   0:00.09 dovecot/a+
  1081 root      20   0   10452    612    440 S   0.0  0.0   0:00.31 dovecot/l+
  1082 dovenull  20   0   47140   2740   1868 S   0.0  0.1   0:00.39 dovecot/p+
  1083 dovenull  20   0   48016   3624   1948 S   0.0  0.1   0:00.33 dovecot/i+
  1086 root      20   0   24528   2572    552 S   0.0  0.1   0:00.15 dovecot/c+
  1092 dovecot   20   0   13568    808    572 S   0.0  0.0   0:00.05 dovecot/s+
  1131 root      20   0  247916 117592   1148 S   0.0  4.9   0:05.50 /usr/loca+
  1156 systuser  20   0  157708   3028   1044 S   0.0  0.1   0:00.10 SonarPush+
  1161 wp-tool+  20   0  387556  13692   2032 S   0.0  0.6   0:00.25 /usr/bin/+
  1162 wp-tool+  20   0  412396  33264   2456 S   0.0  1.4   0:07.24 /usr/bin/+
  1171 dovecot   20   0   41192   1692   1156 S   0.0  0.1   0:00.67 dovecot/a+
  1235 root      20   0  183900   6444   3212 S   0.0  0.3   0:02.39 cpdavd - +
  1239 root      20   0  167452   4260   2888 S   0.0  0.2   0:00.39 dnsadmin +
  1241 root      20   0  209680  12620   2536 S   0.0  0.5   0:02.88 tailwatchd
  1655 root      20   0  299272   1020    624 S   0.0  0.0   0:00.60 php-fpm: +
  1658 root      38  18  130416   1544    808 S   0.0  0.1   0:00.05 cpanellog+
  1937 root      20   0  267084   8268    852 S   0.0  0.3   0:02.19 /usr/sbin+
  1938 root      20   0   12808    524    420 S   0.0  0.0   0:02.53 /usr/loca+
  1939 root      20   0   12732    484    408 S   0.0  0.0   0:02.24 /usr/loca+
  1940 root      20   0   12840    524    412 S   0.0  0.0   0:02.39 /usr/loca+
  1945 root      20   0   53268    372    372 S   0.0  0.0   0:00.04 /usr/loca+
  6916 root      20   0  261368 128320   3248 S   0.0  5.3   0:02.19 spamd chi+
  6917 root      20   0  247916 116796    388 S   0.0  4.8   0:00.00 spamd chi+
 10252 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10256 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.40 [kworker]
 40404 root      20   0  181360  29372   2296 S   0.0  1.2   0:03.54 lfd - sle+
 52112 root      20   0       0      0      0 S   0.0  0.0   0:00.14 [kworker/+
 60322 nobody    20   0  277900  20856   5012 S   0.0  0.9   0:03.59 /usr/sbin+
 60882 root      20   0       0      0      0 D   0.0  0.0   0:00.13 [kworker/+
 62260 nobody    20   0  277576  20364   4896 S   0.0  0.8   0:03.46 /usr/sbin+
 62339 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
 71035 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 71042 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 72454 nobody    20   0  277904  20332   4796 S   0.0  0.8   0:02.24 /usr/sbin+
 72455 nobody    20   0  277572  20416   4956 S   0.0  0.8   0:02.22 /usr/sbin+
 72726 worencom  20   0   38444   2512   1600 S   0.0  0.1   0:00.00 dovecot/i+
 75184 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 76237 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 79962 root      20   0       0      0      0 D   0.0  0.0   0:00.05 [kworker/+
 82072 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 83066 nobody    20   0  277576  19388   4268 S   0.0  0.8   0:00.72 /usr/sbin+
 83822 nobody    20   0  277576  19676   4368 S   0.0  0.8   0:00.61 /usr/sbin+
 84944 root      20   0  183048   2140   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 84987 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 85029 root      20   0  108056    360    284 S   0.0  0.0   0:00.00 sleep 5h +
 85108 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 86072 nobody    20   0  277572  19464   4236 S   0.0  0.8   0:00.45 /usr/sbin+
 86314 nobody    20   0  277576  19408   4304 S   0.0  0.8   0:00.39 /usr/sbin+
 86327 nobody    20   0  277596  19336   4184 S   0.0  0.8   0:00.32 /usr/sbin+
 86335 nobody    20   0  277648  19448   4216 S   0.0  0.8   0:00.46 /usr/sbin+
 87627 nobody    20   0  277572  18400   3332 S   0.0  0.8   0:00.10 /usr/sbin+
 87632 nobody    20   0  277648  19464   4204 S   0.0  0.8   0:00.25 /usr/sbin+
 87633 nobody    20   0  277584  18772   3688 S   0.0  0.8   0:00.36 /usr/sbin+
 88228 nobody    20   0  277900  19144   3868 S   0.0  0.8   0:00.19 /usr/sbin+
 88249 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 89210 root      20   0  111304   4264   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 89399 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 89546 wp-tool+  20   0  445028    552    376 S   0.0  0.0   0:00.00 sw-engine+
 89575 root      20   0  111304   4268   3248 S   0.0  0.2   0:00.00 sshd: [ac+
 89576 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 89673 nigeria   20   0  400460   4564   2176 S   0.0  0.2   0:00.00 php-fpm: +
 89679 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 89691 root      20   0  111304   4444   3412 S   0.0  0.2   0:00.00 sshd: [ac+
 89692 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: [ne+
 89695 root      20   0  162436   5832   4344 S   0.0  0.2   0:00.01 sshd: roo+
 89696 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: roo+
 89699 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 89700 sshd      20   0  115644   2628   1564 R   0.0  0.1   0:00.00 sshd: [ne+
 89707 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89708 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89710 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89711 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89712 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89713 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89714 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89715 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89716 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89717 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89718 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89719 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89720 root      20   0  139560   1544   1144 R   0.0  0.1   0:00.00 /usr/sbin+
 89721 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89722 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 89723 root      20   0  113284   1208   1032 S   0.0  0.0   0:00.00 /bin/sh -+
 89724 root      20   0  108052    356    284 S   0.0  0.0   0:00.00 /usr/bin/+
 89725 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 89747 root      20   0  160220   2064   1584 R   0.0  0.1   0:00.00 top -bcn1
 89748 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89751 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 89752 root      20   0   20164    964    764 S   0.0  0.0   0:00.00 jailshell+
 89753 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89755 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89756 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89757 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89758 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 89759 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89761 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 89762 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 89763 root      20   0   20164    968    764 S   0.0  0.0   0:00.00 jailshell+
 89771 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 89775 saboakin  20   0       0      0      0 R   0.0  0.0   0:00.00 [jailshel+
 89779 pactpay   20   0   20164    256      0 S   0.0  0.0   0:00.00 jailshell+
 89780 cloudsms  20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 89784 cloudsms  20   0  113284   1212   1036 S   0.0  0.1   0:00.00 /usr/loca+
 89788 cloudsms  20   0  400672  12444   8496 R   0.0  0.5   0:00.00 /opt/cpan+
 89790 root      20   0       0      0      0 R   0.0  0.0   0:00.00 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov20   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov20   0:22  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov20   0:03  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov20   0:14  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ata_sff]
root        244  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_0]
root        245  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ttm_swap]
root        255  0.0  0.0      0     0 ?        S<   Nov20   0:01  \_ [kworker/1:1H]
root        269  0.0  0.0      0     0 ?        S<   Nov20   0:01  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [xprtiod]
root        618  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov20   0:02  \_ [loop0]
root        661  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [jbd2/loop0-8]
root        668  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root      52112  0.0  0.0      0     0 ?        S    00:15   0:00  \_ [kworker/u200:1]
root      60882  0.0  0.0      0     0 ?        D    00:27   0:00  \_ [kworker/1:0]
root      62339  0.0  0.0      0     0 ?        S    00:29   0:00  \_ [kworker/0:3]
root      71035  0.0  0.0      0     0 ?        D    00:41   0:00  \_ [kworker/1:2]
root      71042  0.0  0.0      0     0 ?        S    00:41   0:00  \_ [kworker/0:2]
root      75184  0.0  0.0      0     0 ?        D    00:46   0:00  \_ [kworker/u200:2]
root      89790  0.0  0.0   8676   624 ?        D    01:06   0:00  |   \_ /usr/lib/systemd/systemd-cgroups-agent /user.slice/user-1014.slice/session-5623.scope
root      76237  0.0  0.0      0     0 ?        S    00:48   0:00  \_ [kworker/0:4]
root      79962  0.0  0.0      0     0 ?        S    00:53   0:00  \_ [kworker/1:3]
root      82072  0.0  0.0      0     0 ?        S    00:56   0:00  \_ [kworker/1:4]
root      85108  0.0  0.0      0     0 ?        S    01:00   0:00  \_ [kworker/0:0]
root      88249  0.0  0.0      0     0 ?        S    01:04   0:00  \_ [kworker/1:1]
root          1  0.1  0.1  44396  3516 ?        Rs   Nov20   0:31 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.0  40244  2188 ?        Ss   Nov20   0:11 /usr/lib/systemd/systemd-journald
root        386  0.0  0.0  45360   532 ?        Ss   Nov20   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   584 ?        S<sl Nov20   0:01 /sbin/auditd
root        481  0.0  0.0  21540   556 ?        Ss   Nov20   0:00 /usr/sbin/irqbalance --foreground
root        482  0.0  0.0 152780   360 ?        Ss   Nov20   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        485  0.0  0.2 224148  6780 ?        Ss   Nov20   0:00 queueprocd - waiting up to 60s to process a task
dbus        486  0.0  0.0  58728  1520 ?        Ss   Nov20   0:11 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         496  0.0  0.0  69256   312 ?        Ss   Nov20   0:00 /sbin/rpcbind -w
root        516  0.0  0.0  52852   484 ?        Ss   Nov20   0:00 /usr/sbin/smartd -n -q never
root        518  0.0  0.0  24720  1300 ?        Ds   Nov20   0:05 /usr/lib/systemd/systemd-logind
nscd        522  0.0  0.0 1344744 2300 ?        Ssl  Nov20   0:18 /usr/sbin/nscd
polkitd     523  0.0  0.1 610540  3220 ?        Ssl  Nov20   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        549  0.0  0.0   4388   176 ?        Ss   Nov20   0:00 /usr/sbin/acpid
root        553  0.0  0.0 195208   204 ?        Ssl  Nov20   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0 124476   628 ?        Ss   Nov20   0:00 /usr/sbin/crond -n
root      84944  0.0  0.0 183048  2140 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      84987  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      85029  0.0  0.0 108056   360 ?        S    01:00   0:00  |       \_ sleep 5h 53m
root      89707  0.0  0.0 183044  2152 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      89723  0.0  0.0 113284  1208 ?        Ss   01:06   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      89724  0.0  0.0 108052   356 ?        S    01:06   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      89725  0.0  0.0 113288  1516 ?        S    01:06   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      89793  0.0  0.0 153840  2092 ?        R    01:06   0:00  |               \_ ps auxf
root      89708  0.0  0.0 183044  2152 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      89748  0.0  0.0  20164   808 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      89710  0.0  0.0 183044  2152 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      89763  0.0  0.0  20164   968 ?        Ss   01:06   0:00  |   \_ jailshell (cloudsms) [89780] ll -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
cloudsms  89780  0.0  0.0  20164   264 ?        S    01:06   0:00  |       \_ jailshell (cloudsms) [init] ell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
cloudsms  89784  0.0  0.0 113284  1212 ?        S    01:06   0:00  |           \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
cloudsms  89788  0.0  0.5 400672 12444 ?        R    01:06   0:00  |               \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php
root      89711  0.0  0.0 183044  2152 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      89761  0.0  0.0  20164   804 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      89712  0.0  0.0 183044  2148 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      89759  0.0  0.0  20164   808 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      89713  0.0  0.0 183044  2148 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      89755  0.0  0.0  20164   808 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      89714  0.0  0.0 183044  2148 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      89762  0.0  0.0  20164   808 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue.php > /dev/null 2>&1
root      89715  0.0  0.0 183044  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      89757  0.0  0.0  20164   808 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      89717  0.0  0.0 183044  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      89753  0.0  0.0  20164   808 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      89718  0.0  0.0 183044  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      89756  0.0  0.0  20164   808 ?        Ss   01:06   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      89719  0.0  0.0 183044  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      89751  0.0  0.0  20164   964 ?        Ss   01:06   0:00  |   \_ jailshell (pactpay) [89779] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   89779  0.0  0.0  20164   256 ?        S    01:06   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   89785  0.0  0.6 479860 16168 ?        Rl   01:06   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      89721  0.0  0.0 183044  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      89752  0.0  0.0  20164   964 ?        Ss   01:06   0:00  |   \_ jailshell (nigeria) [89771] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   89771  0.0  0.0  20164   260 ?        S    01:06   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   89776  0.0  0.6 404052 16136 ?        R    01:06   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      89722  0.0  0.0 183044  2144 ?        S    01:06   0:00  \_ /usr/sbin/CROND -n
root      89758  0.0  0.0  20164   972 ?        Ss   01:06   0:00      \_ jailshell (saboakin) [89775] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  89775  0.0  0.0      0     0 ?        D    01:06   0:00          \_ [jailshell]
root        575  0.0  0.0  24208   244 ?        Ss   Nov20   0:00 /usr/sbin/atd -f
root        586  0.0  0.0 108296   308 tty1     Ss+  Nov20   0:00 /sbin/agetty --noclear tty1 linux
root        587  0.0  0.0 114704   304 ttyS0    Ss+  Nov20   0:00 /bin/bash
mailnull    603  0.0  0.1  90820  4172 ?        Ss   Nov20   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    912  0.0  0.5 114016 13200 ?        Ssl  Nov20   0:05 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        913  0.0  0.0 111304   660 ?        Ss   Nov20   0:02 /usr/sbin/sshd -D
root      89210  0.0  0.1 111304  4264 ?        Ss   01:05   0:00  \_ sshd: [accepted]
root      89399  0.0  0.1 111304  4272 ?        Ss   01:05   0:00  \_ sshd: [accepted]
root      89575  0.0  0.1 111304  4268 ?        Ss   01:05   0:00  \_ sshd: [accepted]
sshd      89576  0.0  0.1 115644  2624 ?        S    01:05   0:00  |   \_ sshd: [net]
root      89691  0.0  0.1 111304  4444 ?        Ss   01:05   0:00  \_ sshd: [accepted]
sshd      89692  0.0  0.1 115644  2628 ?        S    01:05   0:00  |   \_ sshd: [net]
root      89695  1.0  0.2 162436  5832 ?        Ss   01:05   0:00  \_ sshd: root [priv]
sshd      89696  0.0  0.1 115644  2628 ?        S    01:05   0:00  |   \_ sshd: root [net]
root      89699  0.0  0.1 111304  4268 ?        Ss   01:06   0:00  \_ sshd: [accepted]
sshd      89700  0.0  0.1 115644  2628 ?        S    01:06   0:00      \_ sshd: [net]
root        914  0.0  0.0 153404   544 ?        Ss   Nov20   0:00 pure-ftpd (SERVER)
root        915  0.0  0.1 445028  3400 ?        Ss   Nov20   0:00 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  89546  0.0  0.0 445028   552 ?        S    01:05   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    916  0.0  0.0 111608  1620 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    917  0.0  0.0  12660    60 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        920  0.1  0.4 1277056 11168 ?       Ssl  Nov20   0:35 /usr/bin/checkstatus
root        923  0.0  0.0 396248   736 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        927  0.0  0.5 439788 12244 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       929  0.0  1.6 1055796 39276 ?       Ssl  Nov20   0:10 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        930  0.0  8.9 1763340 217044 ?      Ssl  Nov20   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        937  0.0  0.2 261028  6900 ?        Ss   Nov20   0:03 cpsrvd (SSL) - waiting for connections                   
root      89679  0.0  0.0      0     0 ?        Z    01:05   0:00  \_ [cpaneld - servi] <defunct>
systuser    944  0.0  0.0 113932  2036 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        948  0.0  0.0  51508   724 ?        Ss   Nov20   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovenull   1078  0.0  0.1  47276  2972 ?        S    Nov20   0:00  \_ dovecot/pop3-login
dovenull   1079  0.0  0.1  47668  3264 ?        S    Nov20   0:00  \_ dovecot/imap-login
dovecot    1080  0.0  0.0  10320   584 ?        S    Nov20   0:00  \_ dovecot/anvil
root       1081  0.0  0.0  10452   612 ?        S    Nov20   0:00  \_ dovecot/log
dovenull   1082  0.0  0.1  47140  2740 ?        S    Nov20   0:00  \_ dovecot/pop3-login
dovenull   1083  0.0  0.1  48016  3624 ?        S    Nov20   0:00  \_ dovecot/imap-login
root       1086  0.0  0.1  24528  2572 ?        S    Nov20   0:00  \_ dovecot/config
dovecot    1092  0.0  0.0  13568   808 ?        S    Nov20   0:00  \_ dovecot/stats
dovecot    1171  0.0  0.0  41192  1692 ?        S    Nov20   0:00  \_ dovecot/auth
worencom  72726  0.0  0.1  38444  2512 ?        S    00:43   0:00  \_ dovecot/imap
memcach+    951  0.0  0.0 342400   204 ?        Ssl  Nov20   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    952  0.0  0.1  10592  3608 ?        Ss   Nov20   0:18 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    956  0.0  0.0  10132    28 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        957  0.0  0.1 281936  2936 ?        Ssl  Nov20   0:05 /usr/sbin/rsyslogd -n
root        966  0.0  0.0 389508   824 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        975  0.0  0.1 400740  2460 ?        Ss   Nov20   0:02 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   89673  0.0  0.1 400460  4564 ?        S    01:05   0:00  \_ php-fpm: pool nigeriadecide_org
telegraf    976  0.0  1.4 5654304 36232 ?       SLsl Nov20   0:12 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        985  0.0  0.0 388892   888 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        986  0.1  0.4 1341892 9740 ?        Ssl  Nov20   0:23 /usr/bin/cspdaemon
root        987  0.0  0.0 572372  1256 ?        Ssl  Nov20   0:01 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1131  0.0  4.8 247916 117592 ?       Ss   Nov20   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6916  0.0  5.3 261368 128320 ?       S    Nov20   0:02  \_ spamd child
root       6917  0.0  4.8 247916 116796 ?       S    Nov20   0:00  \_ spamd child
systuser   1156  0.0  0.1 157708  3028 ?        S    Nov20   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1161  0.0  0.5 387556 13692 ?        Ss   Nov20   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1162  0.0  1.3 412396 33264 ?        Ss   Nov20   0:07 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1235  0.0  0.2 183900  6444 ?        Ss   Nov20   0:02 cpdavd - accepting connections on: 2091, 2077, 2078 (dormant)
root       1239  0.0  0.1 167452  4260 ?        Ss   Nov20   0:00 dnsadmin - dormant mode
root       1241  0.0  0.5 209680 12620 ?        Ss   Nov20   0:02 tailwatchd
root       1655  0.0  0.0 299272  1020 ?        Ss   Nov20   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1658  0.0  0.0 130416  1544 ?        SN   Nov20   0:00 cpanellogd - sleeping for logs
root       1937  0.0  0.3 267084  8268 ?        Ss   Nov20   0:02 /usr/sbin/httpd -k start
root       1938  0.0  0.0  12808   524 ?        S    Nov20   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       1939  0.0  0.0  12732   484 ?        S    Nov20   0:02  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       1940  0.0  0.0  12840   524 ?        S    Nov20   0:02  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       1945  0.0  0.0  53268   372 ?        S    Nov20   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    60322  0.1  0.8 277900 20856 ?        S    00:26   0:03  \_ /usr/sbin/httpd -k start
nobody    62260  0.1  0.8 277576 20364 ?        S    00:28   0:03  \_ /usr/sbin/httpd -k start
nobody    89791  0.0  0.6 277576 15468 ?        R    01:06   0:00  |   \_ /usr/sbin/httpd -k start
nobody    72454  0.1  0.8 277904 20332 ?        S    00:42   0:02  \_ /usr/sbin/httpd -k start
nobody    72455  0.1  0.8 277572 20416 ?        S    00:42   0:02  \_ /usr/sbin/httpd -k start
nobody    81902  0.1  0.8 277600 19896 ?        S    00:55   0:01  \_ /usr/sbin/httpd -k start
nobody    83066  0.1  0.8 277576 19388 ?        S    00:57   0:00  \_ /usr/sbin/httpd -k start
nobody    83822  0.1  0.8 277576 19676 ?        S    00:58   0:00  \_ /usr/sbin/httpd -k start
nobody    86072  0.1  0.8 277572 19464 ?        S    01:01   0:00  \_ /usr/sbin/httpd -k start
nobody    86314  0.1  0.8 277576 19408 ?        S    01:01   0:00  \_ /usr/sbin/httpd -k start
nobody    86327  0.1  0.7 277596 19336 ?        S    01:01   0:00  \_ /usr/sbin/httpd -k start
nobody    86335  0.1  0.8 277648 19448 ?        S    01:01   0:00  \_ /usr/sbin/httpd -k start
nobody    87627  0.0  0.7 277572 18400 ?        S    01:03   0:00  \_ /usr/sbin/httpd -k start
nobody    87632  0.1  0.8 277648 19464 ?        S    01:03   0:00  \_ /usr/sbin/httpd -k start
nobody    87633  0.2  0.7 277584 18772 ?        S    01:03   0:00  \_ /usr/sbin/httpd -k start
nobody    88228  0.1  0.7 277900 19144 ?        S    01:04   0:00  \_ /usr/sbin/httpd -k start
nobody    89296  0.2  0.7 277900 18916 ?        S    01:05   0:00  \_ /usr/sbin/httpd -k start
mysql      2435  1.1 11.3 1462004 274096 ?      Sl   Nov20   4:29 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  10252  0.0  0.0   3148   416 ?        Ss   Nov20   0:00 [kworker]
oysipao+  10256  0.0  0.0   3152   492 ?        S    Nov20   0:00  \_ [kworker]
root      40404  0.0  1.2 181360 29372 ?        Ss   00:00   0:03 lfd - sleeping
## mysql stats
Uptime: 22498  Threads: 3  Questions: 1696596  Slow queries: 0  Opens: 5930  Flush tables: 1  Open tables: 2000  Queries per second avg: 75.410
*************************** 1. row ***************************
     Id: 28083
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 28087
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 28090
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.154.181 TIME_WAIT
      1 167.114.139.183 TIME_WAIT
      1 ::1 TIME_WAIT
      1 216.73.216.185 TIME_WAIT
      1 47.128.24.125 TIME_WAIT
      1 52.167.144.145 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 01:06:01 WAT
   Restart Time: Thursday, 20-Nov-2025 18:50:17 WAT
   Parent Server Config. Generation: 1
   Parent Server MPM Generation: 0
   Server uptime: 6 hours 15 minutes 44 seconds
   Server load: 0.06 0.14 0.21
   Total accesses: 118703 - Total Traffic: 2.9 GB - Total Duration: 63814590
   CPU Usage: u12.18 s6.48 cu1545.74 cs1250.59 - 12.5% CPU load
   5.27 requests/sec - 136.8 kB/second - 26.0 kB/request - 537.599 ms/request
   12 requests currently being processed, 0 workers gracefully restarting, 4 idle workers

.K.KKKKKKK._W__.._WK.K..........................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU    SS  Req   Dur   Conn  Child  Slot      Client     Protocol         VHost                                      Request
   0-0  -     0/0/5855   . 0.00  27   0   3154069 0.0   0.00  150.65 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   1-0  81902 3/172/5584 K 4.63  0    353 2896114 94.5  5.00  137.63 192.178.4.101  http/1.1 team.cloudware.ng:443  GET /?l=44226032 HTTP/1.1
   2-0  -     0/0/5255   . 0.00  28   0   2789154 0.0   0.00  133.03 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   3-0  60322 1/624/5684 K 15.24 1    385 3181362 35.5  16.00 150.18 192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=1694217677 HTTP/1.1
   4-0  87627 1/15/5803  K 0.42  1    347 2977905 34.6  0.47  144.40 192.178.4.97   http/1.1 team.cloudware.ng:443  GET /?l=3553085188 HTTP/1.1
   5-0  87632 1/46/5439  K 0.96  2    350 3094809 34.7  1.27  142.08 192.178.4.98   http/1.1 team.cloudware.ng:443  GET /?l=1873754464 HTTP/1.1
   6-0  88228 10/35/5602 K 0.81  1    336 3041875 307.9 0.89  160.80 192.178.4.96   http/1.1 team.cloudware.ng:443  GET /?l=3187446029 HTTP/1.1
   7-0  72454 5/393/5372 K 9.59  1    304 2930434 152.0 10.55 143.59 192.178.4.97   http/1.1 team.cloudware.ng:443  GET /?l=1131719632 HTTP/1.1
   8-0  89296 7/15/5646  K 0.38  0    304 3022279 216.0 0.44  139.92 192.178.4.102  http/1.1 team.cloudware.ng:443  GET /?l=2024248760 HTTP/1.1
   9-0  87633 1/55/5334  K 1.54  3    275 2747336 34.8  1.62  131.51 192.178.4.104  http/1.1 team.cloudware.ng:443  GET /?l=3683258290 HTTP/1.1
   10-0 -     0/0/5457   . 0.00  237  0   2759128 0.0   0.00  127.14 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   11-0 83066 0/119/4997 _ 3.10  2    5   2615876 0.0   3.24  126.36 52.205.141.124 http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/images/images/images/images/2019
   12-0 62260 9/598/5250 W 15.41 0    0   2756142 274.4 15.49 133.19 192.178.4.99   http/1.1 team.cloudware.ng:443  GET /?l=3524006884 HTTP/1.1
   13-0 83822 0/108/5325 _ 2.50  2    1   2704285 0.0   2.72  128.72 127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   14-0 86072 0/79/4957  _ 1.93  0    0   2579092 0.0   2.24  119.74 ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   15-0 -     0/0/4582   . 0.00  35   0   2556594 0.0   0.00  117.82 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   16-0 -     0/0/4206   . 0.00  233  0   2236824 0.0   0.00  113.93 ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   17-0 86314 0/63/3431  _ 1.68  2    1   1898860 0.0   1.77  84.08  127.0.0.1      http/1.1 chs1.nescrow.com.ng:80 GET / HTTP/1.1
   18-0 86327 0/60/3781  W 1.27  0    0   2082296 0.0   2.28  92.93  ::1            http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   19-0 72455 8/386/3232 K 9.20  1    351 1822613 245.5 10.66 85.59  192.178.4.100  http/1.1 team.cloudware.ng:443  GET /?l=1628839237 HTTP/1.1
   20-0 -     0/0/3131   . 0.00  198  0   1840870 0.0   0.00  80.94  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   21-0 86335 10/78/2380 K 2.01  0    357 1303185 306.5 2.45  60.53  192.178.4.105  http/1.1 team.cloudware.ng:443  GET /?l=4250774307 HTTP/1.1
   22-0 -     0/0/2735   . 0.00  232  0   1397862 0.0   0.00  65.39  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   23-0 -     0/0/2365   . 0.00  1940 0   1276872 0.0   0.00  58.96  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   24-0 -     0/0/1555   . 0.00  2090 0   823579  0.0   0.00  39.33  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-0 -     0/0/1018   . 0.00  3381 0   628117  0.0   0.00  27.36  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   26-0 -     0/0/703    . 0.00  2748 0   428614  0.0   0.00  18.18  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-0 -     0/0/420    . 0.00  3287 0   254505  0.0   0.00  9.65   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-0 -     0/0/523    . 0.00  3379 0   349352  0.0   0.00  15.17  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-0 -     0/0/430    . 0.00  3380 0   260468  0.0   0.00  11.16  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-0 -     0/0/318    . 0.00  2992 0   200447  0.0   0.00  7.21   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-0 -     0/0/271    . 0.00  3383 0   193700  0.0   0.00  6.36   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/593    . 0.00  3382 0   371705  0.0   0.00  14.42  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/301    . 0.00  2922 0   111013  0.0   0.00  5.26   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/28     . 0.00  5111 0   15090   0.0   0.00  0.72   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/7      . 0.00  5118 0   640     0.0   0.00  0.08   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/74     . 0.00  4990 0   36928   0.0   0.00  1.90   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/61     . 0.00  4947 0   25914   0.0   0.00  1.45   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/65     . 0.00  5040 0   27597   0.0   0.00  1.54   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/28     . 0.00  5071 0   13821   0.0   0.00  1.08   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/265    . 0.00  4220 0   139506  0.0   0.00  7.31   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/4      . 0.00  5127 0   8       0.0   0.00  0.02   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/12     . 0.00  5126 0   4242    0.0   0.00  0.23   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/89     . 0.00  4852 0   42251   0.0   0.00  2.07   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/10     . 0.00  5115 0   2792    0.0   0.00  0.14   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/55     . 0.00  4853 0   25889   0.0   0.00  1.32   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/463    . 0.00  3805 0   190150  0.0   0.00  10.76  ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/7      . 0.00  5131 0   2404    0.0   0.00  0.13   ::1            http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 1017
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 7 seconds, (range: 1...33)
   index usage: 17%, cache usage: 24%
   total entries stored since starting: 78712
   total entries replaced since starting: 0
   total entries expired since starting: 77670
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 1 hit, 176 miss
   total removes since starting: 25 hit, 19 miss
Youez - 2016 - github.com/yon3zu
LinuXploit