403WebShell

403Webshell
Server IP : 173.199.190.172 / Your IP : 216.73.216.167
Web Server : Apache
System : Linux chs1.nescrow.com.ng 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
User : oysipaoygov ( 1026)
PHP Version : 5.6.40
Disable Function : exec,passthru,shell_exec,system
MySQL : ON | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON
Directory : /var/log/loadwatch/
Upload File :
[ Back ]
Current File : /var/log/loadwatch/2025-11-21.02.12.txt
 ## swap threshold exceeded
## server overview
2025-11-21.02.12 load[0] mem[56/66] mysql[1/10] httpd[11]
              total        used        free      shared  buff/cache   available
Mem:           2363        1248         201          97         913         845
Swap:          1999        1406         593
 02:12:01 up  7:22,  0 users,  load average: 0.13, 0.29, 0.30
## system overview
top - 02:12:01 up  7:22,  0 users,  load average: 0.13, 0.29, 0.30
Tasks: 209 total,   3 running, 204 sleeping,   0 stopped,   2 zombie
%Cpu(s): 53.1 us, 40.6 sy,  0.0 ni,  6.2 id,  0.0 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem :  2420300 total,   179888 free,  1298676 used,   941736 buff/cache
KiB Swap:  2047996 total,   607484 free,  1440512 used.   844572 avail Mem 

   PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
  2435 mysql     20   0 1462240 265292   3372 S  26.7 11.0   5:16.28 /usr/sbin+
     1 root      20   0   44396   3512   1640 S   6.7  0.1   0:36.92 /usr/lib/+
   357 root      20   0   39500   7352   7040 S   6.7  0.3   0:13.82 /usr/lib/+
   486 dbus      20   0   58728   1528    792 S   6.7  0.1   0:14.04 /usr/bin/+
   522 nscd      20   0 1344744   2304    932 S   6.7  0.1   0:21.47 /usr/sbin+
 39312 nobody    20   0  277824  35300   3868 S   6.7  1.5   0:00.12 /usr/sbin+
 40259 nigeria   20   0  404052  16140  10384 R   6.7  0.7   0:00.01 /opt/cpan+
 40261 saboakin  20   0  404052  15608  10156 S   6.7  0.6   0:00.01 /opt/cpan+
 40263 pactpay   20   0  479860  16168  10572 S   6.7  0.7   0:00.01 /opt/cpan+
     2 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kthreadd]
     4 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
     6 root      20   0       0      0      0 S   0.0  0.0   0:01.50 [ksoftirq+
     7 root      rt   0       0      0      0 S   0.0  0.0   0:01.32 [migratio+
     8 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [rcu_bh]
     9 root      20   0       0      0      0 S   0.0  0.0   0:26.30 [rcu_sche+
    10 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [lru-add-+
    11 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    12 root      rt   0       0      0      0 S   0.0  0.0   0:00.06 [watchdog+
    13 root      rt   0       0      0      0 S   0.0  0.0   0:01.28 [migratio+
    14 root      20   0       0      0      0 S   0.0  0.0   0:04.60 [ksoftirq+
    16 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
    18 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kdevtmpf+
    19 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [netns]
    20 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [khungtas+
    21 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [writebac+
    22 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kintegri+
    23 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    24 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    25 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [bioset]
    26 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kblockd]
    27 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [md]
    28 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [edac-pol+
    29 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [watchdog+
    36 root      20   0       0      0      0 S   0.0  0.0   0:15.99 [kswapd0]
    37 root      25   5       0      0      0 S   0.0  0.0   0:00.00 [ksmd]
    38 root      39  19       0      0      0 S   0.0  0.0   0:00.03 [khugepag+
    39 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [crypto]
    47 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kthrotld]
    49 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kmpath_r+
    50 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kaluad]
    51 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kpsmouse+
    52 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ipv6_add+
    65 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [deferwq]
   105 root      20   0       0      0      0 S   0.0  0.0   0:00.54 [kauditd]
   240 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ata_sff]
   244 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   245 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   246 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [scsi_eh_+
   247 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [scsi_tmf+
   254 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ttm_swap]
   255 root       0 -20       0      0      0 S   0.0  0.0   0:01.91 [kworker/+
   269 root       0 -20       0      0      0 S   0.0  0.0   0:01.82 [kworker/+
   275 root      20   0       0      0      0 S   0.0  0.0   0:01.30 [jbd2/vda+
   276 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   386 root      20   0   45360    532    388 S   0.0  0.0   0:00.35 /usr/lib/+
   409 root      16  -4   55532    600    472 S   0.0  0.0   0:02.22 /sbin/aud+
   414 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [rpciod]
   415 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [xprtiod]
   481 root      20   0   21540    556    444 S   0.0  0.0   0:00.58 /usr/sbin+
   482 root      20   0  152780    376    336 S   0.0  0.0   0:00.02 /usr/sbin+
   485 root      20   0  224288   8432   1808 S   0.0  0.3   0:00.35 queueproc+
   496 rpc       20   0   69256    312    208 S   0.0  0.0   0:00.03 /sbin/rpc+
   516 root      20   0   52852    404    292 S   0.0  0.0   0:00.00 /usr/sbin+
   518 root      20   0   24720   1316    940 S   0.0  0.1   0:06.16 /usr/lib/+
   523 polkitd   20   0  610540   3220    712 R   0.0  0.1   0:03.59 /usr/lib/+
   549 root      20   0    4388    176    172 S   0.0  0.0   0:00.00 /usr/sbin+
   553 root      20   0  195208    204    204 S   0.0  0.0   0:00.00 /usr/sbin+
   572 root      20   0  124476    628    500 S   0.0  0.0   0:00.75 /usr/sbin+
   575 root      20   0   24208    228    208 S   0.0  0.0   0:00.00 /usr/sbin+
   586 root      20   0  108296    308    304 S   0.0  0.0   0:00.00 /sbin/age+
   587 root      20   0  114704    304    304 S   0.0  0.0   0:00.02 /bin/bash
   603 mailnull  20   0   90820   4240   1152 S   0.0  0.2   0:00.70 /usr/sbin+
   618 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [kvm-irqf+
   655 root       0 -20       0      0      0 S   0.0  0.0   0:02.61 [loop0]
   661 root      20   0       0      0      0 S   0.0  0.0   0:00.06 [jbd2/loo+
   668 root       0 -20       0      0      0 S   0.0  0.0   0:00.00 [ext4-rsv+
   912 systuser  20   0  114016  13280   2580 S   0.0  0.5   0:06.38 /usr/loca+
   913 root      20   0  111304    660    560 S   0.0  0.0   0:03.11 /usr/sbin+
   914 root      20   0  153404    544    460 S   0.0  0.0   0:00.57 pure-ftpd+
   915 root      20   0  445028   1496   1380 S   0.0  0.1   0:01.14 sw-engine+
   916 systuser  20   0  111608   1620      0 S   0.0  0.1   0:00.01 /usr/loca+
   917 systuser  20   0   12660     60      0 S   0.0  0.0   0:00.01 /usr/loca+
   920 root      20   0 1277056  10944    276 S   0.0  0.5   0:35.78 /usr/bin/+
   923 root      20   0  396248    684    512 S   0.0  0.0   0:00.67 php-fpm: +
   927 root      20   0  439788  11432  10484 S   0.0  0.5   0:00.75 php-fpm: +
   929 named     20   0 1054792  42608   2208 S   0.0  1.8   0:13.03 /usr/sbin+
   930 root      20   0 1763340 158120   1152 S   0.0  6.5   0:13.99 /usr/loca+
   937 root      20   0  261160   7168   2052 S   0.0  0.3   0:03.67 cpsrvd (S+
   944 systuser  20   0  113932   2036      0 S   0.0  0.1   0:00.01 /usr/loca+
   948 root      20   0   51656   1300    960 S   0.0  0.1   0:00.37 /usr/sbin+
   951 memcach+  20   0  342400    204    204 S   0.0  0.0   0:00.58 /usr/bin/+
   952 cpanelc+  20   0   10592   3600   2380 S   0.0  0.1   0:21.72 /usr/loca+
   956 systuser  20   0   10132     28      0 S   0.0  0.0   0:00.01 /usr/loca+
   957 root      20   0  290128   7648   6516 S   0.0  0.3   0:06.89 /usr/sbin+
   966 root      20   0  389508    852    636 S   0.0  0.0   0:00.74 php-fpm: +
   975 root      20   0  400740   2460    836 S   0.0  0.1   0:03.17 php-fpm: +
   976 telegraf  20   0 5654304  36420   6024 S   0.0  1.5   0:14.34 /usr/loca+
   985 root      20   0  388892    812    604 S   0.0  0.0   0:00.67 php-fpm: +
   986 root      20   0 1341892   9316    280 S   0.0  0.4   0:23.16 /usr/bin/+
   987 root      20   0  572372   1256    680 S   0.0  0.1   0:02.28 /usr/bin/+
  1080 dovecot   20   0   10320    584    468 S   0.0  0.0   0:00.11 dovecot/a+
  1131 root      20   0  247916 117592   1148 S   0.0  4.9   0:05.95 /usr/loca+
  1156 systuser  20   0  157708   3028   1044 S   0.0  0.1   0:00.12 SonarPush+
  1161 wp-tool+  20   0  387556  13692   2032 S   0.0  0.6   0:00.28 /usr/bin/+
  1162 wp-tool+  20   0  412396  33184   2376 S   0.0  1.4   0:08.47 /usr/bin/+
  1235 root      20   0  262224  24616   6760 S   0.0  1.0   0:02.67 cpdavd - +
  1239 root      20   0  167452   4188   2816 S   0.0  0.2   0:00.48 dnsadmin +
  1241 root      20   0  209680  12616   2524 S   0.0  0.5   0:03.27 tailwatchd
  1655 root      20   0  299272   1020    624 S   0.0  0.0   0:00.71 php-fpm: +
  1658 root      38  18  130416   1548    808 S   0.0  0.1   0:00.07 cpanellog+
  1937 root      20   0  267084  31028   5708 S   0.0  1.3   0:02.75 /usr/sbin+
  2729 dovenull  20   0   46912   4564   3528 S   0.0  0.2   0:00.05 dovecot/p+
  2730 dovenull  20   0   47148   4728   3596 S   0.0  0.2   0:00.02 dovecot/i+
  2731 root      20   0   10452   1520   1148 S   0.0  0.1   0:00.02 dovecot/l+
  2732 dovenull  20   0   46912   4588   3548 S   0.0  0.2   0:00.05 dovecot/p+
  2733 dovenull  20   0   47056   4596   3568 S   0.0  0.2   0:00.01 dovecot/i+
  2734 root      20   0   24564  12416   1416 S   0.0  0.5   0:00.03 dovecot/c+
  2735 dovecot   20   0   13568   1532   1264 S   0.0  0.1   0:00.00 dovecot/s+
  2736 dovecot   20   0   41188   2896   2060 S   0.0  0.1   0:00.08 dovecot/a+
  2737 root      20   0   12808   1404   1196 S   0.0  0.1   0:00.28 /usr/loca+
  2738 root      20   0   12732   1376   1192 S   0.0  0.1   0:00.25 /usr/loca+
  2739 root      20   0   12840   1412   1192 S   0.0  0.1   0:00.27 /usr/loca+
  2740 root      20   0   53252  11908   2524 S   0.0  0.5   0:00.04 /usr/loca+
  6916 root      20   0  263028 130256   3512 S   0.0  5.4   0:04.33 spamd chi+
  6917 root      20   0  247916 116796    388 S   0.0  4.8   0:00.01 spamd chi+
 10252 oysipao+  20   0    3148    416      0 S   0.0  0.0   0:00.00 [kworker]
 10256 oysipao+  20   0    3152    492      0 S   0.0  0.0   0:00.48 [kworker]
 11223 root      20   0       0      0      0 S   0.0  0.0   0:00.08 [kworker/+
 16752 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 21417 nobody    20   0  277868  36604   5072 S   0.0  1.5   0:01.76 /usr/sbin+
 28778 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 33124 nobody    20   0  277932  36140   4500 S   0.0  1.5   0:00.72 /usr/sbin+
 33175 nobody    20   0  277624  35700   4396 S   0.0  1.5   0:00.66 /usr/sbin+
 33185 nobody    20   0  277732  35900   4480 S   0.0  1.5   0:00.75 /usr/sbin+
 33816 root      20   0       0      0      0 S   0.0  0.0   0:00.03 [kworker/+
 33820 root      20   0       0      0      0 S   0.0  0.0   0:00.02 [kworker/+
 33833 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 34774 root      20   0       0      0      0 D   0.0  0.0   0:00.00 [kworker/+
 35612 root      20   0       0      0      0 D   0.0  0.0   0:00.01 [kworker/+
 35676 nobody    20   0  277632  35612   4300 S   0.0  1.5   0:00.58 /usr/sbin+
 36308 nobody    20   0  277932  35632   4212 S   0.0  1.5   0:00.50 /usr/sbin+
 37062 nobody    20   0  277584  35656   4320 S   0.0  1.5   0:00.37 /usr/sbin+
 37081 nobody    20   0  277628  35392   4088 S   0.0  1.5   0:00.34 /usr/sbin+
 37082 nobody    20   0  277884  35644   4120 S   0.0  1.5   0:00.39 /usr/sbin+
 37083 nobody    20   0  277592  35400   4128 S   0.0  1.5   0:00.41 /usr/sbin+
 37386 nobody    20   0  277932  35552   4116 S   0.0  1.5   0:00.27 /usr/sbin+
 38125 nobody    20   0  277940  35480   4024 S   0.0  1.5   0:00.20 /usr/sbin+
 39172 nobody    20   0  277940  35392   3936 S   0.0  1.5   0:00.08 /usr/sbin+
 39284 nobody    20   0  277616  35156   3868 S   0.0  1.5   0:00.12 /usr/sbin+
 39298 nobody    20   0  277952  35332   3908 S   0.0  1.5   0:00.10 /usr/sbin+
 39348 nobody    20   0  277944  35260   3836 S   0.0  1.5   0:00.16 /usr/sbin+
 39349 nobody    20   0  277616  35012   3732 S   0.0  1.4   0:00.15 /usr/sbin+
 39359 root      20   0   28936   2372   1948 S   0.0  0.1   0:00.00 dovecot/q+
 39543 root      20   0       0      0      0 S   0.0  0.0   0:00.00 [kworker/+
 39724 root      20   0  111304   4272   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 39885 wp-tool+  20   0  445028    552    376 S   0.0  0.0   0:00.00 sw-engine+
 40025 root      20   0   41052   2724   2088 S   0.0  0.1   0:00.00 dovecot/a+
 40072 root      20   0  111304   4268   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 40073 sshd      20   0  115644   2628   1560 S   0.0  0.1   0:00.00 sshd: [ne+
 40118 nigeria   20   0  400460   4820   2396 S   0.0  0.2   0:00.00 php-fpm: +
 40154 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [cpaneld +
 40157 root      20   0  157100   5076   3788 S   0.0  0.2   0:00.00 sshd: unk+
 40158 sshd      20   0  115644   2624   1556 S   0.0  0.1   0:00.00 sshd: unk+
 40167 root      20   0  162436   5828   4340 S   0.0  0.2   0:00.02 sshd: roo+
 40168 sshd      20   0  115644   2628   1564 S   0.0  0.1   0:00.00 sshd: roo+
 40190 cloudw    20   0  353712  15968  10484 S   0.0  0.7   0:00.01 /opt/cpan+
 40191 root      20   0  183044   2148   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 40192 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40193 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40194 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40195 root      20   0  183044   2152   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40196 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40197 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40199 root      20   0  183044   2148   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40200 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40201 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40202 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40203 root      20   0  183044   2140   1584 S   0.0  0.1   0:00.00 /usr/sbin+
 40204 root      20   0       0      0      0 Z   0.0  0.0   0:00.00 [crond] <+
 40205 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40207 root      20   0  183044   2144   1588 S   0.0  0.1   0:00.00 /usr/sbin+
 40209 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 40210 root      20   0  108052    352    284 S   0.0  0.0   0:00.00 /usr/bin/+
 40211 root      20   0  113288   1516   1300 S   0.0  0.1   0:00.00 /bin/bash+
 40233 root      20   0  160220   2060   1584 R   0.0  0.1   0:00.00 top -bcn1
 40234 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 40235 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40236 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40237 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 40238 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 40239 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40241 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 40242 root      20   0   20164    804    632 S   0.0  0.0   0:00.00 /usr/loca+
 40243 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40244 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40245 root      20   0   20164    968    768 S   0.0  0.0   0:00.00 jailshell+
 40246 root      20   0   20164    808    632 S   0.0  0.0   0:00.00 /usr/loca+
 40248 root      20   0   20164    972    768 S   0.0  0.0   0:00.00 jailshell+
 40255 saboakin  20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 40256 nigeria   20   0   20164    260      0 S   0.0  0.0   0:00.00 jailshell+
 40258 pactpay   20   0   20164    264      0 S   0.0  0.0   0:00.00 jailshell+
 40267 root      20   0  111304   4276   3252 S   0.0  0.2   0:00.00 sshd: [ac+
 40270 sshd      20   0  115644   2628   1556 S   0.0  0.1   0:00.00 sshd: [ne+
 40404 root      20   0  181976  30052   2296 S   0.0  1.2   0:07.33 lfd - sle+
 75184 root      20   0       0      0      0 S   0.0  0.0   0:00.07 [kworker/+
 84944 root      20   0  183048   2120   1580 S   0.0  0.1   0:00.00 /usr/sbin+
 84987 root      20   0  113284   1212   1032 S   0.0  0.1   0:00.00 /bin/sh -+
 85029 root      20   0  108056    344    268 S   0.0  0.0   0:00.00 sleep 5h +
 96689 root      20   0       0      0      0 S   0.0  0.0   0:00.01 [kworker/+
USER        PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root          2  0.0  0.0      0     0 ?        S    Nov20   0:00 [kthreadd]
root          4  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/0:0H]
root          6  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [ksoftirqd/0]
root          7  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/0]
root          8  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [rcu_bh]
root          9  0.0  0.0      0     0 ?        S    Nov20   0:26  \_ [rcu_sched]
root         10  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [lru-add-drain]
root         11  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/0]
root         12  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [watchdog/1]
root         13  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [migration/1]
root         14  0.0  0.0      0     0 ?        S    Nov20   0:04  \_ [ksoftirqd/1]
root         16  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kworker/1:0H]
root         18  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kdevtmpfs]
root         19  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [netns]
root         20  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [khungtaskd]
root         21  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [writeback]
root         22  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kintegrityd]
root         23  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         24  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         25  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [bioset]
root         26  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kblockd]
root         27  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [md]
root         28  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [edac-poller]
root         29  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [watchdogd]
root         36  0.0  0.0      0     0 ?        S    Nov20   0:15  \_ [kswapd0]
root         37  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [ksmd]
root         38  0.0  0.0      0     0 ?        SN   Nov20   0:00  \_ [khugepaged]
root         39  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [crypto]
root         47  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kthrotld]
root         49  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kmpath_rdacd]
root         50  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kaluad]
root         51  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kpsmoused]
root         52  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ipv6_addrconf]
root         65  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [deferwq]
root        105  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [kauditd]
root        240  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ata_sff]
root        244  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_0]
root        245  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_0]
root        246  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [scsi_eh_1]
root        247  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [scsi_tmf_1]
root        254  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ttm_swap]
root        255  0.0  0.0      0     0 ?        S<   Nov20   0:01  \_ [kworker/1:1H]
root        269  0.0  0.0      0     0 ?        S<   Nov20   0:01  \_ [kworker/0:1H]
root        275  0.0  0.0      0     0 ?        S    Nov20   0:01  \_ [jbd2/vda3-8]
root        276  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root        414  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [rpciod]
root        415  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [xprtiod]
root        618  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [kvm-irqfd-clean]
root        655  0.0  0.0      0     0 ?        S<   Nov20   0:02  \_ [loop0]
root        661  0.0  0.0      0     0 ?        S    Nov20   0:00  \_ [jbd2/loop0-8]
root        668  0.0  0.0      0     0 ?        S<   Nov20   0:00  \_ [ext4-rsv-conver]
root      75184  0.0  0.0      0     0 ?        S    00:46   0:00  \_ [kworker/u200:2]
root      96689  0.0  0.0      0     0 ?        S    01:15   0:00  \_ [kworker/0:0]
root      11223  0.0  0.0      0     0 ?        S    01:36   0:00  \_ [kworker/1:2]
root      16752  0.0  0.0      0     0 ?        S    01:43   0:00  \_ [kworker/0:3]
root      28778  0.0  0.0      0     0 ?        S    01:58   0:00  \_ [kworker/1:3]
root      33816  0.0  0.0      0     0 ?        S    02:04   0:00  \_ [kworker/1:1]
root      33820  0.0  0.0      0     0 ?        S    02:04   0:00  \_ [kworker/1:4]
root      33833  0.0  0.0      0     0 ?        S    02:04   0:00  \_ [kworker/0:2]
root      34774  0.0  0.0      0     0 ?        S    02:05   0:00  \_ [kworker/0:4]
root      35612  0.0  0.0      0     0 ?        S    02:06   0:00  \_ [kworker/u200:0]
root      39543  0.0  0.0      0     0 ?        S    02:11   0:00  \_ [kworker/1:0]
root          1  0.1  0.1  44396  3512 ?        Ss   Nov20   0:36 /usr/lib/systemd/systemd --switched-root --system --deserialize 22
root        357  0.0  0.3  39500  7352 ?        Ss   Nov20   0:13 /usr/lib/systemd/systemd-journald
root        386  0.0  0.0  45360   532 ?        Ss   Nov20   0:00 /usr/lib/systemd/systemd-udevd
root        409  0.0  0.0  55532   600 ?        S<sl Nov20   0:02 /sbin/auditd
root        481  0.0  0.0  21540   556 ?        Ss   Nov20   0:00 /usr/sbin/irqbalance --foreground
root        482  0.0  0.0 152780   376 ?        Ss   Nov20   0:00 /usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/local/cpanel/bin/pureauth
root        485  0.0  0.3 224288  8432 ?        Ss   Nov20   0:00 queueprocd - waiting up to 60s to process a task
dbus        486  0.0  0.0  58728  1528 ?        Ss   Nov20   0:14 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation
rpc         496  0.0  0.0  69256   312 ?        Ss   Nov20   0:00 /sbin/rpcbind -w
root        516  0.0  0.0  52852   404 ?        Ss   Nov20   0:00 /usr/sbin/smartd -n -q never
root        518  0.0  0.0  24720  1316 ?        Ss   Nov20   0:06 /usr/lib/systemd/systemd-logind
nscd        522  0.0  0.0 1344744 2304 ?        Ssl  Nov20   0:21 /usr/sbin/nscd
polkitd     523  0.0  0.1 610540  3220 ?        Ssl  Nov20   0:03 /usr/lib/polkit-1/polkitd --no-debug
root        549  0.0  0.0   4388   176 ?        Ss   Nov20   0:00 /usr/sbin/acpid
root        553  0.0  0.0 195208   204 ?        Ssl  Nov20   0:00 /usr/sbin/gssproxy -D
root        572  0.0  0.0 124476   628 ?        Ss   Nov20   0:00 /usr/sbin/crond -n
root      84944  0.0  0.0 183048  2120 ?        S    01:00   0:00  \_ /usr/sbin/CROND -n
root      84987  0.0  0.0 113284  1212 ?        Ss   01:00   0:00  |   \_ /bin/sh -c sleep $((1 + RANDOM % 5))h $((1 + RANDOM % 60))m; /usr/local/bin/wp-toolkit update-configuration > /dev/null 2> /dev/null || /usr/local/cpanel/3rdparty/wp-toolkit/bin/wp-toolkit-installer.sh --generate-configs > /dev/null 2> /dev/null; /usr/bin/yum -y update wp-toolkit-cpanel > /dev/null 2> /dev/null
root      85029  0.0  0.0 108056   344 ?        S    01:00   0:00  |       \_ sleep 5h 53m
root      40191  0.0  0.0 183044  2148 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      40209  0.0  0.0 113284  1212 ?        Ss   02:12   0:00  |   \_ /bin/sh -c /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch &> /dev/null
root      40210  0.0  0.0 108052   352 ?        S    02:12   0:00  |       \_ /usr/bin/flock -n /dev/shm/loadwatch.lock -c /usr/local/lp/bin/loadwatch
root      40211  0.0  0.0 113288  1516 ?        S    02:12   0:00  |           \_ /bin/bash /usr/local/lp/bin/loadwatch
root      40274  0.0  0.0 153840  2100 ?        R    02:12   0:00  |               \_ ps auxf
root      40192  0.0  0.0 183044  2152 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      40238  0.0  0.0  20164   804 ?        Ss   02:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/sendsingle1.php > /dev/null 2>&1
root      40193  0.0  0.0 183044  2152 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      40244  0.0  0.0  20164   808 ?        Ss   02:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_multiple.php > /dev/null 2>&1
root      40194  0.0  0.0 183044  2152 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      40242  0.0  0.0  20164   804 ?        Ss   02:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/robocall.cloudsms.com.ng/endpoint/ ; php -q -f /home/cloudsms/robocall.cloudsms.com.ng/endpoint/send_single.php > /dev/null 2>&1
root      40195  0.0  0.0 183044  2152 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      40236  0.0  0.0  20164   808 ?        Ss   02:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_schedules.php > /dev/null 2>&1
root      40196  0.0  0.0 183044  2148 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      40246  0.0  0.0  20164   808 ?        Ss   02:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue2.php > /dev/null 2>&1
root      40197  0.0  0.0 183044  2148 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      40234  0.0  0.0  20164   804 ?        Ss   02:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/massmailer/cron.php > /dev/null 2>&1
root      40199  0.0  0.0 183044  2148 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      40237  0.0  0.0  20164   804 ?        Ss   02:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue5.php > /dev/null 2>&1
root      40200  0.0  0.0 183044  2144 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      40239  0.0  0.0  20164   808 ?        Ss   02:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue4.php > /dev/null 2>&1
root      40201  0.0  0.0 183044  2144 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      40235  0.0  0.0  20164   808 ?        Ss   02:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue3.php > /dev/null 2>&1
root      40202  0.0  0.0 183044  2144 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      40243  0.0  0.0  20164   808 ?        Ss   02:12   0:00  |   \_ /usr/local/cpanel/bin/jailshell -c cd /home/cloudsms/public_html/cron/ ; php -q -f /home/cloudsms/public_html/cron/process_queue1.php > /dev/null 2>&1
root      40203  0.0  0.0 183044  2140 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      40248  0.0  0.0  20164   972 ?        Ss   02:12   0:00  |   \_ jailshell (pactpay) [40258] ell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   40258  0.0  0.0  20164   264 ?        S    02:12   0:00  |       \_ jailshell (pactpay) [init] hell -c php -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
pactpay   40263  1.0  0.6 479860 16168 ?        Sl   02:12   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/pactpay/public_html/secure/cron/currency_rate.php
root      40205  0.0  0.0 183044  2144 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      40241  0.0  0.0  20164   968 ?        Ss   02:12   0:00  |   \_ jailshell (nigeria) [40256] ell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   40256  0.0  0.0  20164   260 ?        S    02:12   0:00  |       \_ jailshell (nigeria) [init] hell -c php -q -f /home/nigeria/public_html/crons/analyzer.php
nigeria   40259  2.0  0.6 404052 16140 ?        S    02:12   0:00  |           \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/nigeria/public_html/crons/analyzer.php
root      40207  0.0  0.0 183044  2144 ?        S    02:12   0:00  \_ /usr/sbin/CROND -n
root      40245  0.0  0.0  20164   968 ?        Ss   02:12   0:00      \_ jailshell (saboakin) [40255] ll -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  40255  0.0  0.0  20164   260 ?        S    02:12   0:00          \_ jailshell (saboakin) [init] ell -c php -q -f /home/saboakin/public_html/massmailer/cron.php
saboakin  40261  1.0  0.6 404052 15608 ?        S    02:12   0:00              \_ /opt/cpanel/ea-php74/root/usr/bin/php-cgi -q -f /home/saboakin/public_html/massmailer/cron.php
root        575  0.0  0.0  24208   228 ?        Ss   Nov20   0:00 /usr/sbin/atd -f
root        586  0.0  0.0 108296   308 tty1     Ss+  Nov20   0:00 /sbin/agetty --noclear tty1 linux
root        587  0.0  0.0 114704   304 ttyS0    Ss+  Nov20   0:00 /bin/bash
mailnull    603  0.0  0.1  90820  4240 ?        Ss   Nov20   0:00 /usr/sbin/exim -ps -bd -q60m -oP /var/spool/exim/exim-daemon.pid
systuser    912  0.0  0.5 114016 13280 ?        Ssl  Nov20   0:06 /usr/local/lp/opt/exporters/blackbox_exporter/blackbox_exporter --config.file /usr/local/lp/etc/exporters/blackbox.yml
root        913  0.0  0.0 111304   660 ?        Ss   Nov20   0:03 /usr/sbin/sshd -D
root      39724  0.0  0.1 111304  4272 ?        Ss   02:11   0:00  \_ sshd: [accepted]
root      40072  0.0  0.1 111304  4268 ?        Ss   02:11   0:00  \_ sshd: [accepted]
sshd      40073  0.0  0.1 115644  2628 ?        S    02:11   0:00  |   \_ sshd: [net]
root      40157  0.0  0.2 157100  5076 ?        Ss   02:11   0:00  \_ sshd: unknown [priv]
sshd      40158  0.0  0.1 115644  2624 ?        S    02:11   0:00  |   \_ sshd: unknown [net]
root      40167  1.0  0.2 162436  5828 ?        Ss   02:11   0:00  \_ sshd: root [priv]
sshd      40168  0.0  0.1 115644  2628 ?        S    02:11   0:00  |   \_ sshd: root [net]
root      40267  0.0  0.1 111304  4276 ?        Ss   02:12   0:00  \_ sshd: [accepted]
sshd      40270  0.0  0.1 115644  2628 ?        S    02:12   0:00      \_ sshd: [net]
root        914  0.0  0.0 153404   544 ?        Ss   Nov20   0:00 pure-ftpd (SERVER)
root        915  0.0  0.0 445028  1496 ?        Ss   Nov20   0:01 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf)
wp-tool+  39885  0.0  0.0 445028   552 ?        S    02:11   0:00  \_ sw-engine-fpm: pool wordpress-toolkit
systuser    916  0.0  0.0 111608  1620 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/php-fpm_exporter/php-fpm_exporter server
systuser    917  0.0  0.0  12660    60 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/mysqld_exporter/mysqld_exporter --config.my-cnf=/usr/local/lp/etc/exporters/my.cnf
root        920  0.1  0.4 1277056 10944 ?       Ssl  Nov20   0:35 /usr/bin/checkstatus
root        923  0.0  0.0 396248   684 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php81/root/etc/php-fpm.conf)
root        927  0.0  0.4 439788 11432 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php56/root/etc/php-fpm.conf)
named       929  0.0  1.7 1054792 42608 ?       Ssl  Nov20   0:13 /usr/sbin/pdns_server --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no
root        930  0.0  6.5 1763340 158120 ?      Ssl  Nov20   0:13 /usr/local/cpanel/3rdparty/bin/clamd -F
root        937  0.0  0.2 261160  7168 ?        Ss   Nov20   0:03 cpsrvd (SSL) - waiting for connections                   
root      40154  0.0  0.0      0     0 ?        Z    02:11   0:00  \_ [cpaneld - servi] <defunct>
systuser    944  0.0  0.0 113932  2036 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/node_exporter/node_exporter
root        948  0.0  0.0  51656  1300 ?        Ss   Nov20   0:00 /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf
dovecot    1080  0.0  0.0  10320   584 ?        S    Nov20   0:00  \_ dovecot/anvil
dovenull   2729  0.0  0.1  46912  4564 ?        S    01:25   0:00  \_ dovecot/pop3-login
dovenull   2730  0.0  0.1  47148  4728 ?        S    01:25   0:00  \_ dovecot/imap-login
root       2731  0.0  0.0  10452  1520 ?        S    01:25   0:00  \_ dovecot/log
dovenull   2732  0.0  0.1  46912  4588 ?        S    01:25   0:00  \_ dovecot/pop3-login
dovenull   2733  0.0  0.1  47056  4596 ?        S    01:25   0:00  \_ dovecot/imap-login
root       2734  0.0  0.5  24564 12416 ?        S    01:25   0:00  \_ dovecot/config
dovecot    2735  0.0  0.0  13568  1532 ?        S    01:25   0:00  \_ dovecot/stats
dovecot    2736  0.0  0.1  41188  2896 ?        S    01:25   0:00  \_ dovecot/auth
root      39359  0.0  0.0  28936  2372 ?        S    02:10   0:00  \_ dovecot/quota-status -p postfix
root      40025  0.0  0.1  41052  2724 ?        S    02:11   0:00  \_ dovecot/auth -w
memcach+    951  0.0  0.0 342400   204 ?        Ssl  Nov20   0:00 /usr/bin/memcached -u memcached -p 11211 -m 64 -c 1024
cpanelc+    952  0.0  0.1  10592  3600 ?        Ss   Nov20   0:21 /usr/local/cpanel/3rdparty/sbin/p0f -i any -u cpanelconnecttrack -d -s /var/cpanel/userhomes/cpanelconnecttrack/p0f.socket less 400 and not dst port 80 and not dst port 443 and tcp[13] & 8==0
systuser    956  0.0  0.0  10132    28 ?        Ssl  Nov20   0:00 /usr/local/lp/opt/exporters/apache_exporter/apache_exporter
root        957  0.0  0.3 290128  7648 ?        Ssl  Nov20   0:06 /usr/sbin/rsyslogd -n
root        966  0.0  0.0 389508   852 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php70/root/etc/php-fpm.conf)
root        975  0.0  0.1 400740  2460 ?        Ss   Nov20   0:03 php-fpm: master process (/opt/cpanel/ea-php74/root/etc/php-fpm.conf)
nigeria   40118  0.0  0.1 400460  4820 ?        S    02:11   0:00  \_ php-fpm: pool nigeriadecide_org
telegraf    976  0.0  1.5 5654304 36420 ?       SLsl Nov20   0:14 /usr/local/lp/bin/telegraf -config /usr/local/lp/etc/telegraf.toml -config-directory /usr/local/lp/etc/telegraf.d
root        985  0.0  0.0 388892   812 ?        Ss   Nov20   0:00 php-fpm: master process (/opt/cpanel/ea-php73/root/etc/php-fpm.conf)
root        986  0.0  0.3 1341892 9316 ?        Ssl  Nov20   0:23 /usr/bin/cspdaemon
root        987  0.0  0.0 572372  1256 ?        Ssl  Nov20   0:02 /usr/bin/python2 -Es /usr/sbin/tuned -l -P
root       1131  0.0  4.8 247916 117592 ?       Ss   Nov20   0:05 /usr/local/cpanel/3rdparty/perl/536/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 --pidfile=/var/run/spamd.pid --listen=5 --listen=6
root       6916  0.0  5.3 263028 130256 ?       S    Nov20   0:04  \_ spamd child
root       6917  0.0  4.8 247916 116796 ?       S    Nov20   0:00  \_ spamd child
systuser   1156  0.0  0.1 157708  3028 ?        S    Nov20   0:00 SonarPush 0.6.12 [sleeping]
wp-tool+   1161  0.0  0.5 387556 13692 ?        Ss   Nov20   0:00 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php
wp-tool+   1162  0.0  1.3 412396 33184 ?        Ss   Nov20   0:08 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php
root       1235  0.0  1.0 262224 24616 ?        Ss   Nov20   0:02 cpdavd - accepting connections on: 2091, 2077, 2078
root       1239  0.0  0.1 167452  4188 ?        Ss   Nov20   0:00 dnsadmin - dormant mode
root       1241  0.0  0.5 209680 12616 ?        Ss   Nov20   0:03 tailwatchd
root       1655  0.0  0.0 299272  1020 ?        Ss   Nov20   0:00 php-fpm: master process (/usr/local/cpanel/etc/php-fpm.conf)
root       1658  0.0  0.0 130416  1548 ?        SN   Nov20   0:00 cpanellogd - sleeping for logs
root       1937  0.0  1.2 267084 31028 ?        Ss   Nov20   0:02 /usr/sbin/httpd -k start
root       2737  0.0  0.0  12808  1404 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --suffix=-bytes_log
root       2738  0.0  0.0  12732  1376 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --main=apache-traffic.log --mainout=/var/log/cpanel-server-traffic/web/traffic-apache.log
root       2739  0.0  0.0  12840  1412 ?        S    01:25   0:00  \_ /usr/local/cpanel/bin/splitlogs --dir=/etc/apache2/logs/domlogs --main=chs1.nescrow.com.ng --mainout=/etc/apache2/logs/access_log
root       2740  0.0  0.4  53252 11908 ?        S    01:25   0:00  \_ /usr/local/cpanel/3rdparty/bin/perl /usr/local/cpanel/bin/leechprotect
nobody    21417  0.1  1.5 277868 36604 ?        S    01:48   0:01  \_ /usr/sbin/httpd -k start
nobody    33124  0.1  1.4 277932 36140 ?        S    02:03   0:00  \_ /usr/sbin/httpd -k start
nobody    33175  0.1  1.4 277624 35700 ?        S    02:03   0:00  \_ /usr/sbin/httpd -k start
nobody    33185  0.1  1.4 277732 35900 ?        S    02:03   0:00  \_ /usr/sbin/httpd -k start
nobody    35676  0.1  1.4 277632 35612 ?        S    02:06   0:00  \_ /usr/sbin/httpd -k start
cloudw    40190  1.0  0.6 353712 15968 ?        S    02:12   0:00  |   \_ /opt/cpanel/ea-php72/root/usr/bin/php-cgi
nobody    36308  0.1  1.4 277932 35632 ?        S    02:06   0:00  \_ /usr/sbin/httpd -k start
nobody    37062  0.1  1.4 277584 35656 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    37081  0.1  1.4 277628 35392 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    37082  0.1  1.4 277884 35644 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    37083  0.1  1.4 277592 35400 ?        S    02:07   0:00  \_ /usr/sbin/httpd -k start
nobody    37386  0.1  1.4 277932 35552 ?        S    02:08   0:00  \_ /usr/sbin/httpd -k start
nobody    38125  0.1  1.4 277940 35480 ?        S    02:09   0:00  \_ /usr/sbin/httpd -k start
nobody    39172  0.0  1.4 277940 35392 ?        S    02:10   0:00  \_ /usr/sbin/httpd -k start
nobody    39284  0.1  1.4 277616 35156 ?        S    02:10   0:00  \_ /usr/sbin/httpd -k start
nobody    39298  0.1  1.4 277952 35332 ?        S    02:10   0:00  \_ /usr/sbin/httpd -k start
nobody    39312  0.1  1.4 277824 35300 ?        S    02:10   0:00  \_ /usr/sbin/httpd -k start
nobody    39348  0.2  1.4 277944 35260 ?        S    02:10   0:00  \_ /usr/sbin/httpd -k start
nobody    39349  0.2  1.4 277616 35012 ?        S    02:10   0:00  \_ /usr/sbin/httpd -k start
mysql      2435  1.1 10.9 1462240 265292 ?      Sl   Nov20   5:16 /usr/sbin/mysqld --daemonize --pid-file=/var/run/mysqld/mysqld.pid
oysipao+  10252  0.0  0.0   3148   416 ?        Ss   Nov20   0:00 [kworker]
oysipao+  10256  0.0  0.0   3152   492 ?        S    Nov20   0:00  \_ [kworker]
root      40404  0.0  1.2 181976 30052 ?        Ss   00:00   0:07 lfd - sleeping
## mysql stats
Uptime: 26458  Threads: 5  Questions: 1968338  Slow queries: 0  Opens: 7047  Flush tables: 1  Open tables: 2000  Queries per second avg: 74.394
*************************** 1. row ***************************
     Id: 32502
   User: nigeria_decide
   Host: localhost
     db: nigeria_decide
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 2. row ***************************
     Id: 32503
   User: pactpay_testing1
   Host: localhost
     db: pactpay_real
Command: Sleep
   Time: 0
  State: 
   Info: NULL
*************************** 3. row ***************************
     Id: 32508
   User: root
   Host: localhost
     db: NULL
Command: Query
   Time: 0
  State: starting
   Info: show processlist
## network stats
      1 114.119.128.10 TIME_WAIT
      1 114.119.136.120 TIME_WAIT
      1 114.119.143.119 TIME_WAIT
      1 114.142.5.140 TIME_WAIT
      1 142.44.225.79 TIME_WAIT
      1 17.246.15.36 TIME_WAIT
      1 ::1 TIME_WAIT
      1 43.135.36.201 TIME_WAIT
      1 51.222.204.143 TIME_WAIT
      2 10.30.9.122 TIME_WAIT
      2 10.30.9.138 TIME_WAIT
      2 127.0.0.1 TIME_WAIT
      2 43.173.180.21 TIME_WAIT
      2 85.208.98.23 TIME_WAIT
## httpd stats
                                                                                                                                                                                  Apache Server Status for localhost (via ::1)

   Server Version: Apache/2.4.65 (cPanel) OpenSSL/1.1.1w mod_bwlimited/1.4
   Server MPM: prefork
   Server Built: Nov 12 2025 18:18:40
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   Current Time: Friday, 21-Nov-2025 02:12:02 WAT
   Restart Time: Thursday, 20-Nov-2025 18:50:17 WAT
   Parent Server Config. Generation: 2
   Parent Server MPM Generation: 1
   Server uptime: 7 hours 21 minutes 44 seconds
   Server load: 0.13 0.29 0.30
   Total accesses: 137600 - Total Traffic: 3.4 GB - Total Duration: 73553008
   CPU Usage: u5.87 s4.56 cu1817.46 cs1459.4 - 12.4% CPU load
   5.19 requests/sec - 136.2 kB/second - 26.2 kB/request - 534.542 ms/request
   11 requests currently being processed, 0 workers gracefully restarting, 7 idle workers

K__KWKK_.KK..K._K_..K.W_._......................................
................................................................
................................................................
................................................................

   Scoreboard Key:
   "_" Waiting for Connection, "S" Starting up, "R" Reading Request,
   "W" Sending Reply, "K" Keepalive (read), "D" DNS Lookup,
   "C" Closing connection, "L" Logging, "G" Gracefully finishing,
   "I" Idle cleanup of worker, "." Open slot with no current process

   Srv   PID     Acc     M CPU   SS  Req   Dur   Conn  Child  Slot     Client     Protocol         VHost                                      Request
   0-1  37062 3/64/6779  K 1.48 1    260 3615232 94.9  1.68  179.93 192.178.4.103 http/1.1 team.cloudware.ng:443  GET /?l=2263844471 HTTP/1.1
   1-1  37386 0/56/6524  _ 0.95 2    0   3376329 0.0   1.11  165.52 85.208.98.23  http/1.1 nigeriadecide.org:443  GET /robots.txt HTTP/1.1
   2-1  33124 0/123/6191 _ 2.91 1    297 3279265 0.0   3.38  158.26 114.10.16.231 http/1.1
   3-1  39172 2/18/6576  K 0.25 2    259 3643708 65.2  0.34  173.96 192.178.4.102 http/1.1 team.cloudware.ng:443  GET /?l=1297968056 HTTP/1.1
   4-1  35676 0/100/6599 W 2.36 0    0   3383053 0.0   2.44  165.41 192.178.4.104 http/1.1 team.cloudware.ng:443  GET /?l=3232542310 HTTP/1.1
   5-1  39284 1/22/6283  K 0.43 4    262 3545462 35.1  0.53  164.89 192.178.4.96  http/1.1 team.cloudware.ng:443  GET /?l=1838078534 HTTP/1.1
   6-1  36308 7/84/6540  K 2.12 0    354 3535282 210.7 2.23  185.53 192.178.4.97  http/1.1 team.cloudware.ng:443  GET /?l=2867135105 HTTP/1.1
   7-1  38125 0/38/6334  _ 1.05 0    0   3432865 0.0   0.99  169.37 ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   8-1  -     0/0/6407   . 0.00 57   0   3402955 0.0   0.00  159.60 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   9-1  39298 2/20/6174  K 0.37 0    351 3090635 66.8  0.46  149.94 192.178.4.99  http/1.1 team.cloudware.ng:443  GET /ctg/search/similarImageSearchResultView/?ctgItemCd=2092745
   10-1 37081 1/57/6274  K 1.36 2    256 3160228 35.4  1.73  149.25 192.178.4.102 http/1.1 team.cloudware.ng:443  GET /?l=2877945073 HTTP/1.1
   11-1 -     0/0/5909   . 0.00 43   0   3096000 0.0   0.00  150.71 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   12-1 -     0/0/6014   . 0.00 59   0   3210217 0.0   0.00  155.47 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   13-1 37082 4/66/6181  K 1.56 1    269 3173175 129.8 1.76  152.25 192.178.4.100 http/1.1 team.cloudware.ng:443  GET /?l=3891687271 HTTP/1.1
   14-1 -     0/0/5872   . 0.00 53   0   3013237 0.0   0.00  142.58 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   15-1 37083 0/71/5388  _ 1.71 0    356 2976739 0.0   1.81  139.56 192.178.4.104 http/1.1 team.cloudware.ng:443  GET /?l=1503112704 HTTP/1.1
   16-1 21417 3/309/4878 K 7.17 0    399 2579873 96.4  8.75  132.29 192.178.4.101 http/1.1 team.cloudware.ng:443  GET /?l=223692742 HTTP/1.1
   17-1 33175 0/116/3994 _ 2.74 2    261 2307751 0.0   2.97  98.62  192.178.4.105 http/1.1 team.cloudware.ng:443  GET /?l=3262012922 HTTP/1.1
   18-1 -     0/0/4194   . 0.00 55   0   2285113 0.0   0.00  103.36 ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   19-1 -     0/0/3775   . 0.00 54   0   2097202 0.0   0.00  99.70  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   20-1 39312 2/24/3504  K 0.99 0    355 2014575 63.6  0.53  97.15  192.178.4.98  http/1.1 team.cloudware.ng:443  GET /?l=3227788689 HTTP/1.1
   21-1 -     0/0/2962   . 0.00 58   0   1575835 0.0   0.00  74.66  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   22-1 39348 0/29/3218  W 0.71 0    0   1666920 0.0   0.74  79.43  ::1           http/1.1 chs1.nescrow.com.ng:80 GET //whm-server-status HTTP/1.0
   23-1 39349 0/24/3086  _ 0.65 2    4   1681921 0.0   0.66  79.19  3.224.205.25  http/1.1 nigeriadecide.org:443  GET /polling_unit_category.php/2019elections/images/2019electio
   24-1 -     0/0/1928   . 0.00 476  0   963238  0.0   0.00  46.70  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   25-1 33185 0/132/1150 _ 3.34 2    0   698546  0.0   3.69  31.05  85.208.98.23  http/1.1 nigeriadecide.org:80   GET /robots.txt HTTP/1.1
   26-1 -     0/0/715    . 0.00 521  0   428654  0.0   0.00  18.36  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   27-1 -     0/0/506    . 0.00 232  0   297127  0.0   0.00  11.85  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   28-1 -     0/0/543    . 0.00 432  0   356892  0.0   0.00  15.93  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   29-1 -     0/0/434    . 0.00 523  0   260477  0.0   0.00  11.18  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   30-1 -     0/0/332    . 0.00 510  0   200777  0.0   0.00  7.47   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   31-1 -     0/0/274    . 0.00 532  0   193753  0.0   0.00  6.38   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   32-0 -     0/0/593    . 0.00 7343 0   371705  0.0   0.00  14.42  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   33-0 -     0/0/301    . 0.00 6882 0   111013  0.0   0.00  5.26   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   34-0 -     0/0/28     . 0.00 9072 0   15090   0.0   0.00  0.72   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   35-0 -     0/0/7      . 0.00 9079 0   640     0.0   0.00  0.08   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   36-0 -     0/0/74     . 0.00 8951 0   36928   0.0   0.00  1.90   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   37-0 -     0/0/61     . 0.00 8908 0   25914   0.0   0.00  1.45   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   38-0 -     0/0/65     . 0.00 9001 0   27597   0.0   0.00  1.54   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   39-0 -     0/0/28     . 0.00 9032 0   13821   0.0   0.00  1.08   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   40-0 -     0/0/265    . 0.00 8181 0   139506  0.0   0.00  7.31   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   41-0 -     0/0/4      . 0.00 9088 0   8       0.0   0.00  0.02   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   42-0 -     0/0/12     . 0.00 9087 0   4242    0.0   0.00  0.23   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   43-0 -     0/0/89     . 0.00 8812 0   42251   0.0   0.00  2.07   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   44-0 -     0/0/10     . 0.00 9076 0   2792    0.0   0.00  0.14   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   45-0 -     0/0/55     . 0.00 8813 0   25889   0.0   0.00  1.32   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   46-0 -     0/0/463    . 0.00 7765 0   190150  0.0   0.00  10.76  ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
   47-0 -     0/0/7      . 0.00 9092 0   2404    0.0   0.00  0.13   ::1           http/1.1 chs1.nescrow.com.ng:80 OPTIONS * HTTP/1.0
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

    Srv  Child Server number - generation
    PID  OS process ID
    Acc  Number of accesses this connection / this child / this slot
     M   Mode of operation
    CPU  CPU usage, number of seconds
    SS   Seconds since beginning of most recent request
    Req  Milliseconds required to process most recent request
    Dur  Sum of milliseconds required to process all requests
   Conn  Kilobytes transferred this connection
   Child Megabytes transferred this child
   Slot  Total megabytes transferred this slot
     __________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

   SSL/TLS Session Cache Status:
   cache type: SHMCB, shared memory: 1024000 bytes, current entries: 977
   subcaches: 32, indexes per subcache: 177
   time left on oldest entries' objects: avg: 6 seconds, (range: 0...24)
   index usage: 17%, cache usage: 23%
   total entries stored since starting: 9349
   total entries replaced since starting: 0
   total entries expired since starting: 8368
   total (pre-expiry) entries scrolled out of the cache: 0
   total retrieves since starting: 0 hit, 11 miss
   total removes since starting: 4 hit, 0 miss
Youez - 2016 - github.com/yon3zu
LinuXploit